1.2.3 File Objects

InitializeObjectAttributes 

Sets up a parameter of type OBJECT_ATTRIBUTES for a subsequent call to a ZwCreateXxx or ZwOpenXxx routine.

ZwCreateFile 

Creates or opens a file object representing a physical, logical, or virtual device, a directory, a data file, or a volume.

ZwQueryInformationFile 

Returns information about the state or attributes of an open file.

IoGetFileObjectGenericMapping

Returns information about the mapping between generic access rights and specific access rights for file objects.

ZwReadFile 

Returns data from an open file.

ZwSetInformationFile 

Changes information about the state or attributes of an open file.

ZwWriteFile 

Transfers data to an open file.

ZwClose 

Releases the handle for an opened object, causing the handle to become invalid and decrementing the reference count of the object handle.