NtXxx 常式

本節說明 Windows 原生系統服務常式的NtXxx版本。 大部分的原生系統服務常式都有兩個版本,其中一個版本的名稱開頭為 Nt前置詞;另一個版本的名稱開頭為 Zw。 例如,對 NtCreateFileZwCreateFile 的呼叫會執行類似的作業,事實上,由相同的核心模式系統常式提供服務。

對於核心模式驅動程式的呼叫,Windows 原生系統服務常式的NtXxxZwXxx版本在處理和解譯輸入參數的方式可能會有不同的行為。 如需常式NtXxxZwXxx版本之間的關聯性詳細資訊,請參閱使用 Nt 和 Zw 版本的原生系統服務常式

下表摘要說明常式的NtXxxZwXxx版本:

NtXxx ZwXxx

NtAllocateLocallyUniqueId

ZwAllocateLocallyUniqueId

NtAllocateVirtualMemory

ZwAllocateVirtualMemory

NtClose

ZwClose

NtCommitComplete

ZwCommitComplete

NtCommitEnlistment

ZwCommitEnlistment

NtCommitTransaction

ZwCommitTransaction

NtCreateDirectoryObject

ZwCreateDirectoryObject

NtCreateEnlistment

ZwCreateEnlistment

NtCreateEvent

ZwCreateEvent

NtCreateFile

ZwCreateFile

NtCreateKey

ZwCreateKey

NtCreateResourceManager

ZwCreateResourceManager

NtCreateSection

ZwCreateSection

NtCreateTransaction

ZwCreateTransaction

NtCreateTransactionManager

ZwCreateTransactionManager

NtCurrentProcess

ZwCurrentProcess

NtCurrentThread

ZwCurrentThread

NtDeleteFile

ZwDeleteFile

NtDeleteKey

ZwDeleteKey

NtDeleteValueKey

ZwDeleteValueKey

NtDeviceIoControlFile

ZwDeviceIoControlFile

NtDuplicateObject

ZwDuplicateObject

NtDuplicateToken

ZwDuplicateToken

NtEnumerateKey

ZwEnumerateKey

NtEnumerateTransactionObject

ZwEnumerateTransactionObject

NtEnumerateValueKey

ZwEnumerateValueKey

NtFlushBuffersFile

ZwFlushBuffersFile

NtFlushBuffersFileEx

ZwFlushBuffersFileEx

NtFlushKey

ZwFlushKey

NtFlushVirtualMemory

ZwFlushVirtualMemory

NtFreeVirtualMemory

ZwFreeVirtualMemory

NtFsControlFile

ZwFsControlFile

NtGetNotificationResourceManager

ZwGetNotificationResourceManager

NtLoadDriver

ZwLoadDriver

NtLockFile

ZwLockFile

NtMakeTemporaryObject

ZwMakeTemporaryObject

NtMapViewOfSection

ZwMapViewOfSection

NtNotifyChangeKey

ZwNotifyChangeKey

NtOpenDirectoryObject

ZwOpenDirectoryObject

NtOpenEnlistment

ZwOpenEnlistment

NtOpenEvent

ZwOpenEvent

NtOpenFile

ZwOpenFile

NtOpenKey

ZwOpenKey

NtOpenProcess

ZwOpenProcess

NtOpenProcessTokenEx

ZwOpenProcessTokenEx

NtOpenResourceManager

ZwOpenResourceManager

NtOpenSection

ZwOpenSection

NtOpenSymbolicLinkObject

ZwOpenSymbolicLinkObject

NtOpenThreadTokenEx

ZwOpenThreadTokenEx

NtOpenTransaction

ZwOpenTransaction

NtOpenTransactionManager

ZwOpenTransactionManager

NtPowerInformation

ZwPowerInformation

NtPrepareComplete

ZwPrepareComplete

NtPrepareEnlistment

ZwPrepareEnlistment

NtPreprepareComplete

ZwPrepareComplete

NtPrepareEnlistment

ZwPrepareEnlistment

NtQueryDirectoryFile

ZwQueryDirectoryFile

NtQueryFullAttributesFile

ZwQueryFullAttributesFile

NtQueryInformationEnlistment

ZwQueryInformationEnlistment

NtQueryInformationFile

ZwQueryInformationFile

NtQueryInformationResourceManager

ZwQueryInformationResourceManager

NtQueryInformationToken

ZwQueryInformationToken

NtQueryInformationTransaction

ZwQueryInformationTransaction

NtQueryInformationTransactionManager

ZwQueryInformationTransactionManager

NtQueryKey

ZwQueryKey

NtQueryObject

ZwQueryObject

NtQueryQuotaInformationFile

ZwQueryQuotaInformationFile

NtQuerySecurityObject

ZwQuerySecurityObject

NtQuerySecurityObject

ZwQuerySymbolicLinkObject

NtQueryValueKey

ZwQueryValueKey

NtQueryVirtualMemory

ZwQueryVirtualMemory

NtQueryVolumeInformationFile

ZwQueryVolumeInformationFile

NtReadFile

ZwReadFile

NtReadOnlyEnlistment

ZwReadOnlyEnlistment

NtReadOnlyEnlistment

ZwRecoverEnlistment

NtRecoverResourceManager

ZwRecoverResourceManager

NtRecoverTransactionManager

ZwRecoverTransactionManager

NtRollbackComplete

ZwRollbackComplete

NtRollbackEnlistment

ZwRollbackEnlistment

NtRollbackTransaction

ZwRollbackTransaction

NtRollforwardTransactionManager

ZwRollforwardTransactionManager

NtSetEvent

ZwSetEvent

NtSetInformationEnlistment

ZwSetInformationEnlistment

NtSetInformationFile

ZwSetInformationFile

NtSetInformationResourceManager

ZwSetInformationResourceManager

NtSetInformationThread

ZwSetInformationThread

NtSetInformationToken

ZwSetInformationToken

NtSetInformationTransaction

ZwSetInformationTransaction

NtSetQuotaInformationFile

ZwSetQuotaInformationFile

NtSetSecurityObject

ZwSetSecurityObject

NtSetValueKey

ZwSetValueKey

NtSetVolumeInformationFile

ZwSetVolumeInformationFile

NtSinglePhaseReject

ZwSinglePhaseReject

NtTerminateProcess

ZwTerminateProcess

NtUnloadDriver

ZwUnloadDriver

NtUnlockFile

ZwUnlockFile

NtUnmapViewOfSection

ZwUnmapViewOfSection

NtWaitForSingleObject

ZwWaitForSingleObject

NtWriteFile

ZwWriteFile