解读 DetermineServicingStackVersion

解读 DetermineServicingStackVersion

 

 

这里也没有涉及到 hFile 的值修改。

 

//----- (10086424)--------------------------------------------------------
int __fastcall DetermineServicingStackVersion(LPCWSTR lpwstrFilename, const WCHAR *a2)
{

  v2 =lpwstrFilename;
  v7 =0;
  v8 =0;
  v9 =0;
  v10 =0;
  v11 =0;
  v12 =0i64;
  v3 =FindServicingStackDirectoryVersion(a2, (_DWORD *)&v12+ 1, &v12);
  v4 =v3;
  if (v3 >= 0)
    goto LABEL_10;
  CBSWdsLog(0x4000000, v3, 1, "Failed to find servicing stack directory in onlinestore.");
  if (hFile )
    CBSWdsLog(0x4000000, 0, 0, "Offline servicing,using stack version from: %S", v2);
  v6 =FileVersion(v2, (_DWORD*)&v12 +1, (int)&v12);
  v4 =v6;
  if (v6 >= 0)
  {
LABEL_10:
    vServicingStackVersion = v12;
    CBSWdsLog(
      0x4000000,
      0,
      0,
      "LoadedServicing Stack v%d.%d.%d.%d with Core: %S",
      HIDWORD(v12) >>16,
      WORD2(v12),
      (unsignedint)v12 >>16,
      (unsigned__int16)v12,
      v2);
  }
  else
  {
    CBSWdsLog(0x4000000, v6, 1, "Failed to get servicing stack version from file:%S", v2);
  }
  CCbsStoreObject::~CCbsStoreObject((CCbsStoreObject*)&v7);
  return v4;
}
// 1019AA88: using guessed type unsigned __int64vServicingStackVersion;

 

//----- (10087D1F) --------------------------------------------------------
int __thiscall CoreResourcesLoad(constunsigned __int16 *this)
{

  v1 =hFile;
  v2 =0;
  v12 =this;
  v3 =0;
  lpLibFileName = 0;
  memset(Dst,0, 0x208u);
  CBS_EnterCriticalSection(&vCoreResourcesLock);
  if (vhCoreResourcesDll )
  {
    v3 =-2146498558;
    CBSWdsLog(0x4000000, -2146498558, 1, "CoreResources have been already beeninitialized.");
    goto LABEL_11;
  }
  if (GetWindowsDirectoryW(Dst, 0x104u) )
  {
    if (!v1 )
    {
      v3 =SczAllocFromSz((int *)&lpLibFileName, Dst);
      if (v3 < 0)
      {
        v2 =lpLibFileName;
        v11 =lpLibFileName;
        v10 ="Failed to allocate core resources path fromwindows directory: %S";
      }
      else
      {
        v3 =SczEnsureBackslashTerminated((const void**)&lpLibFileName);
        if ( v3 >= 0 )
        {
          v3 =SczAllocConcat2Sz((const void **)&lpLibFileName, L"servicing\\",L"CbsMsg.dll");
          if ( v3 <0 )
          {
            CBSWdsLog(0x4000000, v3, 1, "Failed to allocatefull path to core resources DLL.");
            goto LABEL_24;
          }
          v2 =lpLibFileName;
          v4 =LoadLibraryExW(lpLibFileName, 0, 2u);
          vhCoreResourcesDll = v4;
LABEL_8:
          if ( v4 )
            goto LABEL_9;
          if ( v2 )
          {
            operator delete((void *)(v2 - 2));
            lpLibFileName = 0;
          }
          v3 =SczAllocConcat2Sz((const void **)&lpLibFileName, v12, L"CbsMsg.dll");
          if ( v3 >=0 )
          {
            v2 = lpLibFileName;
            vhCoreResourcesDll = LoadLibraryExW(lpLibFileName,0, 2u);
            if ( vhCoreResourcesDll )
              goto LABEL_9;
            v3 = 0;
            v8 = GetLastError();
            if ( v8 >0 )
              v8 = (unsigned__int16)v8 |0x80070000;
            v11 = v2;
            v10 = "Failed toload cbsmsg DLL: %S (possibly expected)";
            v9 = v8;
LABEL_33:
            CBSWdsLog(0x4000000, v9, 1, v10, v11);
LABEL_9:
            if ( v2 )
              operator delete((void *)(v2 - 2));
            goto LABEL_11;
          }
          CBSWdsLog(0x4000000, v3, 1, "Failed to allocatefull path to DrUpdate DLL.");
LABEL_24:
          v2 =lpLibFileName;
          goto LABEL_9;
        }
        v2 =lpLibFileName;
        v11 =lpLibFileName;
        v10 ="Failed to ensure core resources path ended witha backslash: %S";
      }
      v9 =v3;
      goto LABEL_33;
    }
    v4 =vhCoreResourcesDll;
    goto LABEL_8;
  }
  v6 =GetLastError();
  v3 =v6;
  v7 =v6 < 0;
  if (v6 > 0)
  {
    v3 =(unsigned __int16)v6 | 0x80070000;
    v7 =v3 < 0;
  }
  if (!v7 )
    v3 =-2147467259;
  CBSWdsLog(0x4000000, v3, 1, "Failed to get windows directory for CoreResourcespath.");
LABEL_11:
  CBS_LeaveCriticalSection(&vCoreResourcesLock);
  return v3;
}

