KsepLoadShimProvider

VOID __stdcall KsepLoadShimProvider(_KSE_SHIM_INFO *Shim){
  wchar_t *v1; 
  UINT64 *v2; 
  UINT64 v3; 
  UINT8 *v4; 
  _UNICODE_STRING ResultString; 

  ResultString = 0i64;
  if( Shim )
  {
    if( (Shim[16] & 2) != 0 )
    {
      v1 = (wchar_t *)*((_QWORD *)Shim + 5);
      if( v1 )
      {
        if( KsepStringConcatenate(
               &ResultString,
               (PWCHAR)L"\\Registry\\Machine\\System\\CurrentControlSet\\Services\\",
               v1,
               0i64) >= 0 )
          ZwLoadDriver((UINT64 *)&ResultString.Length, v2, v3, v4, *(UINT64 *)&ResultString.Length);
        KsepStringFree(&ResultString);
      }
    }
  }
}

Referenced by: