Geoff Chappell - Software Analyst
The large table on this page lists the 232 exports that were added to the Windows kernel in its first release for version 6.1., i.e., for the original Windows 7.
| Function | Remarks |
|---|---|
| CcCoherencyFlushAndPurgeCache | |
| CcCopyWriteWontFlush | documented since 2000; redefined as macro if building for earlier versions |
| CmKeyObjectType (data) | |
| DbgkLkmdRegisterCallback | |
| DbgkLkmdUnregisterCallback | |
| EtwWriteEx | |
| ExQueryAttributeInformation | |
| ExRegisterAttributeInformationCallback | |
| ExRegisterExtension | |
| ExSetResourceOwnerPointerEx | |
| ExUnregisterAttributeInformationCallback | |
| ExUnregisterExtension | |
| FsRtlAreThereCurrentOrInProgressFileLocks | |
| FsRtlCurrentOplockH | |
| FsRtlGetVirtualDiskNestingLevel | declaration requires Windows Vista and higher |
| FsRtlInitializeExtraCreateParameter | |
| FsRtlInitializeExtraCreateParameterList | |
| FsRtlOplockBreakH | |
| FsRtlOplockBreakToNoneEx | |
| FsRtlOplockFsctrlEx | |
| FsRtlOplockIsSharedRequest | |
| FsRtlOplockKeysEqual | |
| FsRtlQueryMaximumVirtualDiskNestingLevel | |
| IoAdjustStackSizeForRedirection | |
| IoGetAffinityInterrupt | |
| IoGetContainerInformation | |
| IoGetDeviceNumaNode | |
| IoGetOplockKeyContext | |
| IoRegisterContainerNotification | |
| IoRegisterFsRegistrationChangeMountAware | |
| IoRegisterPriorityCallback | |
| IoReplaceFileObjectName | |
| IoReportRootDevice | |
| IoSetFileObjectIgnoreSharing | |
| IoSetOplockKeyContext | |
| IoUnregisterContainerNotification | |
| IoUnregisterPlugPlayNotificationEx | |
| IoUnregisterPriorityCallback | |
| KeAddGroupAffinityEx | |
| KeAddProcessorAffinityEx | |
| KeAddProcessorGroupAffinity | |
| KeAllocateCalloutStackEx | |
| KeAndAffinityEx | |
| KeAndGroupAffinityEx | |
| KeCheckProcessorAffinityEx | |
| KeCheckProcessorGroupAffinity | |
| KeComplementAffinityEx | |
| KeCopyAffinityEx | |
| KeCountSetBitsAffinityEx | |
| KeCountSetBitsGroupAffinity | |
| KeEnumerateNextProcessor | |
| KeFindFirstSetLeftAffinityEx | |
| KeFindFirstSetLeftGroupAffinity | |
| KeFindFirstSetRightGroupAffinity | |
| KeFirstGroupAffinityEx | |
| KeGetCurrentNodeNumber | |
| KeGetCurrentProcessorNumberEx | |
| KeGetProcessorIndexFromNumber | |
| KeGetProcessorNumberFromIndex | |
| KeGetXSaveFeatureFlags | |
| KeInitializeAffinityEx | |
| KeInitializeEnumerationContext | |
| KeInitializeEnumerationContextFromGroup | |
| KeInterlockedClearProcessorAffinityEx | |
| KeInterlockedSetProcessorAffinityEx | |
| KeIsEmptyAffinityEx | |
| KeIsEqualAffinityEx | |
| KeIsSingleGroupAffinityEx | |
| KeIsSubsetAffinityEx | |
| KeOrAffinityEx | |
| KePollFreezeExecution | x86 only |
| KeProcessorGroupAffinity | |
| KeQueryActiveGroupCount | |
| KeQueryActiveProcessorAffinity | |
| KeQueryActiveProcessorCountEx | |
| KeQueryGroupAffinity | |
| KeQueryGroupAffinityEx | |
| KeQueryHardwareCounterConfiguration | |
| KeQueryHighestNodeNumber | |
| KeQueryLogicalProcessorRelationship | |
| KeQueryMaximumGroupCount | |
| KeQueryMaximumProcessorCountEx | |
| KeQueryNodeActiveAffinity | |
| KeQueryNodeMaximumProcessorCount | |
| KeQueryUnbiasedInterruptTime | |
| KeRemoveGroupAffinityEx | |
| KeRemoveProcessorAffinityEx | |
| KeRemoveProcessorGroupAffinity | |
| KeRestoreExtendedProcessorState | |
| KeRevertToUserGroupAffinityThread | |
| KeSaveExtendedProcessorState | |
| KeSetCoalescableTimer | |
| KeSetHardwareCounterConfiguration | |
| KeSetSystemGroupAffinityThread | |
| KeSetTargetProcessorDpcEx | |
| KeSubtractAffinityEx | |
| NtCreateTransactionManager | documentation requires Windows Vista and higher; declaration requires Windows Vista and higher |
| NtOpenTransactionManager | documentation requires Windows Vista and higher; declaration requires Windows Vista and higher |
| NtPrePrepareComplete | documentation requires Windows Vista and higher; declaration requires Windows Vista and higher |
| NtPropagationComplete | declaration requires Windows Vista and higher |
| NtPropagationFailed | declaration requires Windows Vista and higher |
| NtQuerySecurityAttributesToken | |
| NtQuerySystemInformationEx | |
| NtReadOnlyEnlistment | documentation requires Windows Vista and higher; declaration requires Windows Vista and higher |
| NtRecoverEnlistment | documentation requires Windows Vista and higher; declaration requires Windows Vista and higher |
| NtRecoverResourceManager | documentation requires Windows Vista and higher; declaration requires Windows Vista and higher |
| NtRecoverTransactionManager | documentation requires Windows Vista and higher; declaration requires Windows Vista and higher |
| NtRollbackComplete | documentation requires Windows Vista and higher; declaration requires Windows Vista and higher |
| NtSetInformationToken | declaration requires Windows XP and higher |
| ObDereferenceObjectDeferDeleteWithTag | |
| ObGetObjectType | |
| ObOpenObjectByPointerWithTag | |
| ObQueryNameInfo | |
| ObReferenceObjectByHandleWithTag | |
| ObReferenceObjectByPointerWithTag | |
| ObfDereferenceObjectWithTag | |
| ObfReferenceObjectWithTag | |
| PcwAddInstance | |
| PcwCloseInstance | |
| PcwCreateInstance | |
| PcwRegister | |
| PcwUnregister | |
| PoClearPowerRequest | |
| PoCreatePowerRequest | |
| PoDeletePowerRequest | |
| PoEndDeviceBusy | |
| PoQueryWatchdogTime | |
| PoSetPowerRequest | |
| PoStartDeviceBusy | |
| RtlCompareUnicodeStrings | |
| RtlContractHashTable | |
| RtlCreateHashTable | |
| RtlDeleteHashTable | |
| RtlDowncaseUnicodeChar | documented before exported; documentation since 2008-2009 requires Windows XP and higher; declaration requires Windows XP and higher |
| RtlEndEnumerationHashTable | |
| RtlEndWeakEnumerationHashTable | |
| RtlEnumerateEntryHashTable | |
| RtlEthernetAddressToStringA | also exported from NTDLL version 6.1 and higher; declaration is in SDK for NTDLL |
| RtlEthernetAddressToStringW | also exported from NTDLL version 6.1 and higher; declaration is in SDK for NTDLL |
| RtlEthernetStringToAddressA | also exported from NTDLL version 6.1 and higher; declaration is in SDK for NTDLL |
| RtlEthernetStringToAddressW | also exported from NTDLL version 6.1 and higher; declaration is in SDK for NTDLL |
| RtlExpandHashTable | |
| RtlFillMemoryUlonglong | x86 only; documented before exported, as early as 2000; declaration requires Windows XP and higher; defined inline for x64 to use compiler intrinsic __stosq |
| RtlFindAceByType | |
| RtlGetEnabledExtendedFeatures | |
| RtlGetLastRange | |
