ntddk.h header

This header is used by kernel. For more information, see:

ntddk.h contains the following programming interfaces:

IOCTLs

 
IOCTL_IPMI_INTERNAL_RECORD_SEL_EVENT

Functions

 
CUSTOM_SYSTEM_EVENT_TRIGGER_INIT

Initializes the CUSTOM_SYSTEM_EVENT_TRIGGER_CONFIG structure.
DbgPrompt

The DbgPrompt routine displays a caller-specified user prompt string on the kernel debugger's display device and obtains a user response string.
ExFreePool

The ExFreePool routine deallocates a block of pool memory.
ExRaiseAccessViolation

The ExRaiseAccessViolation routine can be used with structured exception handling to throw a driver-determined exception for a memory access violation that occurs when a driver processes I/O requests.
ExRaiseDatatypeMisalignment

The ExRaiseDatatypeMisalignment routine can be used with structured exception handling to throw a driver-determined exception for a misaligned data type that occurs when a driver processes I/O requests.
ExUuidCreate

The ExUuidCreate routine initializes a UUID (GUID) structure to a newly generated value.
FsRtlIsTotalDeviceFailure

The FsRtlIsTotalDeviceFailure routine determines whether a media or other hardware failure has occurred.
HalAllocateHardwareCounters

The HalAllocateHardwareCounters routine allocates a set of hardware performance counters.
HalExamineMBR

The HalExamineMBR routine reads the master boot record (MBR) of a disk and returns data from the MBR if the MBR is of the type specified by the caller.
HalFreeHardwareCounters

The HalFreeHardwareCounters routine frees a set of hardware performance counters that was acquired in a previous call to HalAllocateHardwareCounters routine.
IoAllocateAdapterChannel

Deprecated. Use PALLOCATE_ADAPTER_CHANNEL.
IoAllocateController

The IoAllocateController routine sets up the call to a driver-supplied ControllerControl routine as soon as the device controller, represented by the given controller object, is available to carry out an I/O operation for the target device, represented by the given device object.
IoAssignArcName

The IoAssignArcName routine creates a symbolic link between the ARC name of a physical device and the name of the corresponding device object when it has been created.
IoAttachDeviceToDeviceStackSafe

The IoAttachDeviceToDeviceStackSafe routine attaches the caller's device object to the topmost device object in a driver stack.
IoCancelFileOpen

The IoCancelFileOpen routine can be used by a file system filter driver to close a file that has been opened by a file system driver in the filter driver's device stack.
IoClearActivityIdThread

The IoClearActivityIdThread routine clears the activity ID of the current thread.
IoCreateController

The IoCreateController routine allocates memory for and initializes a controller object with a controller extension of a driver-determined size.
IoCreateDisk

The IoCreateDisk routine initializes a raw disk by creating a new partition table.
IoCreateFileEx

The IoCreateFileEx routine either causes a new file or directory to be created, or opens an existing file, device, directory, or volume and gives the caller a handle for the file object.
IoCreateFileSpecifyDeviceObjectHint

The IoCreateFileSpecifyDeviceObjectHint routine is used by file system filter drivers to send a create request only to the filters below a specified device object and to the file system.
IoDeassignArcName

The IoDeassignArcName routine removes a symbolic link between the ARC name for a device and the named device object.
IoDecrementKeepAliveCount

The IoDecrementKeepAliveCount routine decrements a reference count associated with an Windows app on a specific device.
IoDeleteController

The IoDeleteController routine removes a given controller object from the system, for example, when the driver that created it is being unloaded.
IoFreeController

The IoFreeController routine releases a previously allocated controller object when the driver has completed an I/O request.
IoGetActivityIdIrp

The IoGetActivityIdIrp routine retrieves the current activity ID associated with an IRP.
IoGetActivityIdThread

The IoGetActivityIdThread routine returns the activity ID associated with the current thread.
IoGetConfigurationInformation

The IoGetConfigurationInformation routine returns a pointer to the I/O manager's global configuration information structure, which contains the current values for how many physical disk, floppy, CD-ROM, tape, SCSI HBA, serial, and parallel devices have device objects created to represent them by drivers as they are loaded.
IoGetFileObjectGenericMapping

The IoGetFileObjectGenericMapping routine returns information about the mapping between each generic access right and the set of specific access rights for file objects.
IoGetInitiatorProcess

The IoGetInitiatorProcess routine retrieves the process which initiated the creation of a file object if different than the process which is issuing the create.
IoGetOplockKeyContext

The IoGetOplockKeyContext routine returns a target oplock key context for a file object.
IoGetOplockKeyContextEx

The IoGetOplockKeyContextEx routine returns a dual oplock key context for a file object.
IoGetPagingIoPriority

The IoGetPagingIoPriority routine indicates the priority level of a paging I/O request.
IoGetSiloParameters

This routine indicates if a file is within a Container context.
IoGetTransactionParameterBlock

The IoGetTransactionParameterBlock routine returns the transaction parameter block for a transacted file operation.
IoIncrementKeepAliveCount

The IoIncrementKeepAliveCount routine increments a reference count associated with an Windows app process on a specific device.
IoInitializeDriverCreateContext

The IoInitializeDriverCreateContext routine initializes a caller-allocated variable of type IO_DRIVER_CREATE_CONTEXT.
IoIsFileObjectIgnoringSharing

The IoIsFileObjectIgnoringSharing routine determines if a file object is set with the option to ignore file sharing access checks.
IoIsFileOriginRemote

The IoIsFileOriginRemote routine determines whether a given file object is for a remote create request.
IoIsValidIrpStatus

The IoIsValidIrpStatus routine validates the specified NTSTATUS status code value.
IoMakeAssociatedIrp

This routine is reserved for use by file systems and file system filter drivers.
IoPropagateActivityIdToThread

The IoPropagateActivityIdToThread routine associates the activity ID from an IRP with the current thread.
IoQueryFullDriverPath

The IoQueryFullDriverPath routine retrieves the full path name of the binary file that is loaded for the specified driver object.
IoRaiseHardError

The IoRaiseHardError routine causes a dialog box to appears that warns the user that a device I/O error has occurred, which might indicate that a physical device is failing.
IoRaiseInformationalHardError

The IoRaiseInformationalHardError routine sends a dialog box to the user, warning about a device I/O error that indicates why a user I/O request failed.
IoReadDiskSignature

The IoReadDiskSignature routine reads the disk signature information for the partition table of a disk.
IoReadPartitionTable

The IoReadPartitionTable routine is obsolete and is provided only to support existing drivers.
IoReadPartitionTableEx

The IoReadPartitionTableEx routine reads a list of partitions on a disk having a specified sector size and creates an entry in the partition list for each recognized partition.
IoRegisterBootDriverCallback

The IoRegisterBootDriverCallback routine registers a BOOT_DRIVER_CALLBACK_FUNCTION routine to be called during the initialization of a boot-start driver and its dependent DLLs.
IoRegisterBootDriverReinitialization

The IoRegisterBootDriverReinitialization routine is called by a boot driver to register the driver's reinitialization routine with the I/O manager to be called after all devices have been enumerated and started.
IoRegisterDriverReinitialization

The IoRegisterDriverReinitialization routine is called by a driver during its initialization or reinitialization to register its Reinitialize routine to be called again before the driver's and, possibly the system's, initialization is complete.
IoReportDetectedDevice

The IoReportDetectedDevice routine reports a non-PnP device to the PnP manager.
IoReportResourceForDetection

The IoReportResourceForDetection routine claims hardware resources in the configuration registry for a legacy device.
IoReportRootDevice

The IoReportRootDevice routine reports a device that cannot be detected by a PnP bus driver to the PnP Manager. IoReportRootDevice allows only one device per driver to be created.
IoSetActivityIdIrp

The IoSetActivityIdIrp routine associates an activity ID with an IRP.
IoSetActivityIdThread

The IoSetActivityIdThread routine associates an activity ID with the current thread. Drivers should use this routine when they are tracing aware and are issuing I/O on a worker thread.
IoSetFileObjectIgnoreSharing

The IoSetFileObjectIgnoreSharing routine sets a file object to ignore file sharing access checks.
IoSetFileOrigin

The IoSetFileOrigin routine specifies whether a given file object is for a remote create request.
IoSetHardErrorOrVerifyDevice

Lower-level drivers call the IoSetHardErrorOrVerifyDevice routine to identify a removable media device that has encountered an error, so that a file system driver can prompt the user to verify that the medium is valid.
IoSetMasterIrpStatus

The IoSetMasterIrpStatus routine conditionally replaces the Status value in an IRP with the specified NTSTATUS value.
IoSetPartitionInformation

The IoSetPartitionInformation routine is obsolete and is provided only to support existing drivers.
IoSetPartitionInformationEx

For the disk represented by DeviceObject, the IoSetPartitionInformationEx routine initializes a partition table entry with the information specified in the SET_PARTITION_INFORMATION_EX structure.
IoSetSystemPartition

The IoSetSystemPartition routine sets the boot partition for the system.
IoSetThreadHardErrorMode

