SdbTagRefToTagID
__int64 __fastcall SdbTagRefToTagID(__int64 a1, unsigned int a2, PVOID **a3, int *a4){
UINT64 *v6;
unsigned int v7;
int v8;
INT64 v9;
int v11;
GUID v13;
UINT64 v14;
UINT64 *v15;
GUID v16;
v6 = 0i64;
LODWORD(v14) = a2 >> 28;
v7 = 1;
v15 = 0i64;
v8 = a2 & 0xFFFFFFF;
v9 = a1 + 32 * ((a2 >> 28) + 1i64);
v11 = *(_DWORD *)(v9 + 24);
if( (v11 & 2) != 0 )
{
v6 = *(UINT64 **)(v9 + 16);
*(_OWORD *)((char *)v6 + 28) = *(_OWORD *)v9;
goto LABEL_3;
}
if( (v11 & 1) != 0 )
{
v13 = *(GUID *)v9;
*(_DWORD *)(v9 + 24) = 0;
v16 = v13;
v7 = SdbpOpenLocalDatabaseEx(a1, &v16, v9, &v15, &v14);
v6 = v15;
LABEL_3:
if( v6 )
goto LABEL_4;
}
v7 = 0;
LABEL_4:
if( !v7 )
{
v6 = 0i64;
v8 = 0;
}
if( a3 )
*a3 = (PVOID *)v6;
if( a4 )
*a4 = v8;
return v7;
}Referenced by:
KsepDbCacheReadDeviceInternal
KsepDbGetDriverShimsInternal
KsepDbGetShimInfo
PiIsDriverBlocked
SdbReadEntryInformation