处理 ProductKey 的函数在 TransmogProvider 中

最新推荐文章于 2023-10-05 09:54:11 发布
最新推荐文章于 2023-10-05 09:54:11 发布
阅读量593 收藏
点赞数
分类专栏： 操作系统相关 WCP 系统维护 文章标签： ProductKey
版权声明：本文为博主原创文章，遵循 CC 4.0 BY-SA 版权协议，转载请附上原文出处链接和本声明。
本文链接：https://blog.csdn.net/hadstj/article/details/52895215
版权
系统维护 同时被 3 个专栏收录
248 篇文章 0 订阅
订阅专栏
操作系统相关
179 篇文章 0 订阅
订阅专栏
WCP
86 篇文章 0 订阅
订阅专栏

处理 ProductKey 的函数在 TransmogProvider 中



//----- (0000000180015758) ----------------------------------------------------
signed __int64 __fastcall CTransmogManager::InitializeProductKey(CTransmogManager *this, const unsigned __int16 *a2, const unsigned __int16 *a3, const unsigned __int16 *a4)
{

  v61 = a4;
  v59 = -2i64;
  v4 = a3;
  v5 = a2;
  v6 = this;
  v7 = 0i64;
  lpLibFileName = 0i64;
  lpMem = 0i64;
  if ( !a2 || !a4 )
    return 0x80070057i64;
  memset_0((char *)this + 156, 0, 0x30ui64);
  memset_0((char *)v6 + 204, 0, 0xA4ui64);
  memset_0((char *)v6 + 368, 0, 0x4F8ui64);
  *((_DWORD *)v6 + 51) = 164;
  *((_DWORD *)v6 + 92) = 1272;
  v8 = SkuGetEditionPKeyConfigFilePath(v5, v4, (unsigned __int16 **)&lpMem);
  if ( v8 < 0 )
    goto LABEL_30;
  if ( !&lpLibFileName )
  {
    v8 = 0x80070057;
    goto LABEL_30;
  }
  v8 = BuildPathHr((__int64)v5, L"System32\\pidgenx.dll", (wchar_t **)&lpLibFileName);
  if ( v8 < 0 )
    goto LABEL_30;
  v9 = LoadLibraryW(0i64);
  if ( !v9 )
  {
    v10 = GetLastError();
    v8 = (unsigned __int16)v10 | 0x80070000;
    if ( (signed int)v10 <= 0 )
      v8 = v10;
    v11 = ATL::g_strmgr[3];
    _guard_check_icall_fptr(ATL::g_strmgr[3]);
    LODWORD(v12) = ((int (__fastcall *)(struct ATL::CStringData *(__fastcall ***)(ATL::CAtlStringMgr *__hidden, int, int)))v11)(&ATL::g_strmgr);
    v54 = v12 + 24;
    ATL::CStringT<unsigned short,ATL::StrTraitATL<unsigned short,ATL::ChTraitsCRT<unsigned short>>>::Format(
      (const void **)&v54,
      L"Unable to load [%s]; hr = 0x%X",
      0i64,
      (unsigned int)v8);
    v13 = GetCurrentThreadId();
    v14 = GetCurrentProcessId();
    v15 = v54;
    WriteLogEntry(1u, L"PID=%d TID=%d %s - %s", v14, v13);
    v16 = v15 - 24;
    v58 = v15 - 24;
    if ( _InterlockedExchangeAdd((volatile signed __int32 *)(v15 - 24 + 16), 0xFFFFFFFF) <= 1 )
    {
      v17 = *(_QWORD *)v16;
      v18 = *(void (__fastcall **)(__int64, __int64))(**(_QWORD **)v16 + 8i64);
      _guard_check_icall_fptr(v18);
      v18(v17, v58);
    }
  }
  if ( v8 == 0x800700C1 )
  {
    v8 = BuildPathHr((__int64)v5, L"SysWow64\\pidgenx.dll", (wchar_t **)&lpLibFileName);
    if ( v8 < 0 )
      goto LABEL_30;
    v19 = lpLibFileName;
    v9 = LoadLibraryW(lpLibFileName);
    if ( !v9 )
    {
      v20 = GetLastError();
      v8 = (unsigned __int16)v20 | 0x80070000;
      if ( (signed int)v20 <= 0 )
        v8 = v20;
      v21 = ATL::g_strmgr[3];
      _guard_check_icall_fptr(ATL::g_strmgr[3]);
      LODWORD(v22) = ((int (__fastcall *)(struct ATL::CStringData *(__fastcall ***)(ATL::CAtlStringMgr *__hidden, int, int)))v21)(&ATL::g_strmgr);
      v55 = v22 + 24;
      ATL::CStringT<unsigned short,ATL::StrTraitATL<unsigned short,ATL::ChTraitsCRT<unsigned short>>>::Format(
        (const void **)&v55,
        L"Unable to load [%s]; hr = 0x%X",
        (__int64)v19,
        (unsigned int)v8);
      v23 = GetCurrentThreadId();
      v24 = GetCurrentProcessId();
      v25 = v55;
      WriteLogEntry(1u, L"PID=%d TID=%d %s - %s", v24, v23);
      v26 = v25 - 24;
      if ( _InterlockedExchangeAdd((volatile signed __int32 *)(v25 - 24 + 16), 0xFFFFFFFF) <= 1 )
      {
        v27 = *(_QWORD *)v26;
        v28 = *(void (__fastcall **)(__int64, signed __int64))(**(_QWORD **)v26 + 8i64);
        _guard_check_icall_fptr(v28);
        v28(v27, v26);
      }
    }
  }
  if ( v8 < 0 )
    goto LABEL_30;
  if ( v9 )
  {
    v7 = GetProcAddress(v9, "PidGenX");
    if ( !v7 )
    {
      v29 = GetLastError();
      v8 = (unsigned __int16)v29 | 0x80070000;
      if ( (signed int)v29 <= 0 )
        v8 = v29;
      v30 = ATL::g_strmgr[3];
      _guard_check_icall_fptr(ATL::g_strmgr[3]);
      LODWORD(v31) = ((int (__fastcall *)(struct ATL::CStringData *(__fastcall ***)(ATL::CAtlStringMgr *__hidden, int, int)))v30)(&ATL::g_strmgr);
      v56 = v31 + 24;
      ATL::CStringT<unsigned short,ATL::StrTraitATL<unsigned short,ATL::ChTraitsCRT<unsigned short>>>::Format(
        (const void **)&v56,
        L"Unable to obtain pkey interface; hr = 0x%X",
        (unsigned int)v8,
        v32);
      v33 = GetCurrentThreadId();
      v34 = GetCurrentProcessId();
      v35 = v56;
      WriteLogEntry(1u, L"PID=%d TID=%d %s - %s", v34, v33);
      v36 = v35 - 24;
      if ( _InterlockedExchangeAdd((volatile signed __int32 *)(v35 - 24 + 16), 0xFFFFFFFF) <= 1 )
      {
        v37 = *(_QWORD *)v36;
        v38 = *(void (__fastcall **)(__int64, signed __int64))(**(_QWORD **)v36 + 8i64);
        _guard_check_icall_fptr(v38);
        v38(v37, v36);
      }
    }
  }
  if ( v8 < 0 )
    goto LABEL_30;
  if ( v7 )
  {
    _guard_check_icall_fptr(v7);
    v8 = ((int (__fastcall *)(const unsigned __int16 *, LPVOID, const wchar_t *, _QWORD))v7)(v61, lpMem, L"55041", 0i64);
    if ( v8 >= 0 )
    {
      *((_DWORD *)v6 + 33) = 1;
      goto LABEL_32;
    }
LABEL_30:
    v39 = ATL::g_strmgr[3];
    _guard_check_icall_fptr(ATL::g_strmgr[3]);
    LODWORD(v40) = ((int (__fastcall *)(struct ATL::CStringData *(__fastcall ***)(ATL::CAtlStringMgr *__hidden, int, int)))v39)(&ATL::g_strmgr);
    v57 = v40 + 24;
    ATL::CStringT<unsigned short,ATL::StrTraitATL<unsigned short,ATL::ChTraitsCRT<unsigned short>>>::Format(
      (const void **)&v57,
      L"Unable to retrieve pkey info; hr = 0x%X",
      (unsigned int)v8,
      v41);
    v42 = GetCurrentThreadId();
    v43 = GetCurrentProcessId();
    v44 = v57;
    WriteLogEntry(1u, L"PID=%d TID=%d %s - %s", v43, v42);
    v45 = v44 - 24;
    if ( _InterlockedExchangeAdd((volatile signed __int32 *)(v44 - 24 + 16), 0xFFFFFFFF) <= 1 )
    {
      v46 = *(_QWORD *)v45;
      v47 = *(void (__fastcall **)(__int64, signed __int64))(**(_QWORD **)v45 + 8i64);
      _guard_check_icall_fptr(v47);
      v47(v46, v45);
    }
  }
LABEL_32:
  v48 = lpMem;
  if ( lpMem )
  {
    v49 = GetProcessHeap();
    HeapFree(v49, 0, v48);
  }
  v50 = lpLibFileName;
  if ( lpLibFileName )
  {
    v51 = GetProcessHeap();
    HeapFree(v51, 0, (LPVOID)v50);
  }
  return (unsigned int)v8;
}
// 18005C690: using guessed type int (__fastcall *_guard_check_icall_fptr)(_QWORD);
// 18005F6F8: using guessed type wchar_t aPidDTidDSS[22];
// 180065460: using guessed type wchar_t aSystem32Pidgen[21];
// 180065490: using guessed type wchar_t aUnableToLoadSH[31];
// 180065520: using guessed type wchar_t aSyswow64Pidgen[21];
// 180065560: using guessed type wchar_t aUnableToObtain[43];
// 1800655B8: using guessed type wchar_t a55041[6];
// 1800655D0: using guessed type wchar_t aUnableToRetr_0[40];
// 180080288: using guessed type struct ATL::CStringData *(__fastcall **ATL::g_strmgr)(ATL::CAtlStringMgr *__hidden this, int, int);

//----- (0000000180015C84) ----------------------------------------------------
__int64 __fastcall CTransmogManager::GetPendingPackageCount(CTransmogManager *this, unsigned __int32 *a2)
{

  v17 = -2i64;
  v2 = a2;
  v3 = 0i64;
  v16 = 0i64;
  v18 = 0;
  v4 = 0;
  if ( a2 )
  {
    v6 = *((_QWORD *)this + 11);
    v7 = *(int (__fastcall **)(__int64, __int64 *))(*(_QWORD *)v6 + 112i64);
    _guard_check_icall_fptr(*(_QWORD *)(*(_QWORD *)v6 + 112i64));
    v5 = v7(v6, &v16);
    if ( v5 >= 0 )
    {
      v8 = v16;
      v9 = *(int (__fastcall **)(__int64, int *))(*(_QWORD *)v16 + 56i64);
      _guard_check_icall_fptr(*(_QWORD *)(*(_QWORD *)v16 + 56i64));
      v5 = v9(v8, &v18);
    }
    v10 = 1;
    if ( v5 >= 0 )
    {
      do
      {
        if ( v10 > 0 )
          break;
        v20 = 0i64;
        v19 = 0;
        if ( v5 >= 0 )
        {
          v11 = v16;
          v12 = *(int (__fastcall **)(__int64, _QWORD, __int64 *))(*(_QWORD *)v16 + 64i64);
          _guard_check_icall_fptr(*(_QWORD *)(*(_QWORD *)v16 + 64i64));
          v5 = v12(v11, (unsigned int)v10, &v20);
          if ( v5 >= 0 )
          {
            v13 = *(int (__fastcall **)(_QWORD, int *))(v0 + 72i64);
            _guard_check_icall_fptr(*(_QWORD *)(v0 + 72i64));
            v5 = v13(0i64, &v19);
            if ( v5 >= 0 )
              continue;
          }
        }
        ++v4;
        ++v10;
      }
      while ( v5 >= 0 );
      if ( v5 >= 0 )
        *v2 = v4;
    }
    v3 = v16;
  }
  else
  {
    v5 = -2147024809;
  }
  if ( v3 )
  {
    v14 = *(void (__fastcall **)(__int64))(*(_QWORD *)v3 + 16i64);
    _guard_check_icall_fptr(*(_QWORD *)(*(_QWORD *)v3 + 16i64));
    v14(v3);
  }
  return (unsigned int)v5;
}
// 18005C690: using guessed type int (__fastcall *_guard_check_icall_fptr)(_QWORD);

//----- (0000000180015DF0) ----------------------------------------------------
signed __int64 __fastcall CTransmogManager::ProjectEditionOverrideFile(CTransmogManager *this, const unsigned __int16 *a2, const unsigned __int16 *a3)
{

  v32 = -2i64;
  v3 = a3;
  v4 = a2;
  lpExistingFileName = 0i64;
  lpNewFileName = 0i64;
  if ( a2 && a3 )
  {
    v5 = SkuGetEditionOverridesFilePath(a2, a3, (unsigned __int16 **)&lpExistingFileName);
    if ( v5 < 0 )
      goto LABEL_28;
    lpMem = 0i64;
    if ( &lpNewFileName )
    {
      v5 = StrAllocatingPrintf((wchar_t **)&lpMem, L"%s.%s", (__int64)v3, (__int64)L"xml");
      v6 = lpMem;
      if ( v5 >= 0 )
        v5 = BuildPathHr((__int64)v4, lpMem, (wchar_t **)&lpNewFileName);
      if ( v6 )
      {
        v7 = GetProcessHeap();
        HeapFree(v7, 0, v6);
      }
    }
    else
    {
      v5 = -2147024809;
    }
    if ( v5 < 0 )
      goto LABEL_28;
    v8 = ATL::g_strmgr[3];
    _guard_check_icall_fptr(ATL::g_strmgr[3]);
    LODWORD(v9) = ((int (__fastcall *)(struct ATL::CStringData *(__fastcall ***)(ATL::CAtlStringMgr *__hidden, int, int)))v8)(&ATL::g_strmgr);
    v30 = v9 + 24;
    ATL::CStringT<unsigned short,ATL::StrTraitATL<unsigned short,ATL::ChTraitsCRT<unsigned short>>>::Format(
      (const void **)&v30,
      L"Copying edition override file from [%s] to [%s] ",
      0i64,
      0i64);
    v10 = GetCurrentThreadId();
    v11 = GetCurrentProcessId();
    v12 = v30;
    WriteLogEntry(3u, L"PID=%d TID=%d %s - %s", v11, v10);
    v13 = v12 - 24;
    if ( _InterlockedExchangeAdd((volatile signed __int32 *)(v12 - 24 + 16), 0xFFFFFFFF) <= 1 )
    {
      v14 = *(_QWORD *)v13;
      v15 = *(void (__fastcall **)(__int64, signed __int64))(**(_QWORD **)v13 + 8i64);
      _guard_check_icall_fptr(v15);
      v15(v14, v13);
    }
    if ( !CopyFileW(0i64, 0i64, 0) )
    {
      v16 = GetLastError();
      v17 = (unsigned __int16)v16 | 0x80070000;
      if ( (signed int)v16 <= 0 )
        v17 = v16;
      if ( (v17 & 0x80000000) == 0 )
      {
        v5 = -2147467259;
      }
      else
      {
        v18 = GetLastError();
        v5 = (unsigned __int16)v18 | 0x80070000;
        if ( (signed int)v18 <= 0 )
          v5 = v18;
      }
    }
    if ( v5 < 0 )
    {
LABEL_28:
      v19 = ATL::g_strmgr[3];
      _guard_check_icall_fptr(ATL::g_strmgr[3]);
      LODWORD(v20) = ((int (__fastcall *)(struct ATL::CStringData *(__fastcall ***)(ATL::CAtlStringMgr *__hidden, int, int)))v19)(&ATL::g_strmgr);
      v31 = v20 + 24;
      ATL::CStringT<unsigned short,ATL::StrTraitATL<unsigned short,ATL::ChTraitsCRT<unsigned short>>>::Format(
        (const void **)&v31,
        L"Failed to copy edition override file.",
        v21,
        v22);
      v23 = GetCurrentThreadId();
      v24 = GetCurrentProcessId();
      v25 = v31;
      WriteLogEntry(1u, L"PID=%d TID=%d %s - %s(hr:0x%x)", v24, v23);
      v26 = v25 - 24;
      if ( _InterlockedExchangeAdd((volatile signed __int32 *)(v25 - 24 + 16), 0xFFFFFFFF) <= 1 )
      {
        v27 = *(_QWORD *)v26;
        v28 = *(void (__fastcall **)(__int64, signed __int64))(**(_QWORD **)v26 + 8i64);
        _guard_check_icall_fptr(v28);
        v28(v27, v26);
      }
    }
    result = (unsigned int)v5;
  }
  else
  {
    result = 2147942487i64;
  }
  return result;
}
// 18005C690: using guessed type int (__fastcall *_guard_check_icall_fptr)(_QWORD);
// 18005D4D0: using guessed type wchar_t aPidDTidDSSHr0x[31];
// 18005F6F8: using guessed type wchar_t aPidDTidDSS[22];
// 180065620: using guessed type wchar_t aCopyingEdition[49];
// 1800656F0: using guessed type wchar_t aFailedToCopyEd[38];
// 180067130: using guessed type wchar_t aXml[4];
// 180067540: using guessed type wchar_t aS_S[6];
// 180080288: using guessed type struct ATL::CStringData *(__fastcall **ATL::g_strmgr)(ATL::CAtlStringMgr *__hidden this, int, int);

