FsRtlNotifyCleanup - NtDoc
Native API online documentation, based on the System Informer
(formerly Process Hacker) phnt
headers
// ntifs.h
VOID FsRtlNotifyCleanup(
[in] PNOTIFY_SYNC NotifySync,
[in] PLIST_ENTRY NotifyList,
[in] PVOID FsContext
);
View the official Windows Driver Kit DDI referenceNo description available.
When the last handle to a file object is released, the FsRtlNotifyCleanup routine removes the file object's notify structure, if present, from the specified notify list.
NotifySync [in]A pointer to an opaque synchronization object for NotifyList.
NotifyList [in]A pointer to the head of a notify list. Each element in the list is an opaque notify structure.
FsContext [in]A unique value assigned by the file system to identify a notify structure as belonging to a particular file object.
If a notify structure is found that matches FsContext, FsRtlNotifyCleanup completes all IRPs that are queued in the notify structure. When all the IRPs are completed, FsRtlNotifyCleanup removes the notify structure from the notify list and deallocates it.
FsRtlNotifyFilterChangeDirectory
FsRtlNotifyFullChangeDirectory