KsepGetModuleInfoByAddress
INT64 __fastcall KsepGetModuleInfoByAddress(UINT64 a1, UINT64 *a2, UINT64 *a3, _DWORD *a4){
unsigned int v7;
int v8;
UINT64 *i;
UINT64 v10;
__int64 v11;
if( !a1 || !a3 || !a2 )
return 3221225485i64;
v7 = *(_DWORD *)a2;
v8 = 0;
if( !*(_DWORD *)a2 )
return 3221226021i64;
for( i = a2 + 4; ; i += 37 )
{
v10 = *(i - 1);
if( a1 >= v10 )
{
v11 = *(unsigned int *)i;
if( a1 < v10 + v11 )
break;
}
if( ++v8 >= v7 )
return 3221226021i64;
}
*a3 = v10;
if( a4 )
*a4 = v11;
return 0i64;
}Referenced by:
KsepValidateShimProviderAndData