I am looking at a driver for a client that uses CmRegisterCallbackEx and
I need to know what kernel or user calls generate a callback with
RegNtPreRenameKey. I don't know of any kernel or user space calls to
rename a registry key. Unfortunately to do things right I need a way to
recreate this call in both kernel and user space.
Windows Filesystem and Driver Consulting