MmIsDriverVerifyingByAddress

NTSTATUS __fastcall MmIsDriverVerifyingByAddress(UINT64 a1){
  _ETHREAD *CurrentThread; 
  NTSTATUS v3; 
  _LIST_ENTRY *v4; 

  CurrentThread = (_ETHREAD *)KeGetCurrentThread();
  v3 = 1;
  --CurrentThread->Tcb.KernelApcDisable;
  ExAcquireResourceSharedLite((UINT64)&PsLoadedModuleResource, 1);
  v4 = MiLookupDataTableEntry((VOID *)a1, 0i64);
  if( !v4 || ((__int64)v4[6].Blink & 0x2000000) == 0 )
    v3 = 0;
  ExReleaseResourceLite(&PsLoadedModuleResource);
  KeLeaveCriticalRegionThread(&CurrentThread->Tcb);
  return v3;
}

Referenced by: