斑主啊,救命啊,兄弟们,救命啊.

IFS来得到新创建的文件,而不是打开文件,但是我同样都是得到
IFSFN_OPEN,怎么区别它是打开文件还是创建文件!
(因为,操作系统无时无刻不在打开文件,如DLL等,我只是想得到
创建的文件)

看看这个函数

void Info_GetOpenOption(pioreq origir)
{
char data[255];
data[0]=0;
strcat(data,\"Option: \");
if( origir->ir_options & ACTION_CREATENEW ) strcat(data,\"CREATENEW \");
if( origir->ir_options & ACTION_OPENEXISTING ) strcat(data,\"OPENEXISTING \");
if( origir->ir_options & ACTION_REPLACEEXISTING ) strcat(data,\"REPLACEEXISTING \");

strcat(data,\"\\tAccessMask: \");
switch (origir->ir_flags & ACCESS_MODE_MASK) {
case ACCESS_READONLY:
strcat(data,\"READONLY \");
break;
case ACCESS_WRITEONLY:
strcat(data,\"WRITEONLY \");
break;
case ACCESS_READWRITE:
strcat(data,\"READWRITE \");
break;
case ACCESS_EXECUTE:
strcat(data,\"EXECUTE \");
break;
default:
strcat(data,\"ACCESS_MODE_MASK UnKnown\");
break;
}

strcat(data,\"\\tShareMask: \");
switch (origir->ir_flags & SHARE_MODE_MASK) {
case SHARE_COMPATIBILITY:
strcat(data,\"COMPATIBILITY \");
break;
case SHARE_DENYREADWRITE:
strcat(data,\"DENYREADWRITE \");
break;
case SHARE_DENYWRITE:
strcat(data,\"DENYWRITE \");
break;
case SHARE_DENYREAD:
strcat(data,\"DENYREAD \");
break;
case SHARE_DENYNONE:
strcat(data,\"DENYNONE \");
break;
default:
strcat(data,\"SHARE_MODE_MASK UnKnown\");
break;
}
}