struct _FS_FILTER_CALLBACK_DATA// Size=0x40
{
    unsigned long SizeOfFsFilterCallbackData;// Offset=0x0 Size=0x4
    unsigned char Operation;// Offset=0x4 Size=0x1
    unsigned char Reserved;// Offset=0x5 Size=0x1
    struct _DEVICE_OBJECT * DeviceObject;// Offset=0x8 Size=0x8
    struct _FILE_OBJECT * FileObject;// Offset=0x10 Size=0x8
    union _FS_FILTER_PARAMETERS Parameters;// Offset=0x18 Size=0x28
};