Geoff Chappell, Software Analyst
The very large table on this page lists all the functions and variables—there are more than two thousand—that appear in the export directory of any known build of the Windows kernel.
For each name, the table gives just a brief summary of the applicable kernel versions and of the status with respect to Microsoft’s documentation. This table is intended only as a master list. Details of each export’s availability and documentation status may be found by looking for the export in other lists, according to its first version as shown here. In the Table of Contents, expand the entry for Kernel Versions to get pages for each version. This is how this study means you to find, for example, that although a function of interest to you has been exported since Windows NT 3.51, it is said by Microsoft’s documentation to be available only starting from Windows Server 2003 SP1, and that even this wasn’t revealed until 2007. Some, presently very few, exports link directly from this page to an attempt at independent documentation. Additional explanatory notes, especially about the different degrees of documentation, follow the table.
Function | Applicable Versions | Documentation Status |
---|---|---|
AlpcGetHeaderSize | 6.0 and higher | |
AlpcGetMessageAttribute | 6.0 and higher | |
AlpcInitializeMessageAttribute | 6.0 and higher | |
BgkDisplayCharacter | 6.2 and higher | |
BgkGetConsoleState | 6.2 and higher | |
BgkGetCursorState | 6.2 and higher | |
BgkSetCursor | 6.2 and higher | |
CcAddDirtyPagesToExternalCache | 6.2 and higher | |
CcAsyncCopyRead | 10.0 and higher | |
CcCanIWrite | 3.51 and higher | documented |
CcCoherencyFlushAndPurgeCache | 6.1 and higher | documented |
CcCopyRead | 3.51 and higher | documented |
CcCopyReadEx | 6.2 and higher | documented |
CcCopyWrite | 3.51 and higher | documented |
CcCopyWriteEx | 6.2 and higher | documented |
CcCopyWriteWontFlush | 6.1 and higher | documented |
CcDeductDirtyPagesFromExternalCache | 6.2 and higher | |
CcDeferWrite | 3.51 and higher | documented |
CcFastCopyRead | 4.0 and higher | documented |
CcFastCopyWrite | 4.0 and higher | documented |
CcFastMdlReadWait (data) | 4.0 and higher | declared |
CcFastReadNotPossible (data) | 4.0 to 5.2 only | |
CcFastReadWait (data) | 4.0 to 5.2 only | |
CcFlushCache | 3.51 and higher | documented |
CcFlushCacheToLsn | 6.2 and higher | |
CcGetDirtyPages | 3.51 and higher | documented |
CcGetFileObjectFromBcb | 3.51 and higher | documented |
CcGetFileObjectFromSectionPtrs | 3.51 and higher | documented |
CcGetFileObjectFromSectionPtrsRef | 6.0 and higher | declared |
CcGetFlushedValidData | 5.0 and higher | documented |
CcGetLsnForFileObject | 3.51 and higher | |
CcInitializeCacheMap | 3.51 and higher | documented |
CcIsThereDirtyData | 3.51 and higher | documented |
CcIsThereDirtyDataEx | 6.0 and higher | documented |
CcIsThereDirtyLoggedPages | 6.2 and higher | documented |
CcMapData | 3.51 and higher | documented |
CcMdlRead | 3.51 and higher | documented |
CcMdlReadComplete | 3.51 and higher | documented |
CcMdlWriteAbort | 5.1 and higher | documented |
CcMdlWriteComplete | 3.51 and higher | documented |
CcPinMappedData | 3.51 and higher | documented |
CcPinRead | 3.51 and higher | documented |
CcPrepareMdlWrite | 3.51 and higher | documented |
CcPreparePinWrite | 3.51 and higher | documented |
CcPurgeCacheSection | 3.51 and higher | documented |
CcRegisterExternalCache | 6.2 and higher | |
CcRemapBcb | 5.0 and higher | documented |
CcRepinBcb | 3.51 and higher | documented |
CcScheduleReadAhead | 3.51 and higher | documented |
CcScheduleReadAheadEx | 6.2 and higher | documented |
CcSetAdditionalCacheAttributes | 3.51 and higher | documented |
CcSetAdditionalCacheAttributesEx | 6.2 and higher | documented |
CcSetBcbOwnerPointer | 4.0 and higher | documented |
CcSetDirtyPageThreshold | 3.51 and higher | documented |
CcSetDirtyPinnedData | 3.51 and higher | documented |
CcSetFileSizes | 3.51 and higher | documented |
CcSetFileSizesEx | 6.0 and higher | declared |
CcSetLogHandleForFile | 3.51 and higher | documented |
CcSetLogHandleForFileEx | 6.2 and higher | documented |
CcSetLoggedDataThreshold | 6.2 and higher | documented |
CcSetParallelFlushFile | 6.0 and higher | declared |
CcSetReadAheadGranularity | 3.51 and higher | documented |
CcSetReadAheadGranularityEx | 6.2 and higher | documented |
CcTestControl | 6.0 and higher | |
CcUninitializeCacheMap | 3.51 and higher | documented |
CcUnmapFileOffsetFromSystemCache | 6.2 and higher | documented |
CcUnpinData | 3.51 and higher | documented |
CcUnpinDataForThread | 3.51 and higher | documented |
CcUnpinRepinnedBcb | 3.51 and higher | documented |
CcUnregisterExternalCache | 6.2 and higher | documented |
CcWaitForCurrentLazyWriterActivity | 5.0 and higher | documented |
CcZeroData | 3.51 and higher | documented |
CcZeroDataOnDisk | 6.2 and higher | |
CmCallbackGetKeyObjectID | 6.0 and higher | documented |
CmCallbackGetKeyObjectIDEx | 6.2 and higher | documented |
CmCallbackReleaseKeyObjectIDEx | 6.2 and higher | documented |
CmGetBoundTransaction | 6.0 and higher | documented |
CmGetCallbackVersion | 6.0 and higher | documented |
CmKeyObjectType (data) | 6.1 and higher | declared |
CmRegisterCallback | 5.1 and higher | documented |
CmRegisterCallbackEx | 6.0 and higher | documented |
CmSetCallbackObjectContext | 6.0 and higher | documented |
CmUnRegisterCallback | 5.1 and higher | documented |
DbgBreakPoint | 3.51 and higher | documented |
DbgBreakPointWithStatus | 4.0 and higher | documented |
DbgCommandString | 5.2 and higher | |
DbgLoadImageSymbols | 3.51 and higher | |
DbgPrint | 3.51 and higher | documented |
DbgPrintEx | 5.1 and higher | documented |
DbgPrintReturnControlC | 5.0 and higher | declared |
DbgPrompt | 3.51 and higher | documented |
DbgQueryDebugFilterState | 5.1 and higher | declared |
DbgSetDebugFilterState | 5.1 and higher | declared |
DbgSetDebugPrintCallback | 6.0 and higher | declared |
DbgkLkmdRegisterCallback | 6.1 and higher | |
DbgkLkmdUnregisterCallback | 6.1 and higher | |
DbgkWerCaptureLiveKernelDump | 6.3 and higher | |
EmClientQueryRuleState | 6.0 and higher | declared |
EmClientRuleDeregisterNotification | 6.0 and higher | declared |
EmClientRuleEvaluate | 6.0 and higher | declared |
EmClientRuleRegisterNotification | 6.0 and higher | declared |
EmProviderDeregister | 6.0 and higher | declared |
EmProviderDeregisterEntry | 6.0 and higher | declared |
EmProviderRegister | 6.0 and higher | declared |
EmProviderRegisterEntry | 6.0 and higher | declared |
EmpProviderRegister | 6.0 and higher | |
EtwActivityIdControl | 6.0 and higher | documented |
EtwEnableTrace | 6.0 and higher | |
EtwEventEnabled | 6.0 and higher | documented |
EtwProviderEnabled | 6.0 and higher | documented |
EtwRegister | 6.0 and higher | documented |
EtwRegisterClassicProvider | 6.0 from Windows Vista SP1, and higher | |
EtwSendTraceBuffer | 6.0 from Windows Vista SP1, and higher | |
EtwSetInformation | 10.0 and higher | |
EtwUnregister | 6.0 and higher | documented |
EtwWrite | 6.0 and higher | documented |
EtwWriteEndScenario | 6.0 and higher | |
EtwWriteEx | 6.1 and higher | declared |
EtwWriteStartScenario | 6.0 and higher | |
EtwWriteString | 6.0 and higher | documented |
EtwWriteTransfer | 6.0 and higher | documented |
ExAcquireAutoExpandPushLockExclusive | 10.0 and higher | |
ExAcquireAutoExpandPushLockShared | 10.0 and higher | |
ExAcquireCacheAwarePushLockExclusive | 6.0 and higher | |
ExAcquireCacheAwarePushLockExclusiveEx | 6.3 and higher | |
ExAcquireCacheAwarePushLockSharedEx | 6.3 and higher | |
ExAcquireFastMutex | 5.2 from Windows Server 2003 SP1, and higher (x64); 6.2 and higher (x86); earlier in HAL (x86) |
documented |
ExAcquireFastMutexUnsafe | 3.51 and higher | documented |
ExAcquirePushLockExclusiveEx | 6.3 and higher | |
ExAcquirePushLockSharedEx | 6.3 and higher | |
ExAcquireResourceExclusive | 3.51 to 5.0 only | obsolete |
ExAcquireResourceExclusiveLite | 3.51 and higher | documented |
ExAcquireResourceSharedLite | 3.51 and higher | documented |
ExAcquireRundownProtection | 5.1 and higher | declared |
ExAcquireRundownProtectionCacheAware | 5.2 from Windows Server 2003 SP1, and higher | declared |
ExAcquireRundownProtectionCacheAwareEx | 5.2 from Windows Server 2003 SP1, and higher | declared |
ExAcquireRundownProtectionEx | 5.1 from Windows XP SP2, and higher | declared |
ExAcquireSharedStarveExclusive | 3.51 and higher | documented |
ExAcquireSharedWaitForExclusive | 3.51 and higher | documented |
ExAcquireSpinLockExclusive | 6.0 from Windows Vista SP1, and higher | |
ExAcquireSpinLockExclusiveAtDpcLevel | 6.0 from Windows Vista SP1, and higher | |
ExAcquireSpinLockShared | 6.0 from Windows Vista SP1, and higher | |
ExAcquireSpinLockSharedAtDpcLevel | 6.0 from Windows Vista SP1, and higher | |
ExAllocateAutoExpandPushLock | 10.0 and higher | |
ExAllocateCacheAwarePushLock | 6.0 and higher | |
ExAllocateCacheAwareRundownProtection | 5.2 from Windows Server 2003 SP1, and higher | declared |
ExAllocateFromPagedLookasideList | 4.0 and higher (x86); 5.2 from Windows Server 2003 SP1 and SP2 only (x64) |
documented |
ExAllocatePool | 3.51 and higher | obsolete |
ExAllocatePoolWithQuota | 3.51 and higher | obsolete |
ExAllocatePoolWithQuotaTag | 3.51 and higher | documented |
ExAllocatePoolWithTag | 3.51 and higher | documented |
ExAllocatePoolWithTagPriority | 4.0 from Windows NT 4.0 SP4, and higher | documented |
ExAllocateTimer | 6.3 and higher | documented |
ExAllocateTimerInternal (3) | 6.3 and higher | |
ExBlockOnAddressPushLock | 6.2 and higher | |
ExBlockPushLock | 6.2 and higher | |
ExCancelTimer | 6.3 and higher | documented |
ExCleanupAutoExpandPushLock | 10.0 and higher | |
ExCleanupRundownProtectionCacheAware | 10.0 and higher | |
ExCompositionObjectType (data) | 6.3 and higher | |
ExCompositionSurfaceObjectType (data) | 6.2 only | |
ExConvertExclusiveToSharedLite | 3.51 and higher | documented |
ExConvertPushLockExclusiveToShared | 10.0 and higher | |
ExCreateCallback | 3.51 and higher | documented |
ExDeleteLookasideListEx | 6.0 and higher | declared |
ExDeleteNPagedLookasideList | 4.0 and higher | documented |
ExDeletePagedLookasideList | 4.0 and higher | documented |
ExDeleteResource | 3.51 to 5.0 only | obsolete |
ExDeleteResourceLite | 3.51 and higher | documented |
ExDeleteTimer | 6.3 and higher | documented |
ExDesktopObjectType (data) | 4.0 and higher | |
ExDisableResourceBoostLite | 3.51 and higher | reserved |
ExEnterCriticalRegionAndAcquireFastMutexUnsafe | 5.2 from Windows Server 2003 SP1, and higher | |
ExEnterCriticalRegionAndAcquireResourceExclusive | 5.2 from Windows Server 2003 SP1, and higher | declared |
ExEnterCriticalRegionAndAcquireResourceShared | 5.2 from Windows Server 2003 SP1, and higher | declared |
ExEnterCriticalRegionAndAcquireSharedWaitForExclusive | 5.2 from Windows Server 2003 SP1, and higher | declared |
ExEnterPriorityRegionAndAcquireResourceExclusive | 6.0 from Windows Vista SP1, and higher | |
ExEnterPriorityRegionAndAcquireResourceShared | 6.0 from Windows Vista SP1, and higher | |
ExEnumHandleTable | 4.0 and higher | |
ExEventObjectType (data) | 3.51 and higher | declared |
ExExtendZone | 3.51 and higher | obsolete |
ExFetchLicenseData | 6.0 and higher | |
ExFlushLookasideListEx | 6.0 and higher | declared |
ExFreeAutoExpandPushLock | 10.0 and higher | |
ExFreeCacheAwarePushLock | 6.0 and higher | |
ExFreeCacheAwareRundownProtection | 5.2 from Windows Server 2003 SP1, and higher | declared |
ExFreePool | 3.51 and higher | documented |
ExFreePoolWithTag | 5.0 and higher | documented |
ExFreeToPagedLookasideList | 4.0 and higher (x86); 5.2 from Windows Server 2003 SP1 and SP2 only (x64) |
documented |
ExGetCurrentProcessorCounts | 5.1 and higher | |
ExGetCurrentProcessorCpuUsage | 5.1 and higher | |
ExGetExclusiveWaiterCount | 3.51 and higher | documented |
ExGetFirmwareEnvironmentVariable | 6.2 and higher | documented |
ExGetLicenseTamperState | 6.0 and higher | |
ExGetPreviousMode | 4.0 and higher | documented |
ExGetSharedWaiterCount | 3.51 and higher | documented |
ExInitializeAutoExpandPushLock | 10.0 and higher | |
ExInitializeLookasideListEx | 6.0 and higher | declared |
ExInitializeNPagedLookasideList | 4.0 and higher | documented |
ExInitializePagedLookasideList | 4.0 and higher | documented |
ExInitializePushLock | 6.0 and higher | declared |
ExInitializeResource | 3.51 to 5.0 only | documented |
ExInitializeResourceLite | 3.51 and higher | documented |
ExInitializeRundownProtection | 5.1 and higher | declared |
ExInitializeRundownProtectionCacheAware | 5.2 from Windows Server 2003 SP1, and higher | declared |
ExInitializeRundownProtectionCacheAwareEx | 10.0 and higher | |
ExInitializeZone | 3.51 and higher | obsolete |
ExInterlockedAddLargeInteger | 3.51 and higher | documented |
ExInterlockedAddLargeStatistic | 3.51 and higher (x86 only) | documented |
ExInterlockedAddUlong | 3.51 and higher | documented |
ExInterlockedCompareExchange64 | 4.0 and higher (x86 only) | documented |
ExInterlockedDecrementLong | 3.51 and higher (x86 only) | obsolete |
ExInterlockedExchangeUlong | 3.51 and higher (x86 only) | obsolete |
ExInterlockedExtendZone | 3.51 and higher | documented |
ExInterlockedFlushSList | 5.0 and higher (x86 only) | documented |
ExInterlockedIncrementLong | 3.51 and higher (x86 only) | obsolete |
ExInterlockedInsertHeadList | 3.51 and higher | documented |
ExInterlockedInsertTailList | 3.51 and higher | documented |
ExInterlockedPopEntryList | 3.51 and higher | documented |
ExInterlockedPopEntrySList | 4.0 and higher (x86 only) | documented |
ExInterlockedPushEntryList | 3.51 and higher | documented |
ExInterlockedPushEntrySList | 4.0 and higher (x86 only) | documented |
ExInterlockedRemoveHeadList | 3.51 and higher | documented |
ExIsManufacturingModeEnabled | 10.0 and higher | |
ExIsProcessorFeaturePresent | 4.0 and higher | documented |
ExIsResourceAcquiredExclusiveLite | 3.51 and higher | documented |
ExIsResourceAcquiredSharedLite | 3.51 and higher | documented |
ExLocalTimeToSystemTime | 3.51 and higher | documented |
ExNotifyBootDeviceRemoval | 6.2 and higher | |
ExNotifyCallback | 3.51 and higher | documented |
ExPostSystemEvent | 3.51 to 4.0 only | |
ExQueryAttributeInformation | 6.1 and 6.2 only | |
ExQueryDepthSList | 5.2 from Windows Server 2003 SP1, and higher (x64 only) | documented |
ExQueryFastCacheAppOrigin | 6.2 and higher | |
ExQueryFastCacheDevLicense | 6.2 and higher | |
ExQueryPoolBlockSize | 3.51 and higher | obsolete |
ExQueryTimerResolution | 6.2 and higher | documented |
ExQueryWnfStateData | 6.2 and higher | |
ExQueueWorkItem | 3.51 and higher | documented |
ExRaiseAccessViolation | 3.51 and higher | documented |
ExRaiseDatatypeMisalignment | 3.51 and higher | documented |
ExRaiseException | 3.51 and higher | |
ExRaiseHardError | 3.51 and higher | |
ExRaiseStatus | 3.51 and higher | documented |
ExRawInputManagerObjectType (data) | 10.0 and higher | |
ExReInitializeRundownProtection | 5.1 and higher | declared |
ExReInitializeRundownProtectionCacheAware | 5.2 from Windows Server 2003 SP1, and higher | declared |
ExRealTimeIsUniversal | 6.2 and higher | |
ExRegisterAttributeInformationCallback | 6.1 and 6.2 only | |
ExRegisterBootDevice | 6.2 and higher | |
ExRegisterCallback | 3.51 and higher | documented |
ExRegisterExtension | 6.1 and higher | |
ExReinitializeResourceLite | 3.51 and higher | documented |
ExReleaseAutoExpandPushLockExclusive | 10.0 and higher | |
ExReleaseAutoExpandPushLockShared | 10.0 and higher | |
ExReleaseCacheAwarePushLockExclusive | 6.0 and higher | |
ExReleaseCacheAwarePushLockExclusiveEx | 6.3 and higher | |
ExReleaseCacheAwarePushLockSharedEx | 6.3 and higher | |
ExReleaseFastMutex | 5.2 from Windows Server 2003 SP1, and higher (x64); 6.2 and higher (x86); earlier in HAL (x86) |
documented |
ExReleaseFastMutexUnsafe | 3.51 and higher | documented |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | 5.2 from Windows Server 2003 SP1, and higher | |
ExReleasePushLockEx | 6.3 and higher | |
ExReleasePushLockExclusiveEx | 6.3 and higher | |
ExReleasePushLockSharedEx | 6.3 and higher | |
ExReleaseResourceAndLeaveCriticalRegion | 5.2 from Windows Server 2003 SP1, and higher | declared |
ExReleaseResourceAndLeavePriorityRegion | 6.0 from Windows Vista SP1, and higher | |
ExReleaseResourceForThread | 3.51 to 5.0 only | documented |
ExReleaseResourceForThreadLite | 3.51 and higher | documented |
ExReleaseResourceLite | 3.51 and higher | documented |
ExReleaseRundownProtection | 5.1 and higher | declared |
ExReleaseRundownProtectionCacheAware | 5.2 from Windows Server 2003 SP1, and higher | declared |
ExReleaseRundownProtectionCacheAwareEx | 5.2 from Windows Server 2003 SP1, and higher | declared |
ExReleaseRundownProtectionEx | 5.1 from Windows XP SP2, and higher | declared |
ExReleaseSpinLockExclusive | 6.0 from Windows Vista SP1, and higher | |
ExReleaseSpinLockExclusiveFromDpcLevel | 6.0 from Windows Vista SP1, and higher | |
ExReleaseSpinLockShared | 6.0 from Windows Vista SP1, and higher | |
ExReleaseSpinLockSharedFromDpcLevel | 6.0 from Windows Vista SP1, and higher | |
ExRundownCompleted | 5.1 and higher | declared |
ExRundownCompletedCacheAware | 5.2 from Windows Server 2003 SP1, and higher | declared |
ExSemaphoreObjectType (data) | 5.0 and higher | declared |
ExSetFirmwareEnvironmentVariable | 6.2 and higher | documented |
ExSetLicenseTamperState | 6.0 and higher | |
ExSetResourceOwnerPointer | 4.0 and higher | documented |
ExSetResourceOwnerPointerEx | 6.1 and higher | documented |
ExSetTimer | 6.3 and higher | documented |
ExSetTimerResolution | 5.0 and higher | documented |
ExShareAddressSpaceWithDevice | 10.0 and higher | |
ExSizeOfAutoExpandPushLock | 10.0 and higher | |
ExSizeOfRundownProtectionCacheAware | 5.2 from Windows Server 2003 SP1, and higher | declared |
ExSubscribeWnfStateChange | 6.2 and higher | |
ExSystemExceptionFilter | 3.51 and higher | |
ExSystemTimeToLocalTime | 3.51 and higher | documented |
ExTimedWaitForUnblockPushLock | 6.2 and higher | |
ExTimerObjectType (data) | 10.0 and higher | |
ExTryAcquireAutoExpandPushLockExclusive | 10.0 and higher | |
ExTryAcquireAutoExpandPushLockShared | 10.0 and higher | |
ExTryAcquireCacheAwarePushLockExclusiveEx | 10.0 and higher | |
ExTryAcquireCacheAwarePushLockSharedEx | 10.0 and higher | |
ExTryAcquirePushLockExclusiveEx | 6.3 and higher | |
ExTryAcquirePushLockSharedEx | 6.3 and higher | |
ExTryConvertPushLockSharedToExclusiveEx | 6.3 and higher | |
ExTryConvertSharedSpinLockExclusive | 6.0 from Windows Vista SP1, and higher | |
ExTryQueueWorkItem | 6.2 and higher | |
ExTryToAcquireFastMutex | 5.2 from Windows Server 2003 SP1, and higher (x64); 6.2 and higher (x86); earlier in HAL (x86) |
documented |
ExTryToAcquireResourceExclusiveLite | 6.3 and higher | |
ExUnblockOnAddressPushLockEx | 6.3 and higher | |
ExUnblockPushLockEx | 6.3 and higher | |
ExUnregisterAttributeInformationCallback | 6.1 and 6.2 only | |
ExUnregisterCallback | 3.51 and higher | documented |
ExUnregisterExtension | 6.1 and higher | |
ExUnsubscribeWnfStateChange | 6.2 and higher | |
ExUpdateLicenseData | 6.0 and 6.1, and 10.0 and higher | |
ExUuidCreate | 5.0 and higher | documented |
ExVerifySuite | 5.1 and higher | reserved |
ExWaitForRundownProtectionRelease | 5.1 and higher | declared |
ExWaitForRundownProtectionReleaseCacheAware | 5.2 from Windows Server 2003 SP1, and higher | declared |
ExWaitForUnblockPushLock | 6.2 and higher | |
ExWindowStationObjectType (data) | 4.0 and higher | |
ExfAcquirePushLockExclusive | 5.1 from Windows XP SP2, and higher | |
ExfAcquirePushLockShared | 5.1 from Windows XP SP2, and higher | |
ExfInterlockedAddUlong | 3.51 and higher (x86 only) | declared |
ExfInterlockedCompareExchange64 | 5.1 and higher (x86 only) | declared |
ExfInterlockedInsertHeadList | 3.51 and higher (x86 only) | declared |
ExfInterlockedInsertTailList | 3.51 and higher (x86 only) | declared |
ExfInterlockedPopEntryList | 3.51 and higher (x86 only) | reserved |
ExfInterlockedPushEntryList | 3.51 and higher (x86 only) | reserved |
ExfInterlockedRemoveHeadList | 3.51 and higher (x86 only) | declared |
ExfReleasePushLock | 5.1 from Windows XP SP2, and higher | |
ExfReleasePushLockExclusive | 5.2 from Windows Server 2003 SP1, and higher | |
ExfReleasePushLockShared | 5.2 from Windows Server 2003 SP1, and higher | |
ExfTryAcquirePushLockShared | 6.0 and higher | |
ExfTryToWakePushLock | 5.2 from Windows Server 2003 SP1, and higher | |
ExfUnblockPushLock | 5.2 and higher | |
Exfi386InterlockedDecrementLong | 3.51 and higher (x86 only) | declared |
Exfi386InterlockedExchangeUlong | 3.51 and higher (x86 only) | declared |
Exfi386InterlockedIncrementLong | 3.51 and higher (x86 only) | declared |
Exi386InterlockedDecrementLong | 3.51 and higher (x86 only) | |
Exi386InterlockedExchangeUlong | 3.51 and higher (x86 only) | |
Exi386InterlockedIncrementLong | 3.51 and higher (x86 only) | |
ExiAcquireFastMutex | 5.2 from Windows Server 2003 SP1, and higher (x86 only) | declared |
ExiReleaseFastMutex | 5.2 from Windows Server 2003 SP1, and higher (x86 only) | declared |
ExiTryToAcquireFastMutex | 5.2 from Windows Server 2003 SP1, and higher (x86 only) | declared |
ExpInterlockedFlushSList | 5.2 from Windows Server 2003 SP1, and higher (x64 only) | declared |
ExpInterlockedPopEntrySList | 5.2 from Windows Server 2003 SP1, and higher (x64 only) | declared |
ExpInterlockedPushEntrySList | 5.2 from Windows Server 2003 SP1, and higher (x64 only) | declared |
FirstEntrySList | 6.0 and higher | documented |
FsRtlAcknowledgeEcp | 6.0 and higher | documented |
FsRtlAcquireEofLock | 6.2 and higher | |
FsRtlAcquireFileExclusive | 5.0 and higher | reserved |
FsRtlAcquireHeaderMutex | 6.2 and higher | |
FsRtlAddBaseMcbEntry | 5.2 and higher | declared |
FsRtlAddBaseMcbEntryEx | 6.0 and higher | declared |
FsRtlAddLargeMcbEntry | 3.51 and higher | documented |
FsRtlAddMcbEntry | 3.51 and higher | obsolete |
FsRtlAddToTunnelCache | 4.0 and higher | documented |
FsRtlAllocateExtraCreateParameter | 6.0 and higher | documented |
FsRtlAllocateExtraCreateParameterFromLookasideList | 6.0 and higher | declared |
FsRtlAllocateExtraCreateParameterList | 6.0 and higher | documented |
FsRtlAllocateFileLock | 5.0 and higher | documented |
FsRtlAllocatePool | 3.51 and higher | obsolete |
FsRtlAllocatePoolWithQuota | 3.51 and higher | obsolete |
FsRtlAllocatePoolWithQuotaTag | 3.51 and higher | documented |
FsRtlAllocatePoolWithTag | 3.51 and higher | documented |
FsRtlAllocateResource | 3.51 and higher | obsolete |
FsRtlAreNamesEqual | 3.51 and higher | documented |
FsRtlAreThereCurrentOrInProgressFileLocks | 6.1 and higher | declared |
FsRtlAreThereWaitingFileLocks | 6.2 and higher | documented |
FsRtlAreVolumeStartupApplicationsComplete | 6.0 and higher | documented |
FsRtlBalanceReads | 3.51 and higher | documented |
FsRtlCancellableWaitForMultipleObjects | 6.0 and higher | documented |
FsRtlCancellableWaitForSingleObject | 6.0 and higher | documented |
FsRtlChangeBackingFileObject | 6.0 and higher | documented |
FsRtlCheckLockForOplockRequest | 6.2 and higher | documented |
FsRtlCheckLockForReadAccess | 3.51 and higher | documented |
FsRtlCheckLockForWriteAccess | 3.51 and higher | documented |
FsRtlCheckOplock | 3.51 and higher | documented |
FsRtlCheckOplockEx | 6.0 from Windows Vista SP1, and higher | documented |
FsRtlCheckUpperOplock | 6.3 and higher | documented |
FsRtlCopyRead | 3.51 and higher | documented |
FsRtlCopyWrite | 3.51 and higher | documented |
FsRtlCreateSectionForDataScan | 5.1 from Windows XP SP3, 5.2 from Windows Server 2003 SP1, and higher |
documented |
FsRtlCurrentBatchOplock | 3.51 and higher | documented |
FsRtlCurrentOplock | 6.0 and higher | documented |
FsRtlCurrentOplockH | 6.1 and higher | documented |
FsRtlDeleteExtraCreateParameterLookasideList | 6.0 and higher | declared |
FsRtlDeleteKeyFromTunnelCache | 4.0 and higher | documented |
FsRtlDeleteTunnelCache | 4.0 and higher | documented |
FsRtlDeregisterUncProvider | 3.51 and higher | documented |
FsRtlDismountComplete | 6.2 and higher | |
FsRtlDissectDbcs | 3.51 and higher | documented |
FsRtlDissectName | 3.51 and higher | documented |
FsRtlDoesDbcsContainWildCards | 3.51 and higher | documented |
FsRtlDoesNameContainWildCards | 3.51 and higher | documented |
FsRtlFastCheckLockForRead | 3.51 and higher | documented |
FsRtlFastCheckLockForWrite | 3.51 and higher | documented |
FsRtlFastUnlockAll | 3.51 and higher | documented |
FsRtlFastUnlockAllByKey | 3.51 and higher | documented |
FsRtlFastUnlockSingle | 3.51 and higher | documented |
FsRtlFindExtraCreateParameter | 6.0 and higher | documented |
FsRtlFindInTunnelCache | 4.0 and higher | documented |
FsRtlFreeExtraCreateParameter | 6.0 and higher | documented |
FsRtlFreeExtraCreateParameterList | 6.0 and higher | documented |
FsRtlFreeFileLock | 5.0 and higher | documented |
FsRtlGetEcpListFromIrp | 6.0 and higher | documented |
FsRtlGetFileNameInformation | 6.2 and higher | |
FsRtlGetFileSize | 4.0 and higher | documented |
FsRtlGetIoAtEof | 6.2 and higher | |
FsRtlGetNextBaseMcbEntry | 5.2 and higher | declared |
FsRtlGetNextExtraCreateParameter | 6.0 and higher | documented |
FsRtlGetNextFileLock | 3.51 and higher | documented |
FsRtlGetNextLargeMcbEntry | 3.51 and higher | documented |
FsRtlGetNextMcbEntry | 3.51 and higher | obsolete |
FsRtlGetSectorSizeInformation | 6.2 and higher | documented |
FsRtlGetSupportedFeatures | 6.2 and higher | documented |
FsRtlGetVirtualDiskNestingLevel | 6.1 and higher | declared |
FsRtlHeatInit | 6.3 and higher | |
FsRtlHeatLogIo | 6.3 and higher | |
FsRtlHeatLogTierMove | 6.3 and higher | |
FsRtlHeatUninit | 6.3 and higher | |
FsRtlIncrementCcFastMdlReadWait | 6.0 and higher | declared |
FsRtlIncrementCcFastReadNoWait | 5.1 and higher | documented |
FsRtlIncrementCcFastReadNotPossible | 5.1 and higher | documented |
FsRtlIncrementCcFastReadResourceMiss | 5.1 and higher | documented |
FsRtlIncrementCcFastReadWait | 5.1 and higher | documented |
FsRtlInitExtraCreateParameterLookasideList | 6.0 and higher | declared |
FsRtlInitializeBaseMcb | 5.2 and higher | declared |
FsRtlInitializeBaseMcbEx | 6.0 and higher | declared |
FsRtlInitializeEofLock | 6.2 and higher | |
FsRtlInitializeExtraCreateParameter | 6.1 and higher | declared |
FsRtlInitializeExtraCreateParameterList | 6.1 and higher | declared |
FsRtlInitializeFileLock | 3.51 and higher | documented |
FsRtlInitializeLargeMcb | 3.51 and higher | documented |
FsRtlInitializeMcb | 3.51 and higher | obsolete |
FsRtlInitializeOplock | 3.51 and higher | documented |
FsRtlInitializeTunnelCache | 4.0 and higher | documented |
FsRtlInsertExtraCreateParameter | 6.0 and higher | documented |
FsRtlInsertFilterContext | 5.0 only | |
FsRtlInsertPerFileContext | 6.0 and higher | declared |
FsRtlInsertPerFileObjectContext | 5.1 and higher | documented |
FsRtlInsertPerStreamContext | 5.1 and higher | documented |
FsRtlInsertReservedPerFileContext | 6.3 and higher | |
FsRtlInsertReservedPerStreamContext | 6.3 and higher | |
FsRtlIsDbcsInExpression | 3.51 and higher | documented |
FsRtlIsEcpAcknowledged | 6.0 and higher | documented |
FsRtlIsEcpFromUserMode | 6.0 and higher | declared |
FsRtlIsFatDbcsLegal | 3.51 and higher | documented |
FsRtlIsHpfsDbcsLegal | 3.51 and higher | documented |
FsRtlIsMobileOS | 10.0 and higher | |
FsRtlIsNameInExpression | 3.51 and higher | documented |
FsRtlIsNtstatusExpected | 3.51 and higher | documented |
FsRtlIsPagingFile | 5.1 and higher | documented |
FsRtlIsSystemPagingFile | 6.2 and higher | documented |
FsRtlIsTotalDeviceFailure | 3.51 and higher | documented |
FsRtlIssueDeviceIoControl | 6.2 and higher | documented |
FsRtlKernelFsControlFile | 6.2 and higher | |
FsRtlLegalAnsiCharacterArray (data) | 3.51 and higher | declared |
FsRtlLogCcFlushError | 6.0 and higher | declared |
FsRtlLookupBaseMcbEntry | 5.2 and higher | declared |
FsRtlLookupFilterContextInternal | 5.0 only | |
FsRtlLookupLargeMcbEntry | 3.51 and higher | documented |
FsRtlLookupLastBaseMcbEntry | 5.2 and higher | declared |
FsRtlLookupLastBaseMcbEntryAndIndex | 5.2 and higher | declared |
FsRtlLookupLastLargeMcbEntry | 3.51 and higher | documented |
FsRtlLookupLastLargeMcbEntryAndIndex | 5.0 and higher | documented |
FsRtlLookupLastMcbEntry | 3.51 and higher | obsolete |
FsRtlLookupMcbEntry | 3.51 and higher | obsolete |
FsRtlLookupPerFileContext | 6.0 and higher | declared |
FsRtlLookupPerFileObjectContext | 5.1 and higher | documented |
FsRtlLookupPerStreamContextInternal | 5.1 and higher | reserved |
FsRtlLookupReservedPerFileContext | 6.3 and higher | |
FsRtlLookupReservedPerStreamContext | 6.3 and higher | |
FsRtlMdlRead | 3.51 and higher | |
FsRtlMdlReadComplete | 4.0 and higher | |
FsRtlMdlReadCompleteDev | 4.0 and higher | documented |
FsRtlMdlReadDev | 4.0 and higher | documented |
FsRtlMdlReadEx | 6.2 and higher | documented |
FsRtlMdlWriteComplete | 4.0 and higher | |
FsRtlMdlWriteCompleteDev | 4.0 and higher | documented |
FsRtlMupGetProviderIdFromName | 6.0 and higher | documented |
FsRtlMupGetProviderInfoFromFileObject | 6.0 and higher | documented |
FsRtlNormalizeNtstatus | 3.51 and higher | documented |
FsRtlNotifyChangeDirectory | 3.51 and higher | |
FsRtlNotifyCleanup | 3.51 and higher | documented |
FsRtlNotifyCleanupAll | 6.0 and higher | declared |
FsRtlNotifyFilterChangeDirectory | 5.1 and higher | documented |
FsRtlNotifyFilterChangeDirectoryLite | 10.0 and higher | |
FsRtlNotifyFilterReportChange | 5.1 and higher | documented |
FsRtlNotifyFilterReportChangeLite | 10.0 and higher | |
FsRtlNotifyFullChangeDirectory | 3.51 and higher | documented |
FsRtlNotifyFullReportChange | 3.51 and higher | documented |
FsRtlNotifyInitializeSync | 3.51 and higher | documented |
FsRtlNotifyReportChange | 3.51 and higher | |
FsRtlNotifyUninitializeSync | 3.51 and higher | documented |
FsRtlNotifyVolumeEvent | 5.0 and higher | documented |
FsRtlNotifyVolumeEventEx | 6.0 and higher | declared |
FsRtlNumberOfRunsInBaseMcb | 5.2 and higher | declared |
FsRtlNumberOfRunsInLargeMcb | 3.51 and higher | documented |
FsRtlNumberOfRunsInMcb | 3.51 and higher | obsolete |
FsRtlOplockBreakH | 6.1 and higher | documented |
FsRtlOplockBreakToNone | 6.0 and higher | obsolete |
FsRtlOplockBreakToNoneEx | 6.1 and higher | documented |
FsRtlOplockFsctrl | 3.51 and higher | documented |
FsRtlOplockFsctrlEx | 6.1 and higher | documented |
FsRtlOplockIsFastIoPossible | 3.51 and higher | documented |
FsRtlOplockIsSharedRequest | 6.1 and higher | documented |
FsRtlOplockKeysEqual | 6.1 and higher | documented |
FsRtlPostPagingFileStackOverflow | 3.51 and higher | documented |
FsRtlPostStackOverflow | 3.51 and higher | documented |
FsRtlPrepareMdlWrite | 3.51 and higher | |
FsRtlPrepareMdlWriteDev | 4.0 and higher | documented |
FsRtlPrepareMdlWriteEx | 6.2 and higher | documented |
FsRtlPrepareToReuseEcp | 6.2 and higher | documented |
FsRtlPrivateLock | 3.51 and higher | obsolete |
FsRtlProcessFileLock | 3.51 and higher | documented |
FsRtlQueryCachedVdl | 6.2 and higher | documented |
FsRtlQueryInformationFile | 10.0 and higher | |
FsRtlQueryKernelEaFile | 6.2 and higher | |
FsRtlQueryMaximumVirtualDiskNestingLevel | 6.1 and higher | declared |
FsRtlRegisterFileSystemFilterCallbacks | 5.1 and higher | documented |
FsRtlRegisterFltMgrCalls | 6.0 and higher | |
FsRtlRegisterMupCalls | 6.0 and higher | |
FsRtlRegisterUncProvider | 3.51 and higher | documented |
FsRtlRegisterUncProviderEx | 6.0 and higher | documented |
FsRtlRegisterUncProviderEx2 | 10.0 and higher | |
FsRtlReleaseEofLock | 6.2 and higher | |
FsRtlReleaseFile | 5.0 and higher | reserved |
FsRtlReleaseFileNameInformation | 6.2 and higher | |
FsRtlReleaseHeaderMutex | 6.2 and higher | |
FsRtlRemoveBaseMcbEntry | 5.2 and higher | declared |
FsRtlRemoveDotsFromPath | 6.0 and higher | declared |
FsRtlRemoveExtraCreateParameter | 6.0 and higher | documented |
FsRtlRemoveFilterContext | 5.0 only | |
FsRtlRemoveLargeMcbEntry | 3.51 and higher | documented |
FsRtlRemoveMcbEntry | 3.51 and higher | obsolete |
FsRtlRemovePerFileContext | 6.0 and higher | declared |
FsRtlRemovePerFileObjectContext | 5.1 and higher | documented |
FsRtlRemovePerStreamContext | 5.1 and higher | documented |
FsRtlRemoveReservedPerFileContext | 6.3 and higher | |
FsRtlRemoveReservedPerStreamContext | 6.3 and higher | |
FsRtlResetBaseMcb | 5.2 and higher | declared |
FsRtlResetLargeMcb | 5.0 and higher | documented |
FsRtlSendModernAppTermination | 6.3 and higher | |
FsRtlSetDriverBacking | 10.0 and higher | |
FsRtlSetEcpListIntoIrp | 6.0 and higher | declared |
FsRtlSetKernelEaFile | 6.2 and higher | |
FsRtlSplitBaseMcb | 5.2 and higher | declared |
FsRtlSplitLargeMcb | 3.51 and higher | documented |
FsRtlSyncVolumes | 3.51 and higher | |
FsRtlTeardownFilterContexts | 5.0 only | |
FsRtlTeardownPerFileContexts | 6.0 and higher | declared |
FsRtlTeardownPerStreamContexts | 5.1 and higher | documented |
FsRtlTruncateBaseMcb | 5.2 and higher | declared |
FsRtlTruncateLargeMcb | 3.51 and higher | documented |
FsRtlTruncateMcb | 3.51 and higher | obsolete |
FsRtlTryToAcquireHeaderMutex | 6.2 and higher | |
FsRtlUninitializeBaseMcb | 5.2 and higher | declared |
FsRtlUninitializeFileLock | 3.51 and higher | documented |
FsRtlUninitializeLargeMcb | 3.51 and higher | documented |
FsRtlUninitializeMcb | 3.51 and higher | obsolete |
FsRtlUninitializeOplock | 3.51 and higher | documented |
FsRtlUpdateDiskCounters | 6.2 and higher | |
FsRtlUpperOplockFsctrl | 6.3 and higher | documented |
FsRtlValidateReparsePointBuffer | 6.0 and higher | declared |
HalDispatchTable (data) | 3.51 and higher | declared |
HalExamineMBR | 5.1 and higher | documented |
HalPrivateDispatchTable (data) | 3.51 and higher | |
HeadlessDispatch | 5.1 and higher | |
HviGetDebugDeviceOptions | 10.0 and higher | |
HviGetEnlightenmentInformation | 10.0 and higher | |
HviGetHardwareFeatures | 10.0 and higher | |
HviGetHypervisorFeatures | 10.0 and higher | |
HviGetHypervisorInterface | 10.0 and higher | |
HviGetHypervisorVendorAndMaxFunction | 10.0 and higher | |
HviGetHypervisorVersion | 10.0 and higher | |
HviGetImplementationLimits | 10.0 and higher | |
HviIsAnyHypervisorPresent | 10.0 and higher | |
HviIsHypervisorMicrosoftCompatible | 10.0 and higher | |
HviIsHypervisorVendorMicrosoft | 10.0 and higher | |
HviIsIommuInUse | 10.0 and higher | |
HvlGetLpIndexFromApicId | 6.2 and higher | |
HvlPerformEndOfInterrupt | 6.2 and higher (x64 only) | |
HvlQueryActiveHypervisorProcessorCount | 6.2 and higher | |
HvlQueryActiveProcessors | 6.2 and higher | |
HvlQueryConnection | 6.0 and higher | |
HvlQueryHypervisorProcessorNodeNumber | 6.2 and higher | |
HvlQueryNumaDistance | 6.3 and higher | |
HvlQueryProcessorTopology | 6.2 and higher | |
HvlQueryProcessorTopologyCount | 6.2 and higher | |
HvlQueryProcessorTopologyHighestId | 6.2 and higher | |
HvlReadPerformanceStateCounters | 10.0 and higher | |
HvlRegisterInterruptCallback | 6.2 and higher | |
HvlRegisterWheaErrorNotification | 6.2 and higher | |
HvlunregisterInterruptCallback | 6.2 and higher | |
HvlUnregisterWheaErrorNotification | 6.2 and higher | |
InbvAcquireDisplayOwnership | 5.0 and higher | |
InbvCheckDisplayOwnership | 5.0 and higher | |
InbvDisplayString | 5.0 and higher | |
InbvEnableBootDriver | 5.0 and higher | |
InbvEnableDisplayString | 5.0 and higher | |
InbvInstallDisplayStringFilter | 5.0 and higher | |
InbvIsBootDriverInstalled | 5.0 and higher | |
InbvNotifyDisplayOwnershipChange | 6.2 and higher | |
InbvNotifyDisplayOwnershipLost | 5.0 and higher | |
InbvResetDisplay | 5.0 and higher | |
InbvSetScrollRegion | 5.0 and higher | |
InbvSetTextColor | 5.0 and higher | |
InbvSolidColorFill | 5.0 and higher | |
InitSafeBootMode (data) | 5.0 and higher | documented |
InitializeSListHead | 5.2 from Windows Server 2003 SP1, and higher (x64 only) | documented (SDK) |
InterlockedCompareExchange | 4.0 and higher (x86 only) | documented |
InterlockedDecrement | 3.51 and higher (x86 only) | documented |
InterlockedExchange | 3.51 and higher (x86 only) | documented |
InterlockedExchangeAdd | 4.0 and higher (x86 only) | documented |
InterlockedIncrement | 3.51 and higher (x86 only) | documented |
InterlockedPopEntrySList | 5.1 and higher (x86 only) | documented (SDK) |
InterlockedPushEntrySList | 5.1 and higher (x86 only) | documented (SDK) |
InterlockedPushListSList | 6.3 and higher | documented (SDK) |
IoAcquireCancelSpinLock | 3.51 and higher | documented |
IoAcquireRemoveLockEx | 5.0 and higher | reserved |
IoAcquireVpbSpinLock | 3.51 and higher | documented |
IoAdapterObjectType (data) | 3.51 and higher | |
IoAdjustStackSizeForRedirection | 6.1 and higher | |
IoAllocateAdapterChannel | 3.51 and higher | obsolete |
IoAllocateController | 3.51 and higher | documented |
IoAllocateDriverObjectExtension | 5.0 and higher | documented |
IoAllocateErrorLogEntry | 3.51 and higher | documented |
IoAllocateIrp | 3.51 and higher | documented |
IoAllocateIrpEx | 10.0 and higher | |
IoAllocateMdl | 3.51 and higher | documented |
IoAllocateMiniCompletionPacket | 6.0 and higher | |
IoAllocateSfioStreamIdentifier | 6.0 and higher | declared |
IoAllocateWorkItem | 5.0 and higher | documented |
IoApplyPriorityInfoThread | 6.0 and higher | |
IoAssignDriveLetters | 5.1 to 6.0 | |
IoAssignResources | 3.51 and higher | obsolete |
IoAttachDevice | 3.51 and higher | documented |
IoAttachDeviceByPointer | 3.51 and higher | obsolete |
IoAttachDeviceToDeviceStack | 4.0 and higher | documented |
IoAttachDeviceToDeviceStackSafe | 5.1 and higher | documented |
IoBoostThreadIo | 6.2 and higher | |
IoBuildAsynchronousFsdRequest | 3.51 and higher | documented |
IoBuildDeviceIoControlRequest | 3.51 and higher | documented |
IoBuildPartialMdl | 3.51 and higher | documented |
IoBuildSynchronousFsdRequest | 3.51 and higher | documented |
IoCallDriver | 3.51 and higher | documented |
IoCallDriverStackSafe | 6.0 only | |
IoCancelFileOpen | 5.0 and higher | documented |
IoCancelIrp | 3.51 and higher | documented |
IoCheckDesiredAccess | 3.51 and higher | reserved |
IoCheckEaBufferValidity | 3.51 and higher | documented |
IoCheckFunctionAccess | 3.51 and higher | reserved |
IoCheckQuerySetFileInformation | 5.0 and higher | reserved |
IoCheckQuerySetVolumeInformation | 5.0 and higher | reserved |
IoCheckQuotaBufferValidity | 5.0 and higher | documented |
IoCheckShareAccess | 3.51 and higher | documented |
IoCheckShareAccessEx | 6.0 and higher | declared |
IoClearActivityIdThread | 6.2 and higher | documented |
IoClearDependency | 6.0 from Windows Vista SP1, and higher | |
IoClearIrpExtraCreateParameter | 6.0 and higher | declared |
IoClearReservedDependency | 6.2 only | |
IoCompleteRequest | 3.51 and higher | documented |
IoCompletionObjectType (data) | 6.2 and higher | |
IoConnectInterrupt | 3.51 and higher | documented |
IoConnectInterruptEx | 6.0 and higher | documented |
IoConvertFileHandleToKernelHandle | 6.3 and higher | |
IoCopyDeviceObjectHint | 6.2 and higher | |
IoCreateArcName | 6.0 and higher | |
IoCreateController | 3.51 and higher | documented |
IoCreateDevice | 3.51 and higher | documented |
IoCreateDisk | 5.1 and higher | documented |
IoCreateDriver | 5.0 and higher | |
IoCreateFile | 3.51 and higher | documented |
IoCreateFileEx | 6.0 and higher | documented |
IoCreateFileSpecifyDeviceObjectHint | 5.1 and higher | documented |
IoCreateNotificationEvent | 4.0 and higher | documented |
IoCreateStreamFileObject | 3.51 and higher | documented |
IoCreateStreamFileObjectEx | 5.1 and higher | documented |
IoCreateStreamFileObjectEx2 | 6.2 and higher | documented |
IoCreateStreamFileObjectLite | 5.0 and higher | documented |
IoCreateSymbolicLink | 3.51 and higher | documented |
IoCreateSynchronizationEvent | 3.51 and higher | documented |
IoCreateSystemThread | 6.2 and higher | documented |
IoCreateUnprotectedSymbolicLink | 3.51 and higher | documented |
IoCsqInitialize | 5.1 and higher | documented |
IoCsqInitializeEx | 5.2 and higher | documented |
IoCsqInsertIrp | 5.1 and higher | documented |
IoCsqInsertIrpEx | 5.2 and higher | documented |
IoCsqRemoveIrp | 5.1 and higher | documented |
IoCsqRemoveNextIrp | 5.1 and higher | documented |
IoDecrementKeepAliveCount | 6.2 and higher | documented |
IoDeleteAllDependencyRelations | 6.0 from Windows Vista SP1, and higher | |
IoDeleteAllDependencyRelations | 6.2 and higher | |
IoDeleteController | 3.51 and higher | documented |
IoDeleteDevice | 3.51 and higher | documented |
IoDeleteDriver | 5.0 and higher | |
IoDeleteSymbolicLink | 3.51 and higher | documented |
IoDetachDevice | 3.51 and higher | documented |
IoDeviceHandlerObjectSize (data) | 4.0 and higher | |
IoDeviceHandlerObjectType (data) | 4.0 and higher | |
IoDeviceObjectType (data) | 3.51 and higher | |
IoDisconnectInterrupt | 3.51 and higher | documented |
IoDisconnectInterruptEx | 6.0 and higher | documented |
IoDriverObjectType (data) | 3.51 and higher | |
IoDuplicateDependency | 6.0 from Windows Vista SP1, and higher | |
IoEnqueueIrp | 3.51 and higher | |
IoEnumerateDeviceObjectList | 5.1 and higher | documented |
IoEnumerateRegisteredFiltersList | 5.1 from Windows XP SP3, 5.2 from Windows Server 2003 SP1, and higher |
documented |
IoFastQueryNetworkAttributes | 4.0 and higher | reserved |
IoFileObjectType (data) | 3.51 and higher | declared |
IoForwardAndCatchIrp | 5.1 and higher | declared |
IoForwardIrpSynchronously | 5.1 and higher | documented |
IoFreeController | 3.51 and higher | documented |
IoFreeErrorLogEntry | 5.1 and higher | documented |
IoFreeIrp | 3.51 and higher | documented |
IoFreeMdl | 3.51 and higher | documented |
IoFreeMiniCompletionPacket | 6.0 and higher | |
IoFreeSfioStreamIdentifier | 6.0 and higher | declared |
IoFreeWorkItem | 5.0 and higher | documented |
IoGetActivityIdIrp | 6.2 and higher | documented |
IoGetActivityIdThread | 6.2 and higher | documented |
IoGetAffinityInterrupt | 6.1 and higher | documented |
IoGetAttachedDevice | 3.51 and higher | documented |
IoGetAttachedDeviceReference | 5.0 and higher | documented |
IoGetBaseFileSystemDeviceObject | 4.0 and higher | reserved |
IoGetBootDiskInformation | 5.0 and higher | documented |
IoGetBootDiskInformationLite | 6.0 and higher | declared |
IoGetConfigurationInformation | 3.51 and higher | documented |
IoGetContainerInformation | 6.1 and higher | documented |
IoGetCurrentProcess | 3.51 and higher | documented |
IoGetDeviceAttachmentBaseRef | 5.1 and higher | documented |
IoGetDeviceInterfaceAlias | 5.0 and higher | documented |
IoGetDeviceInterfacePropertyData | 6.2 and higher | documented |
IoGetDeviceInterfaces | 5.0 and higher | documented |
IoGetDeviceNumaNode | 6.1 and higher | documented |
IoGetDeviceObjectPointer | 3.51 and higher | documented |
IoGetDeviceProperty | 5.0 and higher | documented |
IoGetDevicePropertyData | 6.0 and higher | documented |
IoGetDeviceToVerify | 3.51 and higher | documented |
IoGetDiskDeviceObject | 5.1 and higher | documented |
IoGetDmaAdapter | 5.0 and higher | documented |
IoGetDriverObjectExtension | 5.0 and higher | documented |
IoGetFileObjectGenericMapping | 3.51 and higher | documented |
IoGetFsTrackOffsetState | 10.0 and higher | |
IoGetFsZeroingOffset | 10.0 and higher | |
IoGetGenericIrpExtension | 6.3 and higher | |
IoGetInitialStack | 3.51 and higher | documented |
IoGetInitiatorProcess | 6.2 and higher | documented |
IoGetIoPriorityHint | 6.0 and higher | documented |
IoGetIrpExtraCreateParameter | 6.0 and higher | declared |
IoGetLowerDeviceObject | 5.1 and higher | documented |
IoGetOplockKeyContext | 6.1 and higher | |
IoGetOplockKeyContextEx | 6.2 and higher | documented |
IoGetPagingIoPriority | 5.2 and higher | documented |
IoGetRelatedDeviceObject | 3.51 and higher | documented |
IoGetRequestorProcess | 3.51 and higher | documented |
IoGetRequestorProcessId | 5.0 and higher | documented |
IoGetRequestorSessionId | 5.0 and higher | documented |
IoGetSfioStreamIdentifier | 6.0 and higher | declared |
IoGetStackLimits | 4.0 and higher | documented |
IoGetSymLinkSupportInformation | 6.0 from Windows Vista SP2, and higher | |
IoGetTopLevelIrp | 3.51 and higher | documented |
IoGetTransactionParameterBlock | 6.0 and higher | documented |
IoIncrementKeepAliveCount | 6.2 and higher | documented |
IoInitializeCrashDump | 5.1 from Windows XP SP3 | |
IoInitializeIrp | 3.51 and higher | documented |
IoInitializeIrpEx | 10.0 and higher | |
IoInitializeMiniCompletionPacket | 6.2 and higher | |
IoInitializeRemoveLockEx | 5.0 and higher | reserved |
IoInitializeTimer | 3.51 and higher | documented |
IoInitializeWorkItem | 6.0 and higher | documented |
IoInvalidateDeviceRelations | 5.0 and higher | documented |
IoInvalidateDeviceState | 5.0 and higher | documented |
IoIrpHasFsTrackOffsetExtensionType | 10.0 and higher | |
IoIs32bitProcess | 5.2 from Windows Server 2003 SP1, and higher (x64 only) | documented |
IoIsActivityTracingEnabled | 6.2 and higher | |
IoIsFileObjectIgnoringSharing | 6.0 and higher | declared |
IoIsFileOriginRemote | 5.0 from Windows 2000 SP3, and higher | documented |
IoIsInitiator32bitProcess | 6.2 and higher (x64 only) | |
IoIsOperationSynchronous | 3.51 and higher | documented |
IoIsSystemThread | 3.51 and higher | documented |
IoIsValidIrpStatus | 6.2 and higher | documented |
IoIsValidNameGraftingBuffer | 5.0 and higher | reserved |
IoIsWdmVersionAvailable | 5.0 and higher | documented |
IoLoadCrashDumpDriver | 6.3 and higher (x64 only) | |
IoMakeAssociatedIrp | 3.51 and higher | documented |
IoMakeAssociatedIrpEx | 10.0 and higher | |
IoOpenDeviceInterfaceRegistryKey | 5.0 and higher | documented |
IoOpenDeviceInstanceKey | 4.0 only | |
IoOpenDeviceRegistryKey | 5.0 and higher | documented |
IoPageRead | 3.51 and higher | reserved |
IoPnPDeliverServicePowerNotification | 5.0 to 6.0 | |
IoPropagateActivityIdToThread | 6.2 and higher | documented |
IoPropagateIrpExtension | 6.3 and higher | |
IoPropagateIrpExtensionEx | 10.0 and higher | |
IoQueryDeviceDescription | 3.51 and higher | obsolete |
IoQueryDeviceEnumInfo | 4.0 only | |
IoQueryFileDosDeviceName | 5.1 and higher | documented |
IoQueryFileInformation | 3.51 and higher | reserved |
IoQueryFullDriverPath | 6.3 and higher | documented |
IoQueryInterface | 10.0 and higher | |
IoQueryVolumeInformation | 3.51 and higher | reserved |
IoQueueThreadIrp | 4.0 and higher | reserved |
IoQueueWorkItem | 5.0 and higher | documented |
IoQueueWorkItemEx | 6.0 and higher | documented |
IoQueueWorkItemToNode | 6.2 and higher | |
IoRaiseHardError | 3.51 and higher | documented |
IoRaiseInformationalHardError | 3.51 and higher | documented |
IoReadDiskSignature | 5.1 and higher | documented |
IoReadOperationCount (data) | 3.51 and higher | declared |
IoReadPartitionTable | 5.1 and higher | obsolete |
IoReadPartitionTableEx | 5.1 and higher | documented |
IoReadTransferCount (data) | 3.51 and higher | declared |
IoRegisterBootDriverCallback | 6.2 and higher | documented |
IoRegisterBootDriverReinitialization | 5.0 and higher | documented |
IoRegisterContainerNotification | 6.1 and higher | documented |
IoRegisterDeviceInterface | 5.0 and higher | documented |
IoRegisterDriverReinitialization | 3.51 and higher | documented |
IoRegisterFileSystem | 3.51 and higher | documented |
IoRegisterFsRegistrationChange | 3.51 and higher | documented |
IoRegisterFsRegistrationChangeMountAware | 6.1 and higher | declared |
IoRegisterIoTracking | 6.2 and higher | |
IoRegisterLastChanceShutdownNotification | 5.0 and higher | documented |
IoRegisterPlugPlayNotification | 5.0 and higher | documented |
IoRegisterPriorityCallback | 6.1 and higher | |
IoRegisterShutdownNotification | 3.51 and higher | documented |
IoReleaseCancelSpinLock | 3.51 and higher | documented |
IoReleaseRemoveLockAndWaitEx | 5.0 and higher | reserved |
IoReleaseRemoveLockEx | 5.0 and higher | reserved |
IoReleaseVpbSpinLock | 3.51 and higher | documented |
IoRemoveShareAccess | 3.51 and higher | documented |
IoReplaceFileObjectName | 6.1 and higher | documented |
IoReplacePartitionUnit | 6.0 from Windows Vista SP1, and higher | declared |
IoReportDetectedDevice | 5.0 and higher | documented |
IoReportHalResourceUsage | 3.51 and higher | |
IoReportInterruptActive | 6.2 and higher | documented |
IoReportInterruptInactive | 6.2 and higher | documented |
IoReportResourceForDetection | 5.0 and higher | documented |
IoReportResourceUsage | 3.51 and higher | obsolete |
IoReportRootDevice | 6.1 and higher | |
IoReportTargetDeviceChange | 5.0 and higher | documented |
IoReportTargetDeviceChangeAsynchronous | 5.0 and higher | documented |
IoRequestDeviceEject | 5.0 and higher | documented |
IoRequestDeviceEjectEx | 6.0 and higher | declared |
IoRequestDeviceRemovalForReset | 10.0 and higher | |
IoReserveDependency | 6.2 and higher | |
IoResolveDependency | 6.2 and higher | |
IoRetrievePriorityInfo | 6.0 and higher | |
IoReuseIrp | 5.0 and higher | documented |
IoSetActivityIdIrp | 6.2 and higher | documented |
IoSetActivityIdThread | 6.2 and higher | documented |
IoSetCompletionRoutineEx | 5.1 and higher | documented |
IoSetDependency | 6.0 from Windows Vista SP1, and higher | |
IoSetDeviceInterfacePropertyData | 6.2 and higher | documented |
IoSetDeviceInterfaceState | 5.0 and higher | documented |
IoSetDevicePropertyData | 6.0 and higher | documented |
IoSetDeviceToVerify | 3.51 and higher | documented |
IoSetFileObjectIgnoreSharing | 6.1 and higher | declared |
IoSetFileOrigin | 5.0 from Windows 2000 SP3, and higher | documented |
IoSetFsTrackOffsetState | 10.0 and higher | |
IoSetFsZeroingOffset | 10.0 and higher | |
IoSetFsZeroingOffsetRequired | 10.0 and higher | |
IoSetGenericIrpExtension | 6.3 and higher | |
IoSetHardErrorOrVerifyDevice | 3.51 and higher | documented |
IoSetInformation | 3.51 and higher | reserved |
IoSetIoCompletion | 5.0 and higher | |
IoSetIoCompletionEx | 6.0 and higher | |
IoSetIoPriorityHint | 6.0 and higher | documented |
IoSetIoPriorityHintIntoFileObject | 6.0 and higher | |
IoSetIoPriorityHintIntoThread | 6.0 and higher | |
IoSetIrpExtraCreateParameter | 6.0 and higher | declared |
IoSetMasterIrpStatus | 6.2 and higher | documented |
IoSetOplockKeyContext | 6.1 only | |
IoSetPartitionInformation | 5.1 and higher | obsolete |
IoSetPartitionInformationEx | 5.1 and higher | documented |
IoSetShareAccess | 3.51 and higher | documented |
IoSetShareAccessEx | 6.0 and higher | declared |
IoSetStartIoAttributes | 5.1 and higher | documented |
IoSetSystemPartition | 5.1 and higher | documented |
IoSetThreadHardErrorMode | 4.0 and higher | documented |
IoSetTopLevelIrp | 3.51 and higher | documented |
IoSizeOfIrpEx | 10.0 and higher | |
IoSizeofGenericIrpExtension | 6.3 and higher | |
IoSizeofWorkItem | 6.0 and higher | documented |
IoStartNextPacket | 3.51 and higher | documented |
IoStartNextPacketByKey | 3.51 and higher | documented |
IoStartPacket | 3.51 and higher | documented |
IoStartTimer | 3.51 and higher | documented |
IoStatisticsLock (data) | 3.51 and higher | declared |
IoSteerInterrupt | 10.0 and higher | |
IoStopTimer | 3.51 and higher | documented |
IoSynchronousCallDriver | 6.2 and higher | |
IoSynchronousInvalidateDeviceRelations | 5.0 and higher | |
IoSynchronousPageWrite | 3.51 and higher | reserved |
IoTestDependency | 6.3 and higher | |
IoThreadToProcess | 3.51 and higher | documented |
IoTransferActivityId | 6.2 and higher | documented |
IoTranslateBusAddress | 5.2 from Windows Server 2003 SP1, and higher | declared |
IoTryQueueWorkItem | 6.2 and higher | documented |
IoUninitializeWorkItem | 6.0 and higher | documented |
IoUnregisterBootDriverCallback | 6.2 and higher | documented |
IoUnregisterContainerNotification | 6.1 and higher | documented |
IoUnregisterFileSystem | 3.51 and higher | documented |
IoUnregisterFsRegistrationChange | 3.51 and higher | documented |
IoUnregisterIoTracking | 6.2 and higher | |
IoUnregisterPlugPlayNotification | 5.0 and higher | documented |
IoUnregisterPlugPlayNotificationEx | 6.1 and higher | documented |
IoUnregisterPriorityCallback | 6.1 and higher | |
IoUnregisterShutdownNotification | 3.51 and higher | documented |
IoUpdateShareAccess | 3.51 and higher | documented |
IoValidateDeviceIoControlAccess | 5.1 from Windows XP SP1, and higher | documented |
IoVerifyPartitionTable | 5.1 and higher | documented |
IoVerifyVolume | 3.51 and higher | documented |
IoVolumeDeviceToDosName | 5.1 and higher | documented |
IoVolumeDeviceToGuid | 6.2 and higher | |
IoVolumeDeviceToGuidPath | 6.2 and higher | |
IoWMIAllocateInstanceIds | 5.0 and higher | documented |
IoWMIDeviceObjectToInstanceName | 5.1 and higher | documented |
IoWMIDeviceObjectToProviderId | 5.2 from Windows Server 2003 SP1, and higher (x64 only) | documented |
IoWMIExecuteMethod | 5.1 and higher | documented |
IoWMIHandleToInstanceName | 5.1 and higher | documented |
IoWMIOpenBlock | 5.1 and higher | documented |
IoWMIQueryAllData | 5.1 and higher | documented |
IoWMIQueryAllDataMultiple | 5.1 and higher | documented |
IoWMIQuerySingleInstance | 5.1 and higher | documented |
IoWMIQuerySingleInstanceMultiple | 5.1 and higher | documented |
IoWMIRegistrationControl | 5.0 and higher | documented |
IoWMISetNotificationCallback | 5.1 and higher | documented |
IoWMISetSingleInstance | 5.1 and higher | documented |
IoWMISetSingleItem | 5.1 and higher | documented |
IoWMISuggestInstanceName | 5.0 and higher | documented |
IoWMIWriteEvent | 5.0 and higher | documented |
IoWithinStackLimits | 6.0 and higher | documented |
IoWriteErrorLogEntry | 3.51 and higher | documented |
IoWriteOperationCount (data) | 3.51 and higher | declared |
IoWritePartitionTable | 5.1 and higher | obsolete |
IoWritePartitionTableEx | 5.1 and higher | documented |
IoWriteTransferCount (data) | 3.51 and higher | declared |
IofCallDriver | 3.51 and higher | declared |
IofCompleteRequest | 3.51 and higher | declared |
KdAcquireDebuggerLock | 6.3 and higher | |
KdChangeOption | 5.2 from Windows Server 2003 SP1, and higher | declared |
KdDebuggerEnabled (data) | 3.51 and higher | documented (macro) |
KdDebuggerNotPresent (data) | 3.51 and higher | documented (macro) |
KdDeregisterPowerHandler | 6.3 and higher | |
KdDisableDebugger | 5.0 and higher | documented |
KdEnableDebugger | 5.0 and higher | documented |
KdEnteredDebugger (data) | 5.0 and higher | |
KdEventLoggingEnabled (data) | 10.0 and higher | |
KdGetDebugDevice | 10.0 and higher | |
KdLogDbgPrint | 6.2 and higher | |
KdPollBreakIn | 3.51 and higher | |
KdPowerTransition | 5.1 and higher | |
KdRefreshDebuggerNotPresent | 5.2 and higher | documented |
KdRegisterPowerHandler | 6.3 and higher | |
KdReleaseDebuggerLock | 6.3 and higher | |
KdSetEventLoggingPresent | 10.0 and higher | |
KdSystemDebugControl | 5.2 from Windows Server 2003 SP1, and higher | |
Ke386CallBios | 3.51 to 6.1 (x86 only) | |
Ke386IoSetAccessProcess | 3.51 and higher (x86 only) | |
Ke386QueryIoAccessMap | 3.51 and higher (x86 only) | |
Ke386SetIoAccessMap | 3.51 and higher (x86 only) | |
KeAcquireGuardedMutex | 5.2 from Windows Server 2003 SP1, and higher | documented |
KeAcquireGuardedMutexUnsafe | 5.2 from Windows Server 2003 SP1, and higher | documented |
KeAcquireInStackQueuedSpinLock | 5.2 from Windows Server 2003 SP1, and higher (x64); 6.2 and higher (x86) |
documented |
KeAcquireInStackQueuedSpinLockAtDpcLevel | 5.1 and higher | documented |
KeAcquireInStackQueuedSpinLockForDpc | 5.2 and higher | documented |
KeAcquireInStackQueuedSpinLockRaiseToSynch | 5.2 from Windows Server 2003 SP1, and higher (x64); 6.2 and higher (x86) |
|
KeAcquireInterruptSpinLock | 5.1 and higher | documented |
KeAcquireQueuedSpinLock | 5.2 from Windows Server 2003 SP1, and higher (x64); 6.2 and higher (x86) |
reserved |
KeAcquireQueuedSpinLockRaiseToSynch | 5.2 from Windows Server 2003 SP1, and higher (x64); 6.2 and higher (x86) |
|
KeAcquireSpinLock | 6.2 and higher (x86 only) | documented |
KeAcquireSpinLockAtDpcLevel | 3.51 and higher | documented |
KeAcquireSpinLockForDpc | 5.2 and higher | documented |
KeAcquireSpinLockRaiseToDpc | 5.2 from Windows Server 2003 SP1, and higher (x64 only) | documented |
KeAcquireSpinLockRaiseToSynch | 5.2 from Windows Server 2003 SP1, and higher (x64); 6.2 and higher (x86) |
reserved |
KeAddGroupAffinityEx | 6.1 and higher | |
KeAddProcessorAffinityEx | 6.1 and higher | |
KeAddProcessorGroupAffinity | 6.1 and higher | |
KeAddSystemServiceTable | 3.51 and higher | |
KeAlertThread | 6.0 and higher | |
KeAllocateCalloutStack | 6.0 and higher | |
KeAllocateCalloutStackEx | 6.1 and higher | |
KeAndAffinityEx | 6.1 and higher | |
KeAndGroupAffinityEx | 6.1 and higher | |
KeAreAllApcsDisabled | 5.2 from Windows Server 2003 SP1, and higher | documented |
KeAreApcsDisabled | 5.1 and higher | documented |
KeAttachProcess | 3.51 and higher | obsolete |
KeBoostCurrentThread | 4.0 only | |
KeBugCheck | 3.51 and higher | documented |
KeBugCheckEx | 3.51 and higher | documented |
KeCancelTimer | 3.51 and higher | documented |
KeCancelTimer2 | 10.0 and higher | |
KeCapturePersistentThreadState | 5.1 from Windows XP SP1, and higher | |
KeCheckProcessorAffinityEx | 6.1 and higher | |
KeCheckProcessorGroupAffinity | 6.1 and higher | |
KeClearEvent | 3.51 and higher | documented |
KeClockInterruptNotify | 6.3 and higher | |
KeClockTimerPowerChange | 6.3 and higher | |
KeComplementAffinityEx | 6.1 and higher | |
KeConnectInterruptForHal | 10.0 and higher (x64 only) | |
KeConvertAuxiliaryCounterToPerformanceCounter | 10.0 and higher | documented |
KeConvertPerformanceCounterToAuxiliaryCounter | 10.0 and higher | documented |
KeCopyAffinityEx | 6.1 and higher | |
KeCountSetBitsAffinityEx | 6.1 and higher | |
KeCountSetBitsGroupAffinity | 6.1 and higher | |
KeConnectInterrupt | 3.51 to 5.2 only | |
KeDcacheFlushCount | 3.51 to 5.1 only | |
KeDelayExecutionThread | 3.51 and higher | documented |
KeDeregisterBoundCallback | 10.0 and higher | documented |
KeDeregisterBugCheckCallback | 3.51 and higher | documented |
KeDeregisterBugCheckReasonCallback | 5.1 from Windows XP SP1, and higher | documented |
KeDeregisterNmiCallback | 5.2 and higher | documented |
KeDeregisterProcessorChangeCallback | 6.0 from Windows Vista SP1, and higher | documented |
KeDetachProcess | 3.51 and higher | obsolete |
KeDisconnectInterrupt | 3.51 to 5.2 only | |
KeDispatchSecondaryInterrupt | 6.2 and higher | |
KeEnterCriticalRegion | 3.51 and higher | documented |
KeEnterGuardedRegion | 5.2 from Windows Server 2003 SP1, and higher | documented |
KeEnterKernelDebugger | 3.51 and higher | reserved |
KeEnumerateNextProcessor | 6.1 and higher | |
KeExpandKernelStackAndCallout | 5.2 from Windows Server 2003 SP1, and higher (x64); 6.0 and higher (x86) |
documented |
KeExpandKernelStackAndCalloutEx | 6.0 and higher | |
KeFindConfigurationEntry | 3.51 and higher | |
KeFindConfigurationNextEntry | 3.51 and higher | |
KeFindFirstSetLeftAffinityEx | 6.1 and higher | |
KeFindFirstSetLeftGroupAffinity | 6.1 and higher | |
KeFindFirstSetRightAffinityEx | 6.3 and higher | |
KeFindFirstSetRightGroupAffinity | 6.1 and higher | |
KeFirstGroupAffinityEx | 6.1 and higher | |
KeFlushEntireTb | 3.51 and higher | |
KeFlushIoBuffers | 10.0 and higher | documented |
KeFlushQueuedDpcs | 5.1 from Windows XP SP2, and higher | documented |
KeForceEnableNx | 6.2 and higher | |
KeFreeCalloutStack | 6.0 and higher | |
KeGenericCallDpc | 5.2 and higher | |
KeGetClockOwner | 6.3 and higher | |
KeGetClockTimerResolution | 6.3 and higher | |
KeGetCurrentIrql | 5.2 from Windows Server 2003 SP1, and higher (x64 only) | documented |
KeGetCurrentNodeNumber | 6.1 and higher | documented |
KeGetCurrentProcessorNumberEx | 6.1 and higher | documented |
KeGetCurrentThread | 3.51 and higher | documented |
KeGetNextClockTickDuration | 6.3 and higher | |
KeGetNextTimerExpirationDueTime | 6.2 only | |
KeGetPreviousMode | 3.51 and higher (x86 only) | |
KeGetProcessorIndexFromNumber | 6.1 and higher | documented |
KeGetProcessorNumberFromIndex | 6.1 and higher | documented |
KeGetRecommendedSharedDataAlignment | 5.1 and higher | documented |
KeGetXSaveFeatureFlags | 6.1 and higher | |
KeHwPolicyLocateResource | 6.2 and higher | |
KeI386AbiosCall | 3.51 to 6.1 (x86 only) | |
KeI386AllocateGdtSelectors | 3.51 to 6.1 (x86 only) | |
KeI386Call16BitCStyleFunction | 4.0 to 6.1 (x86 only) | |
KeI386Call16BitFunction | 3.51 to 6.1 (x86 only) | |
KeI386FlatToGdtSelector | 3.51 to 6.1 (x86 only) | |
KeI386GetLid | 3.51 to 6.1 (x86 only) | |
KeI386MachineType (data) | 3.51 and higher (x86 only) | |
KeI386ReleaseGdtSelectors | 3.51 to 6.1 (x86 only) | |
KeI386ReleaseLid | 3.51 to 6.1 (x86 only) | |
KeI386SetGdtSelector | 3.51 to 6.1 (x86 only) | |
KeIcacheFlushCount | 3.51 to 5.1 only | |
KeInitializeAffinityEx | 6.1 and higher | |
KeInitializeApc | 3.51 and higher | |
KeInitializeCrashDumpHeader | 5.2 from Windows Server 2003 SP1, and higher | documented |
KeInitializeDeviceQueue | 3.51 and higher | documented |
KeInitializeDpc | 3.51 and higher | documented |
KeInitializeEnumerationContext | 6.1 and higher | |
KeInitializeEnumerationContextFromAffinity | 10.0 and higher | |
KeInitializeEnumerationContextFromGroup | 6.1 and higher | |
KeInitializeEvent | 3.51 and higher | documented |
KeInitializeGuardedMutex | 5.2 from Windows Server 2003 SP1, and higher | documented |
KeInitializeInterrupt | 3.51 and higher | |
KeInitializeMutant | 3.51 and higher | reserved |
KeInitializeMutex | 3.51 and higher | documented |
KeInitializeQueue | 3.51 and higher | documented |
KeInitializeSecondaryInterruptServices | 6.2 and higher | |
KeInitializeSemaphore | 3.51 and higher | documented |
KeInitializeSpinLock | 3.51 and higher (x86 only) | documented |
KeInitializeThreadedDpc | 5.2 and higher | documented |
KeInitializeTimer | 3.51 and higher | documented |
KeInitializeTimer2 | 10.0 and higher | |
KeInitializeTimerEx | 4.0 and higher | documented |
KeInsertByKeyDeviceQueue | 3.51 and higher | documented |
KeInsertDeviceQueue | 3.51 and higher | documented |
KeInsertHeadQueue | 3.51 and higher | documented |
KeInsertQueue | 3.51 and higher | documented |
KeInsertQueueApc | 3.51 and higher | |
KeInsertQueueDpc | 3.51 and higher | documented |
KeInterlockedClearProcessorAffinityEx | 6.1 and higher | |
KeInterlockedSetProcessorAffinityEx | 6.1 and higher | |
KeInvalidateAllCaches | 5.2 and higher | documented |
KeInvalidateRangeAllCaches | 6.0 and higher | declared |
KeIpiGenericCall | 5.2 and higher | documented |
KeIsAttachedProcess | 5.1 and higher | |
KeIsEmptyAffinityEx | 6.1 and higher | |
KeIsEqualAffinityEx | 6.1 and higher | |
KeIsExecutingDpc | 3.51 and higher (x86); 6.0 and higher (x64) |
|
KeIsSingleGroupAffinityEx | 6.1 and higher | |
KeIsSubsetAffinityEx | 6.1 and higher | |
KeIsWaitListEmpty | 5.2 from Windows Server 2003 SP1, and higher | |
KeLastBranchMSR (data) | 5.2 from Windows Server 2003 SP1, and higher (x64 only) | declared |
KeLeaveCriticalRegion | 3.51 and higher | documented |
KeLeaveGuardedRegion | 5.2 from Windows Server 2003 SP1, and higher | documented |
KeLoadMTRR | 6.2 and higher | |
KeLoaderBlock (data) | 3.51 and higher | |
KeLowerIrql | 5.2 from Windows Server 2003 SP1, and higher (x64 only) | documented |
KeNotifyProcessorFreezeSupported | 10.0 and higher | |
KeNumberProcessors (data) | 3.51 and higher | documented |
KeOrAffinityEx | 6.1 and higher | |
KePollFreezeExecution | 6.1 and higher (x86 only) | |
KeProcessorGroupAffinity | 6.1 and higher | |
KeProfileInterrupt | 3.51 to 6.1 (x86 only) | |
KeProfileInterruptWithSource | 3.51 and higher | |
KePulseEvent | 3.51 and higher | documented |
KeQueryActiveGroupCount | 6.1 and higher | documented |
KeQueryActiveProcessorAffinity | 6.1 and higher | |
KeQueryActiveProcessorCount | 6.0 and higher | documented |
KeQueryActiveProcessorCountEx | 6.1 and higher | documented |
KeQueryActiveProcessors | 5.0 and higher | documented |
KeQueryAuxiliaryCounterFrequency | 10.0 and higher | documented |
KeQueryDpcWatchdogInformation | 6.0 and higher | documented |
KeQueryEffectivePriorityThread | 6.2 and higher | |
KeQueryGroupAffinity | 6.1 and higher | documented |
KeQueryGroupAffinityEx | 6.1 and higher | |
KeQueryHardwareCounterConfiguration | 6.1 and higher | documented |
KeQueryHeteroCpuPolicyThread | 10.0 and higher | |
KeQueryHighestNodeNumber | 6.1 and higher | documented |
KeQueryInterruptTime | 5.0 and higher (x86 only) | documented |
KeQueryInterruptTimePrecise | 6.2 and higher | documented |
KeQueryLogicalProcessorRelationship | 6.1 and higher | documented |
KeQueryMaximumGroupCount | 6.1 and higher | documented |
KeQueryMaximumProcessorCount | 6.0 and higher | documented |
KeQueryMaximumProcessorCountEx | 6.1 and higher | documented |
KeQueryMultiThreadProcessorSet | 5.2 from Windows Server 2003 SP1, and higher (x64 only) | |
KeQueryNodeActiveAffinity | 6.1 and higher | documented |
KeQueryNodeMaximumProcessorCount | 6.1 and higher | documented |
KeQueryPrcbAddress | 5.2 from Windows Server 2003 SP1, and higher (x64 only) | |
KeQueryPriorityThread | 5.0 and higher | documented |
KeQueryRuntimeThread | 5.1 and higher | documented |
KeQuerySystemTime | 3.51 and higher (x86 only) | documented |
KeQuerySystemTimePrecise | 6.2 and higher | documented |
KeQueryTickCount | 3.51 and higher (x86 only) | documented |
KeQueryTimeIncrement | 3.51 and higher | documented |
KeQueryTotalCycleTimeThread | 6.2 and higher | documented |
KeQueryUnbiasedInterruptTime | 6.1 and higher | documented |
KeRaiseIrqlToDpcLevel | 5.2 from Windows Server 2003 SP1, and higher (x64 only) | documented |
KeRaiseUserException | 4.0 and higher | |
KeReadStateEvent | 3.51 and higher | documented |
KeReadStateMutant | 3.51 and higher | reserved |
KeReadStateMutex | 3.51 and higher | documented |
KeReadStateQueue | 3.51 and higher | reserved |
KeReadStateSemaphore | 3.51 and higher | documented |
KeReadStateTimer | 3.51 and higher | documented |
KeRegisterBoundCallback | 10.0 and higher | documented |
KeRegisterBugCheckCallback | 3.51 and higher | documented |
KeRegisterBugCheckReasonCallback | 5.1 from Windows XP SP1, and higher | documented |
KeRegisterNmiCallback | 5.2 and higher | documented |
KeRegisterProcessorChangeCallback | 6.0 from Windows Vista SP1, and higher | documented |
KeReleaseGuardedMutex | 5.2 from Windows Server 2003 SP1, and higher | documented |
KeReleaseGuardedMutexUnsafe | 5.2 from Windows Server 2003 SP1, and higher | documented |
KeReleaseInStackQueuedSpinLock | 6.2 and higher | |
KeReleaseInStackQueuedSpinLock | 5.2 from Windows Server 2003 SP1, and higher (x64 only) | documented |
KeReleaseInStackQueuedSpinLockForDpc | 5.2 and higher | documented |
KeReleaseInStackQueuedSpinLockFromDpcLevel | 5.1 and higher | documented |
KeReleaseInterruptSpinLock | 5.1 and higher | documented |
KeReleaseMutant | 3.51 and higher | reserved |
KeReleaseMutex | 3.51 and higher | documented |
KeReleaseQueuedSpinLock | 5.2 from Windows Server 2003 SP1, and higher (x64); 6.2 and higher (x86) |
reserved |
KeReleaseSemaphore | 3.51 and higher | documented |
KeReleaseSpinLock | 5.2 from Windows Server 2003 SP1, and higher (x64); 6.2 and higher (x86) |
documented |
KeReleaseSpinLockForDpc | 5.2 and higher | documented |
KeReleaseSpinLockFromDpcLevel | 3.51 and higher | documented |
KeRemoveByKeyDeviceQueue | 3.51 and higher | documented |
KeRemoveByKeyDeviceQueueIfBusy | 5.1 and higher | reserved |
KeRemoveDeviceQueue | 3.51 and higher | documented |
KeRemoveEntryDeviceQueue | 3.51 and higher | documented |
KeRemoveGroupAffinityEx | 6.1 and higher | |
KeRemoveProcessorAffinityEx | 6.1 and higher | |
KeRemoveProcessorGroupAffinity | 6.1 and higher | |
KeRemoveQueue | 3.51 and higher | documented |
KeRemoveQueueEx | 6.0 from Windows Vista SP1, and higher | declared |
KeRemoveQueueDpc | 3.51 and higher | documented |
KeRemoveQueueDpcEx | 6.3 and higher | |
KeRemoveSystemServiceTable | 5.1 and higher | |
KeReportCacheIncoherentDevice | 10.0 and higher | |
KeResetEvent | 3.51 and higher | documented |
KeRestoreExtendedProcessorState | 6.1 and higher | documented |
KeRestoreFloatingPointState | 4.0 and higher | documented |
KeRevertToUserAffinityThread | 5.0 and higher | declared |
KeRevertToUserAffinityThreadEx | 6.0 and higher | documented |
KeRevertToUserGroupAffinityThread | 6.1 and higher | documented |
KeRundownQueue | 4.0 and higher | documented |
KeSaveExtendedProcessorState | 6.1 and higher | documented |
KeSaveFloatingPointState | 4.0 and higher | documented |
KeSaveStateForHibernate (data) | 5.0 and higher | |
KeServiceDescriptorTable (data) | 3.51 and higher (x86); 5.2 from Windows Server 2003 SP1 only (x64) |
|
KeSetActualBasePriorityThread | 6.0 and higher | |
KeSetAffinityThread | 4.0 and higher | |
KeSetBasePriorityThread | 3.51 and higher | documented |
KeSetCoalescableTimer | 6.1 and higher | documented |
KeSetDmaIoCoherency | 3.51 and higher | |
KeSetEvent | 3.51 and higher | documented |
KeSetEventBoostPriority | 3.51 and higher | |
KeSetHardwareCounterConfiguration | 6.1 and higher | documented |
KeSetHeteroCpuPolicyThread | 10.0 and higher | |
KeSetIdealProcessorThread | 4.0 and higher | reserved |
KeSetImportanceDpc | 3.51 and higher | documented |
KeSetKernelStackSwapEnable | 4.0 and higher | reserved |
KeSetPriorityThread | 3.51 and higher | documented |
KeSetProfileIrql | 4.0 and higher | |
KeSetSelectedCpuSetsThread | 10.0 and higher | |
KeSetSwapContextNotifyRoutine | 4.0 to 5.0 only | |
KeSetSystemAffinityThread | 5.0 and higher | documented |
KeSetSystemAffinityThreadEx | 6.0 and higher | documented |
KeSetSystemGroupAffinityThread | 6.1 and higher | documented |
KeSetTargetProcessorDpc | 3.51 and higher | documented |
KeSetTargetProcessorDpcEx | 6.1 and higher | documented |
KeSetThreadSelectNotifyRoutine | 4.0 to 5.0 only | |
KeSetTimeIncrement | 3.51 to 6.2 | |
KeSetTimeUpdateNotifyRoutine | 4.0 to 5.1 only | reserved |
KeSetTimer | 3.51 and higher | documented |
KeSetTimer2 | 10.0 and higher | |
KeSetTimerEx | 4.0 and higher | documented |
KeShouldYieldProcessor | 10.0 and higher | |
KeSignalCallDpcDone | 5.2 and higher | |
KeSignalCallDpcSynchronize | 5.2 and higher | |
KeStackAttachProcess | 5.0 and higher | documented |
KeStallWhileFrozen | 6.2 and higher | |
KeStartDynamicProcessor | 6.0 and higher | |
KeSubtractAffinityEx | 6.1 and higher | |
KeSweepLocalCaches | 6.2 and higher | |
KeSynchronizeExecution | 3.51 and higher | documented |
KeSynchronizeTimeToQpc | 10.0 and higher | |
KeSystemFullyCacheCoherent | 10.0 and higher | |
KeTerminateThread | 3.51 to 6.0 only | |
KeTestAlertThread | 6.0 from Windows Vista SP1, and higher | |
KeTestSpinLock | 5.2 and higher | documented |
KeTickCount (data) | 3.51 and higher (x86 only) | declared |
KeTryToAcquireGuardedMutex | 5.2 from Windows Server 2003 SP1, and higher | documented |
KeTryToAcquireQueuedSpinLock | 5.2 from Windows Server 2003 SP1, and higher (x64); 6.2 and higher (x86) |
reserved |
KeTryToAcquireQueuedSpinLockRaiseToSynch | 5.2 from Windows Server 2003 SP1, and higher (x64); 6.2 and higher (x86) |
|
KeTryToAcquireSpinLockAtDpcLevel | 5.2 from Windows Server 2003 SP1, and higher | documented |
KeUnstackDetachProcess | 5.0 and higher | documented |
KeUpdateRunTime | 3.51 to 6.2 | |
KeUpdateSystemTime | 3.51 to 6.1 | |
KeUpdateThreadTag | 10.0 and higher | |
KeUpdateTime | 6.2 only | |
KeUpdateTimeAssist | 6.2 only | |
KeUserModeCallback | 3.51 and higher | |
KeWaitForMultipleObjects | 3.51 and higher | documented |
KeWaitForMutexObject | 3.51 and higher | documented |
KeWaitForSingleObject | 3.51 and higher | documented |
KeWriteProtectPAT | 6.2 and higher | |
KefAcquireSpinLockAtDpcLevel | 3.51 and higher (x86 only) | declared |
KefReleaseSpinLockFromDpcLevel | 3.51 and higher (x86 only) | declared |
Kei386EoiHelper | 3.51 and higher (x86 only) | |
KfAcquireSpinLock | 6.2 and higher (x86 only) | |
KfRaiseIrql | 5.2 from Windows Server 2003 SP1, and higher (x64 only) | declared |
KfReleaseSpinLock | 6.2 and higher (x86 only) | |
KiAccumulateCycleStats | 10.0 and higher (x86 only) | |
KiAcquireSpinLock | 3.51 and higher (x86 only) | |
KiBeginThreadAccountingPeriod | 10.0 and higher (x86 only) | |
KiBugCheckData (data) | 4.0 and higher | |
KiCheckForKernelApcDelivery | 5.2 and higher | |
KiCheckForSListAddress | 5.2 from Windows Server 2003 SP2, and higher (x86 only) | |
KiCoprocessorError | 3.51 to 6.2 (x86 only) | |
KiCpuId | 5.2 from Windows Server 2003 SP1 to 6.2 (x64); 6.2 only (x86) |
|
KiDeliverApc | 3.51 and higher (x86 only) | |
KiDispatchInterrupt | 3.51 and higher (x86 only) | |
KiEnableTimerWatchdog | 5.0 to 5.2 only (x86 only) | |
KiEndThreadAccountingPeriod | 6.2 and higher (x86 only) | |
KiEntropyQueueDpc | 6.2 and higher (x86 only) | |
KiIpiSend | 3.51 only | |
KiIpiServiceRoutine | 3.51 and higher (x86 only) | |
KiReleaseSpinLock | 3.51 and higher (x86 only) | |
KiUnexpectedInterrupt | 3.51 and higher (x86 only) | |
Kii386SpinOnSpinLock | 3.51 to 6.0 only (x86 only) | |
KitLogFeatureUsage | 6.3 and higher | |
KseQueryDeviceData | 6.2 and higher | |
KseQueryDeviceDataList | 6.2 and higher | |
KseQueryDeviceFlags | 6.2 and higher | |
KseRegisterShim | 6.2 and higher | |
KseRegisterShimEx | 6.2 and higher | |
KseSetDeviceFlags | 6.2 and higher | |
KseUnregisterShim | 6.2 and higher | |
LdrAccessResource | 3.51 and higher | |
LdrEnumResources | 3.51 and higher | |
LdrFindResourceDirectory_U | 4.0 and higher | |
LdrFindResourceEx_U | 6.0 and higher | |
LdrFindResource_U | 3.51 and higher | |
LdrResFindResource | 6.0 and higher | |
LdrResFindResourceDirectory | 6.0 and higher | |
LdrResSearchResource | 6.0 and higher | |
LpcPortObjectType (data) | 5.0 and higher | |
LpcReplyWaitReplyPort | 6.0 and higher | |
LpcRequestPort | 3.51 and higher | |
LpcRequestWaitReplyPort | 5.0 and higher | |
LpcRequestWaitReplyPortEx | 6.0 and higher | |
LpcSendWaitReceivePort | 6.0 and higher | |
LsaCallAuthenticationPackage | 3.51 and higher | documented (SDK) |
LsaDeregisterLogonProcess | 3.51 and higher | documented (SDK) |
LsaFreeReturnBuffer | 3.51 and higher | documented (SDK) |
LsaLogonUser | 3.51 and higher | documented (SDK) |
LsaLookupAuthenticationPackage | 3.51 and higher | documented (SDK) |
LsaRegisterLogonProcess | 3.51 and higher | documented (SDK) |
Mm64BitPhysicalAddress (data) | 5.0 and higher | documented |
MmAddPhysicalMemory | 5.0 and higher | reserved |
MmAddVerifierSpecialThunks | 10.0 and higher | |
MmAddVerifierThunks | 5.1 and higher | reserved |
MmAdjustWorkingSetSize | 3.51 and higher | |
MmAdvanceMdl | 5.1 and higher | documented |
MmAllocateContiguousMemory | 3.51 and higher | documented |
MmAllocateContiguousMemorySpecifyCache | 5.0 and higher | documented |
MmAllocateContiguousMemorySpecifyCacheNode | 6.0 and higher | documented |
MmAllocateContiguousNodeMemory | 6.2 and higher | documented |
MmAllocateMappingAddress | 5.1 and higher | documented |
MmAllocateMdlForIoSpace | 6.2 and higher | documented |
MmAllocateNodePagesForMdlEx | 6.2 and higher | documented |
MmAllocateNonCachedMemory | 3.51 and higher | documented |
MmAllocatePagesForMdl | 5.0 and higher | documented |
MmAllocatePagesForMdlEx | 5.2 from Windows Server 2003 SP1, and higher | documented |
MmAreMdlPagesCached | 6.2 and higher | |
MmBadPointer (data) | 6.0 and higher | documented |
MmBuildMdlForNonPagedPool | 3.51 and higher | documented |
MmCanFileBeTruncated | 3.51 and higher | documented |
MmChangeImageProtection | 10.0 and higher | |
MmCommitSessionMappedView | 5.1 from Windows XP SP2, and higher | |
MmCopyMemory | 6.3 and higher | documented |
MmCopyVirtualMemory | 6.0 and higher | |
MmCreateMdl | 3.51 and higher | obsolete |
MmCreateMirror | 5.2 and higher | reserved |
MmCreateSection | 3.51 and higher | |
MmDbgTranslatePhysicalAddress | 3.51 to 4.0 only | |
MmDisableModifiedWriteOfSection | 3.51 and higher | |
MmDoesFileHaveUserWritableReferences | 5.2 from Windows Server 2003 SP2, and higher | documented |
MmFlushImageSection | 3.51 and higher | documented |
MmForceSectionClosed | 3.51 and higher | documented |
MmFreeContiguousMemory | 3.51 and higher | documented |
MmFreeContiguousMemorySpecifyCache | 5.0 and higher | documented |
MmFreeMappingAddress | 5.1 and higher | documented |
MmFreeNonCachedMemory | 3.51 and higher | documented |
MmFreePagesFromMdl | 5.0 and higher | documented |
MmGetCacheAttribute | 6.3 and higher | |
MmGetMaximumFileSectionSize | 6.2 and higher | documented |
MmGetPhysicalAddress | 3.51 and higher | documented |
MmGetPhysicalMemoryRanges | 5.0 and higher | reserved |
MmGetSystemRoutineAddress | 5.0 and higher | documented |
MmGetVirtualForPhysical | 5.0 and higher | reserved |
MmGrowKernelStack | 4.0 and higher | |
MmHighestUserAddress (data) | 4.0 from Windows NT 4.0 SP3, and higher | declared |
MmIsAddressValid | 3.51 and higher | documented |
MmIsDriverSuspectForVerifier | 6.2 and higher | documented |
MmIsDriverVerifying | 5.0 and higher | documented |
MmIsDriverVerifyingByAddress | 6.0 and higher | documented |
MmIsIoSpaceActive | 5.2 and higher | reserved |
MmIsNonPagedSystemAddressValid | 3.51 and higher | obsolete |
MmIsRecursiveIoFault | 3.51 and higher | documented |
MmIsThisAnNtAsSystem | 3.51 and higher | documented |
MmIsVerifierEnabled | 5.1 and higher | reserved |
MmLoadSystemImage | 10.0 and higher | |
MmLockPagableDataSection | 3.51 and higher | documented |
MmLockPagableImageSection | 3.51 and higher | |
MmLockPagableSectionByHandle | 3.51 and higher | documented |
MmMapIoSpace | 3.51 and higher | documented |
MmMapIoSpaceEx | 10.0 and higher | documented |
MmMapLockedPages | 3.51 and higher | documented |
MmMapLockedPagesSpecifyCache | 4.0 from Windows NT 4.0 SP4, and higher | documented |
MmMapLockedPagesWithReservedMapping | 5.1 and higher | documented |
MmMapMemoryDumpMdl | 3.51 and higher | |
MmMapUserAddressesToPage | 5.0 and higher | reserved |
MmMapVideoDisplay | 4.0 and higher | reserved |
MmMapViewInSessionSpace | 5.0 and higher | reserved |
MmMapViewInSessionSpaceEx | 6.2 and higher | |
MmMapViewInSystemSpace | 3.51 and higher | reserved |
MmMapViewInSystemSpaceEx | 6.2 and higher | |
MmMapViewOfSection | 3.51 and higher | |
MmMarkPhysicalMemoryAsBad | 5.1 and higher | reserved |
MmMarkPhysicalMemoryAsGood | 5.1 and higher | reserved |
MmMdlPageContentsState | 6.2 and higher | |
MmMdlPagesAreZero | 6.3 and higher | |
MmPageEntireDriver | 3.51 and higher | documented |
MmPrefetchPages | 5.1 and higher | documented |
MmPrefetchVirtualAddresses | 6.2 and higher | |
MmProbeAndLockPages | 3.51 and higher | documented |
MmProbeAndLockProcessPages | 5.0 and higher | reserved |
MmProbeAndLockSelectedPages | 5.0 and higher | |
MmProtectMdlSystemAddress | 5.1 and higher | documented |
MmQuerySystemSize | 3.51 and higher | documented |
MmRemovePhysicalMemory | 5.0 and higher | reserved |
MmResetDriverPaging | 3.51 and higher | documented |
MmRotatePhysicalView | 6.0 and higher | reserved |
MmSectionObjectType (data) | 3.51 and higher | |
MmSecureVirtualMemory | 3.51 and higher | documented |
MmSetAddressRangeModified | 3.51 and higher | documented |
MmSetBankedSection | 3.51 and higher | |
MmSetUserExceptionCallout | 6.0 only | |
MmSizeOfMdl | 3.51 and higher | documented |
MmSystemRangeStart (data) | 4.0 from Windows NT 4.0 SP3, and higher | declared |
MmTrimAllSystemPagableMemory | 5.0 and higher | |
MmUnloadSystemImage | 10.0 and higher | |
MmUnlockPagableImageSection | 3.51 and higher | documented |
MmUnlockPages | 3.51 and higher | documented |
MmUnmapIoSpace | 3.51 and higher | documented |
MmUnmapLockedPages | 3.51 and higher | documented |
MmUnmapReservedMapping | 5.1 and higher | documented |
MmUnmapVideoDisplay | 4.0 and higher | reserved |
MmUnmapViewInSessionSpace | 5.0 and higher | reserved |
MmUnmapViewInSystemSpace | 3.51 and higher | reserved |
MmUnmapViewOfSection | 3.51 and higher | |
MmUnsecureVirtualMemory | 3.51 and higher | documented |
MmUserProbeAddress (data) | 4.0 from Windows NT 4.0 SP3, and higher | declared |
NlsAnsiCodePage (data) | 4.0 and higher | |
NlsLeadByteInfo (data) | 3.51 and higher | |
NlsMbCodePageTag (data) | 3.51 and higher | documented (macro) |
NlsMbOemCodePageTag (data) | 3.51 and higher | declared |
NlsOemCodePage (data) | 5.0 and higher | |
NlsOemLeadByteInfo (data) | 3.51 and higher | declared |
NtAddAtom | 4.0 and higher | |
NtAdjustPrivilegesToken | 3.51 and higher | declared |
NtAllocateLocallyUniqueId | 3.51 and higher | documented |
NtAllocateUuids | 3.51 and higher | |
NtAllocateVirtualMemory | 3.51 and higher | documented |
NtBuildGUID (data) | 6.0 and higher | |
NtBuildLab (data) | 6.0 and higher | |
NtBuildNumber (data) | 3.51 and higher | |
NtClearAllSavepointsTransaction | 6.0 from before Windows Vista SP1 | |
NtClearSavepointTransaction | 6.0 from before Windows Vista SP1 | |
NtClose | 3.51 and higher | documented |
NtCommitComplete | 6.0 and higher | documented |
NtCommitEnlistment | 6.0 and higher | documented |
NtCommitTransaction | 6.0 and higher | documented |
NtConnectPort | 3.51 and higher | |
NtCreateEnlistment | 6.0 and higher | documented |
NtCreateEvent | 3.51 and higher | documented |
NtCreateFile | 3.51 and higher | documented |
NtCreateResourceManager | 6.0 and higher | documented |
NtCreateSection | 3.51 and higher | documented |
NtCreateTransaction | 6.0 and higher | documented |
NtCreateTransactionManager | 6.1 and higher | documented |
NtDeleteAtom | 4.0 and higher | |
NtDeleteFile | 3.51 and higher | documented |
NtDeviceIoControlFile | 3.51 and higher | documented |
NtDuplicateObject | 3.51 and higher | reserved |
NtDuplicateToken | 3.51 and higher | documented |
NtEnumerateTransactionObject | 6.0 and higher | documented |
NtFindAtom | 4.0 and higher | |
NtFreeVirtualMemory | 3.51 and higher | documented |
NtFreezeTransactions | 6.0 and higher | |
NtFsControlFile | 3.51 and higher | documented |
NtGetEnvironmentVariableEx | 6.0 from Windows Vista SP1, and higher | |
NtGetNotificationResourceManager | 6.0 and higher | documented |
NtGlobalFlag (data) | 3.51 and higher | declared |
NtLockFile | 3.51 and higher | documented |
NtMakePermanentObject | 5.1 and higher | |
NtMapViewOfSection | 3.51 and higher | documented |
NtMarshallTransaction | 6.0 from before Windows Vista SP1 | |
NtNotifyChangeDirectoryFile | 3.51 and higher | |
NtOpenEnlistment | 6.0 and higher | documented |
NtOpenFile | 3.51 and higher | documented |
NtOpenProcess | 3.51 and higher | documented |
NtOpenProcessToken | 3.51 and higher | declared |
NtOpenProcessTokenEx | 5.1 and higher | documented |
NtOpenResourceManager | 6.0 and higher | documented |
NtOpenThread | 5.1 and higher | |
NtOpenThreadToken | 5.1 and higher | declared |
NtOpenThreadTokenEx | 5.1 and higher | documented |
NtOpenTransaction | 6.0 and higher | documented |
NtOpenTransactionManager | 6.1 and higher | documented |
NtPrePrepareComplete | 6.1 and higher | documented |
NtPrePrepareEnlistment | 6.0 and higher | documented |
NtPrepareComplete | 6.0 and higher | documented |
NtPrepareEnlistment | 6.0 and higher | documented |
NtPropagationComplete | 6.1 and higher | declared |
NtPropagationFailed | 6.1 and higher | declared |
NtPullTransaction | 6.0 from before Windows Vista SP1 | |
NtQueryDirectoryFile | 3.51 and higher | documented |
NtQueryEaFile | 3.51 and higher | |
NtQueryEnvironmentVariableInfoEx | 6.0 from Windows Vista SP1, and higher | |
NtQueryInformationAtom | 4.0 and higher | |
NtQueryInformationEnlistment | 6.0 and higher | documented |
NtQueryInformationFile | 3.51 and higher | documented |
NtQueryInformationProcess | 3.51 and higher | declared |
NtQueryInformationResourceManager | 6.0 and higher | documented |
NtQueryInformationThread | 5.1 and higher | |
NtQueryInformationToken | 3.51 and higher | documented |
NtQueryInformationTransaction | 6.0 and higher | documented |
NtQueryInformationTransactionManager | 6.0 and higher | documented |
NtQueryOleDirectoryFile | 4.0 only | |
NtQueryQuotaInformationFile | 5.0 and higher | documented |
NtQuerySecurityAttributesToken | 6.1 and higher | |
NtQuerySecurityObject | 3.51 and higher | documented |
NtQuerySystemInformation | 5.0 and higher | |
NtQuerySystemInformationEx | 6.1 and higher | |
NtQueryVolumeInformationFile | 3.51 and higher | documented |
NtReadFile | 3.51 and higher | documented |
NtReadOnlyEnlistment | 6.1 and higher | documented |
NtRecoverEnlistment | 6.1 and higher | documented |
NtRecoverResourceManager | 6.1 and higher | documented |
NtRecoverTransactionManager | 6.1 and higher | documented |
NtRequestPort | 3.51 and higher | |
NtRequestWaitReplyPort | 3.51 and higher | |
NtRollbackComplete | 6.1 and higher | documented |
NtRollbackEnlistment | 6.0 and higher | documented |
NtRollbackTransaction | 6.0 and higher | documented |
NtSavepointComplete | 6.0 from before Windows Vista SP1 | |
NtSavepointTransaction | 6.0 from before Windows Vista SP1 | |
NtSetCachedSigningLevel | 6.2 and higher | |
NtSetEaFile | 5.0 and higher | |
NtSetEvent | 3.51 and higher | documented |
NtSetInformationEnlistment | 6.0 and higher | documented |
NtSetInformationFile | 3.51 and higher | documented |
NtSetInformationProcess | 3.51 and higher | |
NtSetInformationResourceManager | 6.0 and higher | documented |
NtSetInformationThread | 3.51 and higher | documented |
NtSetInformationToken | 6.1 and higher | documented |
NtSetInformationTransaction | 6.0 and higher | documented |
NtSetInformationVirtualMemory | 6.2 and higher | |
NtSetQuotaInformationFile | 5.0 and higher | documented |
NtSetSecurityObject | 3.51 and higher | documented |
NtSetVolumeInformationFile | 5.0 and higher | documented |
NtShutdownSystem | 5.1 and higher | |
NtStartTm | 6.0 from before Windows Vista SP1 | |
NtThawTransactions | 6.0 and higher | |
NtTraceControl | 6.0 and higher | |
NtTraceEvent | 5.1 and higher | |
NtUnlockFile | 3.51 and higher | documented |
NtVdmControl | 3.51 and higher | |
NtWaitForSingleObject | 3.51 and higher | documented |
NtWriteFile | 3.51 and higher | documented |
ObAssignSecurity | 4.0 and higher | |
ObCheckCreateObjectAccess | 4.0 and higher | |
ObCheckObjectAccess | 4.0 and higher | |
ObCloseHandle | 5.1 and higher | |
ObCreateObject | 3.51 and higher | |
ObCreateObjectType | 5.1 and higher | |
ObDeleteCapturedInsertInfo | 5.0 from Windows 2000 SP4 only, and 5.2 and higher | |
ObDereferenceObject | 3.51 and higher | documented |
ObDereferenceObjectDeferDelete | 6.0 and higher | documented |
ObDereferenceObjectDeferDeleteWithTag | 6.1 and higher | documented |
ObDereferenceSecurityDescriptor | 5.1 and higher | |
ObDuplicateObject | 6.2 and higher | |
ObFindHandleForObject | 4.0 and higher | |
ObGetFilterVersion | 6.0 from Windows Vista SP1, and higher | declared |
ObGetObjectPointerCount | 3.51 to 5.0 only | |
ObGetObjectSecurity | 4.0 and higher | documented |
ObGetObjectType | 6.1 and higher | |
ObInsertObject | 3.51 and higher | reserved |
ObIsDosDeviceLocallyMapped | 5.1 from Windows XP SP3, 6.0 and higher |
|
ObIsKernelHandle | 6.0 and higher | documented |
ObLogSecurityDescriptor | 5.1 and higher | |
ObMakeTemporaryObject | 3.51 and higher | reserved |
ObOpenObjectByName | 4.0 and higher | |
ObOpenObjectByPointer | 3.51 and higher | documented |
ObOpenObjectByPointerWithTag | 6.1 and higher | declared |
ObQueryNameInfo | 6.1 and higher | |
ObQueryNameString | 3.51 and higher | documented |
ObQueryObjectAuditingByHandle | 4.0 and higher | reserved |
ObReferenceObjectByHandle | 3.51 and higher | documented |
ObReferenceObjectByHandleWithTag | 6.1 and higher | documented |
ObReferenceObjectByName | 4.0 and higher | |
ObReferenceObjectByPointer | 3.51 and higher | documented |
ObReferenceObjectByPointerWithTag | 6.1 and higher | documented |
ObReferenceObjectSafe | 6.2 and higher | |
ObReferenceObjectSafeWithTag | 6.2 and higher | |
ObReferenceSecurityDescriptor | 5.1 and higher | |
ObRegisterCallbacks | 6.0 from Windows Vista SP1, and higher | documented |
ObReleaseObjectSecurity | 4.0 and higher | documented |
ObSetHandleAttributes | 5.1 and higher | |
ObSetSecurityDescriptorInfo | 4.0 and higher | |
ObSetSecurityObjectByPointer | 5.1 and higher | |
ObUnRegisterCallbacks | 6.0 from Windows Vista SP1, and higher | documented |
ObWaitForMultipleObjects | 6.2 and higher | |
ObWaitForSingleObject | 6.2 and higher | |
ObfDereferenceObject | 3.51 and higher | declared |
ObfDereferenceObjectWithTag | 6.1 and higher | declared |
ObfReferenceObject | 4.0 and higher | declared |
ObfReferenceObjectWithTag | 6.1 and higher | declared |
POGOBuffer (data) | 6.0 and higher | |
PcwAddInstance | 6.1 and higher | documented |
PcwCloseInstance | 6.1 and higher | documented |
PcwCreateInstance | 6.1 and higher | documented |
PcwRegister | 6.1 and higher | documented |
PcwUnregister | 6.1 and higher | documented |
PfFileInfoNotify | 6.0 and higher | |
PfxFindPrefix | 3.51 and higher | declared |
PfxInitialize | 3.51 and higher | declared |
PfxInsertPrefix | 3.51 and higher | declared |
PfxRemovePrefix | 3.51 and higher | declared |
PoAllProcessorsDeepIdle | 6.2 only | |
PoCallDriver | 5.0 and higher | documented |
PoCancelDeviceNotify | 5.0 and higher | |
PoClearPowerRequest | 6.1 and higher | documented |
PoCpuIdledSinceLastCallImprecise | 10.0 and higher | |
PoCreatePowerRequest | 6.1 and higher | documented |
PoCreateThermalRequest | 10.0 and higher | |
PoDeletePowerRequest | 6.1 and higher | documented |
PoDeleteThermalRequest | 10.0 and higher | |
PoDisableSleepStates | 6.0 and higher | |
PoEndDeviceBusy | 6.1 and higher | documented |
PoEnergyEstimationEnabled | 10.0 and higher | |
PoFxCompleteDevicePowerNotRequired | 6.2 and higher | documented |
PoFxCompleteIdleCondition | 6.2 and higher | documented |
PoFxCompleteIdleState | 6.2 and higher | documented |
PoFxEnableDStateReporting | 10.0 and higher | |
PoFxIdleComponent | 6.2 and higher | documented |
PoFxIssueComponentPerfStateChange | 10.0 and higher | documented |
PoFxIssueComponentPerfStateChangeMultiple | 10.0 and higher | documented |
PoFxNotifySurprisePowerOn | 6.2 and higher | documented |
PoFxPowerControl | 6.2 and higher | documented |
PoFxPowerOnCrashdumpDevice | 6.3 and higher | documented |
PoFxProcessorNotification | 6.2 and higher | |
PoFxQueryCurrentComponentPerfState | 10.0 and higher | documented |
PoFxRegisterComponentPerfStates | 10.0 and higher | documented |
PoFxRegisterCoreDevice | 6.2 and higher | documented |
PoFxRegisterCrashdumpDevice | 6.3 and higher | documented |
PoFxRegisterDevice | 6.2 and higher | documented |
PoFxRegisterPlugin | 6.2 and higher | documented |
PoFxRegisterPluginEx | 6.2 and higher | documented |
PoFxRegisterPrimaryDevice | 6.2 and higher | |
PoFxReportDevicePoweredOn | 6.2 and higher | documented |
PoFxSetComponentLatency | 6.2 and higher | documented |
PoFxSetComponentResidency | 6.2 and higher | documented |
PoFxSetComponentWake | 6.2 and higher | documented |
PoFxSetDeviceIdleTimeout | 6.2 and higher | documented |
PoFxStartDevicePowerManagement | 6.2 and higher | documented |
PoFxUnregisterDevice | 6.2 and higher | documented |
PoGetProcessorIdleAccounting | 6.2 and higher | |
PoGetSystemWake | 6.0 and higher | documented |
PoGetThermalRequestSupport | 10.0 and higher | |
PoInitiateProcessorWake | 6.2 and higher | |
PoLatencySensitivityHint | 6.2 and higher | |
PoNotifyDisableDynamicTick | 6.2 only | |
PoNotifyMediaBuffering | 10.0 and higher | |
PoNotifyVSyncChange | 6.2 and higher | |
PoQueryWatchdogTime | 6.1 and higher | documented |
PoQueryPowerSequence | 3.51 to 4.0 only | |
PoQueueShutdownWorkItem | 5.1 and higher | declared |
PoReenableSleepStates | 6.0 and higher | |
PoRegisterCoalescingCallback | 6.2 and higher | |
PoRegisterDeviceForIdleDetection | 3.51, and 5.0 and higher | documented |
PoRegisterDeviceNotify | 5.0 and higher | |
PoRegisterPowerSettingCallback | 6.0 and higher | documented |
PoRegisterSystemState | 5.0 and higher | documented |
PoRequestPowerChange | 3.51 to 4.0 only | |
PoRequestPowerIrp | 5.0 and higher | documented |
PoRequestShutdownEvent | 5.1 and higher | |
PoSetDeviceBusyEx | 6.0 from Windows Vista SP1, and higher | documented |
PoSetDeviceIdleDetection | 4.0 only | |
PoSetFixedWakeSource | 6.0 and higher | |
PoSetHiberRange | 5.0 and higher | |
PoSetPowerRequest | 6.1 and higher | documented |
PoSetPowerState | 5.0 and higher | documented |
PoSetSystemState | 5.0 and higher | documented |
PoSetSystemWake | 6.0 and higher | documented |
PoSetThermalActiveCooling | 10.0 and higher | |
PoSetThermalPassiveCooling | 10.0 and higher | |
PoSetUserPresent | 6.2 and higher | |
PoShutdownBugCheck | 5.0 and higher | |
PoStartDeviceBusy | 6.1 and higher | documented |
PoStartNextPowerIrp | 5.0 and higher | documented |
PoUnregisterCoalescingCallback | 6.2 and higher | |
PoUnregisterPowerSettingCallback | 6.0 and higher | documented |
PoUnregisterSystemState | 5.0 and higher | documented |
PoUserShutdownCancelled | 6.2 and higher | |
PoUserShutdownInitiated | 6.0 and higher | |
ProbeForRead | 5.0 and higher | documented |
ProbeForWrite | 3.51 and higher | documented |
PsAcquireProcessExitSynchronization | 6.0 and higher | |
PsAllocateMonitorContextServerSilo | 10.0 and higher | |
PsAssignImpersonationToken | 4.0 and higher | declared |
PsAttachSiloToCurrentThread | 10.0 and higher | |
PsCaptureUserProcessParameters (1) | 6.2 and higher | |
PsChargePoolQuota | 3.51 and higher | documented |
PsChargeProcessCpuCycles | 6.0 only (x64); 6.0 and 6.1 only (x86) |
|
PsChargeProcessNonPagedPoolQuota | 5.1 and higher | |
PsChargeProcessPagedPoolQuota | 5.1 and higher | |
PsChargeProcessPoolQuota | 5.1 and higher | declared |
PsChargeProcessWakeCounter | 6.2 and higher | |
PsCreateSystemProcess | 3.51 to 5.2 only | |
PsCreateSystemThread | 3.51 and higher | documented |
PsCreateSystemThreadEx | 6.2 and higher | documented |
PsCreateWin32Process | 4.0 only | |
PsDeleteMonitorContextServerSilo | 10.0 and higher | |
PsDereferenceImpersonationToken | 5.1 and higher | documented |
PsDereferenceKernelStack | 6.2 and higher | |
PsDereferenceMonitorContextServerSilo | 10.0 and higher | |
PsDereferencePrimaryToken | 5.1 and higher | documented |
PsDetachSiloFromCurrentThread | 10.0 and higher | |
PsDisableImpersonation | 5.0 and higher | declared |
PsEnterPriorityRegion | 6.0 and higher | |
PsEqualCurrentSilo | 10.0 and higher | |
PsEstablishWin32Callouts | 3.51 and higher | |
PsGetContextThread | 5.1 from Windows XP SP1, and higher | |
PsGetCurrentProcess | 5.1 and higher | documented |
PsGetCurrentProcessId | 4.0 and higher | documented |
PsGetCurrentProcessSessionId | 5.1 and higher | |
PsGetCurrentProcessWin32Process | 5.2 from Windows Server 2003 SP1, and higher | |
PsGetCurrentProcessWow64Process | 5.2 from Windows Server 2003 SP1, and higher (x64 only) | |
PsGetCurrentSilo | 10.0 and higher | |
PsGetCurrentThread | 5.1 and higher | documented |
PsGetCurrentThreadId | 4.0 and higher | documented |
PsGetCurrentThreadPreviousMode | 5.1 and higher | |
PsGetCurrentThreadProcess | 5.2 from Windows Server 2003 SP1, and higher | |
PsGetCurrentThreadProcessId | 5.2 from Windows Server 2003 SP1, and higher | |
PsGetCurrentThreadStackBase | 5.1 and higher | |
PsGetCurrentThreadStackLimit | 5.1 and higher | |
PsGetCurrentThreadTeb | 5.2 from Windows Server 2003 SP1, and higher | |
PsGetCurrentThreadWin32Thread | 5.2 from Windows Server 2003 SP1, and higher | |
PsGetCurrentThreadWin32ThreadAndEnterCriticalRegion | 5.2 from Windows Server 2003 SP1, and higher | |
PsGetEffectiveContainerId | 10.0 and higher | |
PsGetJobLock | 5.1 and higher | |
PsGetJobProperty | 10.0 and higher | |
PsGetJobSessionId | 5.1 and higher | |
PsGetJobUIRestrictionsClass | 5.1 and higher | |
PsGetMonitorContextServerSilo | 10.0 and higher | |
PsGetProcessCommonJob | 6.2 and higher | |
PsGetProcessCreateTimeQuadPart | 5.1 and higher | documented |
PsGetProcessDebugPort | 5.1 and higher | |
PsGetProcessExitProcessCalled | 5.1 and higher | |
PsGetProcessExitStatus | 5.1 and higher | |
PsGetProcessExitTime | 3.51 and higher | documented |
PsGetProcessId | 5.1 and higher | documented |
PsGetProcessImageFileName | 5.1 and higher | |
PsGetProcessInheritedFromUniqueProcessId | 5.1 and higher | |
PsGetProcessJob | 5.1 and higher | |
PsGetProcessPeb | 5.1 and higher | |
PsGetProcessPriorityClass | 5.1 and higher | |
PsGetProcessProtection | 6.3 and higher | |
PsGetProcessSectionBaseAddress | 5.1 and higher | |
PsGetProcessSecurityPort | 5.1 and higher | |
PsGetProcessSessionId | 5.1 and higher | |
PsGetProcessSessionIdEx | 5.2 and higher | |
PsGetProcessSignatureLevel | 6.2 and higher | |
PsGetProcessWin32Process | 5.1 and higher | |
PsGetProcessWin32WindowStation | 5.1 and higher | |
PsGetProcessWow64Process | 5.2 from Windows Server 2003 SP1, and higher (x64 only) | |
PsGetServerSiloDefaultCompartmentId | 10.0 and higher | |
PsGetServerSiloServiceSessionId | 10.0 and higher | |
PsGetSiloObject | 10.0 and higher | |
PsGetSiloObjectFromJob | 10.0 and higher | |
PsGetThreadCreateTime | 10.0 and higher | |
PsGetThreadExitStatus | 6.2 and higher | |
PsGetThreadFreezeCount | 5.1 and higher | |
PsGetThreadHardErrorsAreDisabled | 5.1 and higher | |
PsGetThreadId | 5.1 and higher | declared |
PsGetThreadProcess | 5.1 and higher | |
PsGetThreadProcessId | 5.1 and higher | declared |
PsGetThreadProperty | 10.0 and higher | |
PsGetThreadSessionId | 5.1 and higher | |
PsGetThreadTeb | 5.1 and higher | |
PsGetThreadWin32Thread | 5.1 and higher | |
PsGetVersion | 4.0 and higher | documented |
PsImpersonateClient | 4.0 and higher | documented |
PsInitialSystemProcess (data) | 3.51 and higher | documented |
PsInsertSiloObject | 10.0 and higher | |
PsInsertSiloObjectFromJob | 10.0 and higher | |
PsIsCurrentThreadPrefetching | 6.0 and higher | declared |
PsIsDiskCountersEnabled | 6.2 and higher | documented |
PsIsDpcActive | 10.0 and higher | |
PsIsHostSilo | 10.0 and higher | |
PsIsProcessBeingDebugged | 5.1 and higher | |
PsIsProcessInAppSilo | 10.0 and higher | |
PsIsProtectedProcess | 6.0 and higher | |
PsIsProtectedProcessLight | 6.3 and higher | |
PsIsSystemProcess | 5.2 from Windows Server 2003 SP1, and higher | |
PsIsSystemThread | 5.1 and higher | documented |
PsIsThreadImpersonating | 5.1 and higher | |
PsIsThreadTerminating | 3.51 and higher | documented |
PsJobType (data) | 5.0 and higher | |
PsLeavePriorityRegion | 6.0 and higher | |
PsLoadedModuleList (data) | 10.0 and higher | |
PsLoadedModuleResource (data) | 10.0 and higher | |
PsLookupProcessByProcessId | 3.51 and higher | documented |
PsLookupProcessThreadByCid | 3.51 and higher | |
PsLookupThreadByThreadId | 3.51 and higher | documented |
PsProcessType (data) | 3.51 and higher | declared |
PsQueryProcessAttributesByToken | 6.2 and higher | |
PsQueryProcessExceptionFlags | 6.0 from Windows Vista SP1, and higher | |
PsQueryTotalCycleTimeProcess | 6.2 and higher | documented |
PsReferenceImpersonationToken | 3.51 and higher | documented |
PsReferenceKernelStack | 6.2 and higher | |
PsReferenceMonitorContextServerSilo | 10.0 and higher | |
PsReferencePrimaryToken | 3.51 and higher | documented |
PsReferenceProcessFilePointer | 6.0 and higher | |
PsRegisterMonitorServerSilo | 10.0 and higher | |
PsRegisterPicoProvider | 10.0 and higher | |
PsReleaseProcessExitSynchronization | 6.0 and higher | |
PsReleaseProcessWakeCounter | 6.2 and higher | |
PsRemoveCreateThreadNotifyRoutine | 5.1 and higher | documented |
PsRemoveLoadImageNotifyRoutine | 5.1 and higher | documented |
PsRemoveSiloObject | 10.0 and higher | |
PsRemoveSiloObjectFromJob | 10.0 and higher | |
PsRestoreImpersonation | 5.0 and higher | declared |
PsResumeProcess | 6.0 and higher | |
PsReturnPoolQuota | 3.51 and higher | documented |
PsReturnProcessNonPagedPoolQuota | 5.1 and higher | |
PsReturnProcessPagedPoolQuota | 5.1 and higher | |
PsRevertThreadToSelf | 5.1 and higher | |
PsRevertToSelf | 4.0 and higher | documented |
PsSetContextThread | 5.1 from Windows XP SP1, and higher | |
PsSetCreateProcessNotifyRoutine | 3.51 and higher | documented |
PsSetCreateProcessNotifyRoutineEx | 6.0 from Windows Vista SP1, and higher | documented |
PsSetCreateThreadNotifyRoutine | 4.0 and higher | documented |
PsSetCreateThreadNotifyRoutineEx | 10.0 and higher | documented |
PsSetCurrentThreadPrefetching | 6.0 and higher | declared |
PsSetJobProperty | 10.0 and higher | |
PsSetJobUIRestrictionsClass | 5.1 to 6.1 | |
PsSetLegoNotifyRoutine | 4.0 and higher | |
PsSetLoadImageNotifyRoutine | 5.0 and higher | documented |
PsSetMonitorContextServerSilo | 10.0 and higher | |
PsSetNewKSecDD | 5.0 from Windows 2000 SP4 only | |
PsSetProcessPriorityByClass | 3.51 and higher | |
PsSetProcessPriorityClass | 5.1 and higher | |
PsSetProcessSecurityPort | 5.1 and higher | |
PsSetProcessWin32Process | 5.1 and higher | |
PsSetProcessWindowStation | 5.1 and higher | |
PsSetThreadHardErrorsAreDisabled | 5.1 and higher | |
PsSetThreadProperty | 10.0 and higher | |
PsSetThreadWin32Thread | 5.1 and higher | |
PsStartMonitorServerSilo | 10.0 and higher | |
PsSuspendProcess | 6.0 and higher | |
PsTerminateSystemThread | 3.51 and higher | documented |
PsThreadType (data) | 3.51 and higher | declared |
PsUILanguageComitted (data) | 6.0 and higher | |
PsUnregisterMonitorServerSilo | 10.0 and higher | |
PsUpdateComponentPower | 10.0 and higher | |
PsUpdateDiskCounters | 6.2 and higher | documented |
PsWrapApcWow64Thread | 5.2 from Windows Server 2003 SP1, and higher | declared |
PspDereferenceSiloObject | 10.0 and higher | |
PspReferenceSiloObject | 10.0 and higher | |
READ_REGISTER_BUFFER_UCHAR | 3.51 and higher (x86 only) | documented |
READ_REGISTER_BUFFER_ULONG | 3.51 and higher (x86 only) | documented |
READ_REGISTER_BUFFER_USHORT | 3.51 and higher (x86 only) | documented |
READ_REGISTER_UCHAR | 3.51 and higher (x86 only) | documented |
READ_REGISTER_ULONG | 3.51 and higher (x86 only) | documented |
READ_REGISTER_USHORT | 3.51 and higher (x86 only) | documented |
RtlAbsoluteToSelfRelativeSD | 3.51 and higher | documented |
RtlAddAccessAllowedAce | 3.51 and higher | documented |
RtlAddAccessAllowedAceEx | 5.1 from Windows XP SP2, and higher | documented |
RtlAddAccessAllowedObjectAce | 10.0 and higher | |
RtlAddAccessDeniedAceEx | 10.0 and higher | |
RtlAddAccessDeniedObjectAce | 10.0 and higher | |
RtlAddAce | 3.51 and higher | documented |
RtlAddAtomToAtomTable | 4.0 and higher | |
RtlAddAtomToAtomTableEx | 6.2 and higher | |
RtlAddAuditAccessAceEx | 10.0 and higher | |
RtlAddAuditAccessObjectAce | 10.0 and higher | |
RtlAddProcessTrustLabelAce | 10.0 and higher | |
RtlAddRange | 5.0 and higher | |
RtlAddResourceAttributeAce | 6.2 and higher | |
RtlAllocateAndInitializeSid | 3.51 to 4.0 only | reserved |
RtlAllocateHeap | 3.51 and higher | documented |
RtlAnsiCharToUnicodeChar | 4.0 and higher | documented |
RtlAnsiStringToUnicodeSize | 3.51 and higher | documented |
RtlAnsiStringToUnicodeString | 3.51 and higher | documented |
RtlAppendAsciizToString | 3.51 and higher | |
RtlAppendStringToString | 3.51 and higher | documented |
RtlAppendUnicodeStringToString | 3.51 and higher | documented |
RtlAppendUnicodeToString | 3.51 and higher | documented |
RtlAreAllAccessesGranted | 3.51 and higher | |
RtlAreAnyAccessesGranted | 4.0 and higher | |
RtlAreBitsClear | 3.51 and higher | documented |
RtlAreBitsClearEx | 10.0 and higher (x64 only) | |
RtlAreBitsSet | 3.51 and higher | documented |
RtlAreBitsSetEx | 10.0 and higher (x64 only) | |
RtlAssert | 3.51 and higher | reserved |
RtlAvlInsertNodeEx | 6.3 and higher | |
RtlAvlRemoveNode | 6.3 and higher | |
RtlCapabilityCheck | 10.0 and higher | |
RtlCaptureContext | 5.0 and higher | documented |
RtlCaptureStackBackTrace | 3.51 and higher | documented |
RtlCharToInteger | 3.51 and higher | documented |
RtlCheckPortableOperatingSystem | 6.2 and higher | |
RtlCheckRegistryKey | 3.51 and higher | documented |
RtlCheckTokenCapability | 6.2 and higher | |
RtlCheckTokenMembership | 6.2 and higher | |
RtlCheckTokenMembershipEx | 6.2 and higher | |
RtlClearAllBits | 3.51 and higher | documented |
RtlClearAllBitsEx | 10.0 and higher (x64 only) | |
RtlClearBit | 5.1 and higher | documented |
RtlClearBitEx | 10.0 and higher (x64 only) | |
RtlClearBits | 3.51 and higher | documented |
RtlClearBitsEx | 10.0 and higher (x64 only) | |
RtlCmDecodeMemIoResource | 6.0 and higher | documented |
RtlCmEncodeMemIoResource | 6.0 and higher | documented |
RtlCompareAltitudes | 6.0 and higher | declared |
RtlCompareMemory | 3.51 and higher | documented |
RtlCompareMemoryUlong | 3.51 and higher | documented |
RtlCompareString | 3.51 and higher | documented |
RtlCompareUnicodeString | 3.51 and higher | documented |
RtlCompareUnicodeStrings | 6.1 and higher | |
RtlCompressBuffer | 3.51 and higher | documented |
RtlCompressChunks | 4.0 and higher | reserved |
RtlComputeCrc32 | 6.0 and higher | |
RtlContractHashTable | 6.1 and higher | declared |
RtlConvertLongToLargeInteger | 3.51 and higher (x86 only) | documented |
RtlConvertSidToUnicodeString | 3.51 and higher | documented |
RtlConvertUlongToLargeInteger | 3.51 and higher (x86 only) | documented |
RtlCopyBitMap | 6.2 and higher | |
RtlCopyLuid | 3.51 and higher | documented |
RtlCopyLuidAndAttributesArray | 6.0 and higher | |
RtlCopyMemory | 5.2 from Windows Server 2003 SP1, and higher (x64 only) | documented |
RtlCopyMemoryNonTemporal | 5.2 from Windows Server 2003 SP1, and higher (x64 only) | declared |
RtlCopyRangeList | 5.0 and higher | |
RtlCopySid | 3.51 and higher | documented |
RtlCopySidAndAttributesArray | 6.0 and higher | |
RtlCopyString | 3.51 and higher | documented |
RtlCopyUnicodeString | 3.51 and higher | documented |
RtlCrc32 | 6.2 and higher | |
RtlCrc64 | 6.2 and higher | |
RtlCreateAcl | 3.51 and higher | documented |
RtlCreateAtomTable | 4.0 and higher | |
RtlCreateAtomTableEx | 6.2 and higher | |
RtlCreateHashTable | 6.1 and higher | declared |
RtlCreateHashTableEx | 6.2 and higher | |
RtlCreateHeap | 3.51 and higher | documented |
RtlCreateRegistryKey | 3.51 and higher | documented |
RtlCreateSecurityDescriptor | 3.51 and higher | documented |
RtlCreateSystemVolumeInformationFolder | 5.1 and higher | documented |
RtlCreateUnicodeString | 3.51 and higher | documented |
RtlCreateUserThread | 6.2 and higher | |
RtlCultureNameToLCID | 6.2 and higher | |
RtlCustomCPToUnicodeN | 3.51 and higher | reserved |
RtlDecompressBuffer | 3.51 and higher | documented |
RtlDecompressBufferEx | 6.2 and higher | documented |
RtlDecompressBufferEx2 | 10.0 and higher | documented |
RtlDecompressChunks | 4.0 and higher | reserved |
RtlDecompressFragment | 3.51 and higher | documented |
RtlDecompressFragmentEx | 10.0 and higher | documented |
RtlDelete | 3.51 and higher | documented |
RtlDeleteAce | 5.0 and higher | documented |
RtlDeleteAtomFromAtomTable | 4.0 and higher | |
RtlDeleteElementGenericTable | 3.51 and higher | documented |
RtlDeleteElementGenericTableAvl | 5.1 and higher | declared |
RtlDeleteElementGenericTableAvlEx | 6.2 and higher | |
RtlDeleteHashTable | 6.1 and higher | declared |
RtlDeleteNoSplay | 4.0 and higher | documented |
RtlDeleteOwnersRanges | 5.0 and higher | |
RtlDeleteRange | 5.0 and higher | |
RtlDeleteRegistryValue | 3.51 and higher | documented |
RtlDescribeChunk | 4.0 and higher | reserved |
RtlDestroyAtomTable | 4.0 and higher | |
RtlDestroyHeap | 3.51 and higher | documented |
RtlDowncaseUnicodeChar | 6.1 and higher | documented |
RtlDowncaseUnicodeString | 3.51 and higher | documented |
RtlDuplicateUnicodeString | 6.0 and higher | declared |
RtlEmptyAtomTable | 4.0 and higher | |
RtlEndEnumerationHashTable | 6.1 and higher | declared |
RtlEndStrongEnumerationHashTable | 10.0 and higher | |
RtlEndWeakEnumerationHashTable | 6.1 and higher | declared |
RtlEnlargedIntegerMultiply | 3.51 and higher (x86 only) | obsolete |
RtlEnlargedUnsignedDivide | 3.51 and higher (x86 only) | obsolete |
RtlEnlargedUnsignedMultiply | 3.51 and higher (x86 only) | obsolete |
RtlEnumerateEntryHashTable | 6.1 and higher | declared |
RtlEnumerateGenericTable | 3.51 and higher | documented |
RtlEnumerateGenericTableAvl | 5.1 and higher | declared |
RtlEnumerateGenericTableLikeADirectory | 5.1 and higher | documented |
RtlEnumerateGenericTableWithoutSplaying | 3.51 and higher | documented |
RtlEnumerateGenericTableWithoutSplayingAvl | 5.1 and higher | declared |
RtlEqualLuid | 3.51 and higher | documented |
RtlEqualSid | 3.51 and higher | documented |
RtlEqualString | 3.51 and higher | documented |
RtlEqualUnicodeString | 3.51 and higher | documented |
RtlEqualWnfChangeStamps | 6.2 and higher | |
RtlEthernetAddressToStringA | 6.1 and higher | declared (SDK) |
RtlEthernetAddressToStringW | 6.1 and higher | declared (SDK) |
RtlEthernetStringToAddressA | 6.1 and higher | declared (SDK) |
RtlEthernetStringToAddressW | 6.1 and higher | declared (SDK) |
RtlExpandHashTable | 6.1 and higher | declared |
RtlExtendedIntegerMultiply | 3.51 and higher (x86 only) | obsolete |
RtlExtendedLargeIntegerDivide | 3.51 and higher (x86 only) | obsolete |
RtlExtendedMagicDivide | 3.51 and higher (x86 only) | obsolete |
RtlExtractBitMap | 6.2 and higher | |
RtlFillMemory | 3.51 and higher | documented |
RtlFillMemoryUlong | 3.51 and higher (x86 only) | documented |
RtlFillMemoryUlonglong | 6.1 and higher (x86 only) | documented |
RtlFindAceByType | 6.1 and higher | |
RtlFindClearBits | 3.51 and higher | documented |
RtlFindClearBitsAndSet | 3.51 and higher | documented |
RtlFindClearBitsAndSetEx | 10.0 and higher (x64 only) | |
RtlFindClearBitsEx | 10.0 and higher (x64 only) | |
RtlFindClearRuns | 5.0 and higher | documented |
RtlFindClosestEncodableLength | 6.0 and higher | declared |
RtlFindExportedRoutineByName | 10.0 and higher | |
RtlFindFirstRunClear | 3.51 and higher | documented |
RtlFindFirstRunSet | 3.51 to 4.0 only | |
RtlFindLastBackwardRunClear | 5.0 and higher | documented |
RtlFindLeastSignificantBit | 5.0 and higher | documented |
RtlFindLongestRunClear | 3.51 and higher | documented |
RtlFindLongestRunSet | 3.51 to 4.0 only | |
RtlFindMessage | 3.51 and higher | |
RtlFindMostSignificantBit | 5.0 and higher | documented |
RtlFindNextForwardRunClear | 5.0 and higher | documented |
RtlFindNextForwardRunClearEx | 10.0 and higher (x64 only) | |
RtlFindRange | 5.0 and higher | |
RtlFindSetBits | 3.51 and higher | documented |
RtlFindSetBitsAndClear | 3.51 and higher | documented |
RtlFindSetBitsAndClearEx | 10.0 and higher (x64 only) | |
RtlFindSetBitsEx | 10.0 and higher (x64 only) | |
RtlFindUnicodePrefix | 3.51 and higher | documented |
RtlFirstFreeAce | 10.0 and higher | |
RtlFormatCurrentUserKeyPath | 3.51 and higher | |
RtlFormatMessage | 6.0 and higher | |
RtlFreeAnsiString | 3.51 and higher | documented |
RtlFreeHeap | 3.51 and higher | documented |
RtlFreeOemString | 3.51 and higher | documented |
RtlFreeRangeList | 5.0 and higher | |
RtlFreeUnicodeString | 3.51 and higher | documented |
RtlGUIDFromString | 5.0 and higher | documented |
RtlGenerate8dot3Name | 3.51 and higher | documented |
RtlGenerateClass5Guid | 6.2 and higher | |
RtlGetAce | 5.0 and higher | documented |
RtlGetAppContainerNamedObjectPath | 6.2 and higher | |
RtlGetAppContainerParent | 6.3 and higher | |
RtlGetAppContainerSidType | 6.3 and higher | |
RtlGetCallersAddress | 3.51 and higher | reserved |
RtlGetCompressionWorkSpaceSize | 3.51 and higher | documented |
RtlGetControlSecurityDescriptor | 10.0 and higher | |
RtlGetDaclSecurityDescriptor | 3.51 and higher | documented |
RtlGetDefaultCodePage | 4.0 and higher | |
RtlGetElementGenericTable | 3.51 and higher | documented |
RtlGetElementGenericTableAvl | 5.1 and higher | documented |
RtlGetEnabledExtendedFeatures | 6.1 and higher | documented |
RtlGetFirstRange | 5.0 and higher | |
RtlGetGroupSecurityDescriptor | 3.51 and higher | documented |
RtlGetIntegerAtom | 6.0 and higher | |
RtlGetLastRange | 6.1 and higher | |
RtlGetNextEntryHashTable | 6.1 and higher | declared |
RtlGetNextRange | 5.0 and higher | |
RtlGetNtGlobalFlags | 5.0 and higher | |
RtlGetOwnerSecurityDescriptor | 3.51 and higher | documented |
RtlGetProductInfo | 6.0 and higher | declared |
RtlGetSaclSecurityDescriptor | 5.0 and higher | documented |
RtlGetSetBootStatusData | 5.1 and higher | |
RtlGetThreadLangIdByIndex | 6.0 and higher | |
RtlGetVersion | 5.1 and higher | documented |
RtlHashUnicodeString | 5.1 and higher | documented |
RtlIdnToAscii | 6.0 and higher | declared |
RtlIdnToNameprepUnicode | 6.0 and higher | declared |
RtlIdnToUnicode | 6.0 and higher | declared |
RtlImageDirectoryEntryToData | 5.0 and higher | |
RtlImageNtHeader | 3.51 and higher | |
RtlImageNtHeaderEx | 6.3 and higher | |
RtlInitAnsiString | 3.51 and higher | documented |
RtlInitAnsiStringEx | 5.2 and higher | declared |
RtlInitCodePageTable | 3.51 and higher | reserved |
RtlInitEnumerationHashTable | 6.1 and higher | declared |
RtlInitString | 3.51 and higher | documented |
RtlInitStringEx | 10.0 and higher | documented |
RtlInitStrongEnumerationHashTable | 10.0 and higher | |
RtlInitUnicodeString | 3.51 and higher | documented |
RtlInitUnicodeStringEx | 5.2 and higher | declared |
RtlInitWeakEnumerationHashTable | 6.1 and higher | declared |
RtlInitializeBitMap | 3.51 and higher | documented |
RtlInitializeBitMapEx | 10.0 and higher (x64 only) | |
RtlInitializeGenericTable | 3.51 and higher | documented |
RtlInitializeGenericTableAvl | 5.1 and higher | declared |
RtlInitializeRangeList | 5.0 and higher | |
RtlInitializeSid | 3.51 and higher | documented |
RtlInitializeSidEx | 10.0 and higher | documented |
RtlInitializeUnicodePrefix | 3.51 and higher | documented |
RtlInsertElementGenericTable | 3.51 and higher | documented |
RtlInsertElementGenericTableAvl | 5.1 and higher | declared |
RtlInsertElementGenericTableFull | 5.0 and higher | declared |
RtlInsertElementGenericTableFullAvl | 5.1 and higher | documented |
RtlInsertEntryHashTable | 6.1 and higher | declared |
RtlInsertUnicodePrefix | 3.51 and higher | documented |
RtlInt64ToUnicodeString | 5.1 and higher | documented |
RtlIntegerToChar | 3.51 and higher | |
RtlIntegerToUnicode | 5.1 and higher | |
RtlIntegerToUnicodeString | 3.51 and higher | documented |
RtlInterlockedClearBitRun | 6.3 and higher | |
RtlInterlockedSetBitRun | 6.3 and higher | |
RtlInterlockedSetClearRun | 6.3 and higher | |
RtlInvertRangeList | 5.0 and higher | |
RtlInvertRangeListEx | 6.0 and higher | |
RtlIoDecodeMemIoResource | 6.0 and higher | documented |
RtlIoEncodeMemIoResource | 6.0 and higher | documented |
RtlIpv4AddressToStringA | 5.1 and higher | documented (SDK) |
RtlIpv4AddressToStringExA | 5.1 from Windows XP SP2, and higher | documented (SDK) |
RtlIpv4AddressToStringExW | 5.1 from Windows XP SP2, and higher | documented (SDK) |
RtlIpv4AddressToStringW | 5.1 and higher | documented (SDK) |
RtlIpv4StringToAddressA | 5.1 and higher | documented (SDK) |
RtlIpv4StringToAddressExA | 5.1 from Windows XP SP2, and higher | documented (SDK) |
RtlIpv4StringToAddressExW | 5.1 from Windows XP SP2, and higher | documented (SDK) |
RtlIpv4StringToAddressW | 5.1 and higher | documented (SDK) |
RtlIpv6AddressToStringA | 5.1 and higher | documented (SDK) |
RtlIpv6AddressToStringExA | 5.1 from Windows XP SP2, and higher | documented (SDK) |
RtlIpv6AddressToStringExW | 5.1 from Windows XP SP2, and higher | documented (SDK) |
RtlIpv6AddressToStringW | 5.1 and higher | documented (SDK) |
RtlIpv6StringToAddressA | 5.1 and higher | documented (SDK) |
RtlIpv6StringToAddressExA | 5.1 from Windows XP SP2, and higher | documented (SDK) |
RtlIpv6StringToAddressExW | 5.1 from Windows XP SP2, and higher | documented (SDK) |
RtlIpv6StringToAddressW | 5.1 and higher | documented (SDK) |
RtlIsGenericTableEmpty | 5.0 and higher | documented |
RtlIsGenericTableEmptyAvl | 5.1 and higher | declared |
RtlIsMultiSessionSku | 10.0 and higher | |
RtlIsNameLegalDOS8Dot3 | 3.51 from Windows NT 3.51 SP5, and higher | documented |
RtlIsNormalizedString | 6.0 and higher | declared |
RtlIsNtDdiVersionAvailable | 6.0 and higher | documented |
RtlIsRangeAvailable | 5.0 and higher | |
RtlIsSandboxedToken | 10.0 and higher | |
RtlIsServicePackVersionInstalled | 6.0 and higher | documented |
RtlIsUntrustedObject | 6.2 and higher | |
RtlIsValidOemCharacter | 5.0 and higher | documented |
RtlLCIDToCultureName | 6.2 and higher | |
RtlLargeIntegerAdd | 3.51 and higher (x86 only) | obsolete |
RtlLargeIntegerArithmeticShift | 3.51 and higher (x86 only) | obsolete |
RtlLargeIntegerDivide | 3.51 and higher (x86 only) | obsolete |
RtlLargeIntegerNegate | 3.51 and higher (x86 only) | obsolete |
RtlLargeIntegerShiftLeft | 3.51 and higher (x86 only) | obsolete |
RtlLargeIntegerShiftRight | 3.51 and higher (x86 only) | obsolete |
RtlLargeIntegerSubtract | 3.51 and higher (x86 only) | obsolete |
RtlLargeIntegerToChar | 10.0 and higher | |
RtlLengthRequiredSid | 3.51 and higher | documented |
RtlLengthSecurityDescriptor | 3.51 and higher | documented |
RtlLengthSid | 3.51 and higher | documented |
RtlLoadString | 6.1 and higher | |
RtlLocalTimeToSystemTime | 6.0 and higher | |
RtlLockBootStatusData | 5.1 and higher | |
RtlLookupAtomInAtomTable | 4.0 and higher | |
RtlLookupElementGenericTable | 3.51 and higher | documented |
RtlLookupElementGenericTableAvl | 5.1 and higher | declared |
RtlLookupElementGenericTableFull | 5.0 and higher | declared |
RtlLookupElementGenericTableFullAvl | 5.1 and higher | documented |
RtlLookupEntryHashTable | 6.1 and higher | declared |
RtlLookupFirstMatchingElementGenericTableAvl | 6.0 and higher | declared |
RtlLookupFunctionEntry | 5.2 from Windows Server 2003 SP1, and higher (x64 only) | documented (SDK) |
RtlMapGenericMask | 3.51 and higher | documented |
RtlMapSecurityErrorToNtStatus | 5.1 and higher | |
RtlMergeRangeLists | 5.0 and higher | |
RtlMoveMemory | 3.51 and higher | documented |
RtlMultiByteToUnicodeN | 3.51 and higher | documented |
RtlMultiByteToUnicodeSize | 4.0 and higher | documented |
RtlNextUnicodePrefix | 3.51 and higher | documented |
RtlNormalizeString | 6.0 and higher | declared |
RtlNtStatusToDosError | 3.51 and higher | documented |
RtlNtStatusToDosErrorNoTeb | 3.51 and higher | reserved |
RtlNumberGenericTableElements | 3.51 and higher | documented |
RtlNumberGenericTableElementsAvl | 5.1 and higher | declared |
RtlNumberOfClearBits | 3.51 and higher | documented |
RtlNumberOfClearBitsEx | 10.0 and higher (x64 only) | |
RtlNumberOfClearBitsInRange | 6.2 and higher | |
RtlNumberOfSetBits | 3.51 and higher | documented |
RtlNumberOfSetBitsEx | 10.0 and higher (x64 only) | |
RtlNumberOfSetBitsInRange | 6.2 and higher | |
RtlNumberOfSetBitsUlongPtr | 6.0 and higher | declared |
RtlOemStringToCountedUnicodeString | 3.51 and higher | documented |
RtlOemStringToUnicodeSize | 3.51 and higher | documented |
RtlOemStringToUnicodeString | 3.51 and higher | documented |
RtlOemToUnicodeN | 3.51 and higher | documented |
RtlOpenCurrentUser | 6.2 and higher | |
RtlOsDeploymentState | 10.0 and higher | |
RtlOwnerAcesPresent | 6.1 and higher | |
RtlPcToFileHeader | 5.2 from Windows Server 2003 SP1, and higher (x64); 10.0 and higher (x86) |
documented (SDK) |
RtlPinAtomInAtomTable | 4.0 and higher | |
RtlPrefetchMemoryNonTemporal | 5.0 from Windows 2000 SP3, and higher | documented |
RtlPrefixString | 3.51 and higher | |
RtlPrefixUnicodeString | 3.51 and higher | documented |
RtlQueryAtomInAtomTable | 4.0 and higher | |
RtlQueryDynamicTimeZoneInformation | 6.0 and higher | |
RtlQueryElevationFlags | 6.0 and higher | |
RtlQueryInformationAcl | 6.2 and higher | |
RtlQueryModuleInformation | 6.0 and higher | |
RtlQueryPackageClaims | 10.0 and higher | |
RtlQueryPackageIdentity | 6.2 and higher | |
RtlQueryRegistryValues | 3.51 and higher | documented |
RtlQueryRegistryValuesEx | 6.2 and higher | |
RtlQueryTimeZoneInformation | 3.51 and higher | |
RtlQueryValidationRunLevel | 6.2 and higher | |
RtlRaiseException | 4.0 and higher | |
RtlRandom | 3.51 and higher | documented |
RtlRandomEx | 5.1 and higher | documented |
RtlRbInsertNodeEx | 6.2 and higher | |
RtlRbRemoveNode | 6.2 and higher | |
RtlRbReplaceNode | 10.0 and higher | |
RtlRealPredecessor | 5.0 and higher | documented |
RtlRealSuccessor | 5.0 and higher | documented |
RtlRemoveEntryHashTable | 6.1 and higher | declared |
RtlRemoveUnicodePrefix | 3.51 and higher | documented |
RtlReplaceSidInSid | 6.1 and higher | declared |
RtlReserveChunk | 4.0 and higher | reserved |
RtlRestoreContext | 5.2 from Windows Server 2003 SP1, and higher (x64 only) | documented (SDK) |
RtlRunOnceBeginInitialize | 6.0 and higher | documented |
RtlRunOnceComplete | 6.0 and higher | documented |
RtlRunOnceExecuteOnce | 6.0 and higher | documented |
RtlRunOnceInitialize | 6.0 and higher | documented |
RtlSecondsSince1970ToTime | 3.51 and higher | documented |
RtlSecondsSince1980ToTime | 3.51 and higher | documented |
RtlSelfRelativeToAbsoluteSD | 5.0 and higher | documented |
RtlSelfRelativeToAbsoluteSD2 | 5.0 and higher | |
RtlSetAllBits | 3.51 and higher | documented |
RtlSetAllBitsEx | 10.0 and higher (x64 only) | |
RtlSetBit | 5.1 and higher | documented |
RtlSetBitEx | 10.0 and higher (x64 only) | |
RtlSetBits | 3.51 and higher | documented |
RtlSetBitsEx | 10.0 and higher (x64 only) | |
RtlSetControlSecurityDescriptor | 6.2 and higher | |
RtlSetDaclSecurityDescriptor | 3.51 and higher | documented |
RtlSetDynamicTimeZoneInformation | 6.0 and higher | |
RtlSetGroupSecurityDescriptor | 3.51 and higher | documented |
RtlSetOwnerSecurityDescriptor | 3.51 and higher | documented |
RtlSetPortableOperatingSystem | 6.2 and higher | |
RtlSetSaclSecurityDescriptor | 3.51 and higher | |
RtlSetTimeZoneInformation | 3.51 and higher | |
RtlSidHashInitialize | 6.0 and higher | |
RtlSidHashLookup | 6.0 and higher | |
RtlSizeHeap | 5.0 and higher | |
RtlSplay | 3.51 and higher | documented |
RtlStringFromGUID | 5.0 and higher | documented |
RtlStronglyEnumerateEntryHashTable | 10.0 and higher | |
RtlSubAuthorityCountSid | 3.51 and higher | reserved |
RtlSubAuthoritySid | 3.51 and higher | documented |
RtlSubtreePredecessor | 5.0 and higher | documented |
RtlSubtreeSuccessor | 5.0 and higher | documented |
RtlSuffixUnicodeString | 10.0 and higher | |
RtlSystemTimeToLocalTime | 6.0 and higher | |
RtlTestBit | 5.1 and higher | documented |
RtlTestBitEx | 10.0 and higher (x64 only) | |
RtlTimeFieldsToTime | 3.51 and higher | documented |
RtlTimeToElapsedTimeFields | 5.1 and higher | |
RtlTimeToSecondsSince1970 | 3.51 and higher | documented |
RtlTimeToSecondsSince1980 | 3.51 and higher | documented |
RtlTimeToTimeFields | 3.51 and higher | documented |
RtlTraceDatabaseAdd | 5.0 from Windows 2000 SP1, and higher | |
RtlTraceDatabaseCreate | 5.0 from Windows 2000 SP1, and higher | |
RtlTraceDatabaseDestroy | 5.0 from Windows 2000 SP1, and higher | |
RtlTraceDatabaseEnumerate | 5.0 from Windows 2000 SP1, and higher | |
RtlTraceDatabaseFind | 5.0 from Windows 2000 SP1, and higher | |
RtlTraceDatabaseLock | 5.0 from Windows 2000 SP1, and higher | |
RtlTraceDatabaseUnlock | 5.0 from Windows 2000 SP1, and higher | |
RtlTraceDatabaseValidate | 5.0 from Windows 2000 SP1, and higher | |
RtlUTF8ToUnicodeN | 6.1 and higher | documented |
RtlUlongByteSwap | 5.0 and higher (x86 only) | documented |
RtlUlonglongByteSwap | 5.0 and higher (x86 only) | documented |
RtlUnicodeStringToAnsiSize | 3.51 and higher | documented |
RtlUnicodeStringToAnsiString | 3.51 and higher | documented |
RtlUnicodeStringToCountedOemString | 3.51 and higher | documented |
RtlUnicodeStringToInt64 | 10.0 and higher | |
RtlUnicodeStringToInteger | 3.51 and higher | documented |
RtlUnicodeStringToOemSize | 3.51 and higher | documented |
RtlUnicodeStringToOemString | 3.51 and higher | documented |
RtlUnicodeToCustomCPN | 3.51 and higher | reserved |
RtlUnicodeToMultiByteN | 3.51 and higher | documented |
RtlUnicodeToMultiByteSize | 3.51 and higher | documented |
RtlUnicodeToOemN | 3.51 and higher | documented |
RtlUnicodeToUTF8N | 6.1 and higher | documented |
RtlUnlockBootStatusData | 5.1 and higher | |
RtlUnwind | 3.51 and higher | documented (SDK) |
RtlUnwindEx | 5.2 from Windows Server 2003 SP1, and higher (x64 only) | documented (SDK) |
RtlUpcaseUnicodeChar | 3.51 and higher | documented |
RtlUpcaseUnicodeString | 3.51 and higher | documented |
RtlUpcaseUnicodeStringToAnsiString | 3.51 and higher | |
RtlUpcaseUnicodeStringToCountedOemString | 3.51 and higher | documented |
RtlUpcaseUnicodeStringToOemString | 3.51 and higher | documented |
RtlUpcaseUnicodeToCustomCPN | 3.51 and higher | reserved |
RtlUpcaseUnicodeToMultiByteN | 3.51 and higher | documented |
RtlUpcaseUnicodeToOemN | 3.51 and higher | documented |
RtlUpperChar | 3.51 and higher | documented |
RtlUpperString | 3.51 and higher | documented |
RtlUshortByteSwap | 5.0 and higher (x86 only) | documented |
RtlValidAcl | 10.0 and higher | |
RtlValidRelativeSecurityDescriptor | 5.0 and higher | documented |
RtlValidSecurityDescriptor | 3.51 and higher | documented |
RtlValidSid | 3.51 and higher | documented |
RtlValidateUnicodeString | 6.0 and higher | declared |
RtlVerifyVersionInfo | 5.1 and higher | documented |
RtlVirtualUnwind | 5.2 from Windows Server 2003 SP1, and higher (x64 only) | documented (SDK) |
RtlVolumeDeviceToDosName | 5.0 and higher | documented |
RtlWalkFrameChain | 5.0 and higher | reserved |
RtlWeaklyEnumerateEntryHashTable | 6.1 and higher | declared |
RtlWriteRegistryValue | 3.51 and higher | documented |
RtlZeroHeap | 3.51 and higher | |
RtlZeroMemory | 3.51 and higher | documented |
RtlxAnsiStringToUnicodeSize | 3.51 and higher | documented |
RtlxOemStringToUnicodeSize | 3.51 and higher | reserved |
RtlxUnicodeStringToAnsiSize | 3.51 and higher | documented |
RtlxUnicodeStringToOemSize | 3.51 and higher | reserved |
SeAccessCheck | 3.51 and higher | documented |
SeAccessCheckEx | 6.1 and higher | |
SeAccessCheckFromState | 6.0 and higher | declared |
SeAccessCheckFromStateEx | 6.2 and higher | |
SeAccessCheckWithHint | 6.1 and higher | |
SeAdjustAccessStateForTrustLabel | 6.3 and higher | |
SeAppendPrivileges | 3.51 and higher | documented |
SeAssignSecurity | 3.51 and higher | documented |
SeAssignSecurityEx | 5.0 and higher | documented |
SeAuditHardLinkCreation | 5.0 from Windows 2000 SP3, and higher | reserved |
SeAuditHardLinkCreationWithTransaction | 6.0 and higher | declared |
SeAuditTransactionStateChange | 6.0 and higher | declared |
SeAuditingAnyFileEventsWithContext | 6.1 and higher | declared |
SeAuditingAnyFileEventsWithContextEx | 6.2 and higher | |
SeAuditingFileEvents | 3.51 and higher | documented |
SeAuditingFileEventsWithContext | 5.1 from Windows XP SP2, and higher | declared |
SeAuditingFileEventsWithContextEx | 6.2 and higher | |
SeAuditingFileOrGlobalEvents | 4.0 and higher | documented |
SeAuditingHardLinkEvents | 5.0 from Windows 2000 SP3, and higher | reserved |
SeAuditingHardLinkEventsWithContext | 5.1 from Windows XP SP2, and higher | declared |
SeAuditingWithTokenForSubcategory | 6.1 and higher | |
SeCaptureSecurityDescriptor | 3.51 and higher | |
SeCaptureSubjectContext | 3.51 and higher | documented |
SeCaptureSubjectContextEx | 6.0 and higher | |
SeCloseObjectAuditAlarm | 3.51 and higher | |
SeCloseObjectAuditAlarmForNonObObject | 6.0 and higher | |
SeCompareSigningLevels | 10.0 and higher | |
SeComputeAutoInheritByObjectType | 6.0 and higher | declared |
SeCreateAccessState | 3.51 and higher | |
SeCreateAccessStateEx | 6.0 and higher | |
SeCreateClientSecurity | 3.51 and higher | documented |
SeCreateClientSecurityEx | 6.2 and higher | |
SeCreateClientSecurityFromSubjectContext | 5.0 and higher | documented |
SeCreateClientSecurityFromSubjectContextEx | 6.2 and higher | |
SeDeassignSecurity | 3.51 and higher | documented |
SeDeleteAccessState | 3.51 and higher | |
SeDeleteObjectAuditAlarm | 4.0 and higher | documented |
SeDeleteObjectAuditAlarmWithTransaction | 6.0 and higher | declared |
SeExamineSacl | 6.0 and higher | declared |
SeExports (data) | 3.51 and higher | documented |
SeFilterToken | 5.1 and higher | documented |
SeFreePrivileges | 3.51 and higher | documented |
SeGetCachedSigningLevel | 6.3 and higher | |
SeGetLinkedToken | 6.0 and higher | |
SeGetLogonSessionToken | 6.2 and higher | |
SeImpersonateClient | 3.51 and higher | obsolete |
SeImpersonateClientEx | 5.0 and higher | documented |
SeIsParentOfChildAppContainer | 6.3 and higher | |
SeLocateProcessImageName | 6.0 and higher | declared |
SeLockSubjectContext | 3.51 and higher | documented |
SeMarkLogonSessionForTerminationNotification | 3.51 from Windows NT 3.51 SP5, and higher | documented |
SeMarkLogonSessionForTerminationNotificationEx | 10.0 and higher | |
SeOpenObjectAuditAlarm | 3.51 and higher | documented |
SeOpenObjectAuditAlarmForNonObObject | 6.0 and higher | |
SeOpenObjectAuditAlarmWithTransaction | 6.0 and higher | declared |
SeOpenObjectForDeleteAuditAlarm | 4.0 and higher | documented |
SeOpenObjectForDeleteAuditAlarmWithTransaction | 6.0 and higher | declared |
SePrivilegeCheck | 3.51 and higher | documented |
SePrivilegeObjectAuditAlarm | 3.51 and higher | |
SePublicDefaultDacl (data) | 3.51 and higher | |
SeQueryAuthenticationIdToken | 3.51 and higher | documented |
SeQueryInformationToken | 5.0 and higher | documented |
SeQuerySecureBootPolicyValue | 6.2 and higher | |
SeQuerySecurityAttributesToken | 6.1 and higher | |
SeQuerySecurityDescriptorInfo | 3.51 and higher | documented |
SeQueryServerSiloToken | 10.0 and higher | |
SeQuerySessionIdToken | 5.0 and higher | reserved |
SeQuerySessionIdTokenEx | 10.0 and higher | |
SeRegisterImageVerificationCallback | 6.3 and higher | |
SeRegisterLogonSessionTerminatedRoutine | 3.51 from Windows NT 3.51 SP5, and higher | documented |
SeRegisterLogonSessionTerminatedRoutineEx | 10.0 and higher | |
SeReleaseSecurityDescriptor | 3.51 and higher | |
SeReleaseSubjectContext | 3.51 and higher | documented |
SeReportSecurityEvent | 5.2 from Windows Server 2003 SP1, and higher | declared |
SeReportSecurityEventWithSubCategory | 6.0 and higher | declared |
SeSecurityAttributePresent | 6.2 and higher | |
SeSetAccessStateGenericMapping | 4.0 and higher | documented |
SeSetAuditParameter | 5.2 from Windows Server 2003 SP1, and higher | declared |
SeSetAuthorizationCallbacks | 6.0 and higher | |
SeSetSecurityAttributesToken | 6.1 and higher | |
SeSetSecurityAttributesTokenEx | 10.0 and higher | |
SeSetSecurityDescriptorInfo | 3.51 and higher | documented |
SeSetSecurityDescriptorInfoEx | 5.0 and higher | documented |
SeShouldCheckForAccessRightsFromParent | 6.3 and higher | |
SeSinglePrivilegeCheck | 3.51 and higher | documented |
SeSrpAccessCheck | 6.1 and higher | |
SeSystemDefaultDacl (data) | 3.51 and higher | |
SeSystemDefaultSd (data) | 6.2 and higher | |
SeTokenFromAccessInformation | 6.2 and higher | |
SeTokenImpersonationLevel | 4.0 and higher | |
SeTokenIsAdmin | 5.0 and higher | documented |
SeTokenIsRestricted | 5.0 and higher | documented |
SeTokenIsWriteRestricted | 5.1 from Windows XP SP2, and 6.0 and higher | declared |
SeTokenObjectType (data) | 5.1 and higher | declared |
SeTokenType | 3.51 and higher | reserved |
SeUnlockSubjectContext | 3.51 and higher | documented |
SeUnregisterImageVerificationCallback | 6.3 and higher | |
SeUnregisterLogonSessionTerminatedRoutine | 3.51 from Windows NT 3.51 SP5, and higher | documented |
SeUnregisterLogonSessionTerminatedRoutineEx | 10.0 and higher | |
SeValidSecurityDescriptor | 3.51 and higher | documented |
SkAcquirePushLockExclusive | 10.0 and higher | |
SkAllocatePool | 10.0 and higher | |
SkFreePool | 10.0 and higher | |
SkInitializePushLock | 10.0 and higher | |
SkIsSecureKernel | 10.0 and higher | |
SkQuerySecureKernelInformation | 10.0 and higher | |
SkReleasePushLockExclusive | 10.0 and higher | |
TmCancelPropagationRequest | 6.0 and higher | |
TmCommitComplete | 6.0 and higher | documented |
TmCommitEnlistment | 6.0 and higher | documented |
TmCommitTransaction | 6.0 and higher | documented |
TmCreateEnlistment | 6.0 and higher | documented |
TmCurrentTransaction | 6.0 and higher | |
TmDefaultTmOpenFileCount | 6.0 from before Windows Vista SP1 | |
TmDereferenceEnlistmentKey | 6.0 and higher | documented |
TmEnableCallbacks | 6.0 and higher | documented |
TmEndPropagationRequest | 6.0 and higher | |
TmEnlistmentObjectType (data) | 6.0 and higher | declared |
TmFreezeTransactions | 6.0 and higher | |
TmGetTransactionId | 6.0 and higher | documented |
TmInitDefaultTemporaryTm | 6.0 from before Windows Vista SP1 | |
TmInitSystem | 6.0 and higher | |
TmInitSystemPhase2 | 6.0 and higher | |
TmInitializeResourceManager | 6.0 and 6.1 only | |
TmInitializeTransaction | 6.0 and 6.1 only | |
TmInitializeTransactionManager | 6.2 and higher | documented |
TmIsKTMCommitCoordinator | 6.2 and higher | |
TmIsTransactionActive | 6.0 and higher | documented |
TmMarshallTransaction | 6.0 from orginal Windows Vista only | |
TmPrePrepareComplete | 6.0 and higher | documented |
TmPrePrepareEnlistment | 6.0 and higher | documented |
TmPrepareComplete | 6.0 and higher | documented |
TmPrepareEnlistment | 6.0 and higher | documented |
TmPropagationComplete | 6.0 and higher | declared |
TmPropagationFailed | 6.0 and higher | declared |
TmPullTransaction | 6.0 from before Windows Vista SP1 | |
TmReadOnlyEnlistment | 6.0 and higher | documented |
TmRecoverEnlistment | 6.0 and higher | documented |
TmRecoverResourceManager | 6.0 and higher | documented |
TmRecoverTransactionManager | 6.0 and higher | documented |
TmReferenceEnlistmentKey | 6.0 and higher | documented |
TmRenameTransactionManager | 6.2 and higher | documented |
TmRequestOutcomeEnlistment | 6.0 and higher | documented |
TmResourceManagerObjectType (data) | 6.0 and higher | declared |
TmRmIsNotificationQueueEmpty_Temporary | 6.0 from before Windows Vista SP1 | |
TmRollbackComplete | 6.0 and higher | documented |
TmRollbackEnlistment | 6.0 and higher | documented |
TmRollbackTransaction | 6.0 and higher | documented |
TmSavepointComplete | 6.0 from before Windows Vista SP1 | |
TmSavepointTransaction | 6.0 from before Windows Vista SP1 | |
TmSetCurrentTransaction | 6.0 and higher | |
TmSetPreviousModeToKernel | 6.0 from before Windows Vista SP1 | |
TmSinglePhaseReject | 6.2 and higher | documented |
TmThawTransactions | 6.0 and higher | |
TmTransactionManagerObjectType (data) | 6.0 and higher | declared |
TmTransactionObjectType (data) | 6.0 and higher | declared |
TmpIsKTMCommitCoordinator | 6.0 from Windows Vista SP1 and higher, and 6.1 | |
VerSetConditionMask | 5.1 and higher | declared |
VfCheckNxPriority | 10.0 and higher | |
VfCheckNxProtection | 10.0 and higher | |
VfCheckNxPoolType | 10.0 and higher | |
VfFailDeviceNode | 5.1 and higher | |
VfFailDriver | 5.1 and higher | |
VfFailSystemBIOS | 5.1 and higher | |
VfInsertContext | 6.3 and higher | |
VfIsVerificationEnabled | 5.1 and higher | |
VfQueryDeviceContext | 6.3 and higher | |
VfQueryDispatchTable | 6.3 and higher | |
VfQueryDriverContext | 6.3 and higher | |
VfQueryIrpContext | 6.3 and higher | |
VfQueryThreadContext | 6.3 and higher | |
VfRemoveContext | 6.3 and higher | |
VmAccessFault | 10.0 and higher | |
VmCreateMemoryRange | 10.0 and higher | |
VmDeleteMemoryRange | 10.0 and higher | |
VslExchangeEntropy | 10.0 and higher | |
VslRetrieveMailbox | 10.0 and higher | |
WRITE_REGISTER_BUFFER_UCHAR | 3.51 and higher (x86 only) | documented |
WRITE_REGISTER_BUFFER_ULONG | 3.51 and higher (x86 only) | documented |
WRITE_REGISTER_BUFFER_USHORT | 3.51 and higher (x86 only) | documented |
WRITE_REGISTER_UCHAR | 3.51 and higher (x86 only) | documented |
WRITE_REGISTER_ULONG | 3.51 and higher (x86 only) | documented |
WRITE_REGISTER_USHORT | 3.51 and higher (x86 only) | documented |
WheaAddErrorSource | 6.0 from Windows Vista SP1, and higher | |
WheaAttemptPhysicalPageOffline | 6.1 and higher (x64 only) | |
WheaConfigureErrorSource | 6.1 and higher | |
WheaDeferredRecoveryService | 6.1 and higher (x64 only) | |
WheaGetErrorSource | 6.0 from Windows Vista SP1, and higher | |
WheaInitializeDeferredRecoveryObject | 6.1 and higher (x64 only) | |
WheaInitializeRecordHeader | 6.1 and higher | |
WheaRegisterErrSrcInitializer | 6.0 only | |
WheaRegisterInUsePageOfflineNotification | 6.2 and higher (x64 only) | |
WheaReportHwError | 6.0 and higher | |
WheaRequestDeferredRecovery | 6.1 and higher (x64 only) | |
WheaUnregisterInUsePageOfflineNotification | 6.2 and higher (x64 only) | |
WmiFlushTrace | 5.1 to 5.2 only | |
WmiGetClock | 5.1 and higher | |
WmiQueryTrace | 5.1 to 5.2 only | |
WmiQueryTraceInformation | 5.1 and higher | documented |
WmiStartTrace | 5.1 to 5.2 only | |
WmiStopTrace | 5.1 to 5.2 only | |
WmiTraceFastEvent | 5.2 only | |
WmiTraceMessage | 5.1 and higher | documented |
WmiTraceMessageVa | 5.1 and higher | documented |
WmiUpdateTrace | 5.1 to 5.2 only | |
XIPDispatch | 5.1 and higher | |
ZwAccessCheckAndAuditAlarm | 3.51 and higher | |
ZwAddBootEntry | 5.1 and higher | |
ZwAddDriverEntry | 5.2 and higher | |
ZwAdjustPrivilegesToken | 5.0 and higher | |
ZwAlertThread | 3.51 and higher | |
ZwAllocateLocallyUniqueId | 6.0 and higher | documented |
ZwAllocateVirtualMemory | 3.51 and higher | documented |
ZwAlpcAcceptConnectPort | 6.0 and higher | |
ZwAlpcCancelMessage | 6.0 and higher | |
ZwAlpcConnectPort | 6.0 and higher | |
ZwAlpcConnectPortEx | 6.2 and higher | |
ZwAlpcCreatePort | 6.0 and higher | |
ZwAlpcCreatePortSection | 6.0 and higher | |
ZwAlpcCreateResourceReserve | 6.0 and higher | |
ZwAlpcCreateSectionView | 6.0 and higher | |
ZwAlpcCreateSecurityContext | 6.0 and higher | |
ZwAlpcDeletePortSection | 6.0 and higher | |
ZwAlpcDeleteResourceReserve | 6.0 and higher | |
ZwAlpcDeleteSectionView | 6.0 and higher | |
ZwAlpcDeleteSecurityContext | 6.0 and higher | |
ZwAlpcDisconnectPort | 6.0 and higher | |
ZwAlpcOpenSenderThread | 10.0 and higher | |
ZwAlpcQueryInformation | 6.0 and higher | |
ZwAlpcQueryInformationMessage | 10.0 and higher | |
ZwAlpcSendWaitReceivePort | 6.0 and higher | |
ZwAlpcSetInformation | 6.0 and higher | |
ZwAssignProcessToJobObject | 5.1 and higher | |
ZwAssociateWaitCompletionPacket | 6.3 and higher | |
ZwCancelIoFile | 5.0 and higher | |
ZwCancelIoFileEx | 6.3 and higher | |
ZwCancelTimer | 5.0 and higher | reserved |
ZwClearEvent | 3.51 and higher | |
ZwClose | 3.51 and higher | documented |
ZwCloseObjectAuditAlarm | 3.51 and higher | |
ZwCommitComplete | 6.1 and higher | documented |
ZwCommitEnlistment | 6.0 and higher | documented |
ZwCommitTransaction | 6.0 and higher | documented |
ZwCompareTokens | 10.0 and higher | |
ZwConnectPort | 3.51 and higher | |
ZwCreateDirectoryObject | 3.51 and higher | documented |
ZwCreateEnlistment | 6.0 and higher | documented |
ZwCreateEvent | 3.51 and higher | documented |
ZwCreateFile | 3.51 and higher | documented |
ZwCreateIoCompletion | 6.0 and higher | |
ZwCreateJobObject | 5.1 and higher | |
ZwCreateKey | 3.51 and higher | documented |
ZwCreateKeyTransacted | 6.0 and higher | documented |
ZwCreateResourceManager | 6.0 and higher | documented |
ZwCreateSection | 3.51 and higher | documented |
ZwCreateSymbolicLinkObject | 3.51 and higher | |
ZwCreateTimer | 3.51, and 5.0 and higher | reserved |
ZwCreateTransaction | 6.0 and higher | documented |
ZwCreateTransactionManager | 6.0 and higher | documented |
ZwCreateUserProcess (2) | 6.2 and higher | |
ZwCreateWaitCompletionPacket | 6.3 and higher | |
ZwCreateWnfStateName | 6.2 and higher | |
ZwDeleteBootEntry | 5.1 and higher | |
ZwDeleteDriverEntry | 5.2 and higher | |
ZwDeleteFile | 3.51 and higher | documented |
ZwDeleteKey | 3.51 and higher | documented |
ZwDeleteValueKey | 3.51 and higher | documented |
ZwDeleteWnfStateData | 6.2 and higher | |
ZwDeleteWnfStateName | 6.2 and higher | |
ZwDeviceIoControlFile | 3.51 and higher | documented |
ZwDisplayString | 3.51 and higher | declared |
ZwDuplicateObject | 3.51 and higher | reserved |
ZwDuplicateToken | 3.51 and higher | documented |
ZwEnumerateBootEntries | 5.1 and higher | |
ZwEnumerateDriverEntries | 5.2 and higher | |
ZwEnumerateKey | 3.51 and higher | documented |
ZwEnumerateTransactionObject | 6.0 and higher | documented |
ZwEnumerateValueKey | 3.51 and higher | documented |
ZwFlushBuffersFile | 6.0 and higher | documented |
ZwFlushBuffersFileEx | 6.2 and higher | documented |
ZwFlushInstructionCache | 3.51 and higher | |
ZwFlushKey | 3.51 and higher | documented |
ZwFlushVirtualMemory | 5.0 and higher | documented |
ZwFreeVirtualMemory | 3.51 and higher | documented |
ZwFsControlFile | 3.51 and higher | documented |
ZwGetCachedSigningLevel | 10.0 and higher | |
ZwGetNextProcess | 10.0 and higher | |
ZwGetNotificationResourceManager | 6.0 and higher | documented |
ZwImpersonateAnonymousToken | 6.0 and higher | |
ZwInitiatePowerAction | 5.0 and higher | |
ZwIsProcessInJob | 5.1 and higher | |
ZwLoadDriver | 3.51 and higher | documented |
ZwLoadKey | 4.0 and higher | |
ZwLoadKeyEx | 6.0 and higher | |
ZwLockFile | 6.1 and higher | documented |
ZwLockProductActivationKeys | 6.0 and higher | |
ZwLockVirtualMemory | 6.3 and higher | |
ZwMakeTemporaryObject | 3.51 and higher | documented |
ZwMapViewOfSection | 3.51 and higher | documented |
ZwMarshallTransaction | 6.0 from before Windows Vista SP1 | |
ZwModifyBootEntry | 5.2 and higher | |
ZwModifyDriverEntry | 5.2 and higher | |
ZwNotifyChangeDirectoryFile | 10.0 and higher | |
ZwNotifyChangeKey | 3.51 and higher | documented |
ZwNotifyChangeSession | 6.1 and higher | |
ZwOpenDirectoryObject | 3.51 and higher | documented |
ZwOpenEnlistment | 6.0 and higher | documented |
ZwOpenEvent | 3.51 and higher | documented |
ZwOpenFile | 3.51 and higher | documented |
ZwOpenJobObject | 5.1 and higher | |
ZwOpenKey | 3.51 and higher | documented |
ZwOpenKeyEx | 6.1 and higher | documented |
ZwOpenKeyTransacted | 6.0 and higher | documented |
ZwOpenKeyTransactedEx | 6.1 and higher | documented |
ZwOpenProcess | 3.51 and higher | documented |
ZwOpenProcessToken | 3.51 and higher | |
ZwOpenProcessTokenEx | 5.1 and higher | documented |
ZwOpenResourceManager | 6.0 and higher | documented |
ZwOpenSection | 3.51 and higher | documented |
ZwOpenSession | 6.1 and higher | |
ZwOpenSymbolicLinkObject | 3.51 and higher | documented |
ZwOpenThread | 3.51 and higher | |
ZwOpenThreadToken | 3.51 and higher | |
ZwOpenThreadTokenEx | 5.1 and higher | documented |
ZwOpenTimer | 5.0 and higher | reserved |
ZwOpenTransaction | 6.0 and higher | documented |
ZwOpenTransactionManager | 6.0 and higher | documented |
ZwPowerInformation | 5.0 and higher | declared |
ZwPrePrepareComplete | 6.1 and higher | documented |
ZwPrePrepareEnlistment | 6.0 and higher | documented |
ZwPrepareComplete | 6.0 and higher | documented |
ZwPrepareEnlistment | 6.0 and higher | documented |
ZwPropagationComplete | 6.1 and higher | |
ZwPropagationFailed | 6.1 and higher | |
ZwProtectVirtualMemory | 6.3 and higher | |
ZwPullTransaction | 6.0 from before Windows Vista SP1 | |
ZwPulseEvent | 3.51 and higher | |
ZwQueryBootEntryOrder | 5.1 and higher | |
ZwQueryBootOptions | 5.1 and higher | |
ZwQueryDefaultLocale | 4.0 and higher | |
ZwQueryDefaultUILanguage | 5.0 and higher | |
ZwQueryDirectoryFile | 3.51 and higher | documented |
ZwQueryDirectoryObject | 5.0 and higher | |
ZwQueryDriverEntryOrder | 5.2 and higher | |
ZwQueryEaFile | 5.0 and higher | declared |
ZwQueryFullAttributesFile | 5.1 and higher | documented |
ZwQueryInformationEnlistment | 6.0 and higher | documented |
ZwQueryInformationFile | 3.51 and higher | documented |
ZwQueryInformationJobObject | 5.1 and higher | |
ZwQueryInformationProcess | 3.51 and higher | |
ZwQueryInformationResourceManager | 6.0 and higher | documented |
ZwQueryInformationThread | 5.1 and higher | |
ZwQueryInformationToken | 3.51 and higher | documented |
ZwQueryInformationTransaction | 6.0 and higher | documented |
ZwQueryInformationTransactionManager | 6.0 and higher | documented |
ZwQueryInstallUILanguage | 5.0 and higher | |
ZwQueryKey | 3.51 and higher | documented |
ZwQueryLicenseValue | 6.0 and higher | |
ZwQueryObject | 4.0 and higher | documented |
ZwQueryQuotaInformationFile | 6.1 and higher | documented |
ZwQuerySection | 3.51 and higher | |
ZwQuerySecurityAttributesToken | 6.1 and higher | |
ZwQuerySecurityObject | 3.51 and higher | documented |
ZwQuerySymbolicLinkObject | 3.51 and higher | documented |
ZwQuerySystemEnvironmentValueEx | 6.2 and higher | |
ZwQuerySystemInformation | 4.0 and higher | |
ZwQuerySystemInformationEx | 6.3 and higher | |
ZwQueryValueKey | 3.51 and higher | documented |
ZwQueryVirtualMemory | 6.0 and higher | |
ZwQueryVolumeInformationFile | 3.51 and higher | documented |
ZwQueryWnfStateData | 6.2 and higher | |
ZwQueryWnfStateNameInformation | 6.2 and higher | |
ZwReadFile | 3.51 and higher | documented |
ZwReadOnlyEnlistment | 6.1 and higher | documented |
ZwRecoverEnlistment | 6.0 and higher | documented |
ZwRecoverResourceManager | 6.0 and higher | documented |
ZwRecoverTransactionManager | 6.0 and higher | documented |
ZwRemoveIoCompletion | 6.0 and higher | |
