ObRegisterCallbacks

#if (NTDDI_VERSION >= NTDDI_VISTASP1)
    USHORT filterVersion = ObGetFilterVersion();
    if (filterVersion != OB_FLT_REGISTRATION_VERSION)
    	rc = STATUS_NOT_SUPPORTED;

    if (NT_SUCCESS(rc))
    {
    	OB_OPERATION_REGISTRATION ObOperationRegistration[] =
    	{
    	    { PsProcessType, OB_OPERATION_HANDLE_CREATE | OB_OPERATION_HANDLE_DUPLICATE,
    	      &Proc::ObPreCallback, &Proc::ObPostCallback },
    	    { PsThreadType, OB_OPERATION_HANDLE_CREATE | OB_OPERATION_HANDLE_DUPLICATE,
    	      &Proc::ObPreCallback, &Proc::ObPostCallback },
    	};

    	OB_CALLBACK_REGISTRATION ObCallbackRegistration =
    	{
    	    OB_FLT_REGISTRATION_VERSION,
    	    _countof(ObOperationRegistration),
    	    { Drv::Altitude.Length, Drv::Altitude.MaximumLength, Drv::Altitude.Buffer },
   	    NULL,
    	    ObOperationRegistration,
    	};

	ObRegistrationHandle = NULL;
	rc = ObRegisterCallbacks(&ObCallbackRegistration, &ObRegistrationHandle);
    }
#else
#error TODO
#endif

PVOID Proc::ObRegistrationHandle;

OB_PREOP_CALLBACK_STATUS Proc::ObPreCallback(PVOID RegistrationContext,
					     POB_PRE_OPERATION_INFORMATION OperationInformation)
{
    return OB_PREOP_SUCCESS;
}

void Proc::ObPostCallback(PVOID RegistrationContext,
			  POB_POST_OPERATION_INFORMATION OperationInformation)
{
}