VfIsDriverSuspect

NTSTATUS __stdcall VfIsDriverSuspect(PCUNICODE_STRING String2){
  INT64 v1; 
  INT64 v2; 
  LIST_ENTRY *v4; 
  LIST_ENTRY *v5; 
  VfDriverLock((INT64)String2, v1, v2);
  v4 = ViSuspectDriversLookupEntry((UNICODE_STRING *)String2);
  ViDriversLoadLockOwner = 0i64;
  v5 = v4;
  KeReleaseMutex(&ViDriversLoadLock, 0);
  return v5 != 0i64;
}

Referenced by:

MiApplyImportOptimizationToRuntimeDriver