Using IRP for Malware Detection