.. / Worker Factory

Description:

These are internal system structures used to pool threads for a specific process. The Worker Factory mechanism is implemented in kernel mode and is responsible for creating, deleting, and managing thread-pools by allocating what are known as worker threads. For instance, a worker factory can be created by calling the native function NtCreateWorkerFactory.




Functions:

Kernel32.dll

CloseThreadpoolWait

CreateThreadpoolWait

SetThreadpoolWait

WaitForThreadpoolWaitCallbacks

CloseThreadpoolWork

CreateThreadpoolWork

SubmitThreadpoolWork

TrySubmitThreadpoolCallback

WaitForThreadpoolWorkCallbacks

CloseThreadpoolTimer

CreateThreadpoolTimer

IsThreadpoolTimerSet

SetThreadpoolTimer

WaitForThreadpoolTimerCallbacks

CancelThreadpoolIo

CloseThreadpoolIo

CreateThreadpoolIo

StartThreadpoolIo

WaitForThreadpoolIoCallbacks

CloseThreadpoolCleanupGroup

CloseThreadpoolCleanupGroupMembers

CreateThreadpoolCleanupGroup

CloseThreadpool

CreateThreadpool

SetThreadpoolThreadMaximum

Ntdll.dll

NtCreateWorkerFactory

NtSetInformationWorkerFactory

NtQueryInformationWorkerFactory

NtWaitForWorkViaWorkerFactory

NtReleaseWorkerFactoryWorker


References: