Xbox One Syscalls

# Process and Thread Management
0x0001: NtCreateProcess - Create a new process (Xbox app/game sandbox).
0x0002: NtOpenProcess - Open an existing process handle.
0x0003: NtTerminateProcess - Kill a process (e.g., game exit).
0x0004: NtCreateThread - Spawn a thread within a process.
0x0005: NtSuspendThread - Pause a thread (e.g., for debugging).
0x0006: NtResumeThread - Resume a paused thread.
# Memory Management
0x0010: NtAllocateVirtualMemory - Allocate memory for a game/app.
0x0011: NtFreeVirtualMemory - Free allocated memory.
0x0012: NtReadVirtualMemory - Read process memory (e.g., for hypervisor).
0x0013: NtWriteVirtualMemory - Write to process memory (e.g., patching).
0x0014: NtProtectVirtualMemory - Set memory permissions (R/W/X).
# File and I/O Operations
0x0020: NtCreateFile - Open a file (e.g., game assets on HDD/SSD).
0x0021: NtReadFile - Read from a file (e.g., streaming data).
0x0022: NtWriteFile - Write to a file (e.g., save games).
0x0023: NtClose - Close a file handle.
0x0024: NtQueryDirectoryFile - List directory contents (e.g., game installs).
# Device and Hardware Control
0x0030: NtDeviceIoControlFile - Control hardware (e.g., GPU, controller).
0x0031: NtQuerySystemInformation - Get system stats (e.g., CPU usage).
0x0032: NtSetSystemPowerState - Adjust power mode (e.g., low-power state).
0x0033: NtQueryPerformanceCounter - High-precision timing for games.
# Security and Access
0x0040: NtAdjustPrivilegesToken - Modify process privileges.
0x0041: NtOpenProcessToken - Get process security token.
0x0042: NtQuerySecurityObject - Check object permissions (e.g., sandbox).
# Xbox-Specific
0x0100: XboxSetGraphicsMode - Set rendering mode (e.g., 4K for One X).
0x0101: XboxQueryNetworkStatus - Check Xbox Live connectivity.
0x0102: XboxStartGameSession - Launch a game sandbox.
0x0103: XboxGetControllerInput - Poll controller state.
0x0104: XboxSetAudioOutput - Configure audio (e.g., 7.1 surround).

 

Kernel Syscalls (Kernel32, Xam, Xboxkrnl)
NtAllocateVirtualMemory - Allocates virtual memory.
NtFreeVirtualMemory - Frees virtual memory.
NtProtectVirtualMemory - Changes the protection of a region of memory.
NtQueryVirtualMemory - Queries information about virtual memory.
NtMapViewOfSection - Maps a view of a section into virtual memory.
NtUnmapViewOfSection - Unmaps a view of a section from the virtual address space.
NtCreateFile - Creates or opens a file.
NtOpenFile - Opens a file or device.
NtReadFile - Reads data from a file.
NtWriteFile - Writes data to a file.
NtClose - Closes an open object handle.
NtCreateSection - Creates a section object.
NtOpenSection - Opens a section object.
NtCreateEvent - Creates or opens an event object.
NtOpenEvent - Opens an existing event object.
NtSetEvent - Sets an event to the signaled state.
NtClearEvent - Clears an event.
NtWaitForSingleObject - Waits until an object is signaled.
NtWaitForMultipleObjects - Waits for multiple objects to become signaled.
NtQueryInformationFile - Retrieves information about a file.
NtSetInformationFile - Sets file information.
NtFlushBuffersFile - Flushes the buffers of a file.
NtCreateSemaphore - Creates a semaphore object.
NtReleaseSemaphore - Releases a semaphore.
NtQuerySemaphore - Queries information about a semaphore.
NtCreateMutant - Creates a mutant (mutex) object.
NtReleaseMutant - Releases a mutant object.
NtQueryMutant - Queries information about a mutant.
NtCreateTimer - Creates a timer object.
NtSetTimer - Sets a timer.
NtCancelTimer - Cancels a timer.
NtQueryTimer - Queries information about a timer.
NtAllocateHeap - Allocates memory from a heap.
NtFreeHeap - Frees a memory block from a heap.
NtQueryHeap - Queries information about a heap.
NtQuerySystemInformation - Retrieves system information.
NtQueryPerformanceCounter - Retrieves the current performance counter value.
NtYieldExecution - Yields the processor to another thread.
Hypervisor (HV) Syscalls
HvCallInitialize - Initializes the Hypervisor.
HvCallTerminate - Terminates the Hypervisor.
HvCallCpuId - Retrieves CPU identification.
HvCallDebugPrint - Outputs debugging information.
HvCallPostOutput - Sends output to the hypervisor log.
HvCallGetSystemTime - Retrieves the system time.
HvCallFlushCacheLines - Flushes cache lines.
HvCallNotifyProcessorFreeze - Notifies that the processor has been frozen.
HvCallNotifyProcessorThaw - Notifies that the processor has thawed.
HvCallReboot - Reboots the system.
HvCallReset - Resets the hardware.
HvCallGetMemorySize - Retrieves the amount of available memory.
HvCallLockMemory - Locks a memory region.
HvCallUnlockMemory - Unlocks a memory region.
HvCallSetPowerMode - Sets the power mode.
HvCallEnableCpu - Enables the CPU.
HvCallDisableCpu - Disables the CPU.
HvCallGetBootOptions - Retrieves boot configuration options.
HvCallSetBootOptions - Sets boot configuration options.
Xboxkrnl.sys Specific Syscalls
XeCryptShaInit - Initializes a SHA context.
XeCryptShaUpdate - Updates the SHA hash.
XeCryptShaFinal - Finalizes the SHA hash.
XeCryptAesKey - Sets an AES encryption key.
XeCryptAesCbc - Performs AES encryption in CBC mode.
XeCryptAesEcb - Performs AES encryption in ECB mode.
XeCryptAesCmac - Generates an AES CMAC.
XeCryptRc4Key - Sets an RC4 key.
XeCryptRc4Ecb - Encrypts data using RC4.
XeCryptHmacShaInit - Initializes HMAC-SHA.
XeCryptHmacShaUpdate - Updates HMAC-SHA.
XeCryptHmacShaFinal - Finalizes HMAC-SHA.
XeCryptRandom - Generates a random number.
XeCryptBnQwNe - Checks if a large number is non-equal.
XeCryptBnQwBe - Checks if a large number is equal.
XeCryptBnQwAdd - Adds two large numbers.
XeCryptBnQwSub - Subtracts two large numbers.
XeCryptBnQwMul - Multiplies two large numbers.