| RtlGetNextEntryHashTable | |
| RtlInitEnumerationHashTable | |
| RtlInitWeakEnumerationHashTable | |
| RtlInsertEntryHashTable | |
| RtlLoadString | |
| RtlLookupEntryHashTable | |
| RtlOwnerAcesPresent | |
| RtlRemoveEntryHashTable | |
| RtlReplaceSidInSid | |
| RtlUTF8ToUnicodeN | |
| RtlUnicodeToUTF8N | |
| RtlWeaklyEnumerateEntryHashTable | |
| SeAccessCheckEx | |
| SeAccessCheckWithHint | |
| SeAuditingAnyFileEventsWithContext | |
| SeAuditingWithTokenForSubcategory | |
| SeQuerySecurityAttributesToken | |
| SeSetSecurityAttributesToken | |
| SeSrpAccessCheck | |
| WheaAttemptPhysicalPageOffline | x64 only |
| WheaConfigureErrorSource | |
| WheaDeferredRecoveryService | x64 only |
| WheaInitializeDeferredRecoveryObject | x64 only |
| WheaInitializeRecordHeader | |
| WheaRequestDeferredRecovery | x64 only |
| ZwCommitComplete | documented before exported, as early as 2007; documentation requires Windows Vista and higher; declaration requires Windows Vista and higher |
| ZwLockFile | declaration requires Windows Vista and higher |
| ZwNotifyChangeSession | |
| ZwOpenKeyEx | |
| ZwOpenKeyTransactedEx | |
| ZwOpenSession | |
| ZwPrePrepareComplete | documented before exported, as early as 2007; documentation requires Windows Vista and higher; declaration requires Windows Vista and higher |
| ZwPropagationComplete | |
| ZwPropagationFailed | |
| ZwQueryQuotaInformationFile | documented before exported, as early as 2006; documentation until 2008-2009 requires Windows XP and higher; declaration requires Windows Vista and higher |
| ZwQuerySecurityAttributesToken | |
| ZwReadOnlyEnlistment | documented before exported, as early as 2007; documentation requires Windows Vista and higher; declaration requires Windows Vista and higher |
| ZwRollbackComplete | documented before exported, as early as 2007; documentation requires Windows Vista and higher; declaration requires Windows Vista and higher |
| ZwSetInformationResourceManager | documented before exported, as early as 2006; documentation requires Windows Vista and higher; declaration requires Windows Vista and higher |
| ZwSetInformationToken | documented before exported, as early as 2006; documentation until 2008-2009 requires Windows XP and higher |
| ZwSetQuotaInformationFile | documented before exported, as early as 2006; documentation until 2008-2009 requires Windows XP and higher; declaration requires Windows Vista and higher |
| ZwSetTimerEx | |
| ZwTraceEvent | |
| ZwUnlockFile | declaration requires Windows Vista and higher |
| _i64toa_s | |
| _i64tow_s | |
| _itoa_s | |
| _itow_s | |
| _ltoa_s | |
| _ltow_s | |
| _makepath_s | |
| _snprintf_s | |
| _snscanf_s | |
| _snwprintf_s | |
| _snwscanf_s | |
| _splitpath_s | |
| _strnset_s | |
| _strset_s | |
| _ui64toa_s | |
| _ui64tow_s | |
| _ultoa_s | |
| _ultow_s | |
| _vsnprintf_s | |
| _vsnwprintf_s | |
| _wcsnset_s | |
| _wcsset_s | |
| _wmakepath_s | |
| _wsplitpath_s | |
| _wtoi | |
| _wtol | |
| memcpy_s | |
| memmove_s | |
| sprintf_s | |
| sscanf_s | |
| strcat_s | |
| strcpy_s | |
| strncat_s | |
| strncpy_s | |
| strnlen | |
| strtok_s | |
| swprintf_s | |
| swscanf_s | |
| vsprintf_s | |
| vswprintf_s | |
| wcscat_s | |
| wcscpy_s | |
| wcsncat_s | |
| wcsncpy_s | |
| wcsnlen | |
| wcstoul |