Geoff Chappell, Software Analyst
The table below lists all the functions that first appear as KERNEL32 exports in version 6.3, i.e., for Windows 8.1.
The functions that are highlighted yellow appear to be undocumented, as far as shows up in a search online today (12th March 2016).
Function | Remarks |
---|---|
BaseFreeAppCompatDataForProcessWorker | |
BaseReadAppCompatDataForProcessWorker | |
CalloutOnFiberStack | implemented as jump to api-ms-win-core-fibers-l2-1-1 in 10.0 and higher |
DeleteSynchronizationBarrier | implemented as jump to api-ms-win-core-synch-l1-2-0; documented for Windows 8 and higher |
DnsHostnameToComputerNameExW | implemented as jump to api-ms-win-core-sysinfo-l1-2-1 |
EnterSynchronizationBarrier | implemented as jump to api-ms-win-core-synch-l1-2-0; documented for Windows 8 and higher |
FindPackagesByPackageFamily | forwarded to KERNELBASE |
FormatAppplicationUserModelId | forwarded to KERNELBASE |
GetEncryptedFileVersionExt | |
GetPackageApplicationIds | forwared to KERNELBASE |
GetPackagePathByFullName | forwarded to KERNELBASE |
GetStagedPackagePathByFullName | forwarded to KERNELBASE |
InitializeSynchronizationBarrier | implemented as jump to api-ms-win-core-synch-l1-2-0; documented for Windows 8 and higher |
InstallELAMCertificateInfo | forwarded to api-ms-win-core-sysinfo-l1-2-1 |
IsProcessCritical | forwarded to api-ms-win-core-processthreads-l1-1-2 |
OOBEComplete | documented without version information |
ParseApplicationUserModelId | forwarded to KERNELBASE |
PssCaptureSnapshot | implemented as jump to api-ms-win-core-processsnapshot-l1-1-0 in 10.0 and higher |
PssDuplicateSnapshot | implemented as jump to api-ms-win-core-processsnapshot-l1-1-0 in 10.0 and higher |
PssFreeSnapshot | implemented as jump to api-ms-win-core-processsnapshot-l1-1-0 in 10.0 and higher |
PssQuerySnapshot | implemented as jump to api-ms-win-core-processsnapshot-l1-1-0 in 10.0 and higher |
PssWalkMarkerCreate | implemented as jump to api-ms-win-core-processsnapshot-l1-1-0 in 10.0 and higher |
PssWalkMarkerFree | implemented as jump to api-ms-win-core-processsnapshot-l1-1-0 in 10.0 and higher |
PssWalkMarkerGetPosition | implemented as jump to api-ms-win-core-processsnapshot-l1-1-0 in 10.0 and higher |
PssWalkMarkerRewind | implemented as jump to api-ms-win-core-processsnapshot-l1-1-0 function PssWalkMarkerSeekToBeginning in 10.0 and higher |
PssWalkMarkerSeek | implemented as jump to api-ms-win-core-processsnapshot-l1-1-0 function PssWalkMarkerSetPosition in 10.0 and higher |
PssWalkMarkerSeekToBeginning | implemented as jump to api-ms-win-core-processsnapshot-l1-1-0 in 10.0 and higher |
PssWalkMarkerSetPosition | implemented as jump to api-ms-win-core-processsnapshot-l1-1-0 in 10.0 and higher |
PssWalkMarkerTell | implemented as jump to api-ms-win-core-processsnapshot-l1-1-0 function PssWalkMarkerGetPosition in 10.0 and higher |
PssWalkSnapshot | implemented as jump to api-ms-win-core-processsnapshot-l1-1-0 in 10.0 and higher |
QuirkGetData2Worker | |
QuirkGetDataWorker | |
QuirkIsEnabled2Worker | |
QuirkIsEnabled3Worker | |
QuirkIsEnabledForPackage2Worker | |
QuirkIsEnabledForPackageWorker | |
QuirkIsEnabledForProcessWorker | |
QuirkIsEnabledWorker | |
RegisterWaitUntilOOBECompleted | documented without version information |
SetComputerNameEx2W | implemented as jump to api-ms-win-core-sysinfo-l1-2-1 |
UnregisterWaitUntilOOBECompleted | documented without version information |
Version 6.3 discontinues almost all the exported functions that were introduced in the preceding version. There never has been anything like as big a culling, let alone so soon: