1.2.3 File Objects

InitializeObjectAttributes

Sets up a parameter of type OBJECT_ATTRIBUTES for a subsequent call to a ZwCreateXxx or ZwOpenXxx routine.

ZwCreateFile

Creates or opens a file object representing a physical, logical, or virtual device, a directory, a data file, or a volume.

ZwQueryInformationFile

Returns information about the state or attributes of an open file.

IoGetFileObjectGenericMapping

Returns information about the mapping between generic access rights and specific access rights for file objects.

ZwReadFile

Returns data from an open file.

ZwSetInformationFile

Changes information about the state or attributes of an open file.

ZwWriteFile

Transfers data to an open file.

ZwClose

Releases the handle for an opened object, causing the handle to become invalid and decrementing the reference count of the object handle.