Windows NT API Undocumented Functions

Welcome to the deepest core of the Windows kernel.

This documentation provides an advanced, low-level programmer's guide to the Windows NT Kernel, Native API, and system drivers. It covers undocumented functions and structures found in NTDLL.DLL and NTOSKRNL.EXE and WIN32K.SYS.

📁 User Mode

Detailed specifications for functions exported by ntdll.dll. Essential for systems programming and malware analysis.

💻 Kernel Mode

Information about ntoskrnl.exe exports, including memory management, process handling, and I/O manager internals.

Important Notice

Disclaimer: The information provided here is for educational purposes only. Using undocumented functions can lead to system instability, data loss, or hardware damage. Use at your own risk.

This software and/or documentation is provided as free and it's freely available and redistributable, as long as the Copyright and author's name are included.