CmpInitBackupHive

INT64 __stdcall CmpInitBackupHive(_CMHIVE *CmHive, _WCHAR *HiveName){
  INT64 result; 
  UINT64 FileAttributes; 
  UINT64 ShareAccess; 
  UINT64 CreateDisposition; 
  UINT64 CreateOptions; 
  UINT64 EaLength; 
  _STRING Destination; 
  _UNICODE_STRING DestinationString; 
  _OBJECT_ATTRIBUTES ObjectAttributes; 
  _IO_STATUS_BLOCK IoStatusBlock; 
  char v14; 

  *(_QWORD *)&Destination.Length = 0x800000i64;
  Destination.Buffer = &v14;
  *(&ObjectAttributes.Length + 1) = 0;
  *(&ObjectAttributes.Attributes + 1) = 0;
  IoStatusBlock = 0i64;
  DestinationString = 0i64;
  RtlInitUnicodeString(&DestinationString, L"\\SystemRoot\\System32\\Config\\RegBack\\");
  RtlAppendStringToString(&Destination, (const _STRING *)&DestinationString);
  RtlInitUnicodeString(&DestinationString, HiveName);
  RtlAppendStringToString(&Destination, (const _STRING *)&DestinationString);
  LODWORD(EaLength) = 0;
  LODWORD(CreateOptions) = 51208;
  LODWORD(CreateDisposition) = 3;
  ObjectAttributes.ObjectName = (_UNICODE_STRING *)&Destination;
  LODWORD(ShareAccess) = 0;
  LODWORD(FileAttributes) = 128;
  ObjectAttributes.SecurityDescriptor = (void *)SecurityDescriptor;
  ObjectAttributes.Length = 48;
  ObjectAttributes.RootDirectory = 0i64;
  ObjectAttributes.Attributes = 576;
  ObjectAttributes.SecurityQualityOfService = 0i64;
  LODWORD(result) = ZwCreateFile(
                      &CmHive->FileHandles[3],
                      0x10003ui64,
                      &ObjectAttributes,
                      &IoStatusBlock,
                      0i64,
                      FileAttributes,
                      ShareAccess,
                      CreateDisposition,
                      CreateOptions,
                      0i64,
                      EaLength);
  return result;
}

Referenced by: