FsRtlRegisterFileSystemFilterCallbacks

NTSTATUS __stdcall FsRtlRegisterFileSystemFilterCallbacks(
        _DRIVER_OBJECT *FilterDriverObject,
        _FS_FILTER_CALLBACKS *Callbacks){
  _DRIVER_EXTENSION *DriverExtension; 
  UINT8 *PoolWithTag; 
  _FS_FILTER_CALLBACKS *v5; 
  NTSTATUS result; 
  if( !FilterDriverObject || !Callbacks )
    return -1073741811;
  DriverExtension = FilterDriverObject->DriverExtension;
  PoolWithTag = (UINT8 *)ExAllocatePoolWithTag(NonPagedPoolNx, Callbacks->SizeOfFsFilterCallbacks, 0x676D5346ui64);
  v5 = (_FS_FILTER_CALLBACKS *)PoolWithTag;
  if( !PoolWithTag )
    return -1073741670;
  memmove(PoolWithTag, (UINT8 *)Callbacks, Callbacks->SizeOfFsFilterCallbacks);
  result = 0;
  DriverExtension->FsFilterCallbacks = v5;
  return result;
}

Referenced by: