You're right! i know if i can create the IRP for create/close file and call "IoCallDriver" to pass the IRP to the lower driver , my problem is solved .
but setting all of the IRP fields correctly is a bit difficult !
and about flagging the IRP , what do u mean ? change the input param of ZwCreateFile/ZwClose ?