Kernel Version 6.1 Exports

The large table on this page lists the 232 exports that were added to the Windows kernel in its first release for version 6.1., i.e., for the original Windows 7 and Windows Server 2008 R2. An addition for Windows 7 SP1 and Windows Server 2008 R2 SP1 is listed separately.

Documentation status is summarised by colour coding so that more detail can be given as Remarks with less text. Functions that have their own non-trivial documentation are shown with no background colour. If the whole of the documentation is just that the function is reserved or obsolete, without even giving a prototype, then the function is highlighted red or highlighted pink, respectively. An undocumented function that is at least declared in one or another header file from the Windows Driver Kit (WDK) is highlighted orange. Functions that appear to be completely undocumented are highlighted yellow. If a function is documented now but is known not to have been documented in the first contemporaneous Device Driver Kit (DDK), WDK or Installable File System (IFS), then it is shaded yellow to retain some of its previous status as undocumented.

Function Remarks
CcCoherencyFlushAndPurgeCache  
CcCopyWriteWontFlush documented since 2000;
redefined as macro if building for earlier versions
CmKeyObjectType (data)  
DbgkLkmdRegisterCallback  
DbgkLkmdUnregisterCallback  
EtwWriteEx  
ExQueryAttributeInformation discontinued in 6.3
ExRegisterAttributeInformationCallback discontinued in 6.3
ExRegisterExtension  
ExSetResourceOwnerPointerEx  
ExUnregisterAttributeInformationCallback discontinued in 6.3
ExUnregisterExtension  
FsRtlAreThereCurrentOrInProgressFileLocks  
FsRtlCurrentOplockH  
FsRtlGetVirtualDiskNestingLevel declaration requires Windows Vista and higher
FsRtlInitializeExtraCreateParameter  
FsRtlInitializeExtraCreateParameterList  
FsRtlOplockBreakH  
FsRtlOplockBreakToNoneEx  
FsRtlOplockFsctrlEx  
FsRtlOplockIsSharedRequest  
FsRtlOplockKeysEqual  
FsRtlQueryMaximumVirtualDiskNestingLevel  
IoAdjustStackSizeForRedirection  
IoGetAffinityInterrupt  
IoGetContainerInformation  
IoGetDeviceNumaNode  
IoGetOplockKeyContext  
IoRegisterContainerNotification  
IoRegisterFsRegistrationChangeMountAware  
IoRegisterPriorityCallback  
IoReplaceFileObjectName  
IoReportRootDevice  
IoSetFileObjectIgnoreSharing  
IoSetOplockKeyContext discontinued in 6.2
IoUnregisterContainerNotification  
IoUnregisterPlugPlayNotificationEx  
IoUnregisterPriorityCallback  
KeAddGroupAffinityEx  
KeAddProcessorAffinityEx  
KeAddProcessorGroupAffinity  
KeAllocateCalloutStackEx  
KeAndAffinityEx  
KeAndGroupAffinityEx  
KeCheckProcessorAffinityEx  
KeCheckProcessorGroupAffinity  
KeComplementAffinityEx  
KeCopyAffinityEx  
KeCountSetBitsAffinityEx  
KeCountSetBitsGroupAffinity  
KeEnumerateNextProcessor  
KeFindFirstSetLeftAffinityEx  
KeFindFirstSetLeftGroupAffinity  
KeFindFirstSetRightGroupAffinity  
KeFirstGroupAffinityEx  
KeGetCurrentNodeNumber  
KeGetCurrentProcessorNumberEx  
KeGetProcessorIndexFromNumber  
KeGetProcessorNumberFromIndex  
KeGetXSaveFeatureFlags  
KeInitializeAffinityEx  
KeInitializeEnumerationContext  
KeInitializeEnumerationContextFromGroup  
KeInterlockedClearProcessorAffinityEx  
KeInterlockedSetProcessorAffinityEx  
KeIsEmptyAffinityEx  
KeIsEqualAffinityEx  
KeIsSingleGroupAffinityEx  
KeIsSubsetAffinityEx  
KeOrAffinityEx  
KePollFreezeExecution x86 only
KeProcessorGroupAffinity  
KeQueryActiveGroupCount  
KeQueryActiveProcessorAffinity  
KeQueryActiveProcessorCountEx  
KeQueryGroupAffinity  
KeQueryGroupAffinityEx  
KeQueryHardwareCounterConfiguration  
KeQueryHighestNodeNumber  
KeQueryLogicalProcessorRelationship  
KeQueryMaximumGroupCount  
KeQueryMaximumProcessorCountEx  
KeQueryNodeActiveAffinity  
KeQueryNodeMaximumProcessorCount  
KeQueryUnbiasedInterruptTime  
KeRemoveGroupAffinityEx  
KeRemoveProcessorAffinityEx  
KeRemoveProcessorGroupAffinity  
KeRestoreExtendedProcessorState  
KeRevertToUserGroupAffinityThread  
KeSaveExtendedProcessorState  
KeSetCoalescableTimer  
KeSetHardwareCounterConfiguration  
KeSetSystemGroupAffinityThread  
KeSetTargetProcessorDpcEx  
KeSubtractAffinityEx  
NtCreateTransactionManager documentation requires Windows Vista and higher;
declaration requires Windows Vista and higher
NtOpenTransactionManager documentation requires Windows Vista and higher;
declaration requires Windows Vista and higher
NtPrePrepareComplete documentation requires Windows Vista and higher;
declaration requires Windows Vista and higher
NtPropagationComplete declaration requires Windows Vista and higher
NtPropagationFailed declaration requires Windows Vista and higher
NtQuerySecurityAttributesToken  
NtQuerySystemInformationEx  
NtReadOnlyEnlistment documentation requires Windows Vista and higher;
declaration requires Windows Vista and higher
NtRecoverEnlistment documentation requires Windows Vista and higher;
declaration requires Windows Vista and higher
NtRecoverResourceManager documentation requires Windows Vista and higher;
declaration requires Windows Vista and higher
NtRecoverTransactionManager documentation requires Windows Vista and higher;
declaration requires Windows Vista and higher
NtRollbackComplete documentation requires Windows Vista and higher;
declaration requires Windows Vista and higher
NtSetInformationToken declaration requires Windows XP and higher
ObDereferenceObjectDeferDeleteWithTag  
ObGetObjectType  
ObOpenObjectByPointerWithTag  
ObQueryNameInfo  
ObReferenceObjectByHandleWithTag  
ObReferenceObjectByPointerWithTag  
ObfDereferenceObjectWithTag  
ObfReferenceObjectWithTag  
PcwAddInstance  
PcwCloseInstance  
PcwCreateInstance  
PcwRegister  
PcwUnregister  
PoClearPowerRequest  
PoCreatePowerRequest  
PoDeletePowerRequest  
PoEndDeviceBusy  
PoQueryWatchdogTime  
PoSetPowerRequest  
PoStartDeviceBusy  
RtlCompareUnicodeStrings  
RtlContractHashTable  
RtlCreateHashTable  
RtlDeleteHashTable  
RtlDowncaseUnicodeChar documented before exported;
documentation since 2008-2009 requires Windows XP and higher;
declaration requires Windows XP and higher
RtlEndEnumerationHashTable  
RtlEndWeakEnumerationHashTable  
RtlEnumerateEntryHashTable  
RtlEthernetAddressToStringA also exported from NTDLL version 6.1 and higher;
declaration is in SDK for NTDLL
RtlEthernetAddressToStringW also exported from NTDLL version 6.1 and higher;
declaration is in SDK for NTDLL
RtlEthernetStringToAddressA also exported from NTDLL version 6.1 and higher;
declaration is in SDK for NTDLL
RtlEthernetStringToAddressW also exported from NTDLL version 6.1 and higher;
declaration is in SDK for NTDLL
RtlExpandHashTable  
RtlFillMemoryUlonglong x86 only;
documented before exported, as early as 2000;
declaration requires Windows XP and higher;
defined inline for x64 to use compiler intrinsic __stosq
RtlFindAceByType  
RtlGetEnabledExtendedFeatures  
RtlGetLastRange  
RtlGetNextEntryHashTable  
RtlInitEnumerationHashTable  
RtlInitWeakEnumerationHashTable  
RtlInsertEntryHashTable  
RtlLoadString  
RtlLookupEntryHashTable  
RtlOwnerAcesPresent  
RtlRemoveEntryHashTable  
RtlReplaceSidInSid  
RtlUTF8ToUnicodeN  
RtlUnicodeToUTF8N  
RtlWeaklyEnumerateEntryHashTable  
SeAccessCheckEx  
SeAccessCheckWithHint  
SeAuditingAnyFileEventsWithContext  
SeAuditingWithTokenForSubcategory  
SeQuerySecurityAttributesToken  
SeSetSecurityAttributesToken  
SeSrpAccessCheck  
WheaAttemptPhysicalPageOffline x64 only
WheaConfigureErrorSource  
WheaDeferredRecoveryService x64 only
WheaInitializeDeferredRecoveryObject x64 only
WheaInitializeRecordHeader  
WheaRequestDeferredRecovery x64 only
ZwCommitComplete documented before exported, as early as 2007;
documentation requires Windows Vista and higher;
declaration requires Windows Vista and higher
ZwLockFile declaration requires Windows Vista and higher
ZwNotifyChangeSession  
ZwOpenKeyEx  
ZwOpenKeyTransactedEx  
ZwOpenSession  
ZwPrePrepareComplete documented before exported, as early as 2007;
documentation requires Windows Vista and higher;
declaration requires Windows Vista and higher
ZwPropagationComplete  
ZwPropagationFailed  
ZwQueryQuotaInformationFile documented before exported, as early as 2006;
documentation until 2008-2009 requires Windows XP and higher;
declaration requires Windows Vista and higher
ZwQuerySecurityAttributesToken  
ZwReadOnlyEnlistment documented before exported, as early as 2007;
documentation requires Windows Vista and higher;
declaration requires Windows Vista and higher
ZwRollbackComplete documented before exported, as early as 2007;
documentation requires Windows Vista and higher;
declaration requires Windows Vista and higher
ZwSetInformationResourceManager documented before exported, as early as 2006;
documentation requires Windows Vista and higher;
declaration requires Windows Vista and higher
ZwSetInformationToken documented before exported, as early as 2006;
documentation until 2008-2009 requires Windows XP and higher
ZwSetQuotaInformationFile documented before exported, as early as 2006;
documentation until 2008-2009 requires Windows XP and higher;
declaration requires Windows Vista and higher
ZwSetTimerEx  
ZwTraceEvent  
ZwUnlockFile declaration requires Windows Vista and higher
_i64toa_s  
_i64tow_s  
_itoa_s  
_itow_s  
_ltoa_s  
_ltow_s  
_makepath_s  
_snprintf_s  
_snscanf_s  
_snwprintf_s  
_snwscanf_s  
_splitpath_s  
_strnset_s  
_strset_s  
_ui64toa_s  
_ui64tow_s  
_ultoa_s  
_ultow_s  
_vsnprintf_s  
_vsnwprintf_s  
_wcsnset_s  
_wcsset_s  
_wmakepath_s  
_wsplitpath_s  
_wtoi  
_wtol  
memcpy_s  
memmove_s  
sprintf_s  
sscanf_s  
strcat_s  
strcpy_s  
strncat_s  
strncpy_s  
strnlen  
strtok_s  
swprintf_s  
swscanf_s  
vsprintf_s  
vswprintf_s  
wcscat_s  
wcscpy_s  
wcsncat_s  
wcsncpy_s  
wcsnlen  
wcstoul