Skip to content

Instantly share code, notes, and snippets.

@kkent030315
Last active June 17, 2021 18:57
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save kkent030315/cc119d0036c4ea42d06ddc423f5760a2 to your computer and use it in GitHub Desktop.
Save kkent030315/cc119d0036c4ea42d06ddc423f5760a2 to your computer and use it in GitHub Desktop.
windows 11 build 21996 ntoskrnl 10.0.21996.1 exports
---
Compare From: file: ntoskrnl.exe 10.0.19043.1052 (Windows 10 Pro 21H2)
SHA256: 5961B49DFBF2898F8FD1EA9B0F2CCC167A320671599809F748C6BB3FF700DD3E
Compare To: file: ntoskrnl.exe 10.0.21996.1 (Windows 11 Pro build 21996)
SHA256: 2EEBF466051C88CC18A1309AC4662E543A6BDCC995F7A3D53D5465664476F66E
---
number of exports -> 10: (3062) 11: (3161) diff: (99)
[Car* prefixed new APIs?]
CarCopyRuleViolationDetails
CarCreateRuleViolationDetails
CarDeleteRuleViolationDetails
CarDeregisterRuleClassConfiguration
CarDeregisterRuleOverride
CarInitializeRuleViolationDetails
CarQueryReportAction
CarQueryReportActionForTriage
CarRegisterDefaultRuleClassConfiguration
CarRegisterRuleClassConfiguration
CarRegisterRuleOverride
CarRegisterRuleOverrideAllContexts
CarRegisterRuleOverridesAllContexts
CarReportRuleViolation
CarReportRuleViolationForTriage
CarSetCustomIdInRuleOverride
CarSetCustomRuleIdRange
[Dif* prefixed new APIs?]
DifGetPluginPerDriverData
DifPluginSimplePerfControl
DifRegisterPlugin
DifUtilDbgPrint
ExCancelDpcEventWait - introduced in 21H1
ExCreateDpcEvent - introduced in 21H1
ExCreatePool
ExDeleteDpcEvent - introduced in 21H1
ExDestroyPool
ExFreePool2
ExInitializeDeviceAts
ExQueueDpcEventWait
ExSecurePoolUpdate
ExSecurePoolValidate
FsRtlAllocateAePushLock
FsRtlFreeAePushLock
FsRtlOplockBreakH2
HvlGetApicIdFromLpIndex
HvlIsSchedulerAssistAvailable
HvlSchedulerAssistAcknowledgeEvents
IoAcquireKsrPersistentMemoryEx
IoCancelMiniCompletionPacket
IoCheckRedirectionTrustLevel
IoComputeRedirectionTrustLevel
IoCreateSymbolicLink2
IoEnumerateKsrPersistentMemoryEx
IoGetIommuInterfaceEx
IoQueryKsrPersistentMemorySizeEx
IoRemoveIoCompletion
IoReserveKsrPersistentMemoryEx
IoSetIoCompletionEx3
KeAndAffinityEx2
KeComplementAffinityEx2
KeCopyAffinityEx2
KeInitializeAffinityEx2
KeOrAffinityEx2
KeQueryActiveProcessorAffinity2
KeQueryInterruptPartitionCount
KeQueryInterruptPartitionInformation
KeQueryNodeActiveAffinity2
KeQueryNodeActiveProcessorCount
KeQueryTypeEvent
KeReinitializeAffinityEx
KeRemoveQueueApc
KeSubtractAffinityEx2
MmAllocateContiguousMemoryEx
MmIsFileSectionActive
PoFxAddComponentRelation
PoFxRemoveComponentRelation
PsAllocateAffinityToken
PsFreeAffinityToken
PsGetProcessMachine
PsIsComponentEnabled
PsRevertToUserMultipleGroupAffinityThread
PsSetSystemMultipleGroupAffinityThread
PsTlsAlloc
PsTlsFree
PsTlsGetValue
PsTlsSetValue
RtlAddMandatoryAce
RtlCompareExchangePointerMapping
RtlCompareExchangePropertyStore
RtlConvertHostPerfCounterToPerfCounter
RtlCopyContext
RtlCopyExtendedContext
RtlGetExtendedContextLength
RtlGetSystemGlobalData
RtlInitializeExtendedContext
RtlIsApiSetImplemented
RtlIsProcessorFeaturePresent
RtlQueryPointerMapping
RtlQueryPropertyStore
RtlRemovePointerMapping
RtlRemovePropertyStore
RtlSetSystemGlobalData
RtlVirtualUnwind2
SeCreateAndRegisterAccessCheckDebugContext
SeDeleteClientSecurity
SeUnRegisterAndFreeAccessCheckDebugContext
WheaEnterCriticalState
WheaErrorSourceGetState
WheaExitCriticalState
WheaGetNotifyAllOfflinesPolicy
WheaIsAltContextAllocPossible
WheaIsCriticalState
WheaProcessWaitingETWEvents
WheaRecoveryBugCheck
ZwCreateSectionEx
ZwCreateSemaphore
ZwReleaseSemaphore
DriverEntry
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment