MiIsAddressInDriverView

NTSTATUS __stdcall MiIsAddressInDriverView(UINT64 a1){
  NTSTATUS v2; 
  UINT64 v3; 
  INT64 i; 
  UINT64 OldIrql; 

  v2 = 0;
  LOBYTE(OldIrql) = 0;
  MmLockLoadedModuleListShared((unsigned __int8 *)&OldIrql);
  for( i = PsLoadedModuleList; (INT64 *)i != &PsLoadedModuleList; i = *(_QWORD *)i )
  {
    v3 = *(_QWORD *)(i + 48);
    if( a1 >= v3 && a1 < v3 + *(unsigned int *)(i + 64) )
    {
      v2 = 1;
      break;
    }
  }
  LOBYTE(v3) = OldIrql;
  MmUnlockLoadedModuleListShared(v3);
  return v2;
}

Referenced by: