Changes in Microsoft Windows 7 vs Microsoft Vista SP1: ntdll.dll

New in Microsoft Windows 7
Import NameNotes
AlpcRundownCompletionList 
EtwEventWriteEx 
EtwEventWriteNoRegistration 
EvtIntReportAuthzEventAndSourceAsync 
EvtIntReportEventAndSourceAsync 
LdrGetDllHandleByMapping 
LdrGetDllHandleByName 
LdrResGetRCConfig 
LdrRscIsTypeExist 
NtAllocateReserveObject 
NtCreateProfileEx 
NtDisableLastKnownGood 
NtDrawText 
NtEnableLastKnownGood 
NtNotifyChangeSession 
NtOpenKeyEx 
NtOpenKeyTransactedEx 
NtQuerySecurityAttributesToken 
NtQuerySystemInformationEx 
NtQueueApcThreadEx 
NtSerializeBoot 
NtSetIoCompletionEx 
NtSetTimerEx 
NtUmsThreadYield 
RtlAcquireReleaseSRWLockExclusive 
RtlAddIntegrityLabelToBoundaryDescriptor 
RtlContractHashTable 
RtlCopyExtendedContext 
RtlCreateHashTable 
RtlCreateProcessReflection 
RtlCreateVirtualAccountSid 
RtlDeleteHashTable 
RtlDetectHeapLeaks 
RtlDisableThreadProfiling 
RtlEnableThreadProfiling 
RtlEndEnumerationHashTable 
RtlEndWeakEnumerationHashTable 
RtlEnumerateEntryHashTable 
RtlEthernetAddressToStringA 
RtlEthernetAddressToStringW 
RtlEthernetStringToAddressA 
RtlEthernetStringToAddressW 
RtlExpandHashTable 
RtlFillMemoryUlonglong 
RtlGetCurrentProcessorNumberEx 
RtlGetEnabledExtendedFeatures 
RtlGetExtendedContextLength 
RtlGetExtendedFeaturesMask 
RtlGetFullPathName_UEx 
RtlGetLocaleFileMappingAddress 
RtlGetNextEntryHashTable 
RtlGetProcessPreferredUILanguages 
RtlInitEnumerationHashTable 
RtlInitWeakEnumerationHashTable 
RtlInitializeExtendedContext 
RtlInsertEntryHashTable 
RtlInterlockedClearBitRun 
RtlInterlockedSetBitRun 
RtlIsNameInExpression 
RtlKnownExceptionFilter 
RtlLoadString 
RtlLocateExtendedFeature 
RtlLocateLegacyContext 
RtlLookupEntryHashTable 
RtlQueryPerformanceCounter 
RtlQueryPerformanceFrequency 
RtlQueryThreadProfiling 
RtlReadThreadProfilingData 
RtlRemoveEntryHashTable 
RtlReplaceSidInSd 
RtlReportSilentProcessExit 
RtlReportSqmEscalation 
RtlSetExtendedFeaturesMask 
RtlSetProcessPreferredUILanguages 
RtlTryAcquireSRWLockExclusive 
RtlTryAcquireSRWLockShared 
RtlUTF8ToUnicodeN 
RtlUnicodeToUTF8N 
RtlWeaklyEnumerateEntryHashTable 
SbExecuteProcedure 
SbSelectProcedure 
TpAllocAlpcCompletionEx 
TpAlpcRegisterCompletionList 
TpAlpcUnregisterCompletionList 
TpCallbackIndependent 
TpDbgGetFreeInfo 
TpDisablePoolCallbackChecks 
TpPoolFreeUnusedNodes 
TpQueryPoolStackInformation 
TpSetDefaultPoolMaxThreads 
TpSetDefaultPoolStackInformation 
TpSetPoolStackInformation 
WinSqmAddToAverageDWORD 
WinSqmAddToStreamEx 
WinSqmCheckEscalationAddToStreamEx 
WinSqmCheckEscalationSetDWORD 
WinSqmCheckEscalationSetDWORD64 
WinSqmCheckEscalationSetString 
WinSqmCommonDatapointDelete 
WinSqmCommonDatapointSetDWORD 
WinSqmCommonDatapointSetDWORD64 
WinSqmCommonDatapointSetStreamEx 
WinSqmCommonDatapointSetString 
WinSqmGetEscalationRuleStatus 
WinSqmGetInstrumentationProperty 
WinSqmIncrementDWORD 
WinSqmIsOptedInEx 
WinSqmSetDWORD 
WinSqmSetDWORD64 
WinSqmSetEscalationInfo 
WinSqmSetIfMaxDWORD 
WinSqmSetIfMinDWORD 
ZwAllocateReserveObject 
ZwCreateProfileEx 
ZwDisableLastKnownGood 
ZwDrawText 
ZwEnableLastKnownGood 
ZwNotifyChangeSession 
ZwOpenKeyEx 
ZwOpenKeyTransactedEx 
ZwQuerySecurityAttributesToken 
ZwQuerySystemInformationEx 
ZwQueueApcThreadEx 
ZwSerializeBoot 
ZwSetIoCompletionEx 
ZwSetTimerEx 
ZwUmsThreadYield 


Removed from Microsoft Windows 7
Import NameNotes
LdrpResGetRCConfig 
NtCancelDeviceWakeupRequest 
NtRequestDeviceWakeup 
NtRequestWakeupLatency 
WerCheckEventEscalation 
WerReportWatsonEvent 
ZwCancelDeviceWakeupRequest 
ZwRequestDeviceWakeup 
ZwRequestWakeupLatency 


Add a comment:

Nick:
URL (optional):
Math captcha: 6 ∗ 3 + 6 =