ZwRemoveIoCompletionEx | 6.0 and higher | |
ZwRenameKey | 6.1 from Windows 7 SP1, and higher | declared |
ZwReplaceKey | 4.0 and higher | |
ZwRequestPort | 6.0 and higher | |
ZwRequestWaitReplyPort | 3.51 and higher | |
ZwResetEvent | 3.51 and higher | |
ZwRestoreKey | 5.0 and higher | |
ZwRollbackComplete | 6.1 and higher | documented |
ZwRollbackEnlistment | 6.0 and higher | documented |
ZwRollbackTransaction | 6.0 and higher | documented |
ZwSaveKey | 4.0 and higher | |
ZwSaveKeyEx | 5.1 and higher | |
ZwSavepointComplete | 6.0 from before Windows Vista SP1 | |
ZwSavepointTransaction | 6.0 from before Windows Vista SP1 | |
ZwSecureConnectPort | 5.2 from Windows Server 2003 SP1, and higher | |
ZwSetBootEntryOrder | 5.1 and higher | |
ZwSetBootOptions | 5.1 and higher | |
ZwSetCachedSigningLevel | 6.2 and higher | |
ZwSetDefaultLocale | 3.51 and higher | |
ZwSetDefaultUILanguage | 5.0 and higher | |
ZwSetDriverEntryOrder | 5.2 and higher | |
ZwSetEaFile | 5.0 and higher | declared |
ZwSetEvent | 3.51 and higher | documented |
ZwSetInformationEnlistment | 6.0 and higher | documented |
ZwSetInformationFile | 3.51 and higher | documented |
ZwSetInformationJobObject | 5.1 and higher | |
ZwSetInformationKey | 6.2 and higher | |
ZwSetInformationObject | 4.0 and higher | |
ZwSetInformationProcess | 3.51 and higher | |
ZwSetInformationResourceManager | 6.1 and higher | |
ZwSetInformationThread | 3.51 and higher | documented |
ZwSetInformationToken | 6.1 and higher | documented |
ZwSetInformationTransaction | 6.0 and higher | documented |
ZwSetInformationVirtualMemory | 6.2 and higher | documented |
ZwSetQuotaInformationFile | 6.1 and higher | documented |
ZwSetSecurityObject | 5.0 and higher | documented |
ZwSetSystemEnvironmentValueEx | 6.2 and higher | |
ZwSetSystemInformation | 3.51 and higher | |
ZwSetSystemTime | 4.0 and higher | |
ZwSetTimer | 3.51, and 5.0 and higher | reserved |
ZwSetTimerEx | 6.1 and higher | declared |
ZwSetValueKey | 3.51 and higher | documented |
ZwSetVolumeInformationFile | 5.0 and higher | documented |
ZwTerminateJobObject | 5.1 and higher | |
ZwTerminateProcess | 4.0 and higher | documented |
ZwTraceControl | 10.0 and higher | |
ZwTraceEvent | 6.1 and higher | |
ZwTranslateFilePath | 5.1 and higher | |
ZwUnloadDriver | 4.0 and higher | documented |
ZwUnloadKey | 4.0 and higher | |
ZwUnloadKeyEx | 6.0 and higher | |
ZwUnlockFile | 6.1 and higher | documented |
ZwUnlockVirtualMemory | 6.2 and higher | |
ZwUnmapViewOfSection | 3.51 and higher | documented |
ZwUpdateWnfStateData | 6.2 and higher | |
ZwWaitForMultipleObjects | 3.51 and higher | |
ZwWaitForSingleObject | 3.51 and higher | documented |
ZwWriteFile | 3.51 and higher | documented |
ZwYieldExecution | 4.0 and higher | |
__C_specific_handler | 5.2 from Windows Server 2003 SP1, and higher (x64 only) | declared (CRT) |
__chkstk | 5.2 from Windows Server 2003 SP1, and higher (x64 only) | |
__misaligned_access | 5.2 from Windows Server 2003 SP1, and higher (x64 only) | |
_CIcos | 5.1 and higher (x86 only) | |
_CIsin | 5.1 and higher (x86 only) | |
_CIsqrt | 5.1 and higher (x86 only) | |
_abnormal_termination | 3.51 and higher (x86 only) | declared (CRT) |
_alldiv | 4.0 and higher (x86 only) | |
_alldvrm | 5.1 and higher (x86 only) | |
_allmul | 4.0 and higher (x86 only) | |
_alloca_probe | 5.1 and higher (x86 only) | |
_alloca_probe_16 | 6.0 and higher (x86 only) | |
_alloca_probe_8 | 6.0 and higher (x86 only) | |
_allrem | 4.0 and higher (x86 only) | |
_allshl | 4.0 and higher (x86 only) | |
_allshr | 4.0 and higher (x86 only) | |
_aulldiv | 4.0 and higher (x86 only) | |
_aulldvrm | 5.1 and higher (x86 only) | |
_aullrem | 4.0 and higher (x86 only) | |
_aullshr | 4.0 and higher (x86 only) | |
_chkstk | 6.0 and higher (x86 only) | |
_except_handler2 | 3.51 and higher (x86 only) | |
_except_handler3 | 5.0 and higher (x86 only) | |
_global_unwind2 | 3.51 and higher (x86 only) | |
_finite | 10.0 and higher | documented (CRT) |
_i64toa_s | 6.1 and higher | documented (CRT) |
_i64tow_s | 6.1 and higher | documented (CRT) |
_itoa | 3.51 and higher | documented (CRT) |
_itoa_s | 6.1 and higher | documented (CRT) |
_itow | 5.0 and higher | documented (CRT) |
_itow_s | 6.1 and higher | documented (CRT) |
_local_unwind | 5.2 from Windows Server 2003 SP1, and higher (x64 only) | |
_local_unwind2 | 3.51 and higher (x86 only) | |
_ltoa_s | 6.1 and higher | documented (CRT) |
_ltow_s | 6.1 and higher | documented (CRT) |
_makepath_s | 6.1 and higher | documented (CRT) |
_purecall | 3.51 and higher | |
_setjmp | 5.2 from Windows Server 2003 SP1, and higher (x64 only) | |
_setjmpex | 5.2 from Windows Server 2003 SP1, and higher (x64 only) | |
_snprintf | 3.51 and higher | documented (CRT) |
_snprintf_s | 6.1 and higher | documented (CRT) |
_snscanf_s | 6.1 and higher | documented (CRT) |
_snwprintf | 3.51 and higher | documented (CRT) |
_snwprintf_s | 6.1 and higher | documented (CRT) |
_snwscanf_s | 6.1 and higher | documented (CRT) |
_splitpath_s | 6.1 and higher | documented (CRT) |
_stricmp | 3.51 and higher | documented (CRT) |
_strlwr | 3.51 and higher | documented (CRT) |
_strnicmp | 3.51 and higher | documented (CRT) |
_strnset | 4.0 and higher | documented (CRT) |
_strnset_s | 6.1 and higher | documented (CRT) |
_strrev | 4.0 and higher | documented (CRT) |
_strset | 4.0 and higher | documented (CRT) |
_strset_s | 6.1 and higher | documented (CRT) |
_strtoui64 | 6.0 and higher | documented (CRT) |
_strupr | 3.51 and higher | documented (CRT) |
_swprintf | 6.0 and higher | |
_ui64toa_s | 6.1 and higher | documented (CRT) |
_ui64tow_s | 6.1 and higher | documented (CRT) |
_ultoa_s | 6.1 and higher | documented (CRT) |
_ultow_s | 6.1 and higher | documented (CRT) |
_vsnprintf | 3.51 and higher | documented (CRT) |
_vsnprintf_s | 6.1 and higher | documented (CRT) |
_vsnwprintf | 5.1 and higher | documented (CRT) |
_vsnwprintf_s | 6.1 and higher | documented (CRT) |
_vswprintf | 6.0 and higher | |
_wcsicmp | 3.51 and higher | documented (CRT) |
_wcslwr | 4.0 and higher | documented (CRT) |
_wcslwr_s | 10.0 and higher | documented (CRT) |
_wcsnicmp | 3.51 and higher | documented (CRT) |
_wcsnset | 4.0 and higher | documented (CRT) |
_wcsnset_s | 6.1 and higher | documented (CRT) |
_wcsrev | 4.0 and higher | documented (CRT) |
_wcsset_s | 6.1 and higher | documented (CRT) |
_wcsupr | 4.0 and higher | documented (CRT) |
_wmakepath_s | 6.1 and higher | documented (CRT) |
_wsplitpath_s | 6.1 and higher | documented (CRT) |
_wtoi | 6.1 and higher | documented (CRT) |
_wtol | 6.1 and higher | documented (CRT) |
atoi | 3.51 and higher | documented (CRT) |
atol | 3.51 and higher | documented (CRT) |
bsearch | 6.0 and higher | documented (CRT) |
bsearch_s | 6.2 and higher | documented (CRT) |
isdigit | 3.51 and higher | documented (CRT) |
islower | 3.51 and higher | documented (CRT) |
isprint | 3.51 and higher | documented (CRT) |
isspace | 3.51 and higher | documented (CRT) |
isupper | 3.51 and higher | documented (CRT) |
iswalnum | 10.0 and higher | documented (CRT) |
iswdigit | 10.0 and higher | documented (CRT) |
iswspace | 10.0 and higher | documented (CRT) |
isxdigit | 3.51 and higher | documented (CRT) |
longjmp | 5.2 from Windows Server 2003 SP1, and higher (x64 only) | documented (CRT) |
mbstowcs | 3.51 and higher | documented (CRT) |
mbtowc | 4.0 and higher | documented (CRT) |
memchr | 3.51 and higher | documented (CRT) |
memcmp | 5.2 from Windows Server 2003 SP1, and higher (x64); 6.2 and higher (x86) |
documented (CRT) |
memcpy | 3.51 and higher | documented (CRT) |
memcpy_s | 6.1 and higher | documented (CRT) |
memmove | 3.51 and higher | documented (CRT) |
memmove_s | 6.1 and higher | documented (CRT) |
memset | 3.51 and higher | documented (CRT) |
psMUITest (data) | 6.0 and higher | |
qsort | 3.51 and higher | documented (CRT) |
rand | 3.51 and higher | documented (CRT) |
sprintf | 3.51 and higher | documented (CRT) |
sprintf_s | 6.1 and higher | documented (CRT) |
sqrt | 10.0 and higher (x64 only) | documented (CRT) |
sqrtf | 10.0 and higher (x64 only) | documented (CRT) |
srand | 3.51 and higher | documented (CRT) |
sscanf_s | 6.1 and higher | documented (CRT) |
strcat | 4.0 and higher | documented (CRT) |
strcat_s | 6.1 and higher | documented (CRT) |
strchr | 3.51 and higher | documented (CRT) |
strcmp | 4.0 and higher | documented (CRT) |
strcpy | 4.0 and higher | documented (CRT) |
strcpy_s | 6.1 and higher | documented (CRT) |
strlen | 4.0 and higher | documented (CRT) |
strncat | 4.0 and higher | documented (CRT) |
strncat_s | 6.1 and higher | documented (CRT) |
strncmp | 3.51 and higher | documented (CRT) |
strncpy | 3.51 and higher | documented (CRT) |
strncpy_s | 6.1 and higher | documented (CRT) |
strnlen | 6.1 and higher | documented (CRT) |
strrchr | 3.51 and higher | documented (CRT) |
strspn | 4.0 and higher | documented (CRT) |
strstr | 3.51 and higher | documented (CRT) |
strtok_s | 6.1 and higher | documented (CRT) |
swprintf | 3.51 and higher | documented (CRT) |
swprintf_s | 6.1 and higher | documented (CRT) |
swscanf_s | 6.1 and higher | documented (CRT) |
tolower | 3.51 and higher | documented (CRT) |
toupper | 3.51 and higher | documented (CRT) |
towlower | 4.0 and higher | documented (CRT) |
towupper | 4.0 and higher | documented (CRT) |
vDbgPrintEx | 5.1 and higher | documented |
vDbgPrintExWithPrefix | 5.1 and higher | documented |
vsprintf | 3.51 and higher | documented (CRT) |
vsprintf_s | 6.1 and higher | documented (CRT) |
vswprintf_s | 6.1 and higher | documented (CRT) |
wcscat | 3.51 and higher | documented (CRT) |
wcscat_s | 6.1 and higher | documented (CRT) |
wcschr | 3.51 and higher | documented (CRT) |
wcscmp | 3.51 and higher | documented (CRT) |
wcscpy | 3.51 and higher | documented (CRT) |
wcscpy_s | 6.1 and higher | documented (CRT) |
wcscspn | 3.51 and higher | documented (CRT) |
wcslen | 3.51 and higher | documented (CRT) |
wcsncat | 4.0 and higher | documented (CRT) |
wcsncat_s | 6.1 and higher | documented (CRT) |
wcsncmp | 3.51 and higher | documented (CRT) |
wcsncpy | 3.51 and higher | documented (CRT) |
wcsncpy_s | 6.1 and higher | documented (CRT) |
wcsnlen | 6.1 and higher | documented (CRT) |
wcsrchr | 3.51 and higher | documented (CRT) |
wcsspn | 4.0 and higher | documented (CRT) |
wcsstr | 3.51 and higher | documented (CRT) |
wcstombs | 4.0 and higher | documented (CRT) |
wcstoul | 6.1 and higher | documented (CRT) |
wctomb | 4.0 and higher | documented (CRT) |
Names are reproduced from the export directory of the NTOSKRNL.EXE executable. All exports from the kernel are by name until version 6.2 introduces two that are exported only by ordinal. Names for ordinal-only exports are inferred from symbol files that Microsoft supplies for customer support. The ordinal is given in parentheses immediately after the function’s name.
A few exports are of variables rather than functions. They are marked above by the word “data” in parentheses. These notes talk of all as functions, hoping no confusion will be caused by such loose terminology.
Since experience shows that this table is not always read with the knowledge of an advanced programmer, it must be stressed that a function’s presence in the export directory does not mean that the function is implemented non-trivially, let alone that it will work satisfactorily if called. It means just that the function can be imported by other modules, and be called by them, for better or worse. That a function is first exported in some version does not mean that Microsoft supports its use in that version, even if such support is documented for later versions.
The kernel versions shown for each function are inferred from a study of public releases such as I have managed to find on MSDN discs or downloaded from Microsoft’s free websites. My holdings are incomplete and I anyway have no time for (or interest in) examining pre-release builds or hotfixes. Of necessity then, the table makes what I hope are reasonable assumptions about likely continuity, especially to suppose that a function will exist in future versions or that a function exists in all builds of a version if no counter-example is yet known. If you want more accurate or comprehensive information, try getting it from Microsoft.
A quick list of the studied versions is:
Except where otherwise stated, the chosen reference edition of the Windows Driver Kit (WDK) for all comment on Microsoft’s documentation and programming support is version 7600.16385.0, mostly with documentation dated to 18th June 2009 and header files to 13th July 2009. This was the WDK’s first public release for Windows 7.
Choosing one reference edition is not ideal for all purposes. Functions inevitably will be added for Windows versions that get released afterwards, and will typically not be listed above as documented until a new reference edition is adopted. I do not intend to poll Microsoft’s websites to keep the documentation status up to date. I may not even be able to sustain a programme of regularly updating this list to match new choices of reference edition even years apart. If you want more frequent updating, then please remember that this bookkeeping is done at my own expense in the public interest: look instead for an alternative that is done commercially or by academics who draw a salary.
There is also potentially a loss of history because the chosen reference edition is too recent. Of interest perhaps only to historians is that even documented functions are sometimes discontinued, meaning specifically that later versions do not export them. Do not rely on me to have searched old editions of the WDK to find whether discontinued functions ever were documented.
Of potentially much wider interest is that new functions are often not documented immediately by Microsoft and sometimes not for several years. That a function is marked above as documented does not mean that it has always been documented, only that it is documented in the chosen reference edition (or that I have noticed later documentation of it online). I tend to think that delayed documentation imposes significant costs on and barriers to third-party software development. However, nobody can sensibly consider the question without a careful account of the documentation history. For as much precision as I happen yet to know about the history of a function’s documentation, look for the function in the version lists. Please be aware that this is a work in progress. For thousands of functions, each to be looked for in nearly a dozen sources of documentation, there are bound to be some mistakes in my descriptions, and my account of the history is anyway deficient for not having found an Installable File System (IFS) Kit for any release of Windows XP or Windows Server 2003.
The IFS Kit is especially notable in this context of delayed documentation. Of the kernel functions that Microsoft does document, a significant proportion (not quite a third) are documented in the WDK only by the relatively recent inclusion of the IFS Kit which was for many years not nearly as readily available as was the ordinary Device Driver Kit (DDK). According to stories that can still be found on the Internet, Microsoft’s practice if only in the early years of Windows was that the IFS Kit was not just very expensive, relative for instance to an MSDN subscription, but also was sold only under some sort of Non-Disclosure Agreement. If the latter is true, then functions that were documented only in the IFS Kit were undocumented in effect, at least in the early years. In any case, even the IFS Kit didn’t come with formal documentation until Windows 2000.
For some functions, the whole of Microsoft’s documentation is that the function is reserved for use by the system. Undocumented functions are occasionally promoted to reserved. Only very rarely is a reserved function later documented with any substance. That a function is marked above as “reserved” means that the only known mention of it in the current reference edition of Microsoft’s documentation is to say some such thing as that the function is reserved for the system and is not to be used in drivers. The function may have its own page or it may just appear in a list of names.
Other functions are said to be obsolete. These often are given with prototypes and sometimes with substantial documentation, presumably from before the function became obsolete. A few were already obsolete as early as the Windows NT 4.0 DDK and a few others seem to have gone directly from undocumented to obsolete. That a function is marked above as ”obsolete” means that its page of documentation in the current reference edition is anything from slight to substantial but includes a remark that the function is obsolete without qualification. That a function is documented as obsolete for specified (typically recent) versions does not make it obsolete for this list but is a detail that may be recorded separately in the version lists.
Even for the functions that Microsoft does document non-trivially, Microsoft provides no master list. Documentation is scattered through the WDK. I see no easy way to automate a search and I have not typed the name of every function into the Document Explorer’s (surprisingly primitive) search pane. I have marked a function as documented if I have seen in the Contents pane that the function has its own page anywhere under numerous applicable headings. That a function is not marked above as “documented” (or is marked on other pages as “undocumented”) does not mean for certain that Microsoft does not document it, just that I haven’t yet found where.
Some exports, especially of variables, are documented indirectly in the sense that a WDK header file defines a macro for access to the variable and the macro is documented. Such cases as I have found for the table are marked above by appending “macro” in brackets. To learn the identity of the macro, follow the export into the version lists.
A handful of functions have user-mode equivalents, with the same prototypes, which are documented in the Software Development Kit (SDK). The user-mode documentation of such functions appears to be good for kernel-mode. These functions are marked in the table as documented but with SDK appended in brackets. There may be more to find of these.
While on the matter of equivalent user-mode documentation, special mention must be made of NTDLL. Many kernel-mode functions whose names start with Nt, Rtl or Zw also exist as user-mode functions exported from NTDLL. The WDK seems intended not just for kernel-mode programming but also for user-mode programming of the low-level sort that deals directly with NTDLL rather than with the base modules of the Win32 subsystem, e.g., with KERNEL32. Unfortunately, the WDK documentation and header files rarely state explicitly whether what is said of a function is meant just for the kernel or also for NTDLL or just for NTDLL. I have not yet worked out how to record this in the lists.
Finally, the kernel implements a selection of functions from the C Run-Time (CRT) Library. Some are not documented even for the CRT because in practice all calls to them are generated by the compiler, but most are the sort of utility functions that no C or C++ programmer would want to be without. They could be supported through a kernel-mode DLL, but since the kernel uses them anyway, the implementations in the kernel are as well to be exported. The CRT documentation is good for these, even though the functions are not formally documented as being exported from the kernel. These functions are marked in the table by adding CRT in brackets.
Of the kernel functions that seem to have no formal documentation, many are at least declared in one or another header file from the WDK. Functions that are declared but not documented often do get documented before long.
As a quick summary, just over half of all kernel exports are documented, including just to say that the function is obsolete or reserved. The flip side is that roughly 30% of exports from the Windows kernel are completely undocumented, without even a declaration in a WDK header file.
Many of the undocumented functions seem likely to be imported by the HAL. These would likely be documented in some HAL Development Kit, not that such a thing is public. Even regarded as undocumented functions, they are arguably internal to Windows, intended just for the private communication of HAL and kernel. Some other undocumented kernel exports surely are used by drivers and other kernel-mode modules that are written by Microsoft and supplied with Windows but whose replacement by third-party software is at least conceivable. Identifying such cases is left for another time.