ExpCovIsModulePresent
char __fastcall ExpCovIsModulePresent(
_UNICODE_STRING *a1,
__int64 a2,
int a3,
const _UNICODE_STRING *a4,
VOID *Source1){
char v6;
int v7;
_UNICODE_STRING String2;
*(_QWORD *)&String2.Length = 0i64;
String2.Buffer = 0i64;
v6 = 0;
if( !a3 )
{
LABEL_6:
v6 = 1;
LABEL_7:
if( String2.Buffer )
RtlFreeAnsiString(&String2);
return v6;
}
v7 = a3 - 1;
if( v7 )
{
if( v7 != 1 )
return v6;
if( ExpCovReadFriendlyName(a2, a1, &String2) < 0 || RtlCompareUnicodeString(a4, &String2, 1u) )
goto LABEL_7;
goto LABEL_6;
}
if( RtlCompareMemory(Source1, (const VOID *)(a2 + 8), 16) == (_SIZE_T *)16 )
return 1;
return v6;
}Referenced by:
ExpCovIsLoadedModulePresent
ExpCovIsUnLoadedModulePresent