KsepGetModuleInfoByAddress

NTSTATUS __stdcall KsepGetModuleInfoByAddress(
        VOID *Address,
        _RTL_PROCESS_MODULES *LoadedModules,
        VOID **BaseAddress,
        UINT64 *AddressRange){
  unsigned int v7; 
  int v8; 
  _RTL_PROCESS_MODULES *i; 
  char *v10; 
  __int64 v11; 

  if( !Address || !BaseAddress || !LoadedModules )
    return -1073741811;
  v7 = *LoadedModules;
  v8 = 0;
  if( !*LoadedModules )
    return -1073741275;
  for( i = LoadedModules + 8; ; i += 74 )
  {
    v10 = (char *)*((_QWORD *)i - 1);
    if( Address >= v10 )
    {
      v11 = (unsigned int)*i;
      if( Address < &v10[v11] )
        break;
    }
    if( ++v8 >= v7 )
      return -1073741275;
  }
  *BaseAddress = v10;
  if( AddressRange )
    *(_DWORD *)AddressRange = v11;
  return 0;
}

Referenced by: