In FLT_IO_PARAMETER_BLOCK, IrpFlags = IRP_CLOSE_OPERATION means the operation is a cleanup or close operation. why is the flag necessary if the same information can be got from MajorFunction.
In FLT_IO_PARAMETER_BLOCK, IrpFlags = IRP_CLOSE_OPERATION means the operation is a cleanup or close operation. why is the flag necessary if the same information can be got from MajorFunction.