The IoRegisterFsRegistrationChange routine registers a file system filter driver's notification routine to be called whenever a file system registers or unregisters itself as an active file system.
NTSTATUS IoRegisterFsRegistrationChange( PDRIVER_OBJECT DriverObject, PDRIVER_FS_NOTIFICATION DriverNotificationRoutine );
Pointer to the driver object for the file system filter driver.
A pointer to the PDRIVER_FS_NOTIFICATION routine, which the file system calls when it registers or unregisters itself.
||The notification routine was successfully registered.|
||A notification packet could not be allocated for the notification routine.|
To stop receiving such notifications, the filter driver should call IoUnregisterFsRegistrationChange.
Because the caller's notification routine can be called even before IoRegisterFsRegistrationChange returns, a filter driver should not call this routine until after it has created any data structures that it needs in order to process these notifications.
Additionally, in Windows XP and later, IoRegisterFsRegistrationChange ignores RAW devices. For information about attaching to the RAW file system by name, see Attaching the Filter Device Object to the Target Device Object.
|Header||ntifs.h (include Ntifs.h)|
We'd love to hear your thoughts. Choose the type you'd like to provide:
Our feedback system is built on GitHub Issues. Read more on our blog.