ViIrpCheckKernelAddressForIrp

VOID __stdcall ViIrpCheckKernelAddressForIrp(_IRP *Irp, VOID *Address, _IOFCALLDRIVER_STACKDATA *CallDriverData){
  ULONG_PTR v3; 
  ULONG_PTR v4; 
  _EPROCESS *Process; 
  UINT64 v6; 

  v3 = (unsigned int)Irp;
  v4 = (unsigned int)Address;
  if( (char *)Address - 1 <= (char *)0x7FFFFFFEFFFDi64 )
  {
    Process = KeGetCurrentThread()->ApcState.Process;
    if( Process != PsInitialSystemProcess
      && Process != *(_EPROCESS **)&PsIdleProcess
      && (!CallDriverData || (unsigned int)VfTargetDriversIsEnabled(*((VOID **)CallDriverData + 22))) )
    {
      VerifierBugCheckIfAppropriate(0xC4ui64, 0xE2u, v3, v4, 0, v6);
    }
  }
}

Referenced by: