NtXxx 루틴

이 섹션에서는 Windows 네이티브 시스템 서비스 루틴의 NtXxx 버전에 대해 설명합니다. 대부분의 네이티브 시스템 서비스 루틴에는 두 가지 버전이 있으며, 그 중 하나에는 Nt 접두사로 시작하는 이름이 있습니다. 다른 버전에는 접두사 Zw로 시작하는 이름이 있습니다. 예를 들어 NtCreateFile 및 ZwCreateFile 에 대한 호출은 유사한 작업을 수행하며 실제로 동일한 커널 모드 시스템 루틴에서 처리됩니다.

커널 모드 드라이버에서 호출하는 경우 Windows 네이티브 시스템 서비스 루틴의 NtXxx 및 ZwXxx 버전은 입력 매개 변수를 처리하고 해석하는 방식으로 다르게 동작할 수 있습니다. 루틴의 NtXxx 버전과 ZwXxx 버전 간의 관계에 대한 자세한 내용은 네이티브 시스템 서비스 루틴의 Nt 및 Zw 버전 사용을 참조하세요.

다음 표에는 루틴의 NtXxx 및 ZwXxx 버전이 요약되어 있습니다.

NtXxx	ZwXxx
NtAllocateLocallyUniqueId	ZwAllocateLocallyUniqueId
NtAllocateVirtualMemory	ZwAllocateVirtualMemory
NtClose	ZwClose
NtCommitComplete	ZwCommitComplete
NtCommitEnlistment	ZwCommitEnlistment
NtCommitTransaction	ZwCommitTransaction
NtCreateDirectoryObject	ZwCreateDirectoryObject
NtCreateEnlistment	ZwCreateEnlistment
NtCreateEvent	ZwCreateEvent
NtCreateFile	ZwCreateFile
NtCreateKey	ZwCreateKey
NtCreateResourceManager	ZwCreateResourceManager
NtCreateSection	ZwCreateSection
NtCreateTransaction	ZwCreateTransaction
NtCreateTransactionManager	ZwCreateTransactionManager
NtCurrentProcess	ZwCurrentProcess
NtCurrentThread	ZwCurrentThread
NtDeleteFile	ZwDeleteFile
NtDeleteKey	ZwDeleteKey
NtDeleteValueKey	ZwDeleteValueKey
NtDeviceIoControlFile	ZwDeviceIoControlFile
NtDuplicateObject	ZwDuplicateObject
NtDuplicateToken	ZwDuplicateToken
NtEnumerateKey	ZwEnumerateKey
NtEnumerateTransactionObject	ZwEnumerateTransactionObject
NtEnumerateValueKey	ZwEnumerateValueKey
NtFlushBuffersFile	ZwFlushBuffersFile
NtFlushBuffersFileEx	ZwFlushBuffersFileEx
NtFlushKey	ZwFlushKey
NtFlushVirtualMemory	ZwFlushVirtualMemory
NtFreeVirtualMemory	ZwFreeVirtualMemory
NtFsControlFile	ZwFsControlFile
NtGetNotificationResourceManager	ZwGetNotificationResourceManager
NtLoadDriver	ZwLoadDriver
NtLockFile	ZwLockFile
NtMakeTemporaryObject	ZwMakeTemporaryObject
NtMapViewOfSection	ZwMapViewOfSection
NtNotifyChangeKey	ZwNotifyChangeKey
NtOpenDirectoryObject	ZwOpenDirectoryObject
NtOpenEnlistment	ZwOpenEnlistment
NtOpenEvent	ZwOpenEvent
NtOpenFile	ZwOpenFile
NtOpenKey	ZwOpenKey
NtOpenProcess	ZwOpenProcess
NtOpenProcessTokenEx	ZwOpenProcessTokenEx
NtOpenResourceManager	ZwOpenResourceManager
NtOpenSection	ZwOpenSection
NtOpenSymbolicLinkObject	ZwOpenSymbolicLinkObject
NtOpenThreadTokenEx	ZwOpenThreadTokenEx
NtOpenTransaction	ZwOpenTransaction
NtOpenTransactionManager	ZwOpenTransactionManager
NtPowerInformation	ZwPowerInformation
NtPrepareComplete	ZwPrepareComplete
NtPrepareEnlistment	ZwPrepareEnlistment
NtPrePrepareComplete	ZwPrePrepareComplete
NtPrepareEnlistment	ZwPrepareEnlistment
NtQueryDirectoryFile	ZwQueryDirectoryFile
NtQueryFullAttributesFile	ZwQueryFullAttributesFile
NtQueryInformationEnlistment	ZwQueryInformationEnlistment
NtQueryInformationFile	ZwQueryInformationFile
NtQueryInformationResourceManager	ZwQueryInformationResourceManager
NtQueryInformationToken	ZwQueryInformationToken
NtQueryInformationTransaction	ZwQueryInformationTransaction
NtQueryInformationTransactionManager	ZwQueryInformationTransactionManager
NtQueryKey	ZwQueryKey
NtQueryObject	ZwQueryObject
NtQueryQuotaInformationFile	ZwQueryQuotaInformationFile
NtQuerySecurityObject	ZwQuerySecurityObject
NtQuerySecurityObject	ZwQuerySymbolicLinkObject
NtQueryValueKey	ZwQueryValueKey
NtQueryVirtualMemory	ZwQueryVirtualMemory
NtQueryVolumeInformationFile	ZwQueryVolumeInformationFile
NtReadFile	ZwReadFile
NtReadOnlyEnlistment	ZwReadOnlyEnlistment
NtReadOnlyEnlistment	ZwRecoverEnlistment
NtRecoverResourceManager	ZwRecoverResourceManager
NtRecoverTransactionManager	ZwRecoverTransactionManager
NtRollbackComplete	ZwRollbackComplete
NtRollbackEnlistment	ZwRollbackEnlistment
NtRollbackTransaction	ZwRollbackTransaction
NtRollforwardTransactionManager	ZwRollforwardTransactionManager
NtSetEvent	ZwSetEvent
NtSetInformationEnlistment	ZwSetInformationEnlistment
NtSetInformationFile	ZwSetInformationFile
NtSetInformationResourceManager	ZwSetInformationResourceManager
NtSetInformationThread	ZwSetInformationThread
NtSetInformationToken	ZwSetInformationToken
NtSetInformationTransaction	ZwSetInformationTransaction
NtSetQuotaInformationFile	ZwSetQuotaInformationFile
NtSetSecurityObject	ZwSetSecurityObject
NtSetValueKey	ZwSetValueKey
NtSetVolumeInformationFile	ZwSetVolumeInformationFile
NtSinglePhaseReject	ZwSinglePhaseReject
NtTerminateProcess	ZwTerminateProcess
NtUnloadDriver	ZwUnloadDriver
NtUnlockFile	ZwUnlockFile
NtUnmapViewOfSection	ZwUnmapViewOfSection
NtWaitForSingleObject	ZwWaitForSingleObject
NtWriteFile	ZwWriteFile