UINT64 __stdcall VfSuspectDriversIsLoaded(UNICODE_STRING *DriverName){ LIST_ENTRY *v1; v1 = ViSuspectDriversLookupEntry(DriverName); return v1 && LODWORD(v1[1].Flink) > HIDWORD(v1[1].Flink); }