INT64 __stdcall ViFilterRemoveNotificationCompletion(_DEVICE_OBJECT *DeviceObject, _IRP *Irp, PVOID Context){ if( *((_BYTE *)Irp + 65) ) KeSetEvent((PRKEVENT)(*((_QWORD *)DeviceObject + 8) + 64i64), 0); return 3221225494i64; }