//----- (00000001800160B0) ----------------------------------------------------
signed __int64 __fastcall CTransmogManager::ProjectEditionLicenseFile(CTransmogManager *this, const unsigned __int16 *a2, const unsigned __int16 *a3)
{

  v43 = this;
  v3 = a3;
  v4 = a2;
  if ( a2 && a3 )
  {
    v5 = ATL::g_strmgr[3];
    _guard_check_icall_fptr(ATL::g_strmgr[3]);
    LODWORD(v6) = ((int (__fastcall *)(struct ATL::CStringData *(__fastcall ***)(ATL::CAtlStringMgr *__hidden, int, int)))v5)(&ATL::g_strmgr);
    v43 = (CTransmogManager *)(v6 + 24);
    ATL::CStringT<unsigned short,ATL::StrTraitATL<unsigned short,ATL::ChTraitsCRT<unsigned short>>>::Format(
      (const void **)&v43,
      L"Installing edition license file for edition [%s]",
      (__int64)v3,
      v7);
    v8 = GetCurrentThreadId();
    v9 = GetCurrentProcessId();
    v10 = (__int64)v43;
    WriteLogEntry(3u, L"PID=%d TID=%d %s - %s", v9, v8);
    v11 = v10 - 24;
    if ( _InterlockedExchangeAdd((volatile signed __int32 *)(v10 - 24 + 16), 0xFFFFFFFF) <= 1 )
    {
      v12 = *(_QWORD *)v11;
      v13 = *(void (__fastcall **)(__int64, signed __int64))(**(_QWORD **)v11 + 8i64);
      _guard_check_icall_fptr(v13);
      v13(v12, v11);
    }
    Parameter = v3;
    v42 = v4;
    v14 = CreateThread(0i64, 0i64, (LPTHREAD_START_ROUTINE)StartAddress, &Parameter, 0, 0i64);
    v15 = v14;
    if ( v14 == (HANDLE)-1 )
    {
      v27 = GetLastError();
      v28 = (unsigned __int16)v27 | 0x80070000;
      if ( (signed int)v27 <= 0 )
        v28 = v27;
      if ( (v28 & 0x80000000) == 0 )
      {
        v16 = -2147467259;
      }
      else
      {
        v29 = GetLastError();
        v16 = (unsigned __int16)v29 | 0x80070000;
        if ( (signed int)v29 <= 0 )
          v16 = v29;
      }
      if ( v16 < 0 )
      {
        v30 = ATL::g_strmgr[3];
        _guard_check_icall_fptr(ATL::g_strmgr[3]);
        LODWORD(v31) = ((int (__fastcall *)(struct ATL::CStringData *(__fastcall ***)(ATL::CAtlStringMgr *__hidden, int, int)))v30)(&ATL::g_strmgr);
        v45 = v31 + 24;
        ATL::CStringT<unsigned short,ATL::StrTraitATL<unsigned short,ATL::ChTraitsCRT<unsigned short>>>::Format(
          (const void **)&v45,
          L"Unable to Create Thread to Install EULA.",
          v32,
          v33);
        v34 = GetCurrentThreadId();
        v35 = GetCurrentProcessId();
        v36 = v45;
        WriteLogEntry(1u, L"PID=%d TID=%d %s - %s(hr:0x%x)", v35, v34);
        v37 = v36 - 24;
        if ( _InterlockedExchangeAdd((volatile signed __int32 *)(v36 - 24 + 16), 0xFFFFFFFF) <= 1 )
        {
          v38 = *(_QWORD *)v37;
          v39 = *(void (__fastcall **)(__int64, signed __int64))(**(_QWORD **)v37 + 8i64);
          _guard_check_icall_fptr(v39);
          v39(v38, v37);
        }
      }
    }
    else
    {
      v16 = WaitForThreadComplete(v14);
      if ( v16 < 0 )
      {
        v17 = ATL::g_strmgr[3];
        _guard_check_icall_fptr(ATL::g_strmgr[3]);
        LODWORD(v18) = ((int (__fastcall *)(struct ATL::CStringData *(__fastcall ***)(ATL::CAtlStringMgr *__hidden, int, int)))v17)(&ATL::g_strmgr);
        v44 = v18 + 24;
        ATL::CStringT<unsigned short,ATL::StrTraitATL<unsigned short,ATL::ChTraitsCRT<unsigned short>>>::Format(
          (const void **)&v44,
          L"Thread for Installing EULA Failed.",
          v19,
          v20);
        v21 = GetCurrentThreadId();
        v22 = GetCurrentProcessId();
        v23 = v44;
        WriteLogEntry(1u, L"PID=%d TID=%d %s - %s(hr:0x%x)", v22, v21);
        v24 = v23 - 24;
        if ( _InterlockedExchangeAdd((volatile signed __int32 *)(v23 - 24 + 16), 0xFFFFFFFF) <= 1 )
        {
          v25 = *(_QWORD *)v24;
          v26 = *(void (__fastcall **)(__int64, signed __int64))(**(_QWORD **)v24 + 8i64);
          _guard_check_icall_fptr(v26);
          v26(v25, v24);
        }
      }
      CloseHandle(v15);
    }
    result = (unsigned int)v16;
  }
  else
  {
    result = 2147942487i64;
  }
  return result;
}
// 18005C690: using guessed type int (__fastcall *_guard_check_icall_fptr)(_QWORD);
// 18005D4D0: using guessed type wchar_t aPidDTidDSSHr0x[31];
// 18005F6F8: using guessed type wchar_t aPidDTidDSS[22];
// 180065740: using guessed type wchar_t aInstallingEdit[49];
// 180065810: using guessed type wchar_t aThreadForInsta[35];
// 180065860: using guessed type wchar_t aUnableToCreate[41];
// 180080288: using guessed type struct ATL::CStringData *(__fastcall **ATL::g_strmgr)(ATL::CAtlStringMgr *__hidden this, int, int);

//----- (000000018001637C) ----------------------------------------------------
__int64 __fastcall CTransmogManager::GetEula(CTransmogManager *this, unsigned __int16 *a2, unsigned __int16 *a3, unsigned __int16 *a4)
{
  v51 = -2i64;
  v4 = a4;
  v5 = a3;
  v6 = a2;
  v7 = this;
  lpMem = 0i64;
  v8 = *(int (__fastcall **)(char *, unsigned __int16 *, unsigned __int16 *))(*((_QWORD *)this + 1) + 56i64);
  _guard_check_icall_fptr(v8);
  v9 = v8((char *)v7 + 8, v6, v5);
  v10 = ATL::g_strmgr[3];
  _guard_check_icall_fptr(ATL::g_strmgr[3]);
  LODWORD(v11) = ((int (__fastcall *)(struct ATL::CStringData *(__fastcall ***)(ATL::CAtlStringMgr *__hidden, int, int)))v10)(&ATL::g_strmgr);
  *(_QWORD *)v48 = v11 + 24;
  ATL::CStringT<unsigned short,ATL::StrTraitATL<unsigned short,ATL::ChTraitsCRT<unsigned short>>>::Format(
    (const void **)v48,
    L"Installing edition license file for edition [%s]",
    (__int64)v6,
    v12);
  v13 = GetCurrentThreadId();
  v14 = GetCurrentProcessId();
  v15 = *(_QWORD *)v48;
  WriteLogEntry(3u, L"PID=%d TID=%d %s - %s", v14, v13);
  v16 = v15 - 24;
  if ( _InterlockedExchangeAdd((volatile signed __int32 *)(v15 - 24 + 16), 0xFFFFFFFF) <= 1 )
  {
    v17 = *(_QWORD *)v16;
    v18 = *(void (__fastcall **)(__int64, signed __int64))(**(_QWORD **)v16 + 8i64);
    _guard_check_icall_fptr(v18);
    v18(v17, v16);
  }
  if ( v9 >= 0 )
  {
    v9 = CTransmogManager::GetWinDirPath(v7, (unsigned __int16 **)&lpMem);
    if ( v9 >= 0 )
    {
      Parameter = v6;
      v53 = v4;
      v54 = lpMem;
      v19 = CreateThread(0i64, 0i64, (LPTHREAD_START_ROUTINE)sub_180016740, &Parameter, 0, 0i64);
      v20 = v19;
      if ( v19 == (HANDLE)-1 )
      {
        v31 = GetLastError();
        v32 = (unsigned __int16)v31 | 0x80070000;
        if ( (signed int)v31 <= 0 )
          v32 = v31;
        if ( (v32 & 0x80000000) == 0 )
        {
          v9 = -2147467259;
        }
        else
        {
          v33 = GetLastError();
          v9 = (unsigned __int16)v33 | 0x80070000;
          if ( (signed int)v33 <= 0 )
            v9 = v33;
        }
        if ( v9 < 0 )
        {
          v34 = ATL::g_strmgr[3];
          _guard_check_icall_fptr(ATL::g_strmgr[3]);
          LODWORD(v35) = ((int (__fastcall *)(struct ATL::CStringData *(__fastcall ***)(ATL::CAtlStringMgr *__hidden, int, int)))v34)(&ATL::g_strmgr);
          v50 = v35 + 24;
          ATL::CStringT<unsigned short,ATL::StrTraitATL<unsigned short,ATL::ChTraitsCRT<unsigned short>>>::Format(
            (const void **)&v50,
            L"Unable to Create Thread to Get EULA.",
            v36,
            v37);
          v38 = GetCurrentThreadId();
          v39 = GetCurrentProcessId();