The IoSetThreadHardErrorMode routine enables or disables hard error reporting for the current thread.
IoTransferActivityId

The IoTransferActivityId routine logs an ETW transfer event using the I/O tracing provider on behalf of the caller. This allows a driver to associate two related activity IDs without requiring a specific provider to be enabled.
IoUnregisterBootDriverCallback

The IoUnRegisterBootDriverCallback routine unregisters a previously registered BOOT_DRIVER_CALLBACK_FUNCTION routine.
IoVerifyPartitionTable

The IoVerifyPartitionTable routine checks the validity of the partition table for a disk.
IoVolumeDeviceToDosName

The IoVolumeDeviceToDosName routine returns the MS-DOS path for a specified device object that represents a file system volume.
IoWritePartitionTable

The IoWritePartitionTable routine is obsolete and is provided only to support existing drivers.
IoWritePartitionTableEx

The IoWritePartitionTableEx routine writes partition tables from the entries in the partition list buffer for each partition on the disk represented by the given device object.
KeAreApcsDisabled

The KeAreApcsDisabled routine returns whether the calling thread is within a critical region or a guarded region, which disables normal kernel APC delivery.
KeBugCheck

The KeBugCheck routine brings down the system in a controlled manner when the caller discovers an unrecoverable inconsistency that would corrupt the system if the caller continued to run.
KeEnterCriticalRegion

The KeEnterCriticalRegion routine temporarily disables the execution of normal kernel APCs, but does not prevent special kernel APCs from running.
KeEnterGuardedRegion

The KeEnterGuardedRegion routine enters a guarded region, which disables all kernel-mode APC delivery to the current thread.
KeExpandKernelStackAndCallout

The KeExpandKernelStackAndCallout routine calls a routine with a guaranteed amount of stack space.
KeExpandKernelStackAndCalloutEx

KeGetCurrentNodeNumber

The KeGetCurrentNodeNumber routine gets the NUMA node number for the logical processor that the caller is running on.
KeGetCurrentProcessorNumber

The KeGetCurrentProcessorNumber routine returns the system-assigned number of the current processor on which the caller is running.
KeGetCurrentProcessorNumberEx

The KeGetCurrentProcessorNumberEx routine gets the processor number of the logical processor that the caller is running on.
KeInitializeCrashDumpHeader

The KeInitializeCrashDumpHeader routine supplies the header information the system requires for a crash dump file.
KeInvalidateAllCaches

The KeInvalidateAllCaches routine flushes all processor caches.
KeLeaveCriticalRegion

The KeLeaveCriticalRegion routine reenables the delivery of normal kernel-mode APCs that were disabled by a preceding call to KeEnterCriticalRegion.
KeLeaveGuardedRegion

The KeLeaveGuardedRegion routine exits a guarded region entered by KeEnterGuardedRegion.
KePulseEvent

The KePulseEvent routine atomically sets an event object to a signaled state, attempts to satisfy as many waits as possible, and then resets the event object to a not-signaled state.
KeQueryActiveGroupCount

The KeQueryActiveGroupCount routine returns the number of active processor groups in a multiprocessor system.
KeQueryActiveProcessorCount

The KeQueryActiveProcessorCount routine returns the number of currently active processors.
KeQueryActiveProcessorCountEx

The KeQueryActiveProcessorCountEx routine returns the number of active logical processors in a specified group in a multiprocessor system or in the entire system.
KeQueryActiveProcessors

The KeQueryActiveProcessors routine returns a bitmask of the currently active processors.
KeQueryGroupAffinity

The KeQueryGroupAffinity routine returns an affinity mask that identifies the active logical processors in a specified group in a multiprocessor system.
KeQueryHardwareCounterConfiguration

The KeQueryHardwareCounterConfiguration routine queries the operating system for the list of hardware counters to use for thread profiling.
KeQueryHighestNodeNumber

The KeQueryHighestNodeNumber routine returns the highest node number in a multiprocessor system that has a non-uniform memory access (NUMA) architecture.
KeQueryMaximumGroupCount

The KeQueryMaximumGroupCount routine returns the maximum number of groups in a multiprocessor system.
KeQueryMaximumProcessorCount

The KeQueryMaximumProcessorCount routine returns the maximum number of processors.
KeQueryMaximumProcessorCountEx

The KeQueryMaximumProcessorCountEx routine returns the maximum number of logical processors in a specified group in a multiprocessor system.
KeQueryNodeMaximumProcessorCount

The KeQueryNodeMaximumProcessorCount routine returns the maximum number of logical processors that a specified node in a non-uniform memory access (NUMA) multiprocessor system can contain.
KeQueryTickCount

The KeQueryTickCount routine maintains a count of the interval timer interrupts that have occurred since the system was booted.
KeRaiseIrqlToDpcLevel

The KeRaiseIrqlToDpcLevel routine raises the hardware priority to IRQL = DISPATCH_LEVEL, thereby masking off interrupts of equivalent or lower IRQL on the current processor.
KeSetBasePriorityThread

The KeSetBasePriorityThread routine sets the run-time priority, relative to the current process, for a given thread.
KeSetHardwareCounterConfiguration

The KeSetHardwareCounterConfiguration routine specifies a list of hardware counters to use for thread profiling.
KeSetImportanceDpc

The KeSetImportanceDpc routine specifies how soon the DPC routine is run.
KeSetTargetProcessorDpc

The KeSetTargetProcessorDpc routine specifies the processor that a DPC routine will be run on.
MmAllocateContiguousMemory

The MmAllocateContiguousMemory routine allocates a range of contiguous, nonpaged physical memory and maps it to the system address space.
MmAllocateContiguousMemorySpecifyCache

The MmAllocateContiguousMemorySpecifyCache routine allocates a range of contiguous, nonpaged physical memory and maps it to the system address space.
MmAllocateContiguousMemorySpecifyCacheNode

The MmAllocateContiguousMemorySpecifyCacheNode routine allocates a range of contiguous, nonpaged physical memory and maps it to the system address space.
MmAllocateContiguousNodeMemory

The MmAllocateContiguousNodeMemory routine allocates a range of contiguous, nonpaged physical memory and maps it to the system address space.
MmAllocateNonCachedMemory

The MmAllocateNonCachedMemory routine allocates a virtual address range of noncached and cache-aligned memory.
MmCopyMemory

The MmCopyMemory routine copies the specified range of virtual or physical memory into the caller-supplied buffer.
MmFreeContiguousMemory

The MmFreeContiguousMemory routine releases a range of physically contiguous memory that was allocated by an MmAllocateContiguousMemoryXxx routine.
MmFreeContiguousMemorySpecifyCache

The MmFreeContiguousMemorySpecifyCache routine frees a buffer that was allocated by an MmAllocateContiguousMemorySpecifyCacheXxx routine.
MmFreeNonCachedMemory

The MmFreeNonCachedMemory routine releases a range of noncached memory that was allocated by the MmAllocateNonCachedMemory routine.
MmGetPhysicalAddress

The MmGetPhysicalAddress routine returns the physical address corresponding to a valid nonpaged virtual address.
MmGetPhysicalMemoryRangesEx2

MmIsAddressValid

The MmIsAddressValid routine checks whether a page fault will occur for a read or write operation at a given virtual address.Warning  We do not recommend using this function.
MmIsThisAnNtAsSystem

The MmIsThisAnNtAsSystem routine is obsolete for Windows XP and later versions of Windows. Use RtlGetVersion or RtlVerifyVersionInfo instead.
MmLockPagableSectionByHandle

The MmLockPagableSectionByHandle routine locks a pageable code or data section into system memory by incrementing the reference count on the handle to the section.
MmMapViewInSystemSpace

The MmMapViewInSystemSpace function maps the specified section into the system's address space.
MmSecureVirtualMemory

The MmSecureVirtualMemory routine secures a user-space memory address range so that it cannot be freed and its protection type cannot be made more restrictive.
MmSecureVirtualMemoryEx

This routine probes the requested address range and protects the specified address range from having its protection made more restrictive and being deleted.
MmUnmapViewInSystemSpace

MmUnsecureVirtualMemory

The MmUnsecureVirtualMemory routine unsecures a memory address range secured by the MmSecureVirtualMemory routine.
NtOpenProcess

The ZwOpenProcess routine opens a handle to a process object and sets the access rights to this object.
PsAllocSiloContextSlot

This routine allocates a slot that can be used to insert, retrieve, and delete an object in all silos. .
PsAttachSiloToCurrentThread

This routine places a thread temporarily into the specified Silo.
PsCreateSiloContext

This routine creates an object that will be inserted in a Silo.
PsDereferenceSiloContext

This routine decrements the reference count on the object.
PsDetachSiloFromCurrentThread

This routine removes a thread from a silo which was added by an attach. For more info about attaching, see the PsAttachSiloToCurrentThread routine.
PsFreeSiloContextSlot

This routine frees the specified slot and makes it available in the system. It undoes the effects of the PsAllocSiloContextSlot routine.
PsGetCurrentProcessId

The PsGetCurrentProcessId routine identifies the current thread's process.
PsGetCurrentServerSilo

This routine returns the effective server silo for the thread.
PsGetCurrentSilo

This routine returns the current silo for the calling thread. First the thread is checked to see if it has been attached to a silo. If not, then the thread is checked to see if it is in a silo.
PsGetCurrentThread

The PsGetCurrentThread routine identifies the current thread.
PsGetCurrentThreadId

The PsGetCurrentThreadId routine identifies the current thread.
PsGetCurrentThreadTeb

The PsGetCurrentThreadTeb routine returns the Thread Environment Block (TEB) of the current thread. The call must be made in kernel-mode.
PsGetEffectiveServerSilo

This routine traverses the parent chain of the Silo until finding the effective server silo or host silo.
PsGetHostSilo

This routine returns the host silo.
PsGetJobServerSilo

This routine returns the effective ServerSilo for the job. The returned pointer is valid as long as the supplied Job object remains referenced.
PsGetJobSilo

This routine returns the first job in the hierarchy that is a Silo. The returned pointer is valid as long as the supplied Job object remains referenced.
PsGetParentSilo

Retrieves the most immediate parent silo in the hierarchy for a given job object.
PsGetPermanentSiloContext

This routine retrieves an object that was inserted in the Silo without incrementing the reference count.
PsGetProcessCreateTimeQuadPart

The PsGetProcessCreateTimeQuadPart routine returns a LONGLONG value that represents the time at which the process was created.
PsGetProcessId

The PsGetProcessId routine returns the process identifier (process ID) that is associated with a specified process.
PsGetServerSiloActiveConsoleId

Gets the active console for the current server silo context for the supplied thread.
PsGetSiloContainerId

Gets the ContainerId for the given Silo.
PsGetSiloContext

This routine retrieves the silo context from the specified silo and slot.
PsGetSiloMonitorContextSlot

This routine returns the silo context slot that was allocated by the monitor during the registration.
PsGetThreadProcessId

The PsGetThreadProcessId routine returns the process identifier that is associated with a specified thread's process.
PsGetThreadServerSilo

Determines whether the given thread is a silo.
PshedAllocateMemory

The PshedAllocateMemory function allocates a block of memory from the nonpaged pool.
PshedFreeMemory

The PshedFreeMemory function frees a block of memory that was previously allocated by calling the PshedAllocateMemory function.
PshedIsSystemWheaEnabled

The PshedIsSystemWheaEnabled function returns a Boolean value that indicates whether the system is WHEA-enabled.
PshedRegisterPlugin

The PshedRegisterPlugin function registers a PSHED plug-in with the PSHED.
PshedSynchronizeExecution

The PshedSynchronizeExecution function synchronizes the execution of a given function with the hardware error processing for an error source.
PshedUnregisterPlugin

Reserved for system use.
PsInsertPermanentSiloContext

This routine inserts an object in an empty slot in a Silo.
PsInsertSiloContext

This routine inserts an object in an empty slot in a Silo.
PsIsHostSilo

This routine will check if the supplied Silo is the host silo.
PsMakeSiloContextPermanent

This routine makes the slot in a silo instance read-only, allowing the object in the slot to be retrieved without affecting the reference count on that object.
PsReferenceSiloContext

This routine increments the reference count on the object.
PsRegisterSiloMonitor

This routine registers a server silo monitor that can receive notifications about server silo events.
PsRemoveCreateThreadNotifyRoutine

The PsRemoveCreateThreadNotifyRoutine routine removes a callback routine that was registered by the PsSetCreateThreadNotifyRoutine routine.
PsRemoveLoadImageNotifyRoutine

The PsRemoveLoadImageNotifyRoutine routine removes a callback routine that was registered by the PsSetLoadImageNotifyRoutine routine.
PsRemoveSiloContext

This routine removes an object that was inserted in the Silo.
PsReplaceSiloContext

This routine inserts an object in a Silo.
PsSetCreateProcessNotifyRoutine

The PsSetCreateProcessNotifyRoutine routine adds a driver-supplied callback routine to, or removes it from, a list of routines to be called whenever a process is created or deleted.
PsSetCreateProcessNotifyRoutineEx

The PsSetCreateProcessNotifyRoutineEx routine registers or removes a callback routine that notifies the caller when a process is created or exits.
PsSetCreateProcessNotifyRoutineEx2

The PsSetCreateProcessNotifyRoutineEx2 routine registers or removes a callback routine that notifies the caller when a process is created or deleted.
PsSetCreateThreadNotifyRoutine

The PsSetCreateThreadNotifyRoutine routine registers a driver-supplied callback that is subsequently notified when a new thread is created and when such a thread is deleted.
PsSetCreateThreadNotifyRoutineEx

The PsSetCreateThreadNotifyRoutineEx routine registers a driver-supplied callback that is subsequently notified when a new thread is created and when such a thread is deleted.
PsSetLoadImageNotifyRoutine

The PsSetLoadImageNotifyRoutine routine registers a driver-supplied callback that is subsequently notified whenever an image is loaded (or mapped into memory).
PsSetLoadImageNotifyRoutineEx

The PsSetLoadImageNotifyRoutineEx routine registers a driver-supplied callback that is subsequently notified whenever an image is loaded (or mapped into memory).
PsStartSiloMonitor

This routine tries to start the server silo monitor.
PsTerminateServerSilo

This routine terminates the specified silo.
PsUnregisterSiloMonitor

This routine unregisters a server silo monitor.
RtlCharToInteger

The RtlCharToInteger routine converts a single-byte character string to an integer value in the specified base.
RtlCompareString

The RtlCompareString routine compares two counted strings.
RtlConvertLongToLuid

The RtlConvertLongToLuid routine converts a long integer to a locally unique identifier (LUID), which is used by the system to represent a security privilege.
RtlConvertUlongToLuid

The RtlConvertUlongToLuid routine converts an unsigned long integer to a locally unique identifier (LUID), which is used by the system to represent a security privilege.
RtlCopyString

The RtlCopyString routine copies a source string to a destination string.
RtlDelete

The RtlDelete routine deletes the specified node from the splay link tree.
RtlDeleteElementGenericTable

The RtlDeleteElementGenericTable routine deletes an element from a generic table.
RtlDeleteElementGenericTableAvl

The RtlDeleteElementGenericTableAvl routine deletes an element from a generic table.
RtlDeleteNoSplay

The RtlDeleteNoSplay routine deletes the specified node from the splay link tree.
RtlDrainNonVolatileFlush

The routine RtlDrainNonVolatileFlush waits for the flushes initiated by RtlFlushNonVolatileMemory to finish.
RtlEnumerateGenericTable

The RtlEnumerateGenericTable routine is used to enumerate the elements in a generic table.
RtlEnumerateGenericTableAvl

The RtlEnumerateGenericTableAvl routine is used to enumerate the elements in a generic table.
RtlEnumerateGenericTableLikeADirectory

The RtlEnumerateGenericTableLikeADirectory routine returns the elements of a generic table, one-by-one, in collation order.
RtlEnumerateGenericTableWithoutSplaying

The RtlEnumerateGenericTableWithoutSplaying routine is used to enumerate the elements in a generic table.
RtlEnumerateGenericTableWithoutSplayingAvl

The RtlEnumerateGenericTableWithoutSplayingAvl routine is used to enumerate the elements in a generic table.
RtlEqualString

The RtlEqualString routine compares two counted strings to determine whether they are equal.
RtlExtendCorrelationVector

This routine extends the supplied correlation vector. For a correlation vector of the form X.i, the extended value is X.i.0.
RtlFillNonVolatileMemory

Fills the non-volatile destination buffer with the given value.
RtlFlushNonVolatileMemory

The routine RtlFlushNonVolatileMemory optimally flushes the given non-volatile memory region.
RtlFlushNonVolatileMemoryRanges

The routine RtlFlushNonVolatileMemoryRanges optimally flushes the given non-volatile memory regions.
RtlFreeNonVolatileToken

The routine RtlFreeNonVolatileToken is a cleanup function for the opaque NvToken which is given by a successful call to RtlGetNonVolatileToken.
RtlGetElementGenericTable

The RtlGetElementGenericTable routine returns a pointer to the caller-supplied data for a particular generic table element.
RtlGetElementGenericTableAvl

The RtlGetElementGenericTableAvl routine returns a pointer to the caller-supplied data for a particular generic Adelson-Velsky/Landis (AVL) table element.
RtlGetEnabledExtendedFeatures

The RtlGetEnabledExtendedFeatures routine returns a mask of extended processor features that are enabled by the system.
RtlGetNonVolatileToken

The routine, RtlGetNonVolatileToken, gets various properties about a non-volatile memory buffer and stores them in the variable NvToken.
RtlGetPersistedStateLocation

Retrieves the redirected location for the specified SourceID from the redirection map.
RtlIncrementCorrelationVector

Increments the specified correlation vector. For a correlation vector of the form X.i, the incremented value is be X.(i+1).
RtlInitializeCorrelationVector

Initializes the specified correlation vector with the supplied GUID.
RtlInitializeGenericTable

The RtlInitializeGenericTable routine initializes a generic table.
RtlInitializeGenericTableAvl

The RtlInitializeGenericTableAvl routine initializes a generic table using Adelson-Velsky/Landis (AVL) trees.
RtlInitializeSplayLinks

The RtlInitializeSplayLinks routine initializes a splay link node.
RtlInsertAsLeftChild

The RtlInsertAsLeftChild routine inserts a splay link node into the tree as the left child of the specified node.
RtlInsertAsRightChild

The RtlInsertAsRightChild routine inserts a given splay link into the tree as the right child of a given node in that tree.
RtlInsertElementGenericTable

The RtlInsertElementGenericTable routine adds a new element to a generic table.
RtlInsertElementGenericTableAvl

The RtlInsertElementGenericTableAvl routine adds a new entry to a generic table.
RtlInsertElementGenericTableFullAvl

The RtlInsertElementGenericTableFullAvl routine adds a new entry to a generic table.
RtlIsGenericTableEmpty

The RtlIsGenericTableEmpty routine determines if a generic table is empty.
RtlIsGenericTableEmptyAvl

The RtlIsGenericTableEmptyAvl routine determines if a generic table is empty.
RtlIsLeftChild

The RtlIsLeftChild routine determines whether a given splay link is the left child of a node in a splay link tree.
RtlIsRightChild

The RtlIsRightChild routine determines whether a given splay link is the right child of a node in a splay link tree.
RtlIsRoot

The RtlIsRoot routine determines whether the specified node is the root node of a splay link tree.
RtlIsStateSeparationEnabled

Checks if the SKU for the current context supports multiple sessions.
RtlIsZeroMemory

This routine checks if a block of unaligned memory is all zero.
RtlLeftChild

The RtlLeftChild routine returns a pointer to the left child of the specified splay link node.
RtlLookupElementGenericTable

The RtlLookupElementGenericTable routine searches a generic table for an element that matches the specified data.
RtlLookupElementGenericTableAvl

The RtlLookupElementGenericTableAvl routine searches a generic table for an element that matches the specified data.
RtlLookupElementGenericTableFullAvl

The RtlLookupElementGenericTableFullAvl routine searches a generic table for an element that matches the specified data.
RtlLookupFirstMatchingElementGenericTableAvl

The RtlLookupFirstMatchingElementGenericTableAvl routine finds the left-most element in the tree that matches the indicated data.
RtlMapGenericMask

The RtlMapGenericMask routine determines the nongeneric access rights specified by an ACCESS_MASK.
RtlNormalizeSecurityDescriptor

Examines a security descriptor for ways to modify its layout.
RtlNumberGenericTableElements

The RtlNumberGenericTableElements routine returns the number of elements in a generic table.
RtlNumberGenericTableElementsAvl

The RtlNumberGenericTableElementsAvl routine returns the number of elements in a generic table.
RtlParent

The RtlParent routine returns a pointer to the parent of the specified node in a splay link tree.
RtlPrefixUnicodeString

The RtlPrefixUnicodeString routine compares two Unicode strings to determine whether one string is a prefix of the other.
RtlQueryRegistryValueWithFallback

Retrieves a value entry for a registry key by using, a primary handle; if not found, uses the fallback handle.
RtlRaiseCustomSystemEventTrigger

Allows NT services and kernel-mode and user-mode drivers to raise a custom trigger for a device.
RtlRealPredecessor

The RtlRealPredecessor routine returns a pointer to the predecessor of the specified node in the splay link tree.
RtlRealSuccessor

The RtlRealSuccessor routine returns a pointer to the successor of the specified node in the splay link tree.
RtlRightChild

The RtlRightChild routine returns a pointer to the right child of the specified splay link node.
RtlRunOnceBeginInitialize

The RtlRunOnceBeginInitialize routine begins a one-time initialization.
RtlRunOnceComplete

The RtlRunOnceComplete routine completes the one-time initialization began by RtlRunOnceBeginInitialize.
RtlRunOnceExecuteOnce

The RtlRunOnceExecuteOnce performs a one-time initialization.
RtlRunOnceInitialize

The RtlRunOnceInitialize routine initializes a RTL_RUN_ONCE structure.
RtlSplay

The RtlSplay routine rebalances, or "splays," a splay link tree around the specified splay link, making that link the new root of the tree.
RtlSubtreePredecessor

The RtlSubtreePredecessor routine returns a pointer to the predecessor of the specified node within the subtree that is rooted at that node.
RtlSubtreeSuccessor

The RtlSubtreeSuccessor routine returns a pointer to the successor of the specified node within the subtree that is rooted at that node.
RtlUpcaseUnicodeString

The RtlUpcaseUnicodeString routine converts a copy of the source string to uppercase and writes the converted string in the destination buffer.
RtlUpperChar

The RtlUpperChar routine converts the specified character to uppercase.
RtlUpperString

The RtlUpperString routine copies the given SourceString to the DestinationString buffer, converting it to uppercase.
RtlValidateCorrelationVector

Validates the specified correlation vector to check whether it conforms to the Correlation Vector Specification (v2).
RtlVolumeDeviceToDosName

The RtlVolumeDeviceToDosName routine is obsolete for Windows XP and later versions of Windows. Use IoVolumeDeviceToDosName instead.RtlVolumeDeviceToDosName returns the MS-DOS path for a specified device object that represents a file system volume.
RtlWriteNonVolatileMemory

The routine RtlWriteNonVolatileMemory copies the contents of a source buffer to a non-volatile destination memory buffer.
SeSinglePrivilegeCheck

The SeSinglePrivilegeCheck routine checks for the passed privilege value in the context of the current thread.
WheaAddErrorSource

Reserved for system use.
WheaAddErrorSourceDeviceDriver

A device driver calls WheaAddErrorSourceDeviceDriver to add an error source.
WheaAddErrorSourceDeviceDriverV1

WheaAddHwErrorReportSectionDeviceDriver

WheaConfigureErrorSource

Reserved for system use.
WheaCreateHwErrorReportDeviceDriver

WheaFindErrorRecordSection

The WheaFindErrorRecordSection function searches for a specified Windows Hardware Error Architecture (WHEA) error record section within a WHEA error record. The error record section is formatted as a WHEA_ERROR_RECORD_SECTION_DESCRIPTOR structure.
WheaFindNextErrorRecordSection

The WheaFindNextErrorRecordSection function allows a caller to iteratively examine the WHEA error record sections within a WHEA error record. Each error record section is formatted as a WHEA_ERROR_RECORD_SECTION_DESCRIPTOR structure.
WheaGetErrPacketFromErrRecord

The WheaGetErrPacketFromErrRecord function returns a pointer to the hardware error packet that is contained within a WHEA error record. The hardware error packet is formatted as a WHEA_ERROR_PACKET structure.
WheaHighIrqlLogSelEventHandlerRegister

Reserved for system use.
WheaHighIrqlLogSelEventHandlerUnregister

Reserved for system use.
WheaHwErrorReportAbandonDeviceDriver

WheaHwErrorReportSetSectionNameDeviceDriver

WheaHwErrorReportSetSeverityDeviceDriver

WheaHwErrorReportSubmitDeviceDriver

WheaInitializeRecordHeader

Reserved for system use.
WheaIsValidErrorRecordSignature

The WheaIsValidErrorRecordSignature function verifies whether a WHEA error record is valid.
WheaLogInternalEvent

WheaRemoveErrorSource

Reserved for system use.
WheaRemoveErrorSourceDeviceDriver

To remove a previously added error source, a device driver calls WheaRemoveErrorSourceDeviceDriver.
WheaReportHwError

Drivers should not call this wrapper function.
WheaReportHwErrorDeviceDriver

To report a hardware error, the driver calls the WheaReportHwErrorDeviceDriver function.
WheaUnconfigureErrorSource

Reserved for system use.
ZwAllocateLocallyUniqueId

The ZwAllocateLocallyUniqueId routine allocates a locally unique identifier (LUID).
ZwDeviceIoControlFile

The ZwDeviceIoControlFile routine sends a control code directly to a specified device driver, causing the corresponding driver to perform the specified operation.
ZwOpenProcess

The ZwOpenProcess routine opens a handle to a process object and sets the access rights to this object.
ZwPowerInformation

The ZwPowerInformation routine sets or retrieves system power information.
ZwQueryVolumeInformationFile

The ZwQueryVolumeInformationFile routine retrieves information about the volume associated with a given file, directory, storage device, or volume.
ZwSetInformationThread

The ZwSetInformationThread routine sets the priority of a thread.
ZwTerminateProcess

The ZwTerminateProcess routine terminates a process and all of its threads.

Callback functions

 
_WHEA_ERROR_SOURCE_CORRECT

_WHEA_ERROR_SOURCE_CORRECT_DEVICE_DRIVER

_WHEA_ERROR_SOURCE_CREATE_RECORD

_WHEA_ERROR_SOURCE_INITIALIZE

_WHEA_ERROR_SOURCE_INITIALIZE_DEVICE_DRIVER

_WHEA_ERROR_SOURCE_RECOVER

_WHEA_ERROR_SOURCE_UNINITIALIZE

_WHEA_ERROR_SOURCE_UNINITIALIZE_DEVICE_DRIVER

BOOT_DRIVER_CALLBACK_FUNCTION

DRIVER_REINITIALIZE

The Reinitialize routine continues driver and device initialization after the driver's DriverEntry routine returns.
EXPAND_STACK_CALLOUT

The ExpandedStackCall routine executes with a guaranteed stack size.
PCREATE_PROCESS_NOTIFY_ROUTINE

Process-creation callback implemented by a driver to track the system-wide creation and deletion of processes against the driver's internal state.
PCREATE_PROCESS_NOTIFY_ROUTINE_EX

A callback routine implemented by a driver to notify the caller when a process is created or exits.
PCREATE_THREAD_NOTIFY_ROUTINE

A callback routine implemented by a driver to notify the caller when a thread is created or deleted.
PFN_WHEA_HIGH_IRQL_LOG_SEL_EVENT_HANDLER

PGET_LOCATION_STRING

The PnpGetLocationString routine provides the device-specific part of the device's SPDRP_LOCATION_PATHS property.
pHalExamineMBR

The HalExamineMBR routine reads the master boot record (MBR) of a disk and returns data from the MBR if the MBR is of the type specified by the caller.
pHalQuerySystemInformation

pHalSetSystemInformation

Register MCA driver with the HAL.
PLOAD_IMAGE_NOTIFY_ROUTINE

Called by the operating system to notify the driver when a driver image or a user image (for example, a DLL or EXE) is mapped into virtual memory.
PPHYSICAL_COUNTER_EVENT_BUFFER_OVERFLOW_HANDLER

PPHYSICAL_COUNTER_OVERFLOW_HANDLER

The PPHYSICAL_COUNTER_OVERFLOW_HANDLER is implemented by the client driver to handle overflows from the counters resources acquired through the HalAllocateHardwareCounters routine.
PSHED_PI_ATTEMPT_ERROR_RECOVERY

A PSHED plug-in's AttemptRecovery callback function attempts to recover from a recoverable hardware error.
PSHED_PI_CLEAR_ERROR_RECORD

A PSHED plug-in's ClearErrorRecord callback function clears the specified error record from the system's persistent data storage.
PSHED_PI_CLEAR_ERROR_STATUS

A PSHED plug-in's ClearErrorStatus callback function clears any platform-specific error status registers for a corrected hardware error condition.
PSHED_PI_DISABLE_ERROR_SOURCE

A PSHED plug-in's DisableErrorSource callback function disables an error source.
PSHED_PI_ENABLE_ERROR_SOURCE

A PSHED plug-in's EnableErrorSource callback function enables an error source.
PSHED_PI_FINALIZE_ERROR_RECORD

A PSHED plug-in's FinalizeErrorRecord callback function adds supplementary error record sections to an error record that more fully describe the error condition.
PSHED_PI_GET_ALL_ERROR_SOURCES

A PSHED plug-in's GetAllErrorSources callback function returns a list of error source descriptor structures that represents all of the error sources that are implemented by the hardware platform.
PSHED_PI_GET_ERROR_SOURCE_INFO

A PSHED plug-in's GetErrorSourceInfo callback function returns an error source descriptor structure that represents a particular error source that is implemented by the hardware platform.
PSHED_PI_GET_INJECTION_CAPABILITIES

A PSHED plug-in's GetInjectionCapabilities callback function returns an error injection capabilities union that describes the types of hardware errors that can be injected into the hardware platform.
PSHED_PI_INJECT_ERROR

A PSHED plug-in's InjectError callback function injects an error into the hardware platform.
PSHED_PI_READ_ERROR_RECORD

A PSHED plug-in's ReadErrorRecord callback function reads an error record from the system's persistent data storage.
PSHED_PI_RETRIEVE_ERROR_INFO

A PSHED plug-in's RetrieveErrorInfo callback function retrieves platform-specific error information about a hardware error that has occurred.
PSHED_PI_SET_ERROR_SOURCE_INFO

A PSHED plug-in's SetErrorSourceInfo callback function configures an error source.
PSHED_PI_WRITE_ERROR_RECORD

A PSHED plug-in's WriteErrorRecord callback function writes an error record to the system's persistent data storage.
RTL_RUN_ONCE_INIT_FN

The RunOnceInitialization routine performs a one-time initialization operation.
SILO_CONTEXT_CLEANUP_CALLBACK

This callback is invoked when the context object reaches a reference count of zero.
SILO_MONITOR_CREATE_CALLBACK

This is callback is invoked when a new silo is created.
SILO_MONITOR_TERMINATE_CALLBACK

This callback is invoked when a silo is terminated.

Structures

 
WHEA_ERROR_RECORD

The WHEA_ERROR_RECORD structure describes an error record that contains error information about a hardware error condition that occurred.
WHEA_ERROR_SOURCE_DESCRIPTOR

The WHEA_ERROR_SOURCE_DESCRIPTOR structure describes an error source.
BDCB_IMAGE_INFORMATION

The BDCB_IMAGE_INFORMATION structure describes information about a boot-start driver that is about to be initialized, provided by Windows to a boot-start driver's BOOT_DRIVER_CALLBACK_FUNCTION routine.
BDCB_STATUS_UPDATE_CONTEXT

The BDCB_STATUS_UPDATE_CONTEXT structure describes a status update provided by Windows to a boot-start driver's BOOT_DRIVER_CALLBACK_FUNCTION routine.
CONTEXT

CONTROLLER_OBJECT

A controller object represents a hardware adapter or controller with homogenous devices that are the actual targets for I/O requests.
CORRELATION_VECTOR

Store the correlation vector that is used to reference events and the generated logs for diagnostic purposes.
CUSTOM_SYSTEM_EVENT_TRIGGER_CONFIG

Contains information about a custom system event trigger.
DEBUG_DEVICE_DESCRIPTOR

DEBUG_TRANSPORT_DATA

Describes debug-transport specific data for use by the transport.
DISK_SIGNATURE

DISK_SIGNATURE contains the disk signature information for a disk's partition table.
FILE_ALIGNMENT_INFORMATION

The FILE_ALIGNMENT_INFORMATION structure is used as an argument to the ZwQueryInformationFile routine.
FILE_ATTRIBUTE_TAG_INFORMATION

The FILE_ATTRIBUTE_TAG_INFORMATION structure is used as an argument to ZwQueryInformationFile.
FILE_DISPOSITION_INFORMATION

The FILE_DISPOSITION_INFORMATION structure is used as an argument to the ZwSetInformationFile routine.
FILE_DISPOSITION_INFORMATION_EX

The FILE_DISPOSITION_INFORMATION_EX structure is used as an argument to the ZwSetInformationFile routine and indicates how the operating system should delete a file.
FILE_END_OF_FILE_INFORMATION

The FILE_END_OF_FILE_INFORMATION structure is used as an argument to the ZwSetInformationFile routine.
FILE_FS_FULL_SIZE_INFORMATION

The FILE_FS_FULL_SIZE_INFORMATION structure is used to query sector size information for a file system volume.
FILE_FS_FULL_SIZE_INFORMATION_EX

Used in a request to query sector size information for a file system volume.
FILE_FS_LABEL_INFORMATION

The FILE_FS_LABEL_INFORMATION structure is used to set the label for a file system volume.
FILE_FS_OBJECTID_INFORMATION

The FILE_FS_OBJECTID_INFORMATION structure is used to query or set the object ID for a file system volume.
FILE_FS_SECTOR_SIZE_INFORMATION

The FILE_FS_SECTOR_SIZE_INFORMATION structure is used to query physical and logical sector size information for a file system volume.
FILE_FS_SIZE_INFORMATION

The FILE_FS_SIZE_INFORMATION structure is used to query sector size information for a file system volume.
FILE_FS_VOLUME_INFORMATION

The FILE_FS_VOLUME_INFORMATION structure is used to query information about a volume on which a file system is mounted.
FILE_NAME_INFORMATION

The FILE_NAME_INFORMATION structure is used as argument to the ZwQueryInformationFile and ZwSetInformationFile routines.
FILE_VALID_DATA_LENGTH_INFORMATION

The FILE_VALID_DATA_LENGTH_INFORMATION structure is used as an argument to ZwSetInformationFile.
HARDWARE_COUNTER

The HARDWARE_COUNTER structure contains information about a hardware counter.
IMAGE_INFO

Used by driver's load-image routine (PLOAD_IMAGE_NOTIFY_ROUTINE) to specify image information.
IMAGE_INFO_EX

IMAGE_INFO_EX is the extended version of the IMAGE_INFO load image information structure.
IO_DRIVER_CREATE_CONTEXT

The IO_DRIVER_CREATE_CONTEXT structure is used to pass additional parameters to the IoCreateFileEx and FltCreateFileEx2 routines.
IO_FOEXT_SILO_PARAMETERS

This structure describes the Container context that's identified by the IoGetSiloParameters routine.
IPMI_OS_SEL_RECORD

KEY_CACHED_INFORMATION

The KEY_CACHED_INFORMATION structure holds the cached information available for a registry key or subkey.
KEY_NAME_INFORMATION

The KEY_NAME_INFORMATION structure holds the name and name length of the key.
KEY_VIRTUALIZATION_INFORMATION

The KEY_VIRTUALIZATION_INFORMATION structure defines the basic information that is available for a registry key or subkey.
KUSER_SHARED_DATA

MCG_CAP

MCI_STATUS

MCI_STATUS_AMD_BITS

MCI_STATUS_BITS_COMMON

MCI_STATUS_INTEL_BITS

MM_COPY_ADDRESS

The MM_COPY_ADDRESS structure contains either a virtual memory address or a physical memory address.
OPLOCK_KEY_CONTEXT

The OPLOCK_KEY_CONTEXT structure is returned from IoGetOplockKeyContextEx. This structure contains oplock keys for a specific file object.
PCI_EXPRESS_CAPABILITIES_REGISTER

The PCI_EXPRESS_CAPABILITIES_REGISTER structure describes a PCI Express (PCIe) capabilities register of a PCIe capability structure.
PCI_EXPRESS_CAPABILITY

The PCI_EXPRESS_CAPABILITY structure describes a PCI Express (PCIe) capability structure.
PCI_EXPRESS_DESIGNATED_VENDOR_SPECIFIC_CAPABILITY

Represents the Designated Vendor-Specific Extended Capability defined by PCI-SIG.
PCI_EXPRESS_DESIGNATED_VENDOR_SPECIFIC_HEADER_1

Represents the Designated Vendor-Specific Extended Capability Header 1 defined by PCI-SIG.
PCI_EXPRESS_DESIGNATED_VENDOR_SPECIFIC_HEADER_2

Represents the Designated Vendor-Specific Extended Capability Header 2 defined by PCI-SIG.
PCI_EXPRESS_DEVICE_CAPABILITIES_REGISTER

The PCI_EXPRESS_DEVICE_CAPABILITIES_REGISTER structure describes a PCI Express (PCIe) device capabilities register of a PCIe capability structure.
PCI_EXPRESS_DEVICE_CONTROL_REGISTER

The PCI_EXPRESS_DEVICE_CONTROL_REGISTER structure describes a PCI Express (PCIe) device control register of a PCIe capability structure.
PCI_EXPRESS_DEVICE_STATUS_REGISTER

The PCI_EXPRESS_DEVICE_STATUS_REGISTER structure describes a PCI Express (PCIe) device status register of a PCIe capability structure.
PCI_EXPRESS_DPC_CAPABILITY

PCI_EXPRESS_DPC_CAPS_REGISTER

PCI_EXPRESS_DPC_CONTROL_REGISTER

PCI_EXPRESS_DPC_RP_PIO_EXCEPTION_REGISTER

PCI_EXPRESS_DPC_RP_PIO_HEADERLOG_REGISTER

PCI_EXPRESS_DPC_RP_PIO_IMPSPECLOG_REGISTER

PCI_EXPRESS_DPC_RP_PIO_MASK_REGISTER

PCI_EXPRESS_DPC_RP_PIO_SEVERITY_REGISTER

PCI_EXPRESS_DPC_RP_PIO_STATUS_REGISTER

PCI_EXPRESS_DPC_RP_PIO_SYSERR_REGISTER

PCI_EXPRESS_DPC_RP_PIO_TLPPREFIXLOG_REGISTER

PCI_EXPRESS_DPC_STATUS_REGISTER

PCI_EXPRESS_LANE_ERROR_STATUS

PCI_EXPRESS_LINK_CAPABILITIES_REGISTER

The PCI_EXPRESS_LINK_CAPABILITIES_REGISTER structure describes a PCI Express (PCIe) link capabilities register of a PCIe capability structure.
PCI_EXPRESS_LINK_CONTROL_REGISTER

The PCI_EXPRESS_LINK_CONTROL_REGISTER structure describes a PCI Express (PCIe) link control register of a PCIe capability structure.
PCI_EXPRESS_LINK_CONTROL3

PCI_EXPRESS_LINK_STATUS_REGISTER

The PCI_EXPRESS_LINK_STATUS_REGISTER structure describes a PCI Express (PCIe) link status register of a PCIe capability structure.
PCI_EXPRESS_NPEM_CAPABILITY

PCI_EXPRESS_NPEM_CAPABILITY_REGISTER

PCI_EXPRESS_NPEM_CONTROL_REGISTER

PCI_EXPRESS_NPEM_STATUS_REGISTER

PCI_EXPRESS_PME_REQUESTOR_ID

The PCI_EXPRESS_PME_REQUESTOR_ID structure describes the identifier of the requester of a power management event (PME).
PCI_EXPRESS_ROOT_CAPABILITIES_REGISTER

The PCI_EXPRESS_ROOT_CAPABILITIES_REGISTER structure describes a PCI Express (PCIe) root capabilities register of a PCIe capability structure.
PCI_EXPRESS_ROOT_CONTROL_REGISTER

The PCI_EXPRESS_ROOT_CONTROL_REGISTER structure describes a PCI Express (PCIe) root control register of a PCIe capability structure.
PCI_EXPRESS_ROOT_STATUS_REGISTER

The PCI_EXPRESS_ROOT_STATUS_REGISTER structure describes a PCI Express (PCIe) root status register of a PCIe capability structure.
PCI_EXPRESS_SECONDARY_CAPABILITY

PCI_EXPRESS_SLOT_CAPABILITIES_REGISTER

The PCI_EXPRESS_SLOT_CAPABILITIES_REGISTER structure describes a PCI Express (PCIe) slot capabilities register of a PCIe capability structure.
PCI_EXPRESS_SLOT_CONTROL_REGISTER

The PCI_EXPRESS_SLOT_CONTROL_REGISTER structure describes a PCI Express (PCIe) slot control register of a PCIe capability structure.
PCI_EXPRESS_SLOT_STATUS_REGISTER

The PCI_EXPRESS_SLOT_STATUS_REGISTER structure describes a PCI Express (PCIe) slot status register of a PCIe capability structure.
PCI_FPB_CAPABILITIES_REGISTER

The Flattening Portal Bridge (FPB) Capabilities register. See section 7.y.2.
PCI_FPB_CAPABILITY

Flattening Portal Bridge (FPB) Capabilities that is required for any bridge Function that implements FPB. See section 7.y.
PCI_FPB_CAPABILITY_HEADER

The Flattening Portal Bridge (FPB) Capabilities header. See section 7.y.1.
PCI_FPB_MEM_HIGH_VECTOR_CONTROL1_REGISTER

The FPB MEM High Vector Control 1 Register. See section 7.y.6.
PCI_FPB_MEM_HIGH_VECTOR_CONTROL2_REGISTER

The FPB MEM High Vector Control 2 Register. See section 7.y.7.
PCI_FPB_MEM_LOW_VECTOR_CONTROL_REGISTER

FPB MEM Low Vector Control Register. See section 7.y.5.
PCI_FPB_RID_VECTOR_CONTROL1_REGISTER

The FPB RID Vector Control 1 Register. See section 7.y.3.
PCI_FPB_RID_VECTOR_CONTROL2_REGISTER

The FPB RID Vector Control 1 Register. See section 7.y.3.
PCI_FPB_VECTOR_ACCESS_CONTROL_REGISTER

The FPB Vector Access Control Register. See section 7.y.8.
PCI_FPB_VECTOR_ACCESS_DATA_REGISTER

The FPB Vector Access Data Register. See section 7.y.9.
PHYSICAL_COUNTER_EVENT_BUFFER_CONFIGURATION

The PHYSICAL_COUNTER_EVENT_BUFFER_CONFIGURATION structure describes the configuration for event buffers on the platform.
PHYSICAL_COUNTER_RESOURCE_DESCRIPTOR

The PHYSICAL_COUNTER_RESOURCE_DESCRIPTOR structure describes the counter resources available on the platform.
PHYSICAL_COUNTER_RESOURCE_LIST

The PHYSICAL_COUNTER_RESOURCE_LIST structure describes an array of PHYSICAL_COUNTER_RESOURCE_DESCRIPTOR structures.
PNP_LOCATION_INTERFACE

The PNP_LOCATION_INTERFACE structure describes the GUID_PNP_LOCATION_INTERFACE interface.
POWER_THROTTLING_PROCESS_STATE

Stores the throttling policies and how to apply them to a target process when that process is subject to power management.
POWER_THROTTLING_THREAD_STATE

Stores the throttling policies and how to apply them to a target thread when that thread is subject to power management.
PROCESS_MITIGATION_CHILD_PROCESS_POLICY

Stores policy information about creating child processes.
PROCESS_MITIGATION_PAYLOAD_RESTRICTION_POLICY

Stores information about process mitigation policy.
PROCESS_MITIGATION_SYSTEM_CALL_FILTER_POLICY

This structure is not supported.
PS_CREATE_NOTIFY_INFO

The PS_CREATE_NOTIFY_INFO structure provides information about a newly created process.
RTL_AVL_TABLE

The RTL_AVL_TABLE structure contains file system-specific data for an Adelson-Velsky/Landis (AVL) tree.
RTL_GENERIC_TABLE

The RTL_GENERIC_TABLE structure contains file system-specific data for a splay tree.
RTL_SPLAY_LINKS

The RTL_SPLAY_LINKS structure is an opaque structure and is used by the system to represent a splay link tree node.
SILO_MONITOR_REGISTRATION

This structure specifies a server silo monitor that can receive notifications about server silo events.
SOC_SUBSYSTEM_FAILURE_DETAILS

The SOC_SUBSYSTEM_FAILURE_DETAILS structure holds information related to a System on a Chip (SoC) bug code.
TXN_PARAMETER_BLOCK

The TXN_PARAMETER_BLOCK structure contains information about a transacted file operation.
WHEA_AER_BRIDGE_DESCRIPTOR

The WHEA_AER_BRIDGE_DESCRIPTOR structure describes a PCI Express (PCIe) bridge error source.
WHEA_AER_ENDPOINT_DESCRIPTOR

The WHEA_AER_ENDPOINT_DESCRIPTOR structure describes a PCI Express (PCIe) endpoint error source.
WHEA_AER_ROOTPORT_DESCRIPTOR

The WHEA_AER_ROOTPORT_DESCRIPTOR structure describes a PCI Express (PCIe) root port error source.
WHEA_AMD_EXTENDED_REGISTERS

WHEA_AZCC_ROOT_BUS_ERR_EVENT

WHEA_AZCC_ROOT_BUS_LIST_EVENT

WHEA_AZCC_SET_POISON_EVENT

WHEA_DEVICE_DRIVER_DESCRIPTOR

WHEA_DRIVER_BUFFER_SET

WHEA_ERROR_INJECTION_CAPABILITIES

The WHEA_ERROR_INJECTION_CAPABILITIES union describes the types of hardware errors that can be injected into a hardware platform.
WHEA_ERROR_PACKET_FLAGS

The WHEA_ERROR_PACKET_FLAGS union defines the error condition reported through a WHEA_ERROR_PACKET structure.
WHEA_ERROR_PACKET_V1

The WHEA_ERROR_PACKET_V1 structure describes the hardware error data that is passed to the operating system by a low-level hardware error handler (LLHEH).Note  The WHEA_ERROR_PACKET_V1 structure is supported in Windows Server 2008 and Windows Vista SP1.
WHEA_ERROR_PACKET_V2

The WHEA_ERROR_PACKET_V2 structure describes the hardware error data that is passed to the operating system by a low-level hardware error handler (LLHEH).Note  The WHEA_ERROR_PACKET_V2 structure is supported in Windows 7 and later versions of Windows.
WHEA_ERROR_RECORD_HEADER

The WHEA_ERROR_RECORD_HEADER structure describes general information about a hardware error condition.
WHEA_ERROR_RECORD_HEADER_FLAGS

WHEA_ERROR_RECORD_HEADER_VALIDBITS

The WHEA_ERROR_RECORD_HEADER_VALIDBITS union describes which members of a WHEA_ERROR_RECORD_HEADER structure contain valid data.
WHEA_ERROR_RECORD_SECTION_DESCRIPTOR

The WHEA_ERROR_RECORD_SECTION_DESCRIPTOR structure describes a section of error information that is part of an error record.
WHEA_ERROR_RECORD_SECTION_DESCRIPTOR_VALIDBITS

The WHEA_ERROR_RECORD_SECTION_DESCRIPTOR_VALIDBITS union describes which members of a WHEA_ERROR_RECORD_SECTION_DESCRIPTOR structure contain valid data.
WHEA_ERROR_SOURCE_CONFIGURATION

WHEA_ERROR_SOURCE_CONFIGURATION_DD

WHEA_ERROR_SOURCE_CONFIGURATION_DEVICE_DRIVER

WHEA_ERROR_SOURCE_CONFIGURATION_DEVICE_DRIVER_V1

WHEA_ERROR_STATUS

The WHEA_ERROR_STATUS union describes generic error codes that are abstracted from the data contained in implementation-specific error registers.
WHEA_ETW_OVERFLOW_EVENT

WHEA_EVENT_LOG_ENTRY_FLAGS

WHEA_FIRMWARE_ERROR_RECORD_REFERENCE

The WHEA_FIRMWARE_ERROR_RECORD_REFERENCE structure describes a reference to a firmware error record that is specific to the Itanium processor architecture.
WHEA_GENERIC_ERROR

The WHEA_GENERIC_ERROR structure describes error status data for a generic error source.
WHEA_GENERIC_ERROR_BLOCKSTATUS

The WHEA_GENERIC_ERROR_BLOCKSTATUS union indicates what kind of error data is reported in a generic error status block.
WHEA_GENERIC_ERROR_DATA_ENTRY_V2

The WHEA_GENERIC_ERROR_DATA_ENTRY structure describes an error data section in a generic error status block.
WHEA_GENERIC_ERROR_DESCRIPTOR

The WHEA_GENERIC_ERROR_DESCRIPTOR structure describes a generic error source.
WHEA_GENERIC_ERROR_DESCRIPTOR_V2

WHEA_IPF_CMC_DESCRIPTOR

The WHEA_IPF_CMC_DESCRIPTOR structure describes a corrected machine check (CMC) error source for an Itanium processor.
WHEA_IPF_CPE_DESCRIPTOR

The WHEA_IPF_CPE_DESCRIPTOR structure describes a corrected platform error (CPE) error source for an Itanium processor.
WHEA_IPF_MCA_DESCRIPTOR

The WHEA_IPF_MCA_DESCRIPTOR structure describes a machine check abort (MCA) error source for an Itanium processor.
WHEA_MEMORY_ERROR_SECTION

The WHEA_MEMORY_ERROR_SECTION structure describes platform memory error data.
WHEA_MEMORY_ERROR_SECTION_VALIDBITS

The WHEA_MEMORY_ERROR_SECTION_VALIDBITS union describes which members of a WHEA_MEMORY_ERROR_SECTION structure contain valid data.
WHEA_MSR_DUMP_SECTION

WHEA_NMI_ERROR_SECTION

The WHEA_NMI_ERROR_SECTION structure describes nonmaskable interrupt (NMI) error data.
WHEA_NOTIFICATION_DESCRIPTOR

The WHEA_NOTIFICATION_DESCRIPTOR structure describes the notification mechanism that is used by an error source.
WHEA_PACKET_LOG_DATA

WHEA_PCI_SLOT_NUMBER

The WHEA_PCI_SLOT_NUMBER structure describes a logical PCI slot.
WHEA_PCIEXPRESS_ERROR_SECTION

The WHEA_PCIEXPRESS_ERROR_SECTION structure describes PCI Express (PCIe) error data.
WHEA_PCIEXPRESS_ERROR_SECTION_VALIDBITS

The WHEA_PCIEXPRESS_ERROR_SECTION_VALIDBITS union describes which members of a WHEA_PCIEXPRESS_ERROR_SECTION structure contain valid data.
WHEA_PCIXBUS_ERROR_SECTION

The WHEA_PCIXBUS_ERROR_SECTION structure describes PCI or PCI-X bus error data.
WHEA_PCIXBUS_ERROR_SECTION_VALIDBITS

The WHEA_PCIXBUS_ERROR_SECTION_VALIDBITS union describes which members of a WHEA_PCIXBUS_ERROR_SECTION structure contain valid data.
WHEA_PCIXDEVICE_ERROR_SECTION

The WHEA_PCIXDEVICE_ERROR_SECTION structure describes PCI or PCI-X device error data.
WHEA_PCIXDEVICE_ERROR_SECTION_VALIDBITS

The WHEA_PCIXDEVICE_ERROR_SECTION_VALIDBITS union describes which members of a WHEA_PCIXDEVICE_ERROR_SECTION structure contain valid data.
WHEA_PERSISTENCE_INFO

The WHEA_PERSISTENCE_INFO union describes data that is used by the error record persistence interface for storing an error record.
WHEA_PMEM_ERROR_SECTION

WHEA_PMEM_ERROR_SECTION_VALIDBITS

WHEA_PMEM_PAGE_RANGE

WHEA_PROCESSOR_FAMILY_INFO

The WHEA_PROCESSOR_FAMILY_INFO union describes the processor family information for an x86 or x64 processor.
WHEA_PROCESSOR_GENERIC_ERROR_SECTION

Describes processor error data that is not specific to a particular processor architecture.
WHEA_PROCESSOR_GENERIC_ERROR_SECTION_VALIDBITS

The WHEA_PROCESSOR_GENERIC_ERROR_SECTION_VALIDBITS union describes which members of a WHEA_PROCESSOR_GENERIC_ERROR_SECTION structure contain valid data.
WHEA_PSHED_PLUGIN_CALLBACKS

The WHEA_PSHED_PLUGIN_CALLBACKS structure describes the callback functions for a PSHED plug-in.
WHEA_PSHED_PLUGIN_DIMM_MISMATCH

WHEA_PSHED_PLUGIN_HEARTBEAT

WHEA_PSHED_PLUGIN_LOAD_EVENT

WHEA_PSHED_PLUGIN_PLATFORM_SUPPORT_EVENT

WHEA_PSHED_PLUGIN_REGISTRATION_PACKET_V1

WHEA_PSHED_PLUGIN_REGISTRATION_PACKET_V2

WHEA_PSHED_PLUGIN_UNLOAD_EVENT

WHEA_RECOVERY_CONTEXT

WHEA_REPORT_HW_ERROR_DEVICE_DRIVER_FLAGS

WHEA_REVISION

The WHEA_REVISION union describes the revision of the error record data structures.
WHEA_SEL_BUGCHECK_PROGRESS

WHEA_SEL_BUGCHECK_RECOVERY_STATUS_PHASE1_EVENT

WHEA_SEL_BUGCHECK_RECOVERY_STATUS_PHASE2_EVENT

WHEA_SEL_BUGCHECK_RECOVERY_STATUS_START_EVENT

WHEA_TIMESTAMP

The WHEA_TIMESTAMP union describes the time that an error was reported to the operating system.
WHEA_X64_REGISTER_STATE

The WHEA_X64_REGISTER_STATE structure describes the state of an x64 processor's registers.
WHEA_X86_REGISTER_STATE

The WHEA_X86_REGISTER_STATE structure describes the state of an x86 processor's registers.
WHEA_XPF_BUS_CHECK

The WHEA_XPF_BUS_CHECK union describes bus error information for an x86 or x64 processor.
WHEA_XPF_CACHE_CHECK

The WHEA_XPF_CACHE_CHECK union describes cache error information for an x86 or x64 processor.
WHEA_XPF_CMC_DESCRIPTOR

The WHEA_XPF_CMC_DESCRIPTOR structure describes a corrected machine check (CMC) error source for an x86 or x64 processor.
WHEA_XPF_CONTEXT_INFO

The WHEA_XPF_CONTEXT_INFO structure describes processor context information for an x86 or x64 processor.
WHEA_XPF_MC_BANK_DESCRIPTOR

The WHEA_XPF_MC_BANK_DESCRIPTOR structure describes a bank of machine check registers for an x86 or x64 processor.
WHEA_XPF_MCA_SECTION

WHEA_XPF_MCE_DESCRIPTOR

The WHEA_XPF_MCE_DESCRIPTOR structure describes a machine check exception (MCE) error source for an x86 or x64 processor.
WHEA_XPF_MS_CHECK

The WHEA_XPF_MS_CHECK union describes microarchitecture-specific error information for an x86 or x64 processor.
WHEA_XPF_NMI_DESCRIPTOR

The WHEA_XPF_NMI_DESCRIPTOR structure describes a nonmaskable interrupt (NMI) error source for an x86 or x64 processor.
WHEA_XPF_PROCESSOR_ERROR_SECTION

The WHEA_XPF_PROCESSOR_ERROR_SECTION structure describes processor error data that is specific to the x86/x64 processor architecture.
WHEA_XPF_PROCESSOR_ERROR_SECTION_VALIDBITS

The WHEA_XPF_PROCESSOR_ERROR_SECTION_VALIDBITS union describes which members of a WHEA_XPF_PROCESSOR_ERROR_SECTION structure contain valid data and the number of structures that are contained in the WHEA_XPF_PROCESSOR_ERROR_SECTION structure's VariableInfo member.
WHEA_XPF_PROCINFO

The WHEA_XPF_PROCINFO structure describes processor error information that is specific to the x86 and x64 processor architectures.
WHEA_XPF_PROCINFO_VALIDBITS

The WHEA_XPF_PROCINFO_VALIDBITS union describes which members of a WHEA_XPF_PROCINFO structure contain valid data.
WHEA_XPF_TLB_CHECK

The WHEA_XPF_TLB_CHECK union describes translation lookaside buffer (TLB) error information for an x86 or x64 processor.
WHEAP_ACPI_TIMEOUT_EVENT

WHEAP_ADD_REMOVE_ERROR_SOURCE_EVENT

WHEAP_ATTEMPT_RECOVERY_EVENT

WHEAP_CLEARED_POISON_EVENT

WHEAP_CMCI_IMPLEMENTED_EVENT

WHEAP_CMCI_INITERR_EVENT

WHEAP_CMCI_RESTART_EVENT

WHEAP_CREATE_GENERIC_RECORD_EVENT

WHEAP_DEFERRED_EVENT

WHEAP_DEVICE_DRV_EVENT

WHEAP_DROPPED_CORRECTED_ERROR_EVENT

WHEAP_EDPC_ENABLED_EVENT

WHEAP_ERR_SRC_ARRAY_INVALID_EVENT

WHEAP_ERR_SRC_INVALID_EVENT

WHEAP_ERROR_CLEARED_EVENT

WHEAP_ERROR_RECORD_EVENT

WHEAP_FOUND_ERROR_IN_BANK_EVENT

WHEAP_GENERIC_ERR_MEM_MAP_EVENT

WHEAP_OSC_IMPLEMENTED

WHEAP_PFA_MEMORY_OFFLINED

WHEAP_PFA_MEMORY_POLICY

WHEAP_PFA_MEMORY_REMOVE_MONITOR

WHEAP_PLUGIN_PFA_EVENT

WHEAP_PROCESS_EINJ_EVENT

WHEAP_PROCESS_HEST_EVENT

WHEAP_PSHED_INJECT_ERROR

WHEAP_PSHED_PLUGIN_REGISTER

WHEAP_STARTED_REPORT_HW_ERROR

WHEAP_STUCK_ERROR_EVENT

Enumerations

 
BDCB_CALLBACK_TYPE

The BDCB_CALLBACK_TYPE enumeration specifies whether the callback being passed to a BOOT_DRIVER_CALLBACK_FUNCTION routine is a status update or a boot-start driver initialization notification.
BDCB_CLASSIFICATION

The BDCB_CLASSIFICATION enumeration lists different classifications of boot start images.
BDCB_STATUS_UPDATE_TYPE

The BDCB_STATUS_UPDATE_TYPE enumeration lists the types of boot-driver callback status updates.
BUS_DATA_TYPE

The BUS_DATA_TYPE enumeration indicates the type of bus configuration space.
HAL_QUERY_INFORMATION_CLASS

The values are reserved for internal use.
HAL_SET_INFORMATION_CLASS

The values are reserved for internal use.
HARDWARE_COUNTER_TYPE

The HARDWARE_COUNTER_TYPE enumeration specifies the type of a hardware counter.
IPMI_OS_SEL_RECORD_TYPE

PHYSICAL_COUNTER_RESOURCE_DESCRIPTOR_TYPE

The PHYSICAL_COUNTER_RESOURCE_DESCRIPTOR_TYPE enumeration contains constants that indicate the type of hardware performance counter resource that is described by a PHYSICAL_COUNTER_RESOURCE_DESCRIPTOR structure.
PROCESS_MITIGATION_POLICY

Represents the different process mitigation policies.
PSCREATEPROCESSNOTIFYTYPE

Indicates the type of process notification. This enumeration is used in PsSetCreateProcessNotifyRoutineEx2 to register callback notifications.
PSCREATETHREADNOTIFYTYPE

Indicates the type of thread notification. This enumeration is used in PsSetCreateThreadNotifyRoutineEx to register callback notifications associated with thread creation or deletion.
SOC_SUBSYSTEM_TYPE

The SOC_SYBSYSTEM_TYPE enumeration defines different types of System on a Chip (SoC) subsystems.
STATE_LOCATION_TYPE

Defines values for persisted state locations for device and driver files.
SUBSYSTEM_INFORMATION_TYPE

Indicates the type of subsystem for a process or thread. This enumeration is used in NtQueryInformationProcess and NtQueryInformationThread calls.
WELL_KNOWN_SID_TYPE

A list of commonly used security identifiers (SIDs). Programs can pass these values to the CreateWellKnownSid function to create a SID from this list. For information about these values, see WELL_KNOWN_SID_TYPE.
WHEA_ERROR_PACKET_DATA_FORMAT

The WHEA_ERROR_PACKET_DATA_FORMAT enumeration defines the raw hardware error data format in a hardware error packet.
WHEA_ERROR_SEVERITY

The WHEA_ERROR_SEVERITY enumeration defines the possible severity levels of a hardware error condition.
WHEA_ERROR_SOURCE_STATE

The WHEA_ERROR_SOURCE_STATE enumeration defines the different runtime states for an error source.
WHEA_ERROR_SOURCE_TYPE

The WHEA_ERROR_SOURCE_TYPE enumeration defines the different types of error sources that can report hardware errors.
WHEA_ERROR_TYPE

The WHEA_ERROR_TYPE enumeration defines the different types of hardware components that can report a hardware error.
WHEA_EVENT_LOG_ENTRY_ID

WHEA_PFA_REMOVE_TRIGGER

WHEA_RAW_DATA_FORMAT

The WHEA_RAW_DATA_FORMAT enumeration defines the possible formats that raw hardware error data can be encoded in a hardware error packet.
WHEA_RECOVERY_CONTEXT_ERROR_TYPE

WHEAP_PFA_OFFLINE_DECISION_TYPE