UINT64 __stdcall VfSuspectDriversIsLoaded(_UNICODE_STRING *DriverName){ _VF_SUSPECT_DRIVER_ENTRY *v1; v1 = ViSuspectDriversLookupEntry(DriverName); return v1 && v1->Loads > v1->Unloads; }