          v40 = v50;
          WriteLogEntry(1u, L"PID=%d TID=%d %s - %s(hr:0x%x)", v39, v38);
          v41 = v40 - 24;
          if ( _InterlockedExchangeAdd((volatile signed __int32 *)(v40 - 24 + 16), 0xFFFFFFFF) <= 1 )
          {
            v42 = *(_QWORD *)v41;
            v43 = *(void (__fastcall **)(__int64, signed __int64))(**(_QWORD **)v41 + 8i64);
            _guard_check_icall_fptr(v43);
            v43(v42, v41);
          }
        }
      }
      else
      {
        v9 = WaitForThreadComplete(v19);
        if ( v9 < 0 )
        {
          v21 = ATL::g_strmgr[3];
          _guard_check_icall_fptr(ATL::g_strmgr[3]);
          LODWORD(v22) = ((int (__fastcall *)(struct ATL::CStringData *(__fastcall ***)(ATL::CAtlStringMgr *__hidden, int, int)))v21)(&ATL::g_strmgr);
          v49 = v22 + 24;
          ATL::CStringT<unsigned short,ATL::StrTraitATL<unsigned short,ATL::ChTraitsCRT<unsigned short>>>::Format(
            (const void **)&v49,
            L"Thread for getting EULA Failed.",
            v23,
            v24);
          v25 = GetCurrentThreadId();
          v26 = GetCurrentProcessId();
          v27 = v49;
          WriteLogEntry(1u, L"PID=%d TID=%d %s - %s(hr:0x%x)", v26, v25);
          v28 = v27 - 24;
          if ( _InterlockedExchangeAdd((volatile signed __int32 *)(v27 - 24 + 16), 0xFFFFFFFF) <= 1 )
          {
            v29 = *(_QWORD *)v28;
            v30 = *(void (__fastcall **)(__int64, signed __int64))(**(_QWORD **)v28 + 8i64);
            _guard_check_icall_fptr(v30);
            v30(v29, v28);
          }
        }
        CloseHandle(v20);
      }
    }
    v44 = lpMem;
    if ( lpMem )
    {
      v45 = GetProcessHeap();
      HeapFree(v45, 0, v44);
    }
  }
  return (unsigned int)v9;
}
// 18005C690: using guessed type int (__fastcall *_guard_check_icall_fptr)(_QWORD);
// 18005D4D0: using guessed type wchar_t aPidDTidDSSHr0x[31];
// 18005F6F8: using guessed type wchar_t aPidDTidDSS[22];
// 180065740: using guessed type wchar_t aInstallingEdit[49];
// 1800658F0: using guessed type wchar_t aThreadForGetti[32];
// 180065930: using guessed type wchar_t aUnableToCrea_0[37];
// 180080288: using guessed type struct ATL::CStringData *(__fastcall **ATL::g_strmgr)(ATL::CAtlStringMgr *__hidden this, int, int);
心想才事成
关注
专栏目录
Python中特殊函数集锦
09-21
`lambda`函数在这里用于定义一个简单的乘法操作，然后通过`map`函数应用到两个列表中对应的元素上。 以上就是关于Python中特殊函数的详细介绍，包括`filter`、`map`/`reduce`、装饰器`@`以及`lambda`函数。通过合理...
【iOS逆向】某运营商签名算法分析
小陈的技术博客
10-09 1316
分析某运营商App的x-lemon-sign签名
头文件atlstr.h使用错误问题
zhuyanling0106的专栏
12-30 9953
我的代码编译时出现如下错误： Error 33 fatal error LNK1120: 1 unresolved externals Error 32 error LNK2001: unresolved external symbol "class ATL::CAtlStringMgr ATL::g_strmgr" (?g_strmgr@ATL@@3VCAtlStrin
Windows驱动开发学习记录-在内核中返回错误但用户层不提示错误
时空之中的灵魂
11-14 297
最近学习SSDT inline hook中有个需要是想静默的过滤用户行为，也即在驱动中用户行为返回错误，但又想让用户层不提示错误。查了许久，在一帖子里有回复说定义一个错误码为： #define STATUS_SILENT_RETURN (0x80070000) 即定义错误码为0x80070000。 一个magic number。 win2k源代码private\ntos\rtl\error.c： ULONG RtlNtStatusToDosEr...
系统缺少pidgenx.dll文件导致程序异常的解决办法
最新发布
amio555的专栏
10-05 244
其实很多用户玩单机游戏或者安装软件的时候就出现过这种问题，如果是新手第一时间会认为是软件或游戏出错了，其实并不是这样，其主要原因就是你电脑系统的该dll文件丢失了或没有安装一些系统软件平台所需要的动态链接库，这时你可以下载这个pidgenx.dll文件(挑选合适的版本文件)把它放入到程序或系统目录中，当我们执行某一个.exe程序时，相应的DLL文件就会被调用，因此将缺失的文件放回到原目录之后就能打开你的软件或游戏了.那么出现pidgenx.dll丢失要怎么解决？
Product Key Explorer v4.0.3.0
02-11
Product Key Explorer v4.0.3.0 绿色破解版，无需安装
VMware vSphere 5.x ProductKey.exe
07-24
服务器虚拟化技术VMware vSphere 5.x ProductKey.exe注册机。用该注册机可以获取的产品序列号有： vCenter Server Standard、vCenter Server Essentials、VMware ESXI、vSphere Essentials、vSphere Standard、...
Product Key Explorer v3.6.2.0
06-23
Product Key Explorer v3.6.2.0 便携版，可查询本机各种软件的CDKEY
深入理解React中何时使用箭头函数
12-12
由于每次创建箭头函数都会生成一个新的函数对象，这在处理大量或频繁调用的函数时可能会影响性能。例如，在React组件的`render`方法中定义箭头函数，会导致每次组件重渲染时都创建新的函数，从而可能导致不必要的...
4K对齐图文教程
03-11
4K对齐图文教程
Dism++使用说明详解操作教程
12-21
该文档是作者小鸭子对Dism++的功能和使用最详尽的说明，本人也是爱好者特此分享
ventoy-1.0.08b2-windows.zip
04-30
Ventoy 是一款开源的，用来制作可启动 U 盘的 Windows 工具，使用简单，只需要将多个系统镜像 ISO 文件拷贝至 U 盘，即可自动创建包含多个系统的启动菜单，来安装操作系统。并且该启动 U 盘还能当普通 U 盘使用。本文件为ventoy-1.0.08b2-windows安装文件。
4K 对齐工具Paragon-209-PEE_WinInstallSNU_10.0.16.13045_000
11-12
用于SSD硬盘4K对齐的工具 Paragon-209-PEE_WinInstallSNU_10.0.16.13045_000 Product Key: PSG-209-PEE-CB-10639873 Serial Number: 0981A-B8420-95FAB-7B08B
OPC UA常见故障信息代码
码灵的博客
03-08 9578
Bad_DataUnavailable 0x809E0000 由于存在未安装的卷、离线存档或磁带，或由于暂时不可用等类似原因，期望的数据在请求的时间范围内不可用。变量值为最后一个质量为Good的值。Bad_NodeIdRejected 0x805D0000 由于节点ID无效或服务器不允许客户端指定节点ID，请求的节点ID被拒绝。Bad_CertificateHostNameInvalid 0x80160000 用于连接服务器的主机名与证书中的主机名不匹配。
解读 RtlGetVersion
心想事成
10-22 2774
解读 RtlGetVersion获得系统版本号。NTSTATUS RtlGetVersion(OSVERSIONINFOW &VersionInformation) { UINT_PTR pfn = CalcFunctionAddress(phWCP, pfb_RtlGetVersion); typedef signed int(__stdcall * fnRtlGetVersion)
WinCE7.0 Win32智能设备项目使用 CString 的问题
91program 的流水空间
03-09 2030
建 了一个 WinCE 7.0 的 Win32 智能设备项目，在项目中增加了一些 .cpp 和 .h 文件。先是编译时出现 CString 未定义的错误，于是 #include "atlstr.h"。再编译此 WinCE7.0 Win32 的工程，Debug 版本链接时出现如下错误：1>ProtocolParse.obj : error LNK2001: 无法解析的外部符号 "class ATL:
EL表达式在JSP中的实用函数示例
"这篇文档主要介绍了EL（Expression Language）表达式在JSP中的使用，特别是与`fn`函数库相关的各种实用方法。...这些函数在处理用户输入、格式化输出以及构建动态内容时非常实用，降低了开发者的编程复杂度。
评论
添加红包

请填写红包祝福语或标题

个

红包个数最小为10个

元

红包金额最低5元

当前余额3.43元 前往充值 >
需支付：10.00元
成就一亿技术人!
领取后你会自动成为博主和红包主的粉丝 规则
hope_wisdom
发出的红包
实付元
使用余额支付
点击重新获取
扫码支付
钱包余额 0

抵扣说明：

1.余额是钱包充值的虚拟货币，按照1:1的比例进行支付金额的抵扣。
2.余额无法直接购买下载，可以购买VIP、付费专栏及课程。

余额充值