Rotinas de NtXxx

esta seção descreve as versões NtXxx do Windows rotinas de serviços do sistema nativo. A maioria das rotinas de serviços do sistema nativo tem duas versões, uma das quais tem um nome começa com o prefixo NT; a outra versão tem um nome que começa com o prefixo zw. Por exemplo, as chamadas para NtCreateFile e ZwCreateFile executam operações semelhantes e, na verdade, são atendidas pela mesma rotina do sistema no modo kernel.

para chamadas de drivers de modo kernel, as versões Ntxxx e ZwXxx de uma Windows rotina de serviços do sistema nativo podem se comportar de forma diferente no modo como lidam e interpretam os parâmetros de entrada. Para obter mais informações sobre a relação entre as versões do NTxxx e do zwxxx de uma rotina, consulte usando as versões NT e zw das rotinas de serviços do sistema nativo.

A tabela a seguir resume as versões do NTxxx e do zwxxx das rotinas:

NtXxx ZwXxx

NtAllocateLocallyUniqueId

ZwAllocateLocallyUniqueId

NtAllocateVirtualMemory

ZwAllocateVirtualMemory

NtClose

ZwClose

NtCommitComplete

ZwCommitComplete

NtCommitEnlistment

ZwCommitEnlistment

NtCommitTransaction

ZwCommitTransaction

NtCreateDirectoryObject

ZwCreateDirectoryObject

NtCreateEnlistment

ZwCreateEnlistment

NtCreateEvent

ZwCreateEvent

NtCreateFile

ZwCreateFile

NtCreateKey

ZwCreateKey

NtCreateResourceManager

ZwCreateResourceManager

NtCreateSection

ZwCreateSection

NtCreateTransaction

ZwCreateTransaction

NtCreateTransactionManager

ZwCreateTransactionManager

NtCurrentProcess

ZwCurrentProcess

NtCurrentThread

ZwCurrentThread

NtDeleteFile

ZwDeleteFile

NtDeleteKey

ZwDeleteKey

NtDeleteValueKey

ZwDeleteValueKey

NtDeviceIoControlFile

ZwDeviceIoControlFile

NtDuplicateObject

ZwDuplicateObject

NtDuplicateToken

ZwDuplicateToken

NtEnumerateKey

ZwEnumerateKey

NtEnumerateTransactionObject

ZwEnumerateTransactionObject

NtEnumerateValueKey

ZwEnumerateValueKey

NtFlushBuffersFile

ZwFlushBuffersFile

NtFlushBuffersFileEx

ZwFlushBuffersFileEx

NtFlushKey

ZwFlushKey

NtFlushVirtualMemory

ZwFlushVirtualMemory

NtFreeVirtualMemory

ZwFreeVirtualMemory

NtFsControlFile

ZwFsControlFile

NtGetNotificationResourceManager

ZwGetNotificationResourceManager

NtLoadDriver

ZwLoadDriver

NtLockFile

ZwLockFile

NtMakeTemporaryObject

ZwMakeTemporaryObject

NtMapViewOfSection

ZwMapViewOfSection

NtNotifyChangeKey

ZwNotifyChangeKey

NtOpenDirectoryObject

ZwOpenDirectoryObject

NtOpenEnlistment

ZwOpenEnlistment

NtOpenEvent

ZwOpenEvent

NtOpenFile

ZwOpenFile

NtOpenKey

ZwOpenKey

NtOpenProcess

ZwOpenProcess

NtOpenProcessTokenEx

ZwOpenProcessTokenEx

NtOpenResourceManager

ZwOpenResourceManager

NtOpenSection

ZwOpenSection

NtOpenSymbolicLinkObject

ZwOpenSymbolicLinkObject

NtOpenThreadTokenEx

ZwOpenThreadTokenEx

NtOpenTransaction

ZwOpenTransaction

NtOpenTransactionManager

ZwOpenTransactionManager

NtPowerInformation

ZwPowerInformation

NtPrepareComplete

ZwPrepareComplete

NtPrepareEnlistment

ZwPrepareEnlistment

NtPrePrepareComplete

ZwPrePrepareComplete

NtPrePrepareEnlistment

ZwPrePrepareEnlistment

NtQueryDirectoryFile

ZwQueryDirectoryFile

NtQueryFullAttributesFile

ZwQueryFullAttributesFile

NtQueryInformationEnlistment

ZwQueryInformationEnlistment

NtQueryInformationFile

ZwQueryInformationFile

NtQueryInformationResourceManager

ZwQueryInformationResourceManager

NtQueryInformationToken

ZwQueryInformationToken

NtQueryInformationTransaction

ZwQueryInformationTransaction

NtQueryInformationTransactionManager

ZwQueryInformationTransactionManager

NtQueryKey

ZwQueryKey

NtQueryObject

ZwQueryObject

NtQueryQuotaInformationFile

ZwQueryQuotaInformationFile

NtQuerySecurityObject

ZwQuerySecurityObject

NtQuerySecurityObject

ZwQuerySymbolicLinkObject

NtQueryValueKey

ZwQueryValueKey

NtQueryVirtualMemory

ZwQueryVirtualMemory

NtQueryVolumeInformationFile

ZwQueryVolumeInformationFile

NtReadFile

ZwReadFile

NtReadOnlyEnlistment

ZwReadOnlyEnlistment

NtReadOnlyEnlistment

ZwRecoverEnlistment

NtRecoverResourceManager

ZwRecoverResourceManager

NtRecoverTransactionManager

ZwRecoverTransactionManager

NtRollbackComplete

ZwRollbackComplete

NtRollbackEnlistment

ZwRollbackEnlistment

NtRollbackTransaction

ZwRollbackTransaction

NtRollforwardTransactionManager

ZwRollforwardTransactionManager

NtSetEvent

ZwSetEvent

NtSetInformationEnlistment

ZwSetInformationEnlistment

NtSetInformationFile

ZwSetInformationFile

NtSetInformationResourceManager

ZwSetInformationResourceManager

NtSetInformationThread

ZwSetInformationThread

NtSetInformationToken

ZwSetInformationToken

NtSetInformationTransaction

ZwSetInformationTransaction

NtSetQuotaInformationFile

ZwSetQuotaInformationFile

NtSetSecurityObject

ZwSetSecurityObject

NtSetValueKey

ZwSetValueKey

NtSetVolumeInformationFile

ZwSetVolumeInformationFile

NtSinglePhaseReject

ZwSinglePhaseReject

NtTerminateProcess

ZwTerminateProcess

NtUnloadDriver

ZwUnloadDriver

NtUnlockFile

ZwUnlockFile

NtUnmapViewOfSection

ZwUnmapViewOfSection

NtWaitForSingleObject

ZwWaitForSingleObject

NtWriteFile

ZwWriteFile