The listed functions are a subset of the functions present in NTDLL.DLL and NTOSKRNL.EXE.
I consider them the most important out of the whole number of functions present in these
DLLs (I am referring to the different OS versions). The C library functions are not presented
here because they are usually only used through the respective LIB files.
The dumped contents of NTDLL.DLL and NTOSKRNL.EXE of
Windows NT 3.51, Windows NT 4, Windows 2000, Windows XP and Windows 2003 give the
following output (Professional and Server versions have been compared and no difference
was found).
Note: This page makes heavy use of CSS. Thus it is necessary to have a CSS-capable browser at hand ;) Furthermore all information is color-coded ... so a monochrome display won't help much as well ;)
| Function names | OS versions |
|---|---|
| Jump to: Cc, Cm, Csr, Dbg, Etw, Ex, Fs, Hal, Inbv, Interlocked, Io, Kd, Ke, Ki, Ldr, Lpc, Lsa, Mm, Nls, Nt, Ob, Pfx, Po, Ps, Rtl, Se, Vf, Wmi, Zw | |
| CcCanIWrite | NT3NT4W2KWXP2K3 |
| CcCopyRead | NT3NT4W2KWXP2K3 |
| CcCopyWrite | NT3NT4W2KWXP2K3 |
| CcDeferWrite | NT3NT4W2KWXP2K3 |
| CcFastCopyRead | NT4W2KWXP2K3 |
| CcFastCopyWrite | NT4W2KWXP2K3 |
| CcFastMdlReadWait | NT4W2KWXP2K3 |
| CcFastReadNotPossible | NT4W2KWXP2K3 |
| CcFastReadWait | NT4W2KWXP2K3 |
| CcFlushCache | NT3NT4W2KWXP2K3 |
| CcGetDirtyPages | NT3NT4W2KWXP2K3 |
| CcGetFileObjectFromBcb | NT3NT4W2KWXP2K3 |
| CcGetFileObjectFromSectionPtrs | NT3NT4W2KWXP2K3 |
| CcGetFlushedValidData | W2KWXP2K3 |
| CcGetLsnForFileObject | NT3NT4W2KWXP2K3 |
| CcInitializeCacheMap | NT3NT4W2KWXP2K3 |
| CcIsThereDirtyData | NT3NT4W2KWXP2K3 |
| CcMapData | NT3NT4W2KWXP2K3 |
| CcMdlRead | NT3NT4W2KWXP2K3 |
| CcMdlReadComplete | NT3NT4W2KWXP2K3 |
| CcMdlWriteAbort | WXP2K3 |
| CcMdlWriteComplete | NT3NT4W2KWXP2K3 |
| CcPinMappedData | NT3NT4W2KWXP2K3 |
| CcPinRead | NT3NT4W2KWXP2K3 |
| CcPrepareMdlWrite | NT3NT4W2KWXP2K3 |
| CcPreparePinWrite | NT3NT4W2KWXP2K3 |
| CcPurgeCacheSection | NT3NT4W2KWXP2K3 |
| CcRemapBcb | W2KWXP2K3 |
| CcRepinBcb | NT3NT4W2KWXP2K3 |
| CcScheduleReadAhead | NT3NT4W2KWXP2K3 |
| CcSetAdditionalCacheAttributes | NT3NT4W2KWXP2K3 |
| CcSetBcbOwnerPointer | NT4W2KWXP2K3 |
| CcSetDirtyPageThreshold | NT3NT4W2KWXP2K3 |
| CcSetDirtyPinnedData | NT3NT4W2KWXP2K3 |
| CcSetFileSizes | NT3NT4W2KWXP2K3 |
| CcSetLogHandleForFile | NT3NT4W2KWXP2K3 |
| CcSetReadAheadGranularity | NT3NT4W2KWXP2K3 |
| CcUninitializeCacheMap | NT3NT4W2KWXP2K3 |
| CcUnpinData | NT3NT4W2KWXP2K3 |
| CcUnpinDataForThread | NT3NT4W2KWXP2K3 |
| CcUnpinRepinnedBcb | NT3NT4W2KWXP2K3 |
| CcWaitForCurrentLazyWriterActivity | W2KWXP2K3 |
| CcZeroData | NT3NT4W2KWXP2K3 |
| CmRegisterCallback | WXP2K3 |
| CmUnRegisterCallback | WXP2K3 |
| CsrAllocateCaptureBuffer | NT3NT4W2KWXP2K3 |
| CsrAllocateCapturePointer | NT3NT4 |
| CsrAllocateMessagePointer | NT3NT4W2KWXP2K3 |
| CsrCaptureMessageBuffer | NT3NT4W2KWXP2K3 |
| CsrCaptureMessageMultiUnicodeStringsInPlace | WXP2K3 |
| CsrCaptureMessageString | NT3NT4W2KWXP2K3 |
| CsrCaptureTimeout | NT3NT4W2KWXP2K3 |
| CsrClientCallServer | NT3NT4W2KWXP2K3 |
| CsrClientConnectToServer | NT3NT4W2KWXP2K3 |
| CsrClientMaxMessage | NT3 |
| CsrClientSendMessage | NT3 |
| CsrClientThreadConnect | NT3 |
| CsrFreeCaptureBuffer | NT3NT4W2KWXP2K3 |
| CsrGetProcessId | WXP2K3 |
| CsrIdentifyAlertableThread | NT3NT4W2KWXP2K3 |
| CsrNewThread | NT3NT4W2KWXP2K3 |
| CsrProbeForRead | NT3NT4W2KWXP2K3 |
| CsrProbeForWrite | NT3NT4W2KWXP2K3 |
| CsrSetPriorityClass | NT3NT4W2KWXP2K3 |
| CsrpProcessCallbackRequest | NT3 |
| DbgBreakPoint | NT3NT4W2KWXP2K3 |
| DbgBreakPointWithStatus | NT4W2KWXP2K3 |
| DbgCommandString | 2K3 |
| DbgLoadImageSymbols | NT3NT4W2KWXP2K3 |
| DbgPrint | NT3NT4W2KWXP2K3 |
| DbgPrintEx | WXP2K3 |
| DbgPrintReturnControlC | W2KWXP2K3 |
| DbgPrompt | NT3NT4W2KWXP2K3 |
| DbgQueryDebugFilterState | WXP2K3 |
| DbgSetDebugFilterState | WXP2K3 |
| DbgSsHandleKmApiMsg | NT3NT4W2K |
| DbgSsInitialize | NT3NT4W2K |
| DbgUiConnectToDbg | NT3NT4W2KWXP2K3 |
| DbgUiContinue | NT3NT4W2KWXP2K3 |
| DbgUiConvertStateChangeStructure | WXP2K3 |
| DbgUiDebugActiveProcess | WXP2K3 |
| DbgUiGetThreadDebugObject | WXP2K3 |
| DbgUiIssueRemoteBreakin | WXP2K3 |
| DbgUiRemoteBreakin | WXP2K3 |
| DbgUiSetThreadDebugObject | WXP2K3 |
| DbgUiStopDebugging | WXP2K3 |
| DbgUiWaitStateChange | NT3NT4W2KWXP2K3 |
| DbgUserBreakPoint | NT3NT4W2KWXP2K3 |
| EtwControlTraceA | 2K3 |
| EtwControlTraceW | 2K3 |
| EtwCreateTraceInstanceId | 2K3 |
| EtwEnableTrace | 2K3 |
| EtwEnumerateTraceGuids | 2K3 |
| EtwFlushTraceA | 2K3 |
| EtwFlushTraceW | 2K3 |
| EtwGetTraceEnableFlags | 2K3 |
| EtwGetTraceEnableLevel | 2K3 |
| EtwGetTraceLoggerHandle | 2K3 |
| EtwNotificationRegistrationA | 2K3 |
| EtwNotificationRegistrationW | 2K3 |
| EtwQueryAllTracesA | 2K3 |
| EtwQueryAllTracesW | 2K3 |
| EtwQueryTraceA | 2K3 |
| EtwQueryTraceW | 2K3 |
| EtwReceiveNotificationsA | 2K3 |
| EtwReceiveNotificationsW | 2K3 |
| EtwRegisterTraceGuidsA | 2K3 |
| EtwRegisterTraceGuidsW | 2K3 |
| EtwStartTraceA | 2K3 |
| EtwStartTraceW | 2K3 |
| EtwStopTraceA | 2K3 |
| EtwStopTraceW | 2K3 |
| EtwTraceEvent | 2K3 |
| EtwTraceEventInstance | 2K3 |
| EtwTraceMessage | 2K3 |
| EtwTraceMessageVa | 2K3 |
| EtwUnregisterTraceGuids | 2K3 |
| EtwUpdateTraceA | 2K3 |
| EtwUpdateTraceW | 2K3 |
| EtwpGetTraceBuffer | 2K3 |
| EtwpSetHWConfigFunction | 2K3 |
| ExAcquireFastMutexUnsafe | NT3NT4W2KWXP2K3 |
| ExAcquireResourceExclusive | NT3NT4W2K |
| ExAcquireResourceExclusiveLite | NT3NT4W2KWXP2K3 |
| ExAcquireResourceSharedLite | NT3NT4W2KWXP2K3 |
| ExAcquireRundownProtection | WXP2K3 |
| ExAcquireRundownProtectionEx | WXP2K3 |
| ExAcquireSharedStarveExclusive | NT3NT4W2KWXP2K3 |
| ExAcquireSharedWaitForExclusive | NT3NT4W2KWXP2K3 |
| ExAllocateFromPagedLookasideList | NT4W2KWXP2K3 |
| ExAllocatePool | NT3NT4W2KWXP2K3 |
| ExAllocatePoolWithQuota | NT3NT4W2KWXP2K3 |
| ExAllocatePoolWithQuotaTag | NT3NT4W2KWXP2K3 |
| ExAllocatePoolWithTag | NT3NT4W2KWXP2K3 |
| ExAllocatePoolWithTagPriority | NT4W2KWXP2K3 |
| ExConvertExclusiveToSharedLite | NT3NT4W2KWXP2K3 |
| ExCreateCallback | NT3NT4W2KWXP2K3 |
| ExDeleteNPagedLookasideList | NT4W2KWXP2K3 |
| ExDeletePagedLookasideList | NT4W2KWXP2K3 |
| ExDeleteResource | NT3NT4W2K |
| ExDeleteResourceLite | NT3NT4W2KWXP2K3 |
| ExDesktopObjectType | NT4W2KWXP2K3 |
| ExDisableResourceBoostLite | NT3NT4W2KWXP2K3 |
| ExEnumHandleTable | NT4W2KWXP2K3 |
| ExEventObjectType | NT3NT4W2KWXP2K3 |
| ExExtendZone | NT3NT4W2KWXP2K3 |
| ExFreePool | NT3NT4W2KWXP2K3 |
| ExFreePoolWithTag | W2KWXP2K3 |
| ExFreeToPagedLookasideList | NT4W2KWXP2K3 |
| ExGetCurrentProcessorCounts | WXP2K3 |
| ExGetCurrentProcessorCpuUsage | WXP2K3 |
| ExGetExclusiveWaiterCount | NT3NT4W2KWXP2K3 |
| ExGetPreviousMode | NT4W2KWXP2K3 |
| ExGetSharedWaiterCount | NT3NT4W2KWXP2K3 |
| ExInitializeNPagedLookasideList | NT4W2KWXP2K3 |
| ExInitializePagedLookasideList | NT4W2KWXP2K3 |
| ExInitializeResource | NT3NT4W2K |
| ExInitializeResourceLite | NT3NT4W2KWXP2K3 |
| ExInitializeRundownProtection | WXP2K3 |
| ExInitializeZone | NT3NT4W2KWXP2K3 |
| ExInterlockedAddLargeInteger | NT3NT4W2KWXP2K3 |
| ExInterlockedAddLargeStatistic | NT3NT4W2KWXP2K3 |
| ExInterlockedAddUlong | NT3NT4W2KWXP2K3 |
| ExInterlockedCompareExchange64 | NT4W2KWXP2K3 |
| ExInterlockedDecrementLong | NT3NT4W2KWXP2K3 |
| ExInterlockedExchangeUlong | NT3NT4W2KWXP2K3 |
| ExInterlockedExtendZone | NT3NT4W2KWXP2K3 |
| ExInterlockedFlushSList | W2KWXP2K3 |
| ExInterlockedIncrementLong | NT3NT4W2KWXP2K3 |
| ExInterlockedInsertHeadList | NT3NT4W2KWXP2K3 |
| ExInterlockedInsertTailList | NT3NT4W2KWXP2K3 |
| ExInterlockedPopEntryList | NT3NT4W2KWXP2K3 |
| ExInterlockedPopEntrySList | NT4W2KWXP2K3 |
| ExInterlockedPushEntryList | NT3NT4W2KWXP2K3 |
| ExInterlockedPushEntrySList | NT4W2KWXP2K3 |
| ExInterlockedRemoveHeadList | NT3NT4W2KWXP2K3 |
| ExIsProcessorFeaturePresent | NT4W2KWXP2K3 |
| ExIsResourceAcquiredExclusiveLite | NT3NT4W2KWXP2K3 |
| ExIsResourceAcquiredSharedLite | NT3NT4W2KWXP2K3 |
| ExLocalTimeToSystemTime | NT3NT4W2KWXP2K3 |
| ExNotifyCallback | NT3NT4W2KWXP2K3 |
| ExPostSystemEvent | NT3NT4 |
| ExQueryPoolBlockSize | NT3NT4W2KWXP2K3 |
| ExQueueWorkItem | NT3NT4W2KWXP2K3 |
| ExRaiseAccessViolation | NT3NT4W2KWXP2K3 |
| ExRaiseDatatypeMisalignment | NT3NT4W2KWXP2K3 |
| ExRaiseException | NT3NT4W2KWXP2K3 |
| ExRaiseHardError | NT3NT4W2KWXP2K3 |
| ExRaiseStatus | NT3NT4W2KWXP2K3 |
| ExReInitializeRundownProtection | WXP2K3 |
| ExRegisterCallback | NT3NT4W2KWXP2K3 |
| ExReinitializeResourceLite | NT3NT4W2KWXP2K3 |
| ExReleaseFastMutexUnsafe | NT3NT4W2KWXP2K3 |
| ExReleaseResourceForThread | NT3NT4W2K |
| ExReleaseResourceForThreadLite | NT3NT4W2KWXP2K3 |
| ExReleaseResourceLite | NT3NT4W2KWXP2K3 |
| ExReleaseRundownProtection | WXP2K3 |
| ExReleaseRundownProtectionEx | WXP2K3 |
| ExRundownCompleted | WXP2K3 |
| ExSemaphoreObjectType | W2KWXP2K3 |
| Subtotal of the above list: 200 functions Jump to: Cc, Cm, Csr, Dbg, Etw, Ex, Fs, Hal, Inbv, Interlocked, Io, Kd, Ke, Ki, Ldr, Lpc, Lsa, Mm, Nls, Nt, Ob, Pfx, Po, Ps, Rtl, Se, Vf, Wmi, Zw | |
| ExSetResourceOwnerPointer | NT4W2KWXP2K3 |
| ExSetTimerResolution | W2KWXP2K3 |
| ExSystemExceptionFilter | NT3NT4W2KWXP2K3 |
| ExSystemTimeToLocalTime | NT3NT4W2KWXP2K3 |
| ExUnregisterCallback | NT3NT4W2KWXP2K3 |
| ExUuidCreate | W2KWXP2K3 |
| ExVerifySuite | WXP2K3 |
| ExWaitForRundownProtectionRelease | WXP2K3 |
| ExWindowStationObjectType | NT4W2KWXP2K3 |
| ExfAcquirePushLockExclusive | 2K3 |
| ExfAcquirePushLockShared | 2K3 |
| ExfInterlockedAddUlong | NT3NT4W2KWXP2K3 |
| ExfInterlockedCompareExchange64 | WXP2K3 |
| ExfInterlockedInsertHeadList | NT3NT4W2KWXP2K3 |
| ExfInterlockedInsertTailList | NT3NT4W2KWXP2K3 |
| ExfInterlockedPopEntryList | NT3NT4W2KWXP2K3 |
| ExfInterlockedPushEntryList | NT3NT4W2KWXP2K3 |
| ExfInterlockedRemoveHeadList | NT3NT4W2KWXP2K3 |
| ExfReleasePushLock | 2K3 |
| ExfUnblockPushLock | 2K3 |
| Exfi386InterlockedDecrementLong | NT3NT4W2KWXP2K3 |
| Exfi386InterlockedExchangeUlong | NT3NT4W2KWXP2K3 |
| Exfi386InterlockedIncrementLong | NT3NT4W2KWXP2K3 |
| Exi386InterlockedDecrementLong | NT3NT4W2KWXP2K3 |
| Exi386InterlockedExchangeUlong | NT3NT4W2KWXP2K3 |
| Exi386InterlockedIncrementLong | NT3NT4W2KWXP2K3 |
| FsRtlAcquireFileExclusive | W2KWXP2K3 |
| FsRtlAddBaseMcbEntry | 2K3 |
| FsRtlAddLargeMcbEntry | NT3NT4W2KWXP2K3 |
| FsRtlAddMcbEntry | NT3NT4W2KWXP2K3 |
| FsRtlAddToTunnelCache | NT4W2KWXP2K3 |
| FsRtlAllocateFileLock | W2KWXP2K3 |
| FsRtlAllocatePool | NT3NT4W2KWXP2K3 |
| FsRtlAllocatePoolWithQuota | NT3NT4W2KWXP2K3 |
| FsRtlAllocatePoolWithQuotaTag | NT3NT4W2KWXP2K3 |
| FsRtlAllocatePoolWithTag | NT3NT4W2KWXP2K3 |
| FsRtlAllocateResource | NT3NT4W2KWXP2K3 |
| FsRtlAreNamesEqual | NT3NT4W2KWXP2K3 |
| FsRtlBalanceReads | NT3NT4W2KWXP2K3 |
| FsRtlCheckLockForReadAccess | NT3NT4W2KWXP2K3 |
| FsRtlCheckLockForWriteAccess | NT3NT4W2KWXP2K3 |
| FsRtlCheckOplock | NT3NT4W2KWXP2K3 |
| FsRtlCopyRead | NT3NT4W2KWXP2K3 |
| FsRtlCopyWrite | NT3NT4W2KWXP2K3 |
| FsRtlCurrentBatchOplock | NT3NT4W2KWXP2K3 |
| FsRtlDeleteKeyFromTunnelCache | NT4W2KWXP2K3 |
| FsRtlDeleteTunnelCache | NT4W2KWXP2K3 |
| FsRtlDeregisterUncProvider | NT3NT4W2KWXP2K3 |
| FsRtlDissectDbcs | NT3NT4W2KWXP2K3 |
| FsRtlDissectName | NT3NT4W2KWXP2K3 |
| FsRtlDoesDbcsContainWildCards | NT3NT4W2KWXP2K3 |
| FsRtlDoesNameContainWildCards | NT3NT4W2KWXP2K3 |
| FsRtlFastCheckLockForRead | NT3NT4W2KWXP2K3 |
| FsRtlFastCheckLockForWrite | NT3NT4W2KWXP2K3 |
| FsRtlFastUnlockAll | NT3NT4W2KWXP2K3 |
| FsRtlFastUnlockAllByKey | NT3NT4W2KWXP2K3 |
| FsRtlFastUnlockSingle | NT3NT4W2KWXP2K3 |
| FsRtlFindInTunnelCache | NT4W2KWXP2K3 |
| FsRtlFreeFileLock | W2KWXP2K3 |
| FsRtlGetFileSize | NT4W2KWXP2K3 |
| FsRtlGetNextBaseMcbEntry | 2K3 |
| FsRtlGetNextFileLock | NT3NT4W2KWXP2K3 |
| FsRtlGetNextLargeMcbEntry | NT3NT4W2KWXP2K3 |
| FsRtlGetNextMcbEntry | NT3NT4W2KWXP2K3 |
| FsRtlIncrementCcFastReadNoWait | WXP2K3 |
| FsRtlIncrementCcFastReadNotPossible | WXP2K3 |
| FsRtlIncrementCcFastReadResourceMiss | WXP2K3 |
| FsRtlIncrementCcFastReadWait | WXP2K3 |
| FsRtlInitializeBaseMcb | 2K3 |
| FsRtlInitializeFileLock | NT3NT4W2KWXP2K3 |
| FsRtlInitializeLargeMcb | NT3NT4W2KWXP2K3 |
| FsRtlInitializeMcb | NT3NT4W2KWXP2K3 |
| FsRtlInitializeOplock | NT3NT4W2KWXP2K3 |
| FsRtlInitializeTunnelCache | NT4W2KWXP2K3 |
| FsRtlInsertFilterContext | W2K |
| FsRtlInsertPerFileObjectContext | WXP2K3 |
| FsRtlInsertPerStreamContext | WXP2K3 |
| FsRtlIsDbcsInExpression | NT3NT4W2KWXP2K3 |
| FsRtlIsFatDbcsLegal | NT3NT4W2KWXP2K3 |
| FsRtlIsHpfsDbcsLegal | NT3NT4W2KWXP2K3 |
| FsRtlIsNameInExpression | NT3NT4W2KWXP2K3 |
| FsRtlIsNtstatusExpected | NT3NT4W2KWXP2K3 |
| FsRtlIsPagingFile | WXP2K3 |
| FsRtlIsTotalDeviceFailure | NT3NT4W2KWXP2K3 |
| FsRtlLegalAnsiCharacterArray | NT3NT4W2KWXP2K3 |
| FsRtlLookupBaseMcbEntry | 2K3 |
| FsRtlLookupFilterContextInternal | W2K |
| FsRtlLookupLargeMcbEntry | NT3NT4W2KWXP2K3 |
| FsRtlLookupLastBaseMcbEntry | 2K3 |
| FsRtlLookupLastBaseMcbEntryAndIndex | 2K3 |
| FsRtlLookupLastLargeMcbEntry | NT3NT4W2KWXP2K3 |
| FsRtlLookupLastLargeMcbEntryAndIndex | W2KWXP2K3 |
| FsRtlLookupLastMcbEntry | NT3NT4W2KWXP2K3 |
| FsRtlLookupMcbEntry | NT3NT4W2KWXP2K3 |
| FsRtlLookupPerFileObjectContext | WXP2K3 |
| FsRtlLookupPerStreamContextInternal | WXP2K3 |
| FsRtlMdlRead | NT3NT4W2KWXP2K3 |
| FsRtlMdlReadComplete | NT4W2KWXP2K3 |
| FsRtlMdlReadCompleteDev | NT4W2KWXP2K3 |
| FsRtlMdlReadDev | NT4W2KWXP2K3 |
| FsRtlMdlWriteComplete | NT4W2KWXP2K3 |
| FsRtlMdlWriteCompleteDev | NT4W2KWXP2K3 |
| FsRtlNormalizeNtstatus | NT3NT4W2KWXP2K3 |
| FsRtlNotifyChangeDirectory | NT3NT4W2KWXP2K3 |
| FsRtlNotifyCleanup | NT3NT4W2KWXP2K3 |
| FsRtlNotifyFilterChangeDirectory | WXP2K3 |
| FsRtlNotifyFilterReportChange | WXP2K3 |
| FsRtlNotifyFullChangeDirectory | NT3NT4W2KWXP2K3 |
| FsRtlNotifyFullReportChange | NT3NT4W2KWXP2K3 |
| FsRtlNotifyInitializeSync | NT3NT4W2KWXP2K3 |
| FsRtlNotifyReportChange | NT3NT4W2KWXP2K3 |
| FsRtlNotifyUninitializeSync | NT3NT4W2KWXP2K3 |
| FsRtlNotifyVolumeEvent | W2KWXP2K3 |
| FsRtlNumberOfRunsInBaseMcb | 2K3 |
| FsRtlNumberOfRunsInLargeMcb | NT3NT4W2KWXP2K3 |
| FsRtlNumberOfRunsInMcb | NT3NT4W2KWXP2K3 |
| FsRtlOplockFsctrl | NT3NT4W2KWXP2K3 |
| FsRtlOplockIsFastIoPossible | NT3NT4W2KWXP2K3 |
| FsRtlPostPagingFileStackOverflow | NT3NT4W2KWXP2K3 |
| FsRtlPostStackOverflow | NT3NT4W2KWXP2K3 |
| FsRtlPrepareMdlWrite | NT3NT4W2KWXP2K3 |
| FsRtlPrepareMdlWriteDev | NT4W2KWXP2K3 |
| FsRtlPrivateLock | NT3NT4W2KWXP2K3 |
| FsRtlProcessFileLock | NT3NT4W2KWXP2K3 |
| FsRtlRegisterFileSystemFilterCallbacks | WXP2K3 |
| FsRtlRegisterUncProvider | NT3NT4W2KWXP2K3 |
| FsRtlReleaseFile | W2KWXP2K3 |
| FsRtlRemoveBaseMcbEntry | 2K3 |
| FsRtlRemoveFilterContext | W2K |
| FsRtlRemoveLargeMcbEntry | NT3NT4W2KWXP2K3 |
| FsRtlRemoveMcbEntry | NT3NT4W2KWXP2K3 |
| FsRtlRemovePerFileObjectContext | WXP2K3 |
| FsRtlRemovePerStreamContext | WXP2K3 |
| FsRtlResetBaseMcb | 2K3 |
| FsRtlResetLargeMcb | W2KWXP2K3 |
| FsRtlSplitBaseMcb | 2K3 |
| FsRtlSplitLargeMcb | NT3NT4W2KWXP2K3 |
| FsRtlSyncVolumes | NT3NT4W2KWXP2K3 |
| FsRtlTeardownFilterContexts | W2K |
| FsRtlTeardownPerStreamContexts | WXP2K3 |
| FsRtlTruncateBaseMcb | 2K3 |
| FsRtlTruncateLargeMcb | NT3NT4W2KWXP2K3 |
| FsRtlTruncateMcb | NT3NT4W2KWXP2K3 |
| FsRtlUninitializeBaseMcb | 2K3 |
| FsRtlUninitializeFileLock | NT3NT4W2KWXP2K3 |
| FsRtlUninitializeLargeMcb | NT3NT4W2KWXP2K3 |
| FsRtlUninitializeMcb | NT3NT4W2KWXP2K3 |
| FsRtlUninitializeOplock | NT3NT4W2KWXP2K3 |
| HalDispatchTable | NT3NT4W2KWXP2K3 |
| HalExamineMBR | WXP2K3 |
| HalPrivateDispatchTable | NT3NT4W2KWXP2K3 |
| HeadlessDispatch | WXP2K3 |
| InbvAcquireDisplayOwnership | W2KWXP2K3 |
| InbvCheckDisplayOwnership | W2KWXP2K3 |
| InbvDisplayString | W2KWXP2K3 |
| InbvEnableBootDriver | W2KWXP2K3 |
| InbvEnableDisplayString | W2KWXP2K3 |
| InbvInstallDisplayStringFilter | W2KWXP2K3 |
| InbvIsBootDriverInstalled | W2KWXP2K3 |
| InbvNotifyDisplayOwnershipLost | W2KWXP2K3 |
| InbvResetDisplay | W2KWXP2K3 |
| InbvSetScrollRegion | W2KWXP2K3 |
| InbvSetTextColor | W2KWXP2K3 |
| InbvSolidColorFill | W2KWXP2K3 |
| InitSafeBootMode | W2KWXP2K3 |
| InterlockedCompareExchange | NT4W2KWXP2K3 |
| InterlockedDecrement | NT3NT4W2KWXP2K3 |
| InterlockedExchange | NT3NT4W2KWXP2K3 |
| InterlockedExchangeAdd | NT4W2KWXP2K3 |
| InterlockedIncrement | NT3NT4W2KWXP2K3 |
| InterlockedPopEntrySList | WXP2K3 |
| InterlockedPushEntrySList | WXP2K3 |
| IoAcquireCancelSpinLock | NT3NT4W2KWXP2K3 |
| IoAcquireRemoveLockEx | W2KWXP2K3 |
| IoAcquireVpbSpinLock | NT3NT4W2KWXP2K3 |
| IoAdapterObjectType | NT3NT4W2KWXP2K3 |
| IoAllocateAdapterChannel | NT3NT4W2KWXP2K3 |
| IoAllocateController | NT3NT4W2KWXP2K3 |
| IoAllocateDriverObjectExtension | W2KWXP2K3 |
| IoAllocateErrorLogEntry | NT3NT4W2KWXP2K3 |
| IoAllocateIrp | NT3NT4W2KWXP2K3 |
| IoAllocateMdl | NT3NT4W2KWXP2K3 |
| IoAllocateWorkItem | W2KWXP2K3 |
| IoAssignDriveLetters | WXP2K3 |
| IoAssignResources | NT3NT4W2KWXP2K3 |
| IoAttachDevice | NT3NT4W2KWXP2K3 |
| IoAttachDeviceByPointer | NT3NT4W2KWXP2K3 |
| IoAttachDeviceToDeviceStack | NT4W2KWXP2K3 |
| IoAttachDeviceToDeviceStackSafe | WXP2K3 |
| IoBuildAsynchronousFsdRequest | NT3NT4W2KWXP2K3 |
| IoBuildDeviceIoControlRequest | NT3NT4W2KWXP2K3 |
| IoBuildPartialMdl | NT3NT4W2KWXP2K3 |
| IoBuildSynchronousFsdRequest | NT3NT4W2KWXP2K3 |
| IoCallDriver | NT3NT4W2KWXP2K3 |
| IoCancelFileOpen | W2KWXP2K3 |
| IoCancelIrp | NT3NT4W2KWXP2K3 |
| IoCheckDesiredAccess | NT3NT4W2KWXP2K3 |
| IoCheckEaBufferValidity | NT3NT4W2KWXP2K3 |
| IoCheckFunctionAccess | NT3NT4W2KWXP2K3 |
| IoCheckQuerySetFileInformation | W2KWXP2K3 |
| Subtotal of the above list: 400 functions Jump to: Cc, Cm, Csr, Dbg, Etw, Ex, Fs, Hal, Inbv, Interlocked, Io, Kd, Ke, Ki, Ldr, Lpc, Lsa, Mm, Nls, Nt, Ob, Pfx, Po, Ps, Rtl, Se, Vf, Wmi, Zw | |
| IoCheckQuerySetVolumeInformation | W2KWXP2K3 |
| IoCheckQuotaBufferValidity | W2KWXP2K3 |
| IoCheckShareAccess | NT3NT4W2KWXP2K3 |
| IoCompleteRequest | NT3NT4W2KWXP2K3 |
| IoConnectInterrupt | NT3NT4W2KWXP2K3 |
| IoCreateController | NT3NT4W2KWXP2K3 |
| IoCreateDevice | NT3NT4W2KWXP2K3 |
| IoCreateDisk | WXP2K3 |
| IoCreateDriver | W2KWXP2K3 |
| IoCreateFile | NT3NT4W2KWXP2K3 |
| IoCreateFileSpecifyDeviceObjectHint | WXP2K3 |
| IoCreateNotificationEvent | NT4W2KWXP2K3 |
| IoCreateStreamFileObject | NT3NT4W2KWXP2K3 |
| IoCreateStreamFileObjectEx | WXP2K3 |
| IoCreateStreamFileObjectLite | W2KWXP2K3 |
| IoCreateSymbolicLink | NT3NT4W2KWXP2K3 |
| IoCreateSynchronizationEvent | NT3NT4W2KWXP2K3 |
| IoCreateUnprotectedSymbolicLink | NT3NT4W2KWXP2K3 |
| IoCsqInitialize | WXP2K3 |
| IoCsqInitializeEx | 2K3 |
| IoCsqInsertIrp | WXP2K3 |
| IoCsqInsertIrpEx | 2K3 |
| IoCsqRemoveIrp | WXP2K3 |
| IoCsqRemoveNextIrp | WXP2K3 |
| IoDeleteController | NT3NT4W2KWXP2K3 |
| IoDeleteDevice | NT3NT4W2KWXP2K3 |
| IoDeleteDriver | W2KWXP2K3 |
| IoDeleteSymbolicLink | NT3NT4W2KWXP2K3 |
| IoDetachDevice | NT3NT4W2KWXP2K3 |
| IoDeviceHandlerObjectSize | NT4W2KWXP2K3 |
| IoDeviceHandlerObjectType | NT4W2KWXP2K3 |
| IoDeviceObjectType | NT3NT4W2KWXP2K3 |
| IoDisconnectInterrupt | NT3NT4W2KWXP2K3 |
| IoDriverObjectType | NT3NT4W2KWXP2K3 |
| IoEnqueueIrp | NT3NT4W2KWXP2K3 |
| IoEnumerateDeviceObjectList | WXP2K3 |
| IoFastQueryNetworkAttributes | NT4W2KWXP2K3 |
| IoFileObjectType | NT3NT4W2KWXP2K3 |
| IoForwardAndCatchIrp | WXP2K3 |
| IoForwardIrpSynchronously | WXP2K3 |
| IoFreeController | NT3NT4W2KWXP2K3 |
| IoFreeErrorLogEntry | WXP2K3 |
| IoFreeIrp | NT3NT4W2KWXP2K3 |
| IoFreeMdl | NT3NT4W2KWXP2K3 |
| IoFreeWorkItem | W2KWXP2K3 |
| IoGetAttachedDevice | NT3NT4W2KWXP2K3 |
| IoGetAttachedDeviceReference | W2KWXP2K3 |
| IoGetBaseFileSystemDeviceObject | NT4W2KWXP2K3 |
| IoGetBootDiskInformation | W2KWXP2K3 |
| IoGetConfigurationInformation | NT3NT4W2KWXP2K3 |
| IoGetCurrentProcess | NT3NT4W2KWXP2K3 |
| IoGetDeviceAttachmentBaseRef | WXP2K3 |
| IoGetDeviceInterfaceAlias | W2KWXP2K3 |
| IoGetDeviceInterfaces | W2KWXP2K3 |
| IoGetDeviceObjectPointer | NT3NT4W2KWXP2K3 |
| IoGetDeviceProperty | W2KWXP2K3 |
| IoGetDeviceToVerify | NT3NT4W2KWXP2K3 |
| IoGetDiskDeviceObject | WXP2K3 |
| IoGetDmaAdapter | W2KWXP2K3 |
| IoGetDriverObjectExtension | W2KWXP2K3 |
| IoGetFileObjectGenericMapping | NT3NT4W2KWXP2K3 |
| IoGetInitialStack | NT3NT4W2KWXP2K3 |
| IoGetLowerDeviceObject | WXP2K3 |
| IoGetPagingIoPriority | 2K3 |
| IoGetRelatedDeviceObject | NT3NT4W2KWXP2K3 |
| IoGetRequestorProcess | NT3NT4W2KWXP2K3 |
| IoGetRequestorProcessId | W2KWXP2K3 |
| IoGetRequestorSessionId | W2KWXP2K3 |
| IoGetStackLimits | NT4W2KWXP2K3 |
| IoGetTopLevelIrp | NT3NT4W2KWXP2K3 |
| IoInitializeIrp | NT3NT4W2KWXP2K3 |
| IoInitializeRemoveLockEx | W2KWXP2K3 |
| IoInitializeTimer | NT3NT4W2KWXP2K3 |
| IoInvalidateDeviceRelations | W2KWXP2K3 |
| IoInvalidateDeviceState | W2KWXP2K3 |
| IoIsFileOriginRemote | W2KWXP2K3 |
| IoIsOperationSynchronous | NT3NT4W2KWXP2K3 |
| IoIsSystemThread | NT3NT4W2KWXP2K3 |
| IoIsValidNameGraftingBuffer | W2KWXP2K3 |
| IoIsWdmVersionAvailable | W2KWXP2K3 |
| IoMakeAssociatedIrp | NT3NT4W2KWXP2K3 |
| IoOpenDeviceInstanceKey | NT4 |
| IoOpenDeviceInterfaceRegistryKey | W2KWXP2K3 |
| IoOpenDeviceRegistryKey | W2KWXP2K3 |
| IoPageRead | NT3NT4W2KWXP2K3 |
| IoPnPDeliverServicePowerNotification | W2KWXP2K3 |
| IoQueryDeviceDescription | NT3NT4W2KWXP2K3 |
| IoQueryDeviceEnumInfo | NT4 |
| IoQueryFileDosDeviceName | WXP2K3 |
| IoQueryFileInformation | NT3NT4W2KWXP2K3 |
| IoQueryVolumeInformation | NT3NT4W2KWXP2K3 |
| IoQueueThreadIrp | NT4W2KWXP2K3 |
| IoQueueWorkItem | W2KWXP2K3 |
| IoRaiseHardError | NT3NT4W2KWXP2K3 |
| IoRaiseInformationalHardError | NT3NT4W2KWXP2K3 |
| IoReadDiskSignature | WXP2K3 |
| IoReadOperationCount | NT3NT4W2KWXP2K3 |
| IoReadPartitionTable | WXP2K3 |
| IoReadPartitionTableEx | WXP2K3 |
| IoReadTransferCount | NT3NT4W2KWXP2K3 |
| IoRegisterBootDriverReinitialization | W2KWXP2K3 |
| IoRegisterDeviceInterface | W2KWXP2K3 |
| IoRegisterDriverReinitialization | NT3NT4W2KWXP2K3 |
| IoRegisterFileSystem | NT3NT4W2KWXP2K3 |
| IoRegisterFsRegistrationChange | NT3NT4W2KWXP2K3 |
| IoRegisterLastChanceShutdownNotification | W2KWXP2K3 |
| IoRegisterPlugPlayNotification | W2KWXP2K3 |
| IoRegisterShutdownNotification | NT3NT4W2KWXP2K3 |
| IoReleaseCancelSpinLock | NT3NT4W2KWXP2K3 |
| IoReleaseRemoveLockAndWaitEx | W2KWXP2K3 |
| IoReleaseRemoveLockEx | W2KWXP2K3 |
| IoReleaseVpbSpinLock | NT3NT4W2KWXP2K3 |
| IoRemoveShareAccess | NT3NT4W2KWXP2K3 |
| IoReportDetectedDevice | W2KWXP2K3 |
| IoReportHalResourceUsage | NT3NT4W2KWXP2K3 |
| IoReportResourceForDetection | W2KWXP2K3 |
| IoReportResourceUsage | NT3NT4W2KWXP2K3 |
| IoReportTargetDeviceChange | W2KWXP2K3 |
| IoReportTargetDeviceChangeAsynchronous | W2KWXP2K3 |
| IoRequestDeviceEject | W2KWXP2K3 |
| IoReuseIrp | W2KWXP2K3 |
| IoSetCompletionRoutineEx | WXP2K3 |
| IoSetDeviceInterfaceState | W2KWXP2K3 |
| IoSetDeviceToVerify | NT3NT4W2KWXP2K3 |
| IoSetFileOrigin | W2KWXP2K3 |
| IoSetHardErrorOrVerifyDevice | NT3NT4W2KWXP2K3 |
| IoSetInformation | NT3NT4W2KWXP2K3 |
| IoSetIoCompletion | W2KWXP2K3 |
| IoSetPartitionInformation | WXP2K3 |
| IoSetPartitionInformationEx | WXP2K3 |
| IoSetShareAccess | NT3NT4W2KWXP2K3 |
| IoSetStartIoAttributes | WXP2K3 |
| IoSetSystemPartition | WXP2K3 |
| IoSetThreadHardErrorMode | NT4W2KWXP2K3 |
| IoSetTopLevelIrp | NT3NT4W2KWXP2K3 |
| IoStartNextPacket | NT3NT4W2KWXP2K3 |
| IoStartNextPacketByKey | NT3NT4W2KWXP2K3 |
| IoStartPacket | NT3NT4W2KWXP2K3 |
| IoStartTimer | NT3NT4W2KWXP2K3 |
| IoStatisticsLock | NT3NT4W2KWXP2K3 |
| IoStopTimer | NT3NT4W2KWXP2K3 |
| IoSynchronousInvalidateDeviceRelations | W2KWXP2K3 |
| IoSynchronousPageWrite | NT3NT4W2KWXP2K3 |
| IoThreadToProcess | NT3NT4W2KWXP2K3 |
| IoUnregisterFileSystem | NT3NT4W2KWXP2K3 |
| IoUnregisterFsRegistrationChange | NT3NT4W2KWXP2K3 |
| IoUnregisterPlugPlayNotification | W2KWXP2K3 |
| IoUnregisterShutdownNotification | NT3NT4W2KWXP2K3 |
| IoUpdateShareAccess | NT3NT4W2KWXP2K3 |
| IoValidateDeviceIoControlAccess | WXP2K3 |