ntddk.h header

This header is used by kernel. For more information, see:

  • Windows kernel ntddk.h contains the following programming interfaces:

IOCTLs

Title Description
IOCTL_IPMI_INTERNAL_RECORD_SEL_EVENT

Functions

Title Description
CUSTOM_SYSTEM_EVENT_TRIGGER_INIT Initializes the _CUSTOM_SYSTEM_EVENT_TRIGGER_CONFIG structure.
DbgPrompt The DbgPrompt routine displays a caller-specified user prompt string on the kernel debugger's display device and obtains a user response string.
ExFreePool The ExFreePool routine deallocates a block of pool memory.
ExRaiseAccessViolation The ExRaiseAccessViolation routine can be used with structured exception handling to throw a driver-determined exception for a memory access violation that occurs when a driver processes I/O requests.
ExRaiseDatatypeMisalignment The ExRaiseDatatypeMisalignment routine can be used with structured exception handling to throw a driver-determined exception for a misaligned data type that occurs when a driver processes I/O requests.
ExUuidCreate The ExUuidCreate routine initializes a UUID (GUID) structure to a newly generated value.
FsRtlIsTotalDeviceFailure The FsRtlIsTotalDeviceFailure routine determines whether a media or other hardware failure has occurred.
HalAllocateHardwareCounters The HalAllocateHardwareCounters routine allocates a set of hardware performance counters.
HalExamineMBR The HalExamineMBR routine reads the master boot record (MBR) of a disk and returns data from the MBR if the MBR is of the type specified by the caller.
HalFreeHardwareCounters The HalFreeHardwareCounters routine frees a set of hardware performance counters that was acquired in a previous call to HalAllocateHardwareCounters routine.
IoAllocateAdapterChannel Deprecated. Use PALLOCATE_ADAPTER_CHANNEL.
IoAllocateController The IoAllocateController routine sets up the call to a driver-supplied ControllerControl routine as soon as the device controller, represented by the given controller object, is available to carry out an I/O operation for the target device, represented by the given device object.
IoAssignArcName The IoAssignArcName routine creates a symbolic link between the ARC name of a physical device and the name of the corresponding device object when it has been created.
IoAttachDeviceToDeviceStackSafe The IoAttachDeviceToDeviceStackSafe routine attaches the caller's device object to the topmost device object in a driver stack.
IoCancelFileOpen The IoCancelFileOpen routine can be used by a file system filter driver to close a file that has been opened by a file system driver in the filter driver's device stack.
IoClearActivityIdThread The IoClearActivityIdThread routine clears the activity ID of the current thread.
IoCreateController The IoCreateController routine allocates memory for and initializes a controller object with a controller extension of a driver-determined size.
IoCreateDisk The IoCreateDisk routine initializes a raw disk by creating a new partition table.
IoCreateFileEx The IoCreateFileEx routine either causes a new file or directory to be created, or opens an existing file, device, directory, or volume and gives the caller a handle for the file object.
IoCreateFileSpecifyDeviceObjectHint The IoCreateFileSpecifyDeviceObjectHint routine is used by file system filter drivers to send a create request only to the filters below a specified device object and to the file system.
IoDeassignArcName The IoDeassignArcName routine removes a symbolic link between the ARC name for a device and the named device object.
IoDecrementKeepAliveCount The IoDecrementKeepAliveCount routine decrements a reference count associated with an Windows app on a specific device.
IoDeleteController The IoDeleteController routine removes a given controller object from the system, for example, when the driver that created it is being unloaded.
IoFreeController The IoFreeController routine releases a previously allocated controller object when the driver has completed an I/O request.
IoGetActivityIdIrp The IoGetActivityIdIrp routine retrieves the current activity ID associated with an IRP.
IoGetActivityIdThread The IoGetActivityIdThread routine returns the activity ID associated with the current thread.
IoGetConfigurationInformation The IoGetConfigurationInformation routine returns a pointer to the I/O manager's global configuration information structure, which contains the current values for how many physical disk, floppy, CD-ROM, tape, SCSI HBA, serial, and parallel devices have device objects created to represent them by drivers as they are loaded.
IoGetFileObjectGenericMapping The IoGetFileObjectGenericMapping routine returns information about the mapping between each generic access right and the set of specific access rights for file objects.
IoGetInitiatorProcess The IoGetInitiatorProcess routine retrieves the process which initiated the creation of a file object if different than the process which is issuing the create.
IoGetOplockKeyContext The IoGetOplockKeyContext routine returns a target oplock key context for a file object.
IoGetOplockKeyContextEx The IoGetOplockKeyContextEx routine returns a dual oplock key context for a file object.
IoGetPagingIoPriority The IoGetPagingIoPriority routine indicates the priority level of a paging I/O request.
IoGetSiloParameters This routine indicates if a file is within a Container context.
IoGetTransactionParameterBlock The IoGetTransactionParameterBlock routine returns the transaction parameter block for a transacted file operation.
IoIncrementKeepAliveCount The IoIncrementKeepAliveCount routine increments a reference count associated with an Windows app process on a specific device.
IoInitializeDriverCreateContext The IoInitializeDriverCreateContext routine initializes a caller-allocated variable of type IO_DRIVER_CREATE_CONTEXT.
IoIsFileObjectIgnoringSharing The IoIsFileObjectIgnoringSharing routine determines if a file object is set with the option to ignore file sharing access checks.
IoIsFileOriginRemote The IoIsFileOriginRemote routine determines whether a given file object is for a remote create request.
IoIsValidIrpStatus The IoIsValidIrpStatus routine validates the specified NTSTATUS status code value.
IoMakeAssociatedIrp This routine is reserved for use by file systems and file system filter drivers.
IoPropagateActivityIdToThread The IoPropagateActivityIdToThread routine associates the activity ID from an IRP with the current thread.
IoQueryFullDriverPath The IoQueryFullDriverPath routine retrieves the full path name of the binary file that is loaded for the specified driver object.
IoRaiseHardError The IoRaiseHardError routine causes a dialog box to appears that warns the user that a device I/O error has occurred, which might indicate that a physical device is failing.
IoRaiseInformationalHardError The IoRaiseInformationalHardError routine sends a dialog box to the user, warning about a device I/O error that indicates why a user I/O request failed.
IoReadDiskSignature The IoReadDiskSignature routine reads the disk signature information for the partition table of a disk.
IoReadPartitionTable The IoReadPartitionTable routine is obsolete and is provided only to support existing drivers.
IoReadPartitionTableEx The IoReadPartitionTableEx routine reads a list of partitions on a disk having a specified sector size and creates an entry in the partition list for each recognized partition.
IoRegisterBootDriverCallback The IoRegisterBootDriverCallback routine registers a BOOT_DRIVER_CALLBACK_FUNCTION routine to be called during the initialization of a boot-start driver and its dependent DLLs.
IoRegisterBootDriverReinitialization The IoRegisterBootDriverReinitialization routine is called by a boot driver to register the driver's reinitialization routine with the I/O manager to be called after all devices have been enumerated and started.
IoRegisterDriverReinitialization The IoRegisterDriverReinitialization routine is called by a driver during its initialization or reinitialization to register its Reinitialize routine to be called again before the driver's and, possibly the system's, initialization is complete.
IoReportDetectedDevice The IoReportDetectedDevice routine reports a non-PnP device to the PnP manager.
IoReportResourceForDetection The IoReportResourceForDetection routine claims hardware resources in the configuration registry for a legacy device.
IoReportRootDevice The IoReportRootDevice routine reports a device that cannot be detected by a PnP bus driver to the PnP Manager. IoReportRootDevice allows only one device per driver to be created.
IoSetActivityIdIrp The IoSetActivityIdIrp routine associates an activity ID with an IRP.
IoSetActivityIdThread The IoSetActivityIdThread routine associates an activity ID with the current thread. Drivers should use this routine when they are tracing aware and are issuing I/O on a worker thread.
IoSetFileObjectIgnoreSharing The IoSetFileObjectIgnoreSharing routine sets a file object to ignore file sharing access checks.
IoSetFileOrigin The IoSetFileOrigin routine specifies whether a given file object is for a remote create request.
IoSetHardErrorOrVerifyDevice Lower-level drivers call the IoSetHardErrorOrVerifyDevice routine to identify a removable media device that has encountered an error, so that a file system driver can prompt the user to verify that the medium is valid.
IoSetMasterIrpStatus The IoSetMasterIrpStatus routine conditionally replaces the Status value in an IRP with the specified NTSTATUS value.
IoSetPartitionInformation The IoSetPartitionInformation routine is obsolete and is provided only to support existing drivers.
IoSetPartitionInformationEx For the disk represented by DeviceObject, the IoSetPartitionInformationEx routine initializes a partition table entry with the information specified in the SET_PARTITION_INFORMATION_EX structure.
IoSetSystemPartition The IoSetSystemPartition routine sets the boot partition for the system.
IoSetThreadHardErrorMode The IoSetThreadHardErrorMode routine enables or disables hard error reporting for the current thread.
IoTransferActivityId The IoTransferActivityId routine logs an ETW transfer event using the I/O tracing provider on behalf of the caller. This allows a driver to associate two related activity IDs without requiring a specific provider to be enabled.
IoUnregisterBootDriverCallback The IoUnRegisterBootDriverCallback routine unregisters a previously registered BOOT_DRIVER_CALLBACK_FUNCTION routine.
IoVerifyPartitionTable The IoVerifyPartitionTable routine checks the validity of the partition table for a disk.
IoVolumeDeviceToDosName The IoVolumeDeviceToDosName routine returns the MS-DOS path for a specified device object that represents a file system volume.
IoWritePartitionTable The IoWritePartitionTable routine is obsolete and is provided only to support existing drivers.
IoWritePartitionTableEx The IoWritePartitionTableEx routine writes partition tables from the entries in the partition list buffer for each partition on the disk represented by the given device object.
KeAreApcsDisabled The KeAreApcsDisabled routine returns whether the calling thread is within a critical region or a guarded region, which disables normal kernel APC delivery.
KeBugCheck The KeBugCheck routine brings down the system in a controlled manner when the caller discovers an unrecoverable inconsistency that would corrupt the system if the caller continued to run.
KeEnterCriticalRegion The KeEnterCriticalRegion routine temporarily disables the execution of normal kernel APCs, but does not prevent special kernel APCs from running.
KeEnterGuardedRegion The KeEnterGuardedRegion routine enters a guarded region, which disables all kernel-mode APC delivery to the current thread.
KeExpandKernelStackAndCallout The KeExpandKernelStackAndCallout routine calls a routine with a guaranteed amount of stack space.
KeGetCurrentNodeNumber The KeGetCurrentNodeNumber routine gets the NUMA node number for the logical processor that the caller is running on.
KeGetCurrentProcessorNumber The KeGetCurrentProcessorNumber routine returns the system-assigned number of the current processor on which the caller is running.
KeGetCurrentProcessorNumberEx The KeGetCurrentProcessorNumberEx routine gets the processor number of the logical processor that the caller is running on.
KeInitializeCrashDumpHeader The KeInitializeCrashDumpHeader routine supplies the header information the system requires for a crash dump file.
KeInvalidateAllCaches The KeInvalidateAllCaches routine flushes all processor caches.
KeLeaveCriticalRegion The KeLeaveCriticalRegion routine reenables the delivery of normal kernel-mode APCs that were disabled by a preceding call to KeEnterCriticalRegion.
KeLeaveGuardedRegion The KeLeaveGuardedRegion routine exits a guarded region entered by KeEnterGuardedRegion.
KePulseEvent The KePulseEvent routine atomically sets an event object to a signaled state, attempts to satisfy as many waits as possible, and then resets the event object to a not-signaled state.
KeQueryActiveGroupCount The KeQueryActiveGroupCount routine returns the number of active processor groups in a multiprocessor system.
KeQueryActiveProcessorCount The KeQueryActiveProcessorCount routine returns the number of currently active processors.
KeQueryActiveProcessorCountEx The KeQueryActiveProcessorCountEx routine returns the number of active logical processors in a specified group in a multiprocessor system or in the entire system.
KeQueryActiveProcessors The KeQueryActiveProcessors routine returns a bitmask of the currently active processors.
KeQueryGroupAffinity The KeQueryGroupAffinity routine returns an affinity mask that identifies the active logical processors in a specified group in a multiprocessor system.
KeQueryHardwareCounterConfiguration The KeQueryHardwareCounterConfiguration routine queries the operating system for the list of hardware counters to use for thread profiling.
KeQueryHighestNodeNumber The KeQueryHighestNodeNumber routine returns the highest node number in a multiprocessor system that has a non-uniform memory access (NUMA) architecture.
KeQueryLogicalProcessorRelationship The KeQueryLogicalProcessorRelationship routine gets information about the relationships of one or more processors to the other processors in a multiprocessor system.
KeQueryMaximumGroupCount The KeQueryMaximumGroupCount routine returns the maximum number of groups in a multiprocessor system.
KeQueryMaximumProcessorCount The KeQueryMaximumProcessorCount routine returns the maximum number of processors.
KeQueryMaximumProcessorCountEx The KeQueryMaximumProcessorCountEx routine returns the maximum number of logical processors in a specified group in a multiprocessor system.
KeQueryNodeActiveAffinity The KeQueryNodeActiveAffinity routine gets the current processor affinity of a specified node in a multiprocessor system that has a non-uniform memory access (NUMA) architecture.
KeQueryNodeMaximumProcessorCount The KeQueryNodeMaximumProcessorCount routine returns the maximum number of logical processors that a specified node in a non-uniform memory access (NUMA) multiprocessor system can contain.
KeQueryTickCount The KeQueryTickCount routine maintains a count of the interval timer interrupts that have occurred since the system was booted.
KeRaiseIrqlToDpcLevel The KeRaiseIrqlToDpcLevel routine raises the hardware priority to IRQL = DISPATCH_LEVEL, thereby masking off interrupts of equivalent or lower IRQL on the current processor.
KeSetBasePriorityThread The KeSetBasePriorityThread routine sets the run-time priority, relative to the current process, for a given thread.
KeSetHardwareCounterConfiguration The KeSetHardwareCounterConfiguration routine specifies a list of hardware counters to use for thread profiling.
KeSetImportanceDpc The KeSetImportanceDpc routine specifies how soon the DPC routine is run.
KeSetTargetProcessorDpc The KeSetTargetProcessorDpc routine specifies the processor that a DPC routine will be run on.
MmAllocateContiguousMemory The MmAllocateContiguousMemory routine allocates a range of contiguous, nonpaged physical memory and maps it to the system address space.
MmAllocateContiguousMemorySpecifyCache The MmAllocateContiguousMemorySpecifyCache routine allocates a range of contiguous, nonpaged physical memory and maps it to the system address space.
MmAllocateContiguousMemorySpecifyCacheNode The MmAllocateContiguousMemorySpecifyCacheNode routine allocates a range of contiguous, nonpaged physical memory and maps it to the system address space.
MmAllocateContiguousNodeMemory The MmAllocateContiguousNodeMemory routine allocates a range of contiguous, nonpaged physical memory and maps it to the system address space.
MmAllocateNonCachedMemory The MmAllocateNonCachedMemory routine allocates a virtual address range of noncached and cache-aligned memory.
MmCopyMemory The MmCopyMemory routine copies the specified range of virtual or physical memory into the caller-supplied buffer.
MmFreeContiguousMemory The MmFreeContiguousMemory routine releases a range of physically contiguous memory that was allocated by an MmAllocateContiguousMemoryXxx routine.
MmFreeContiguousMemorySpecifyCache The MmFreeContiguousMemorySpecifyCache routine frees a buffer that was allocated by an MmAllocateContiguousMemorySpecifyCacheXxx routine.
MmFreeNonCachedMemory The MmFreeNonCachedMemory routine releases a range of noncached memory that was allocated by the MmAllocateNonCachedMemory routine.
MmGetPhysicalAddress The MmGetPhysicalAddress routine returns the physical address corresponding to a valid nonpaged virtual address.
MmIsAddressValid The MmIsAddressValid routine checks whether a page fault will occur for a read or write operation at a given virtual address.Warning  We do not recommend using this function.
MmIsThisAnNtAsSystem The MmIsThisAnNtAsSystem routine is obsolete for Windows XP and later versions of Windows. Use RtlGetVersion or RtlVerifyVersionInfo instead.
MmLockPagableSectionByHandle The MmLockPagableSectionByHandle routine locks a pageable code or data section into system memory by incrementing the reference count on the handle to the section.
MmMapViewInSystemSpace The MmMapViewInSystemSpace function maps the specified section into the system's address space.
MmSecureVirtualMemory The MmSecureVirtualMemory routine secures a user-space memory address range so that it cannot be freed and its protection type cannot be made more restrictive.
MmSecureVirtualMemoryEx This routine probes the requested address range and protects the specified address range from having its protection made more restrictive and being deleted.
MmUnmapViewInSystemSpace
MmUnsecureVirtualMemory The MmUnsecureVirtualMemory routine unsecures a memory address range secured by the MmSecureVirtualMemory routine.
NtOpenProcess The ZwOpenProcess routine opens a handle to a process object and sets the access rights to this object.
PsAllocSiloContextSlot This routine allocates a slot that can be used to insert, retrieve, and delete an object in all silos. .
PsAttachSiloToCurrentThread This routine places a thread temporarily into the specified Silo.
PsCreateSiloContext This routine creates an object that will be inserted in a Silo.
PsDereferenceSiloContext This routine decrements the reference count on the object.
PsDetachSiloFromCurrentThread This routine removes a thread from a silo which was added by an attach. For more info about attaching, see the PsAttachSiloToCurrentThread routine.
PsFreeSiloContextSlot This routine frees the specified slot and makes it available in the system. It undoes the effects of the PsAllocSiloContextSlot routine.
PsGetCurrentProcessId The PsGetCurrentProcessId routine identifies the current thread's process.
PsGetCurrentServerSilo This routine returns the effective server silo for the thread.
PsGetCurrentSilo This routine returns the current silo for the calling thread. First the thread is checked to see if it has been attached to a silo. If not, then the thread is checked to see if it is in a silo.
PsGetCurrentThread The PsGetCurrentThread routine identifies the current thread.
PsGetCurrentThreadId The PsGetCurrentThreadId routine identifies the current thread.
PsGetCurrentThreadTeb The PsGetCurrentThreadTeb routine returns the Thread Environment Block (TEB) of the current thread. The call must be made in kernel-mode.
PsGetEffectiveServerSilo This routine traverses the parent chain of the Silo until finding the effective server silo or host silo.
PsGetHostSilo This routine returns the host silo.
PsGetJobServerSilo This routine returns the effective ServerSilo for the job. The returned pointer is valid as long as the supplied Job object remains referenced.
PsGetJobSilo This routine returns the first job in the hierarchy that is a Silo. The returned pointer is valid as long as the supplied Job object remains referenced.
PsGetParentSilo Retrieves the most immediate parent silo in the hierarchy for a given job object.
PsGetPermanentSiloContext This routine retrieves an object that was inserted in the Silo without incrementing the reference count.
PsGetProcessCreateTimeQuadPart The PsGetProcessCreateTimeQuadPart routine returns a LONGLONG value that represents the time at which the process was created.
PsGetProcessId The PsGetProcessId routine returns the process identifier (process ID) that is associated with a specified process.
PsGetServerSiloActiveConsoleId Gets the active console for the current server silo context for the supplied thread.
PsGetSiloContainerId Gets the ContainerId for the given Silo.
PsGetSiloContext This routine retrieves the silo context from the specified silo and slot.
PsGetSiloMonitorContextSlot This routine returns the silo context slot that was allocated by the monitor during the registration.
PsGetThreadProcessId The PsGetThreadProcessId routine returns the process identifier that is associated with a specified thread's process.
PsGetThreadServerSilo Determines whether the given thread is a silo.
PshedAllocateMemory The PshedAllocateMemory function allocates a block of memory from the nonpaged pool.
PshedFreeMemory The PshedFreeMemory function frees a block of memory that was previously allocated by calling the PshedAllocateMemory function.
PshedIsSystemWheaEnabled The PshedIsSystemWheaEnabled function returns a Boolean value that indicates whether the system is WHEA-enabled.
PshedRegisterPlugin The PshedRegisterPlugin function registers a PSHED plug-in with the PSHED.
PshedSynchronizeExecution The PshedSynchronizeExecution function synchronizes the execution of a given function with the hardware error processing for an error source.
PshedUnregisterPlugin Reserved for system use.
PsInsertPermanentSiloContext This routine inserts an object in an empty slot in a Silo.
PsInsertSiloContext This routine inserts an object in an empty slot in a Silo.
PsIsHostSilo This routine will check if the supplied Silo is the host silo.
PsMakeSiloContextPermanent This routine makes the slot in a silo instance read-only, allowing the object in the slot to be retrieved without affecting the reference count on that object.
PsReferenceSiloContext This routine increments the reference count on the object.
PsRegisterSiloMonitor This routine registers a server silo monitor that can receive notifications about server silo events.
PsRemoveCreateThreadNotifyRoutine The PsRemoveCreateThreadNotifyRoutine routine removes a callback routine that was registered by the PsSetCreateThreadNotifyRoutine routine.
PsRemoveLoadImageNotifyRoutine The PsRemoveLoadImageNotifyRoutine routine removes a callback routine that was registered by the PsSetLoadImageNotifyRoutine routine.
PsRemoveSiloContext This routine removes an object that was inserted in the Silo.
PsReplaceSiloContext This routine inserts an object in a Silo.
PsSetCreateProcessNotifyRoutine The PsSetCreateProcessNotifyRoutine routine adds a driver-supplied callback routine to, or removes it from, a list of routines to be called whenever a process is created or deleted.
PsSetCreateProcessNotifyRoutineEx The PsSetCreateProcessNotifyRoutineEx routine registers or removes a callback routine that notifies the caller when a process is created or exits.
PsSetCreateProcessNotifyRoutineEx2 The PsSetCreateProcessNotifyRoutineEx2 routine registers or removes a callback routine that notifies the caller when a process is created or deleted.
PsSetCreateThreadNotifyRoutine The PsSetCreateThreadNotifyRoutine routine registers a driver-supplied callback that is subsequently notified when a new thread is created and when such a thread is deleted.
PsSetCreateThreadNotifyRoutineEx The PsSetCreateThreadNotifyRoutineEx routine registers a driver-supplied callback that is subsequently notified when a new thread is created and when such a thread is deleted.
PsSetLoadImageNotifyRoutine The PsSetLoadImageNotifyRoutine routine registers a driver-supplied callback that is subsequently notified whenever an image is loaded (or mapped into memory).
PsSetLoadImageNotifyRoutineEx The PsSetLoadImageNotifyRoutineEx routine registers a driver-supplied callback that is subsequently notified whenever an image is loaded (or mapped into memory).
PsStartSiloMonitor This routine tries to start the server silo monitor.
PsTerminateServerSilo This routine terminates the specified silo.
PsUnregisterSiloMonitor This routine unregisters a server silo monitor.
RtlCharToInteger The RtlCharToInteger routine converts a single-byte character string to an integer value in the specified base.
RtlCompareString The RtlCompareString routine compares two counted strings.
RtlConvertLongToLuid The RtlConvertLongToLuid routine converts a long integer to a locally unique identifier (LUID), which is used by the system to represent a security privilege.
RtlConvertUlongToLuid The RtlConvertUlongToLuid routine converts an unsigned long integer to a locally unique identifier (LUID), which is used by the system to represent a security privilege.
RtlCopyString The RtlCopyString routine copies a source string to a destination string.
RtlDelete The RtlDelete routine deletes the specified node from the splay link tree.
RtlDeleteElementGenericTable The RtlDeleteElementGenericTable routine deletes an element from a generic table.
RtlDeleteElementGenericTableAvl The RtlDeleteElementGenericTableAvl routine deletes an element from a generic table.
RtlDeleteNoSplay The RtlDeleteNoSplay routine deletes the specified node from the splay link tree.
RtlDrainNonVolatileFlush The routine RtlDrainNonVolatileFlush waits for the flushes initiated by RtlFlushNonVolatileMemory to finish.
RtlEnumerateGenericTable The RtlEnumerateGenericTable routine is used to enumerate the elements in a generic table.
RtlEnumerateGenericTableAvl The RtlEnumerateGenericTableAvl routine is used to enumerate the elements in a generic table.
RtlEnumerateGenericTableLikeADirectory The RtlEnumerateGenericTableLikeADirectory routine returns the elements of a generic table, one-by-one, in collation order.
RtlEnumerateGenericTableWithoutSplaying The RtlEnumerateGenericTableWithoutSplaying routine is used to enumerate the elements in a generic table.
RtlEnumerateGenericTableWithoutSplayingAvl The RtlEnumerateGenericTableWithoutSplayingAvl routine is used to enumerate the elements in a generic table.
RtlEqualString The RtlEqualString routine compares two counted strings to determine whether they are equal.
RtlExtendCorrelationVector This routine extends the supplied correlation vector. For a correlation vector of the form X.i, the extended value is X.i.0.
RtlFillNonVolatileMemory Fills the non-volatile destination buffer with the given value.
RtlFlushNonVolatileMemory The routine RtlFlushNonVolatileMemory optimally flushes the given non-volatile memory region.
RtlFlushNonVolatileMemoryRanges The routine RtlFlushNonVolatileMemoryRanges optimally flushes the given non-volatile memory regions.
RtlFreeNonVolatileToken The routine RtlFreeNonVolatileToken is a cleanup function for the opaque NvToken which is given by a successful call to RtlGetNonVolatileToken.
RtlGetElementGenericTable The RtlGetElementGenericTable routine returns a pointer to the caller-supplied data for a particular generic table element.
RtlGetElementGenericTableAvl The RtlGetElementGenericTableAvl routine returns a pointer to the caller-supplied data for a particular generic Adelson-Velsky/Landis (AVL) table element.
RtlGetEnabledExtendedFeatures The RtlGetEnabledExtendedFeatures routine returns a mask of extended processor features that are enabled by the system.
RtlGetNonVolatileToken The routine, RtlGetNonVolatileToken, gets various properties about a non-volatile memory buffer and stores them in the variable NvToken.
RtlGetPersistedStateLocation Retrieves the redirected location for the specified SourceID from the redirection map.
RtlIncrementCorrelationVector Increments the specified correlation vector. For a correlation vector of the form X.i, the incremented value is be X.(i+1).
RtlInitializeCorrelationVector Initializes the specified correlation vector with the supplied GUID.
RtlInitializeGenericTable The RtlInitializeGenericTable routine initializes a generic table.
RtlInitializeGenericTableAvl The RtlInitializeGenericTableAvl routine initializes a generic table using Adelson-Velsky/Landis (AVL) trees.
RtlInitializeSplayLinks The RtlInitializeSplayLinks routine initializes a splay link node.
RtlInsertAsLeftChild The RtlInsertAsLeftChild routine inserts a splay link node into the tree as the left child of the specified node.
RtlInsertAsRightChild The RtlInsertAsRightChild routine inserts a given splay link into the tree as the right child of a given node in that tree.
RtlInsertElementGenericTable The RtlInsertElementGenericTable routine adds a new element to a generic table.
RtlInsertElementGenericTableAvl The RtlInsertElementGenericTableAvl routine adds a new entry to a generic table.
RtlInsertElementGenericTableFullAvl The RtlInsertElementGenericTableFullAvl routine adds a new entry to a generic table.
RtlIsGenericTableEmpty The RtlIsGenericTableEmpty routine determines if a generic table is empty.
RtlIsGenericTableEmptyAvl The RtlIsGenericTableEmptyAvl routine determines if a generic table is empty.
RtlIsLeftChild The RtlIsLeftChild routine determines whether a given splay link is the left child of a node in a splay link tree.
RtlIsRightChild The RtlIsRightChild routine determines whether a given splay link is the right child of a node in a splay link tree.
RtlIsRoot The RtlIsRoot routine determines whether the specified node is the root node of a splay link tree.
RtlIsStateSeparationEnabled Checks if the SKU for the current context supports multiple sessions.
RtlLeftChild The RtlLeftChild routine returns a pointer to the left child of the specified splay link node.
RtlLookupElementGenericTable The RtlLookupElementGenericTable routine searches a generic table for an element that matches the specified data.
RtlLookupElementGenericTableAvl The RtlLookupElementGenericTableAvl routine searches a generic table for an element that matches the specified data.
RtlLookupElementGenericTableFullAvl The RtlLookupElementGenericTableFullAvl routine searches a generic table for an element that matches the specified data.
RtlLookupFirstMatchingElementGenericTableAvl The RtlLookupFirstMatchingElementGenericTableAvl routine finds the left-most element in the tree that matches the indicated data.
RtlMapGenericMask The RtlMapGenericMask routine determines the nongeneric access rights specified by an ACCESS_MASK.
RtlNumberGenericTableElements The RtlNumberGenericTableElements routine returns the number of elements in a generic table.
RtlNumberGenericTableElementsAvl The RtlNumberGenericTableElementsAvl routine returns the number of elements in a generic table.
RtlParent The RtlParent routine returns a pointer to the parent of the specified node in a splay link tree.
RtlPrefixUnicodeString The RtlPrefixUnicodeString routine compares two Unicode strings to determine whether one string is a prefix of the other.
RtlQueryRegistryValueWithFallback Retrieves a value entry for a registry key by using, a primary handle; if not found, uses the fallback handle.
RtlRaiseCustomSystemEventTrigger Allows NT services and kernel-mode and user-mode drivers to raise a custom trigger for a device.
RtlRealPredecessor The RtlRealPredecessor routine returns a pointer to the predecessor of the specified node in the splay link tree.
RtlRealSuccessor The RtlRealSuccessor routine returns a pointer to the successor of the specified node in the splay link tree.
RtlRightChild The RtlRightChild routine returns a pointer to the right child of the specified splay link node.
RtlRunOnceBeginInitialize The RtlRunOnceBeginInitialize routine begins a one-time initialization.
RtlRunOnceComplete The RtlRunOnceComplete routine completes the one-time initialization began by RtlRunOnceBeginInitialize.
RtlRunOnceExecuteOnce The RtlRunOnceExecuteOnce performs a one-time initialization.
RtlRunOnceInitialize The RtlRunOnceInitialize routine initializes a RTL_RUN_ONCE structure.
RtlSplay The RtlSplay routine rebalances, or "splays," a splay link tree around the specified splay link, making that link the new root of the tree.
RtlSubtreePredecessor The RtlSubtreePredecessor routine returns a pointer to the predecessor of the specified node within the subtree that is rooted at that node.
RtlSubtreeSuccessor The RtlSubtreeSuccessor routine returns a pointer to the successor of the specified node within the subtree that is rooted at that node.
RtlUpcaseUnicodeString The RtlUpcaseUnicodeString routine converts a copy of the source string to uppercase and writes the converted string in the destination buffer.
RtlUpperChar The RtlUpperChar routine converts the specified character to uppercase.
RtlUpperString The RtlUpperString routine copies the given SourceString to the DestinationString buffer, converting it to uppercase.
RtlValidateCorrelationVector Validates the specified correlation vector to check whether it conforms to the Correlation Vector Specification (v2).
RtlVolumeDeviceToDosName The RtlVolumeDeviceToDosName routine is obsolete for Windows XP and later versions of Windows. Use IoVolumeDeviceToDosName instead.RtlVolumeDeviceToDosName returns the MS-DOS path for a specified device object that represents a file system volume.
RtlWriteNonVolatileMemory The routine RtlWriteNonVolatileMemory copies the contents of a source buffer to a non-volatile destination memory buffer.
SeSinglePrivilegeCheck The SeSinglePrivilegeCheck routine checks for the passed privilege value in the context of the current thread.
WheaAddErrorSource Reserved for system use.
WheaAddErrorSourceDeviceDriver A device driver calls WheaAddErrorSourceDeviceDriver to add an error source.
WheaConfigureErrorSource Reserved for system use.
WheaFindErrorRecordSection The WheaFindErrorRecordSection function searches for a specified Windows Hardware Error Architecture (WHEA) error record section within a WHEA error record. The error record section is formatted as a WHEA_ERROR_RECORD_SECTION_DESCRIPTOR structure.
WheaFindNextErrorRecordSection The WheaFindNextErrorRecordSection function allows a caller to iteratively examine the WHEA error record sections within a WHEA error record. Each error record section is formatted as a WHEA_ERROR_RECORD_SECTION_DESCRIPTOR structure.
WheaGetErrPacketFromErrRecord The WheaGetErrPacketFromErrRecord function returns a pointer to the hardware error packet that is contained within a WHEA error record. The hardware error packet is formatted as a WHEA_ERROR_PACKET structure.
WheaHighIrqlLogSelEventHandlerRegister Reserved for system use.
WheaHighIrqlLogSelEventHandlerUnregister Reserved for system use.
WheaInitializeRecordHeader Reserved for system use.
WheaIsValidErrorRecordSignature The WheaIsValidErrorRecordSignature function verifies whether a WHEA error record is valid.
WheaRemoveErrorSource Reserved for system use.
WheaRemoveErrorSourceDeviceDriver To remove a previously added error source, a device driver calls WheaRemoveErrorSourceDeviceDriver.
WheaReportHwError Drivers should not call this wrapper function.
WheaReportHwErrorDeviceDriver To report a hardware error, the driver calls the WheaReportHwErrorDeviceDriver function.
WheaUnconfigureErrorSource Reserved for system use.
ZwAllocateLocallyUniqueId The ZwAllocateLocallyUniqueId routine allocates a locally unique identifier (LUID).
ZwDeviceIoControlFile The ZwDeviceIoControlFile routine sends a control code directly to a specified device driver, causing the corresponding driver to perform the specified operation.
ZwOpenProcess The ZwOpenProcess routine opens a handle to a process object and sets the access rights to this object.
ZwPowerInformation The ZwPowerInformation routine sets or retrieves system power information.
ZwQueryVolumeInformationFile The ZwQueryVolumeInformationFile routine retrieves information about the volume associated with a given file, directory, storage device, or volume.
ZwSetInformationThread The ZwSetInformationThread routine sets the priority of a thread.
ZwTerminateProcess The ZwTerminateProcess routine terminates a process and all of its threads.

Callback functions

Title Description
_WHEA_ERROR_SOURCE_CORRECT
_WHEA_ERROR_SOURCE_CORRECT_DEVICE_DRIVER
_WHEA_ERROR_SOURCE_CREATE_RECORD
_WHEA_ERROR_SOURCE_INITIALIZE
_WHEA_ERROR_SOURCE_INITIALIZE_DEVICE_DRIVER
_WHEA_ERROR_SOURCE_READY
_WHEA_ERROR_SOURCE_READY_DEVICE_DRIVER
_WHEA_ERROR_SOURCE_RECOVER
_WHEA_ERROR_SOURCE_UNINITIALIZE
_WHEA_ERROR_SOURCE_UNINITIALIZE_DEVICE_DRIVER
BOOT_DRIVER_CALLBACK_FUNCTION
DRIVER_REINITIALIZE The Reinitialize routine continues driver and device initialization after the driver's DriverEntry routine returns.
EXPAND_STACK_CALLOUT The ExpandedStackCall routine executes with a guaranteed stack size.
PCREATE_PROCESS_NOTIFY_ROUTINE Process-creation callback implemented by a driver to track the system-wide creation and deletion of processes against the driver's internal state.
PCREATE_PROCESS_NOTIFY_ROUTINE_EX A callback routine implemented by a driver to notify the caller when a process is created or exits.
PCREATE_THREAD_NOTIFY_ROUTINE A callback routine implemented by a driver to notify the caller when a thread is created or deleted.
PFN_WHEA_HIGH_IRQL_LOG_SEL_EVENT_HANDLER
PGET_LOCATION_STRING The PnpGetLocationString routine provides the device-specific part of the device's SPDRP_LOCATION_PATHS property.
pHalExamineMBR The HalExamineMBR routine reads the master boot record (MBR) of a disk and returns data from the MBR if the MBR is of the type specified by the caller.
pHalQuerySystemInformation
pHalSetSystemInformation Register MCA driver with the HAL.
PLOAD_IMAGE_NOTIFY_ROUTINE Called by the operating system to notify the driver when a driver image or a user image (for example, a DLL or EXE) is mapped into virtual memory.
PPHYSICAL_COUNTER_EVENT_BUFFER_OVERFLOW_HANDLER
PPHYSICAL_COUNTER_OVERFLOW_HANDLER The PPHYSICAL_COUNTER_OVERFLOW_HANDLER is implemented by the client driver to handle overflows from the counters resources acquired through the HalAllocateHardwareCounters routine.
PSHED_PI_ATTEMPT_ERROR_RECOVERY A PSHED plug-in's AttemptRecovery callback function attempts to recover from a recoverable hardware error.
PSHED_PI_CLEAR_ERROR_RECORD A PSHED plug-in's ClearErrorRecord callback function clears the specified error record from the system's persistent data storage.
PSHED_PI_CLEAR_ERROR_STATUS A PSHED plug-in's ClearErrorStatus callback function clears any platform-specific error status registers for a corrected hardware error condition.
PSHED_PI_DISABLE_ERROR_SOURCE A PSHED plug-in's DisableErrorSource callback function disables an error source.
PSHED_PI_ENABLE_ERROR_SOURCE A PSHED plug-in's EnableErrorSource callback function enables an error source.
PSHED_PI_FINALIZE_ERROR_RECORD A PSHED plug-in's FinalizeErrorRecord callback function adds supplementary error record sections to an error record that more fully describe the error condition.
PSHED_PI_GET_ALL_ERROR_SOURCES A PSHED plug-in's GetAllErrorSources callback function returns a list of error source descriptor structures that represents all of the error sources that are implemented by the hardware platform.
PSHED_PI_GET_ERROR_SOURCE_INFO A PSHED plug-in's GetErrorSourceInfo callback function returns an error source descriptor structure that represents a particular error source that is implemented by the hardware platform.
PSHED_PI_GET_INJECTION_CAPABILITIES A PSHED plug-in's GetInjectionCapabilities callback function returns an error injection capabilities union that describes the types of hardware errors that can be injected into the hardware platform.
PSHED_PI_INJECT_ERROR A PSHED plug-in's InjectError callback function injects an error into the hardware platform.
PSHED_PI_READ_ERROR_RECORD A PSHED plug-in's ReadErrorRecord callback function reads an error record from the system's persistent data storage.
PSHED_PI_RETRIEVE_ERROR_INFO A PSHED plug-in's RetrieveErrorInfo callback function retrieves platform-specific error information about a hardware error that has occurred.
PSHED_PI_SET_ERROR_SOURCE_INFO A PSHED plug-in's SetErrorSourceInfo callback function configures an error source.
PSHED_PI_WRITE_ERROR_RECORD A PSHED plug-in's WriteErrorRecord callback function writes an error record to the system's persistent data storage.
RTL_RUN_ONCE_INIT_FN The RunOnceInitialization routine performs a one-time initialization operation.
SILO_CONTEXT_CLEANUP_CALLBACK This callback is invoked when the context object reaches a reference count of zero.
SILO_MONITOR_CREATE_CALLBACK This is callback is invoked when a new silo is created.
SILO_MONITOR_TERMINATE_CALLBACK This callback is invoked when a silo is terminated.

Structures

Title Description
WHEA_ERROR_RECORD The WHEA_ERROR_RECORD structure describes an error record that contains error information about a hardware error condition that occurred.
WHEA_ERROR_SOURCE_DESCRIPTOR The WHEA_ERROR_SOURCE_DESCRIPTOR structure describes an error source.
BDCB_IMAGE_INFORMATION The BDCB_IMAGE_INFORMATION structure describes information about a boot-start driver that is about to be initialized, provided by Windows to a boot-start driver's BOOT_DRIVER_CALLBACK_FUNCTION routine.
BDCB_STATUS_UPDATE_CONTEXT The BDCB_STATUS_UPDATE_CONTEXT structure describes a status update provided by Windows to a boot-start driver's BOOT_DRIVER_CALLBACK_FUNCTION routine.
CONTEXT
CONTROLLER_OBJECT A controller object represents a hardware adapter or controller with homogenous devices that are the actual targets for I/O requests.
CORRELATION_VECTOR Store the correlation vector that is used to reference events and the generated logs for diagnostic purposes.
CUSTOM_SYSTEM_EVENT_TRIGGER_CONFIG Contains information about a custom system event trigger.
DEBUG_DEVICE_DESCRIPTOR
DEBUG_TRANSPORT_DATA Describes debug-transport specific data for use by the transport.
DISK_SIGNATURE DISK_SIGNATURE contains the disk signature information for a disk's partition table.
FILE_ALIGNMENT_INFORMATION The FILE_ALIGNMENT_INFORMATION structure is used as an argument to the ZwQueryInformationFile routine.
FILE_ATTRIBUTE_TAG_INFORMATION The FILE_ATTRIBUTE_TAG_INFORMATION structure is used as an argument to ZwQueryInformationFile.
FILE_DISPOSITION_INFORMATION The FILE_DISPOSITION_INFORMATION structure is used as an argument to the ZwSetInformationFile routine.
FILE_DISPOSITION_INFORMATION_EX The FILE_DISPOSITION_INFORMATION_EX structure is used as an argument to the ZwSetInformationFile routine and indicates how the operating system should delete a file.
FILE_END_OF_FILE_INFORMATION The FILE_END_OF_FILE_INFORMATION structure is used as an argument to the ZwSetInformationFile routine.
FILE_FS_FULL_SIZE_INFORMATION The FILE_FS_FULL_SIZE_INFORMATION structure is used to query sector size information for a file system volume.
FILE_FS_FULL_SIZE_INFORMATION_EX Used in a request to query sector size information for a file system volume.
FILE_FS_LABEL_INFORMATION The FILE_FS_LABEL_INFORMATION structure is used to set the label for a file system volume.
FILE_FS_OBJECTID_INFORMATION The FILE_FS_OBJECTID_INFORMATION structure is used to query or set the object ID for a file system volume.
FILE_FS_SECTOR_SIZE_INFORMATION The FILE_FS_SECTOR_SIZE_INFORMATION structure is used to query physical and logical sector size information for a file system volume.
FILE_FS_SIZE_INFORMATION The FILE_FS_SIZE_INFORMATION structure is used to query sector size information for a file system volume.
FILE_FS_VOLUME_INFORMATION The FILE_FS_VOLUME_INFORMATION structure is used to query information about a volume on which a file system is mounted.
FILE_NAME_INFORMATION The FILE_NAME_INFORMATION structure is used as argument to the ZwQueryInformationFile and ZwSetInformationFile routines.
FILE_VALID_DATA_LENGTH_INFORMATION The FILE_VALID_DATA_LENGTH_INFORMATION structure is used as an argument to ZwSetInformationFile.
HARDWARE_COUNTER The HARDWARE_COUNTER structure contains information about a hardware counter.
IMAGE_INFO Used by driver's load-image routine (PLOAD_IMAGE_NOTIFY_ROUTINE) to specify image information.
IMAGE_INFO_EX IMAGE_INFO_EX is the extended version of the IMAGE_INFO load image information structure.
IO_DRIVER_CREATE_CONTEXT The IO_DRIVER_CREATE_CONTEXT structure is used to pass additional parameters to the IoCreateFileEx and FltCreateFileEx2 routines.
IO_FOEXT_SILO_PARAMETERS This structure describes the Container context that's identified by the IoGetSiloParameters routine.
IPMI_OS_SEL_RECORD
KEY_CACHED_INFORMATION The KEY_CACHED_INFORMATION structure holds the cached information available for a registry key or subkey.
KEY_NAME_INFORMATION The KEY_NAME_INFORMATION structure holds the name and name length of the key.
KEY_VIRTUALIZATION_INFORMATION The KEY_VIRTUALIZATION_INFORMATION structure defines the basic information that is available for a registry key or subkey.
KUSER_SHARED_DATA
MCG_CAP
MCI_STATUS
MCI_STATUS_AMD_BITS
MCI_STATUS_BITS_COMMON
MCI_STATUS_INTEL_BITS
MM_COPY_ADDRESS The MM_COPY_ADDRESS structure contains either a virtual memory address or a physical memory address.
OPLOCK_KEY_CONTEXT The OPLOCK_KEY_CONTEXT structure is returned from IoGetOplockKeyContextEx. This structure contains oplock keys for a specific file object.
PCI_EXPRESS_CAPABILITIES_REGISTER The PCI_EXPRESS_CAPABILITIES_REGISTER structure describes a PCI Express (PCIe) capabilities register of a PCIe capability structure.
PCI_EXPRESS_CAPABILITY The PCI_EXPRESS_CAPABILITY structure describes a PCI Express (PCIe) capability structure.
PCI_EXPRESS_DESIGNATED_VENDOR_SPECIFIC_CAPABILITY Represents the Designated Vendor-Specific Extended Capability defined by PCI-SIG.
PCI_EXPRESS_DESIGNATED_VENDOR_SPECIFIC_HEADER_1 Represents the Designated Vendor-Specific Extended Capability Header 1 defined by PCI-SIG.
PCI_EXPRESS_DESIGNATED_VENDOR_SPECIFIC_HEADER_2 Represents the Designated Vendor-Specific Extended Capability Header 2 defined by PCI-SIG.
PCI_EXPRESS_DEVICE_CAPABILITIES_REGISTER The PCI_EXPRESS_DEVICE_CAPABILITIES_REGISTER structure describes a PCI Express (PCIe) device capabilities register of a PCIe capability structure.
PCI_EXPRESS_DEVICE_CONTROL_REGISTER The PCI_EXPRESS_DEVICE_CONTROL_REGISTER structure describes a PCI Express (PCIe) device control register of a PCIe capability structure.
PCI_EXPRESS_DEVICE_STATUS_REGISTER The PCI_EXPRESS_DEVICE_STATUS_REGISTER structure describes a PCI Express (PCIe) device status register of a PCIe capability structure.
PCI_EXPRESS_LINK_CAPABILITIES_REGISTER The PCI_EXPRESS_LINK_CAPABILITIES_REGISTER structure describes a PCI Express (PCIe) link capabilities register of a PCIe capability structure.
PCI_EXPRESS_LINK_CONTROL_REGISTER The PCI_EXPRESS_LINK_CONTROL_REGISTER structure describes a PCI Express (PCIe) link control register of a PCIe capability structure.
PCI_EXPRESS_LINK_STATUS_REGISTER The PCI_EXPRESS_LINK_STATUS_REGISTER structure describes a PCI Express (PCIe) link status register of a PCIe capability structure.
PCI_EXPRESS_PME_REQUESTOR_ID The PCI_EXPRESS_PME_REQUESTOR_ID structure describes the identifier of the requester of a power management event (PME).
PCI_EXPRESS_ROOT_CAPABILITIES_REGISTER The PCI_EXPRESS_ROOT_CAPABILITIES_REGISTER structure describes a PCI Express (PCIe) root capabilities register of a PCIe capability structure.
PCI_EXPRESS_ROOT_CONTROL_REGISTER The PCI_EXPRESS_ROOT_CONTROL_REGISTER structure describes a PCI Express (PCIe) root control register of a PCIe capability structure.
PCI_EXPRESS_ROOT_STATUS_REGISTER The PCI_EXPRESS_ROOT_STATUS_REGISTER structure describes a PCI Express (PCIe) root status register of a PCIe capability structure.
PCI_EXPRESS_SLOT_CAPABILITIES_REGISTER The PCI_EXPRESS_SLOT_CAPABILITIES_REGISTER structure describes a PCI Express (PCIe) slot capabilities register of a PCIe capability structure.
PCI_EXPRESS_SLOT_CONTROL_REGISTER The PCI_EXPRESS_SLOT_CONTROL_REGISTER structure describes a PCI Express (PCIe) slot control register of a PCIe capability structure.
PCI_EXPRESS_SLOT_STATUS_REGISTER The PCI_EXPRESS_SLOT_STATUS_REGISTER structure describes a PCI Express (PCIe) slot status register of a PCIe capability structure.
PCI_FPB_CAPABILITIES_REGISTER The Flattening Portal Bridge (FPB) Capabilities register. See section 7.y.2.
PCI_FPB_CAPABILITY Flattening Portal Bridge (FPB) Capabilities that is required for any bridge Function that implements FPB. See section 7.y.
PCI_FPB_CAPABILITY_HEADER The Flattening Portal Bridge (FPB) Capabilities header. See section 7.y.1.
PCI_FPB_MEM_HIGH_VECTOR_CONTROL1_REGISTER The FPB MEM High Vector Control 1 Register. See section 7.y.6.
PCI_FPB_MEM_HIGH_VECTOR_CONTROL2_REGISTER The FPB MEM High Vector Control 2 Register. See section 7.y.7.
PCI_FPB_MEM_LOW_VECTOR_CONTROL_REGISTER FPB MEM Low Vector Control Register. See section 7.y.5.
PCI_FPB_RID_VECTOR_CONTROL1_REGISTER The FPB RID Vector Control 1 Register. See section 7.y.3.
PCI_FPB_RID_VECTOR_CONTROL2_REGISTER The FPB RID Vector Control 1 Register. See section 7.y.3.
PCI_FPB_VECTOR_ACCESS_CONTROL_REGISTER The FPB Vector Access Control Register. See section 7.y.8.
PCI_FPB_VECTOR_ACCESS_DATA_REGISTER The FPB Vector Access Data Register. See section 7.y.9.
PHYSICAL_COUNTER_EVENT_BUFFER_CONFIGURATION The PHYSICAL_COUNTER_EVENT_BUFFER_CONFIGURATION structure describes the configuration for event buffers on the platform.
PHYSICAL_COUNTER_RESOURCE_DESCRIPTOR The PHYSICAL_COUNTER_RESOURCE_DESCRIPTOR structure describes the counter resources available on the platform.
PHYSICAL_COUNTER_RESOURCE_LIST The PHYSICAL_COUNTER_RESOURCE_LIST structure describes an array of PHYSICAL_COUNTER_RESOURCE_DESCRIPTOR structures.
PNP_LOCATION_INTERFACE The PNP_LOCATION_INTERFACE structure describes the GUID_PNP_LOCATION_INTERFACE interface.
POWER_THROTTLING_PROCESS_STATE Stores the throttling policies and how to apply them to a target process when that process is subject to power management.
POWER_THROTTLING_THREAD_STATE Stores the throttling policies and how to apply them to a target thread when that thread is subject to power management.
PROCESS_MITIGATION_CHILD_PROCESS_POLICY Stores policy information about creating child processes.
PROCESS_MITIGATION_PAYLOAD_RESTRICTION_POLICY Stores information about process mitigation policy.
PROCESS_MITIGATION_SYSTEM_CALL_FILTER_POLICY This structure is not supported.
PS_CREATE_NOTIFY_INFO The PS_CREATE_NOTIFY_INFO structure provides information about a newly created process.
RTL_AVL_TABLE The RTL_AVL_TABLE structure contains file system-specific data for an Adelson-Velsky/Landis (AVL) tree.
RTL_GENERIC_TABLE The RTL_GENERIC_TABLE structure contains file system-specific data for a splay tree.
RTL_SPLAY_LINKS The RTL_SPLAY_LINKS structure is an opaque structure and is used by the system to represent a splay link tree node.
SILO_MONITOR_REGISTRATION This structure specifies a server silo monitor that can receive notifications about server silo events.
SOC_SUBSYSTEM_FAILURE_DETAILS The SOC_SUBSYSTEM_FAILURE_DETAILS structure holds information related to a System on a Chip (SoC) bug code.
TXN_PARAMETER_BLOCK The TXN_PARAMETER_BLOCK structure contains information about a transacted file operation.
WHEA_AER_BRIDGE_DESCRIPTOR The WHEA_AER_BRIDGE_DESCRIPTOR structure describes a PCI Express (PCIe) bridge error source.
WHEA_AER_ENDPOINT_DESCRIPTOR The WHEA_AER_ENDPOINT_DESCRIPTOR structure describes a PCI Express (PCIe) endpoint error source.
WHEA_AER_ROOTPORT_DESCRIPTOR The WHEA_AER_ROOTPORT_DESCRIPTOR structure describes a PCI Express (PCIe) root port error source.
WHEA_AMD_EXTENDED_REGISTERS
WHEA_DEVICE_DRIVER_DESCRIPTOR
WHEA_ERROR_INJECTION_CAPABILITIES The WHEA_ERROR_INJECTION_CAPABILITIES union describes the types of hardware errors that can be injected into a hardware platform.
WHEA_ERROR_PACKET_FLAGS The WHEA_ERROR_PACKET_FLAGS union defines the error condition reported through a WHEA_ERROR_PACKET structure.
WHEA_ERROR_PACKET_V1 The WHEA_ERROR_PACKET_V1 structure describes the hardware error data that is passed to the operating system by a low-level hardware error handler (LLHEH).Note  The WHEA_ERROR_PACKET_V1 structure is supported in Windows Server 2008 and Windows Vista SP1.
WHEA_ERROR_PACKET_V2 The WHEA_ERROR_PACKET_V1 structure describes the hardware error data that is passed to the operating system by a low-level hardware error handler (LLHEH).Note  The WHEA_ERROR_PACKET_V1 structure is supported in Windows Server 2008 and Windows Vista SP1.
WHEA_ERROR_RECORD_HEADER The WHEA_ERROR_RECORD_HEADER structure describes general information about a hardware error condition.
WHEA_ERROR_RECORD_HEADER_FLAGS
WHEA_ERROR_RECORD_HEADER_VALIDBITS The WHEA_ERROR_RECORD_HEADER_VALIDBITS union describes which members of a WHEA_ERROR_RECORD_HEADER structure contain valid data.
WHEA_ERROR_RECORD_SECTION_DESCRIPTOR The WHEA_ERROR_RECORD_SECTION_DESCRIPTOR structure describes a section of error information that is part of an error record.
WHEA_ERROR_RECORD_SECTION_DESCRIPTOR_VALIDBITS The WHEA_ERROR_RECORD_SECTION_DESCRIPTOR_VALIDBITS union describes which members of a WHEA_ERROR_RECORD_SECTION_DESCRIPTOR structure contain valid data.
WHEA_ERROR_SOURCE_CONFIGURATION
WHEA_ERROR_SOURCE_CONFIGURATION_DD
WHEA_ERROR_SOURCE_CONFIGURATION_DEVICE_DRIVER
WHEA_ERROR_STATUS The WHEA_ERROR_STATUS union describes generic error codes that are abstracted from the data contained in implementation-specific error registers.
WHEA_EVENT_LOG_ENTRY_FLAGS
WHEA_FIRMWARE_ERROR_RECORD_REFERENCE The WHEA_FIRMWARE_ERROR_RECORD_REFERENCE structure describes a reference to a firmware error record that is specific to the Itanium processor architecture.
WHEA_GENERIC_ERROR The WHEA_GENERIC_ERROR structure describes error status data for a generic error source.
WHEA_GENERIC_ERROR_BLOCKSTATUS The WHEA_GENERIC_ERROR_BLOCKSTATUS union indicates what kind of error data is reported in a generic error status block.
WHEA_GENERIC_ERROR_DATA_ENTRY_V2 The WHEA_GENERIC_ERROR_DATA_ENTRY structure describes an error data section in a generic error status block.
WHEA_GENERIC_ERROR_DESCRIPTOR The WHEA_GENERIC_ERROR_DESCRIPTOR structure describes a generic error source.
WHEA_IPF_CMC_DESCRIPTOR The WHEA_IPF_CMC_DESCRIPTOR structure describes a corrected machine check (CMC) error source for an Itanium processor.
WHEA_IPF_CPE_DESCRIPTOR The WHEA_IPF_CPE_DESCRIPTOR structure describes a corrected platform error (CPE) error source for an Itanium processor.
WHEA_IPF_MCA_DESCRIPTOR The WHEA_IPF_MCA_DESCRIPTOR structure describes a machine check abort (MCA) error source for an Itanium processor.
WHEA_MEMORY_ERROR_SECTION The WHEA_MEMORY_ERROR_SECTION structure describes platform memory error data.
WHEA_MEMORY_ERROR_SECTION_VALIDBITS The WHEA_MEMORY_ERROR_SECTION_VALIDBITS union describes which members of a WHEA_MEMORY_ERROR_SECTION structure contain valid data.
WHEA_NMI_ERROR_SECTION The WHEA_NMI_ERROR_SECTION structure describes nonmaskable interrupt (NMI) error data.
WHEA_NOTIFICATION_DESCRIPTOR The WHEA_NOTIFICATION_DESCRIPTOR structure describes the notification mechanism that is used by an error source.
WHEA_PCI_SLOT_NUMBER The WHEA_PCI_SLOT_NUMBER structure describes a logical PCI slot.
WHEA_PCIEXPRESS_ERROR_SECTION The WHEA_PCIEXPRESS_ERROR_SECTION structure describes PCI Express (PCIe) error data.
WHEA_PCIEXPRESS_ERROR_SECTION_VALIDBITS The WHEA_PCIEXPRESS_ERROR_SECTION_VALIDBITS union describes which members of a WHEA_PCIEXPRESS_ERROR_SECTION structure contain valid data.
WHEA_PCIXBUS_ERROR_SECTION The WHEA_PCIXBUS_ERROR_SECTION structure describes PCI or PCI-X bus error data.
WHEA_PCIXBUS_ERROR_SECTION_VALIDBITS The WHEA_PCIXBUS_ERROR_SECTION_VALIDBITS union describes which members of a WHEA_PCIXBUS_ERROR_SECTION structure contain valid data.
WHEA_PCIXDEVICE_ERROR_SECTION The WHEA_PCIXDEVICE_ERROR_SECTION structure describes PCI or PCI-X device error data.
WHEA_PCIXDEVICE_ERROR_SECTION_VALIDBITS The WHEA_PCIXDEVICE_ERROR_SECTION_VALIDBITS union describes which members of a WHEA_PCIXDEVICE_ERROR_SECTION structure contain valid data.
WHEA_PERSISTENCE_INFO The WHEA_PERSISTENCE_INFO union describes data that is used by the error record persistence interface for storing an error record.
WHEA_PMEM_ERROR_SECTION
WHEA_PMEM_ERROR_SECTION_VALIDBITS
WHEA_PMEM_PAGE_RANGE
WHEA_PROCESSOR_FAMILY_INFO The WHEA_PROCESSOR_FAMILY_INFO union describes the processor family information for an x86 or x64 processor.
WHEA_PROCESSOR_GENERIC_ERROR_SECTION Describes processor error data that is not specific to a particular processor architecture.
