KsepGetModuleInfoByAddress

INT64 __fastcall KsepGetModuleInfoByAddress(UINT64 a1, UINT64 *a2, UINT64 *a3, _DWORD *a4){
  unsigned int v7; 
  int v8; 
  UINT64 *i; 
  UINT64 v10; 
  __int64 v11; 
  if( !a1 || !a3 || !a2 )
    return 3221225485i64;
  v7 = *(_DWORD *)a2;
  v8 = 0;
  if( !*(_DWORD *)a2 )
    return 3221226021i64;
  for( i = a2 + 4; ; i += 37 )
  {
    v10 = *(i - 1);
    if( a1 >= v10 )
    {
      v11 = *(unsigned int *)i;
      if( a1 < v10 + v11 )
        break;
    }
    if( ++v8 >= v7 )
      return 3221226021i64;
  }
  *a3 = v10;
  if( a4 )
    *a4 = v11;
  return 0i64;
}

Referenced by:

KsepValidateShimProviderAndData