Rotinas NtXxx
Esta seção descreve as versões NtXxx das rotinas do Windows Native System Services. A maioria das rotinas de serviços do sistema nativo tem duas versões, uma das quais tem um nome começa com o prefixo Nt; a outra versão tem um nome que começa com o prefixo Zw. Por exemplo, as chamadas para NtCreateFile e ZwCreateFile executam operações semelhantes e são, de fato, atendidas pela mesma rotina do sistema de modo kernel.
Para chamadas de drivers de modo kernel, as versões NtXxx e ZwXxx de uma rotina do Windows Native System Services podem se comportar de forma diferente na maneira como lidam e interpretam parâmetros de entrada. Para obter mais informações sobre a relação entre as versões NtXxx e ZwXxx de uma rotina, consulte Using Nt and Zw Versions of the Native System Services Routines.
A tabela a seguir resume as versões NtXxx e ZwXxx das rotinas:
NtXxx | ZwXxx |
---|---|
NtAllocateLocallyUniqueId |
|
NtAllocateVirtualMemory |
|
NtClose |
|
NtCommitComplete |
|
NtCommitEnlistment |
|
NtCommitTransaction |
|
NtCreateDirectoryObject |
|
NtCreateEnlistment |
|
NtCreateEvent |
|
NtCreateFile |
|
NtCreateKey |
|
NtCreateResourceManager |
|
NtCreateSection |
|
NtCreateTransaction |
|
NtCreateTransactionManager |
|
NtCurrentProcess |
|
NtCurrentThread |
|
NtDeleteFile |
|
NtDeleteKey |
|
NtDeleteValueKey |
|
NtDeviceIoControlFile |
|
NtDuplicateObject |
|
NtDuplicateToken |
|
NtEnumerateKey |
|
NtEnumerateTransactionObject |
|
NtEnumerateValueKey |
|
NtFlushBuffersFile |
|
NtFlushBuffersFileEx |
|
NtFlushKey |
|
NtFlushVirtualMemory |
|
NtFreeVirtualMemory |
|
NtFsControlFile |
|
NtGetNotificationResourceManager |
|
NtLoadDriver |
|
NtLockFile |
|
NtMakeTemporaryObject |
|
NtMapViewOfSection |
|
NtNotifyChangeKey |
|
NtOpenDirectoryObject |
|
NtOpenEnlistment |
|
NtOpenEvent |
|
NtOpenFile |
|
NtOpenKey |
|
NtOpenProcess |
|
NtOpenProcessTokenEx |
|
NtOpenResourceManager |
|
NtOpenSection |
|
NtOpenSymbolicLinkObject |
|
NtOpenThreadTokenEx |
|
NtOpenTransaction |
|
NtOpenTransactionManager |
|
NtPowerInformation |
|
NtPrepareComplete |
|
NtPrepareEnlistment |
|
NtPrePrepareComplete |
|
NtPrePrepareEnlistment |
|
NtQueryDirectoryFile |
|
NtQueryFullAttributesFile |
|
NtQueryInformationEnlistment |
|
NtQueryInformationFile |
|
NtQueryInformationResourceManager |
|
NtQueryInformationToken |
|
NtQueryInformationTransaction |
|
NtQueryInformationTransactionManager |
|
NtQueryKey |
|
NtQueryObject |
|
NtQueryQuotaInformationFile |
|
NtQuerySecurityObject |
|
NtQuerySecurityObject |
|
NtQueryValueKey |
|
NtQueryVirtualMemory |
|
NtQueryVolumeInformationFile |
|
NtReadFile |
|
NtReadOnlyEnlistment |
|
NtReadOnlyEnlistment |
|
NtRecoverResourceManager |
|
NtRecoverTransactionManager |
|
NtRollbackComplete |
|
NtRollbackEnlistment |
|
NtRollbackTransaction |
|
NtRollforwardTransactionManager |
|
NtSetEvent |
|
NtSetInformationEnlistment |
|
NtSetInformationFile |
|
NtSetInformationResourceManager |
|
NtSetInformationThread |
|
NtSetInformationToken |
|
NtSetInformationTransaction |
|
NtSetQuotaInformationFile |
|
NtSetSecurityObject |
|
NtSetValueKey |
|
NtSetVolumeInformationFile |
|
NtSinglePhaseReject |
|
NtTerminateProcess |
|
NtUnloadDriver |
|
NtUnlockFile |
|
NtUnmapViewOfSection |
|
NtWaitForSingleObject |
|
NtWriteFile |