WHEA_PROCESSOR_GENERIC_ERROR_SECTION_VALIDBITS The WHEA_PROCESSOR_GENERIC_ERROR_SECTION_VALIDBITS union describes which members of a WHEA_PROCESSOR_GENERIC_ERROR_SECTION structure contain valid data.
WHEA_PSHED_PLUGIN_CALLBACKS The WHEA_PSHED_PLUGIN_CALLBACKS structure describes the callback functions for a PSHED plug-in.
WHEA_PSHED_PLUGIN_REGISTRATION_PACKET_V1
WHEA_PSHED_PLUGIN_REGISTRATION_PACKET_V2
WHEA_RECOVERY_CONTEXT
WHEA_REVISION The WHEA_REVISION union describes the revision of the error record data structures.
WHEA_SEL_BUGCHECK_PROGRESS
WHEA_TIMESTAMP The WHEA_TIMESTAMP union describes the time that an error was reported to the operating system.
WHEA_X64_REGISTER_STATE The WHEA_X64_REGISTER_STATE structure describes the state of an x64 processor's registers.
WHEA_X86_REGISTER_STATE The WHEA_X86_REGISTER_STATE structure describes the state of an x86 processor's registers.
WHEA_XPF_BUS_CHECK The WHEA_XPF_BUS_CHECK union describes bus error information for an x86 or x64 processor.
WHEA_XPF_CACHE_CHECK The WHEA_XPF_CACHE_CHECK union describes cache error information for an x86 or x64 processor.
WHEA_XPF_CMC_DESCRIPTOR The WHEA_XPF_CMC_DESCRIPTOR structure describes a corrected machine check (CMC) error source for an x86 or x64 processor.
WHEA_XPF_CONTEXT_INFO The WHEA_XPF_CONTEXT_INFO structure describes processor context information for an x86 or x64 processor.
WHEA_XPF_MC_BANK_DESCRIPTOR The WHEA_XPF_MC_BANK_DESCRIPTOR structure describes a bank of machine check registers for an x86 or x64 processor.
WHEA_XPF_MCA_SECTION
WHEA_XPF_MCE_DESCRIPTOR The WHEA_XPF_MCE_DESCRIPTOR structure describes a machine check exception (MCE) error source for an x86 or x64 processor.
WHEA_XPF_MS_CHECK The WHEA_XPF_MS_CHECK union describes microarchitecture-specific error information for an x86 or x64 processor.
WHEA_XPF_NMI_DESCRIPTOR The WHEA_XPF_NMI_DESCRIPTOR structure describes a nonmaskable interrupt (NMI) error source for an x86 or x64 processor.
WHEA_XPF_PROCESSOR_ERROR_SECTION The WHEA_XPF_PROCESSOR_ERROR_SECTION structure describes processor error data that is specific to the x86/x64 processor architecture.
WHEA_XPF_PROCESSOR_ERROR_SECTION_VALIDBITS The WHEA_XPF_PROCESSOR_ERROR_SECTION_VALIDBITS union describes which members of a WHEA_XPF_PROCESSOR_ERROR_SECTION structure contain valid data and the number of structures that are contained in the WHEA_XPF_PROCESSOR_ERROR_SECTION structure's VariableInfo member.
WHEA_XPF_PROCINFO The WHEA_XPF_PROCINFO structure describes processor error information that is specific to the x86 and x64 processor architectures.
WHEA_XPF_PROCINFO_VALIDBITS The WHEA_XPF_PROCINFO_VALIDBITS union describes which members of a WHEA_XPF_PROCINFO structure contain valid data.
WHEA_XPF_TLB_CHECK The WHEA_XPF_TLB_CHECK union describes translation lookaside buffer (TLB) error information for an x86 or x64 processor.
WHEAP_ADD_REMOVE_ERROR_SOURCE_EVENT
WHEAP_ATTEMPT_RECOVERY_EVENT
WHEAP_CLEARED_POISON_EVENT
WHEAP_CREATE_GENERIC_RECORD_EVENT
WHEAP_DEFERRED_EVENT
WHEAP_DROPPED_CORRECTED_ERROR_EVENT
WHEAP_ERR_SRC_ARRAY_INVALID_EVENT
WHEAP_ERR_SRC_INVALID_EVENT
WHEAP_ERROR_CLEARED_EVENT
WHEAP_ERROR_RECORD_EVENT
WHEAP_FOUND_ERROR_IN_BANK_EVENT
WHEAP_GENERIC_ERR_MEM_MAP_EVENT
WHEAP_OSC_IMPLEMENTED
WHEAP_PFA_MEMORY_OFFLINED
WHEAP_PFA_MEMORY_POLICY
WHEAP_PFA_MEMORY_REMOVE_MONITOR
WHEAP_PROCESS_EINJ_EVENT
WHEAP_PROCESS_HEST_EVENT
WHEAP_PSHED_INJECT_ERROR
WHEAP_PSHED_PLUGIN_REGISTER
WHEAP_SEL_LOG_EVENT_FAILED
WHEAP_STARTED_REPORT_HW_ERROR
WHEAP_STUCK_ERROR_EVENT

Enumerations

Title Description
BDCB_CALLBACK_TYPE The BDCB_CALLBACK_TYPE enumeration specifies whether the callback being passed to a BOOT_DRIVER_CALLBACK_FUNCTION routine is a status update or a boot-start driver initialization notification.
BDCB_CLASSIFICATION The BDCB_CLASSIFICATION enumeration lists different classifications of boot start images.
BDCB_STATUS_UPDATE_TYPE The BDCB_STATUS_UPDATE_TYPE enumeration lists the types of boot-driver callback status updates.
BUS_DATA_TYPE The BUS_DATA_TYPE enumeration indicates the type of bus configuration space.
HAL_QUERY_INFORMATION_CLASS The values are reserved for internal use.
HAL_SET_INFORMATION_CLASS The values are reserved for internal use.
HARDWARE_COUNTER_TYPE The HARDWARE_COUNTER_TYPE enumeration specifies the type of a hardware counter.
IPMI_OS_SEL_RECORD_TYPE
PHYSICAL_COUNTER_RESOURCE_DESCRIPTOR_TYPE The PHYSICAL_COUNTER_RESOURCE_DESCRIPTOR_TYPE enumeration contains constants that indicate the type of hardware performance counter resource that is described by a PHYSICAL_COUNTER_RESOURCE_DESCRIPTOR structure.
PROCESS_MITIGATION_POLICY Represents the different process mitigation policies.
PSCREATEPROCESSNOTIFYTYPE Indicates the type of process notification. This enumeration is used in PsSetCreateProcessNotifyRoutineEx2 to register callback notifications.
PSCREATETHREADNOTIFYTYPE Indicates the type of thread notification. This enumeration is used in PsSetCreateThreadNotifyRoutineEx to register callback notifications associated with thread creation or deletion.
SOC_SUBSYSTEM_TYPE The SOC_SYBSYSTEM_TYPE enumeration defines different types of System on a Chip (SoC) subsystems.
STATE_LOCATION_TYPE Defines values for persisted state locations for device and driver files.
SUBSYSTEM_INFORMATION_TYPE Indicates the type of subsystem for a process or thread. This enumeration is used in NtQueryInformationProcess and NtQueryInformationThread calls.
WELL_KNOWN_SID_TYPE A list of commonly used security identifiers (SIDs). Programs can pass these values to the CreateWellKnownSid function to create a SID from this list. For information about these values, see WELL_KNOWN_SID_TYPE.
WHEA_ERROR_PACKET_DATA_FORMAT The WHEA_ERROR_PACKET_DATA_FORMAT enumeration defines the raw hardware error data format in a hardware error packet.
WHEA_ERROR_SEVERITY The WHEA_ERROR_SEVERITY enumeration defines the possible severity levels of a hardware error condition.
WHEA_ERROR_SOURCE_STATE The WHEA_ERROR_SOURCE_STATE enumeration defines the different runtime states for an error source.
WHEA_ERROR_SOURCE_TYPE The WHEA_ERROR_SOURCE_TYPE enumeration defines the different types of error sources that can report hardware errors.
WHEA_ERROR_TYPE The WHEA_ERROR_TYPE enumeration defines the different types of hardware components that can report a hardware error.
WHEA_EVENT_LOG_ENTRY_ID
WHEA_PFA_REMOVE_TRIGGER
WHEA_RAW_DATA_FORMAT The WHEA_RAW_DATA_FORMAT enumeration defines the possible formats that raw hardware error data can be encoded in a hardware error packet.
WHEA_RECOVERY_CONTEXT_ERROR_TYPE
WHEAP_PFA_OFFLINE_DECISION_TYPE