KsepValidateShimProviderAndData

INT64 __fastcall KsepValidateShimProviderAndData(UINT64 a1, UINT64 *a2, INT64 a3){
  __int64 v4; 
  __int64 v5; 
  __int64 v6; 
  __int64 v7; 
  __int64 v8; 
  int v9; 
  UINT64 v10; 
  unsigned int v12; 
  UINT64 v13; 
  v13 = 0i64;
  v12 = 0;
  if( !a1 )
    return 0i64;
  if( !a3 )
    return 0i64;
  if( (int)KsepGetModuleInfoByAddress(a1, a2, &v13, &v12) < 0 )
    return 0i64;
  v4 = *(_QWORD *)(a3 + 48);
  v5 = v4;
  if( !v4 )
    return 0i64;
  LODWORD(v6) = 0;
  do
  {
    if( *(_DWORD *)v5 == 4 )
      break;
    v7 = *(_QWORD *)(v5 + 16);
    v8 = v7;
    if( !v7 )
      return 0i64;
    v9 = 0;
    do
    {
      if( *(_DWORD *)v8 == 2 )
        break;
      v10 = *(_QWORD *)(v8 + 16);
      if( !v10 || v10 < v13 && v10 >= v13 + v12 )
        return 0i64;
      v8 = v7 + 32i64 * (unsigned int)++v9;
    }
    while( v8 );
    v6 = (unsigned int)(v6 + 1);
    v5 = v4 + 24 * v6;
  }
  while( v5 );
  return 1i64;
}

Referenced by: