KseDsCallbackHookAddDevice

NTSTATUS __stdcall KseDsCallbackHookAddDevice(_DRIVER_OBJECT *DriverObject, _DEVICE_OBJECT *DeviceObject){
  __int64 v4; 
  NTSTATUS v5; 
  NTSTATUS DeviceProperty; 
  WCHAR v7; 
  const WCHAR *v8; 
  PULONG ResultLength; 
  ULONG v11; 
  struct _UNICODE_STRING DestinationString; 
  char PropertyBuffer[1024]; 
  v11 = 0;
  DestinationString = 0i64;
  v4 = (*(__int64(**)(void))qword_140C03208)();
  v5 = (*(__int64(__fastcall **)(_DRIVER_OBJECT *, _DEVICE_OBJECT *))(v4 + 24))(DriverObject, DeviceObject);
  DeviceProperty = IoGetDeviceProperty(DeviceObject, DevicePropertyHardwareID, 0x400u, PropertyBuffer, &v11);
  v8 = (const WCHAR *)PropertyBuffer;
  if( DeviceProperty < 0 )
    v8 = L"";
  RtlInitUnicodeString(&DestinationString, v8, v7);
  LODWORD(ResultLength) = v5;
  KsepDsEventAddDevice(
    DriverObject->DriverStart,
    DriverObject->DriverSize,
    DriverObject,
    DeviceObject,
    (INT64)ResultLength,
    &DriverObject->DriverExtension->ServiceKeyName,
    &DestinationString);
  return v5;
}

Referenced by: