KsepDeletePatchSdb
VOID __fastcall KsepDeletePatchSdb(INT64 a1, INT64 a2, WCHAR a3){
NTSTATUS v3;
__int64 v4;
char v5;
struct _UNICODE_STRING v6;
struct _OBJECT_ATTRIBUTES ObjectAttributes;
*(&ObjectAttributes.Length + 1) = 0;
*(&ObjectAttributes.Attributes + 1) = 0;
v6 = 0i64;
RtlInitUnicodeString(&v6, L"\\SystemRoot\\AppPatch\\drvpatch.sdb", a3);
ObjectAttributes.RootDirectory = 0i64;
ObjectAttributes.ObjectName = &v6;
ObjectAttributes.Length = 48;
*(_OWORD *)&ObjectAttributes.SecurityDescriptor = 0i64;
ObjectAttributes.Attributes = 576;
v3 = ZwDeleteFile(&ObjectAttributes);
if( v3 < 0 )
{
v4 = ((unsigned __int8)_InterlockedExchangeAdd(&KsepHistoryErrorsIndex, 1u) + 1) & 0x3F;
KsepHistoryErrors[2 * v4 + 1] = v3;
v5 = KsepDebugFlag;
KsepHistoryErrors[2 * v4] = 590372;
if( (v5 & 2) != 0 )
KsepDebugPrint(0i64, "KSE: Failed to delete patch shim database!\n");
KsepLogError(0, "KSE: Failed to delete patch shim database!\n");
}
}Referenced by:
KseShimDatabaseOpen