KseDsCallbackHookAddDevice

VOID __fastcall KseDsCallbackHookAddDevice(_DRIVER_OBJECT *DriverObject, _DEVICE_OBJECT *DeviceObject){
  __int64 v4; 
  int v5; 
  NTSTATUS DeviceProperty; 
  const wchar_t *v7; 
  UINT64 *ResultLength; 
  UINT64 v9; 
  _UNICODE_STRING DestinationString; 
  char PropertyBuffer[1024]; 

  LODWORD(v9) = 0;
  DestinationString = 0i64;
  v4 = (*(__int64(**)(void))qword_140C03208)();
  v5 = (*(__int64(__fastcall **)(_DRIVER_OBJECT *, _DEVICE_OBJECT *))(v4 + 24))(DriverObject, DeviceObject);
  DeviceProperty = IoGetDeviceProperty(DeviceObject, 1, 0x400ui64, PropertyBuffer, &v9);
  v7 = (const wchar_t *)PropertyBuffer;
  if( DeviceProperty < 0 )
    v7 = L"";
  RtlInitUnicodeString(&DestinationString, v7);
  LODWORD(ResultLength) = v5;
  KsepDsEventAddDevice(
    DriverObject->DriverStart,
    DriverObject->DriverSize,
    DriverObject,
    DeviceObject,
    (INT64)ResultLength,
    &DriverObject->DriverExtension->ServiceKeyName,
    &DestinationString);
}

Referenced by: