Geoff Chappell, Software Analyst
The table below lists the functions that are first exported by the Windows kernel in the version 5.1 from Windows XP SP2. All are still exported in version 6.1, though one does not appear in any known build of version 5.2.
Only one of these added functions is documented. Its documentation says nothing about applicable versions and is anyway curious for having appeared in the Device Driver Kit (DDK) for Windows XP SP1.
Function | Remarks |
---|---|
ExAcquireRundownProtectionEx | |
ExReleaseRundownProtectionEx | |
ExfAcquirePushLockExclusive | |
ExfAcquirePushLockShared | |
ExfReleasePushLock | |
KeFlushQueuedDpcs | documented before available, at least as early as 2002 |
MmCommitSessionMappedView | |
RtlAddAccessAllowedAceEx | undocumented until 2008-2009; documentation requires Windows 2000 and higher; declaration requires Windows 2000 and higher |
RtlIpv4AddressToStringExA | also exported from NTDLL version 5.1 from Windows XP SP2, and higher;
documentation and declaration are in SDK for NTDLL; documentation requires Windows Vista and higher; declaration requires Windows Vista and higher |
RtlIpv4AddressToStringExW | also exported from NTDLL version 5.1 from Windows XP SP2, and higher;
documentation and declaration are in SDK for NTDLL; documentation requires Windows Vista and higher; declaration requires Windows Vista and higher |
RtlIpv4StringToAddressExA | also exported from NTDLL version 5.1 from Windows XP SP2, and higher;
documentation and declaration are in SDK for NTDLL; documentation requires Windows Vista and higher; declaration requires Windows Vista and higher |
RtlIpv4StringToAddressExW | also exported from NTDLL version 5.1 from Windows XP SP2, and higher;
documentation and declaration are in SDK for NTDLL; documentation requires Windows Vista and higher; declaration requires Windows Vista and higher |
RtlIpv6AddressToStringExA | also exported from NTDLL version 5.1 from Windows XP SP2, and higher;
documentation and declaration are in SDK for NTDLL; documentation requires Windows Vista and higher; declaration requires Windows Vista and higher |
RtlIpv6AddressToStringExW | also exported from NTDLL version 5.1 from Windows XP SP2, and higher;
documentation and declaration are in SDK for NTDLL; documentation requires Windows Vista and higher; declaration requires Windows Vista and higher |
RtlIpv6StringToAddressExA | also exported from NTDLL version 5.1 from Windows XP SP2, and higher;
documentation and declaration are in SDK for NTDLL; documentation requires Windows Vista and higher; declaration requires Windows Vista and higher |
RtlIpv6StringToAddressExW | also exported from NTDLL version 5.1 from Windows XP SP2, and higher;
documentation and declaration are in SDK for NTDLL; documentation requires Windows Vista and higher; declaration requires Windows Vista and higher |
SeAuditingFileEventsWithContext | |
SeAuditingHardLinkEventsWithContext | |
SeTokenIsWriteRestricted | not in 5.2 |