PnpIsSafeToExamineUserModeTeb

char PnpIsSafeToExamineUserModeTeb(){
  char v0; 
  _ETHREAD *CurrentThread; 

  v0 = 1;
  if( KeGetCurrentThread()->ApcStateIndex == 1 )
    return 0;
  CurrentThread = (_ETHREAD *)KeGetCurrentThread();
  if( CurrentThread->Tcb.PreviousMode != 1 || KeAreAllApcsDisabled() || CurrentThread->ActiveFaultCount > 1u )
    return 0;
  return v0;
}

Referenced by:

IopInitActivityIdIrp
PnpInsertEventInQueue
PnpRequestDeviceAction