Bugzilla

Oops, I missed this bug, so I opened another one. Here's the info I wrote there:

Intercepting [`NtClose`](https://docs.microsoft.com/en-us/windows-hardware/drivers/ddi/ntifs/nf-ntifs-ntclose) is possible, and would be very useful, because it is a suspected to sometimes have a heavy cost: See "Closing File Handles on Windows" in [this article about surprisingly-slow things](https://gregoryszorc.com/blog/2021/04/06/surprisingly-slow/).
But it presents some technical difficulties:
- `NtClose` may be used on any type of object, so we'd need to filter out non-file objects.
- Also because `NtClose` may be called with any object, once in the interception routine, the interceptor could too easily be recursively called! In particular it makes stack-walking impossible (TBD), making the interception less useful.

I'm attaching an old WIP patch that may give some ideas.

(Adding mention of `NtClose` in bug title.)