Method SetupCallback

Kernel-Bridge/API/PsCallbacks.cpp:15–22

}

NTSTATUS PsProcessCallback::SetupCallback(PCREATE_PROCESS_NOTIFY_ROUTINE NotifyCallback) {
    if (!NotifyCallback) return STATUS_INVALID_PARAMETER;
    if (Callback) RemoveCallback();

    NTSTATUS Status = PsSetCreateProcessNotifyRoutine(NotifyCallback, FALSE);
    if (NT_SUCCESS(Status)) Callback = NotifyCallback;
    return Status;
}

VOID PsProcessCallback::RemoveCallback() {
    if (!Callback) return;