 

//----- (100864B9)--------------------------------------------------------
signed int __fastcall FindServicingStackDirectoryVersion(const WCHAR *a1,_DWORD *a2, _DWORD *a3)
{

  phkResult =0;
  v3 =0;
  v15 =a2;
  v17 =0;
  v4 =0;
  v19 =0i64;
  lpString1 =a1;
  lpSrc =0;
  lpString2 =0;
  v5 =RegOpenKeyExW(
         HKEY_LOCAL_MACHINE,
         L"SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\ComponentBased Servicing\\Version",
         0,
         0x20019u,
         &phkResult);
  v6 =v5 < 0;
  if (v5 > 0)
    v6 =(((unsigned __int16)v5 | 0x80070000) & 0x80000000) != 0;
  if (v6 )
  {
LABEL_28:
    v10 =-2147023728;
    CBSWdsLog(0x4000000, -2147023728, 1, "Failed to find a matching version for servicing stack:%S", lpString1);
  }
  else
  {
    for (i = 0;; i = v18 +1 )
    {
      v18 =i;
      memset(&Dst, 0,0x208u);
      v9 =CbsRegEnumStringValue(i, phkResult, (HKEY)&Dst, v8, (unsigned__int16 *)&lpSrc,v13, v14);
      v10 =v9;
      if (v9 == -2147024637 )
        break;
      if (v9 < 0)
      {
        CBSWdsLog(0x4000000, v9, 1, "Failed to enumerate all servicing stackversions.");
        v4 =lpSrc;
        goto LABEL_18;
      }
      v4 =lpSrc;
      v10 =FileExpandPath(lpSrc, (LPWSTR *)&lpString2);
      if (v10 < 0)
      {
        v3 =lpString2;
        CBSWdsLog(0x4000000, v10, 1, "Failed to expand path from onine store: %S",lpString2);
        goto LABEL_18;
      }
      v11 =SczEnsureBackslashTerminated((const void**)&lpString2);
      v3 =lpString2;
      v10 =v11;
      if (v11 < 0)
      {
        CBSWdsLog(0x4000000, v11, 1, "Failed to ensure path to online store is backslashterminated: %S", lpString2);
        goto LABEL_18;
      }
      if (CompareStringW(0x7Fu, 1u, lpString1, -1, lpString2,-1) == 2 )
      {
        v20 =0i64;
        if ( FileVersionFromString((wchar_t*)&Dst, (_DWORD*)&v20 +1, &v20) >= 0 &&v20 > v19 )
        {
          v17 =1;
          v19 =v20;
        }
      }
      if (v4 )
      {
        operator delete((void *)(v4 - 2));
        lpSrc =0;
      }
    }
    v10 =0;
    v4 =lpSrc;
    if (!v17 )
      goto LABEL_28;
    *v15= HIDWORD(v19);
    *a3= v19;
  }
LABEL_18:
  if (v3 )
    operator delete((void *)(v3 - 2));
  if (v4 )
    operator delete((void *)(v4 - 2));
  if (phkResult )
    RegCloseKey(phkResult);
  return v10;
}