New Kernel Version 1607 Exports

This page lists the functions that are newly exported from the Windows kernel in its 1607 release. Not only was the 1607 release marketed more substantially than was version 1511, it was more substantial technically, too, if only in terms of new functionality that rises to the level of being formally exported. Indeed, the 1607 release adds more exports than has any service pack in the whole history of Windows. Would the 1607 release in bygone times have become version 10.1? Some such suggestion is built into the conditional-compilation blocks that specifiy which target versions each function is defined for. For this purpose, the original release was named Windows Threshold and the 1511 release is Windows 10 TH2, but the 1607 release begins a new sequence, as Windows 10 RS1.

Very few of the additions for the 1607 release seem to be documented by Microsoft as far as shows up in a search online today (7th October 2018). By far the most that are documented are for working with silos. They either build on or supersede functionality that started in the original Windows 10 release. The original functions that survive are said to be new for 1607.

Documentation status is summarised by colour coding so that more detail can be given as Remarks with less text. Functions that have their own non-trivial documentation are shown with no background colour. If the function is documented as reserved or obsolete, with or without a prototype, it is shaded red or shaded grey, respectively. An undocumented function that is at least declared in one or another header file from the Windows Driver Kit (WDK) is shaded orange. If the only declaration that Microsoft is known to have disclosed publicly is from the “minwin” directory of the Enterprise WDK for Windows 10 version 1511, specifically, then the function is highlighted orange. Functions that appear to be completely undocumented are highlighted yellow. If a function is documented now but is known not to have been documented in the first contemporaneous Device Driver Kit (DDK), WDK or Installable File System (IFS) Kit, then it is shaded yellow to retain some of its previous status as undocumented.

Name Remarks
CcGetCachedDirtyPageCountForFile  
CcInitializeCacheMapEx declared for Windows Threshold (10.0) and higher
ExCoreMessagingObjectType (data)  
ExEnumerateSystemFirmwareTables  
ExGetSystemFirmwareTable  
ExTryAcquireSpinLockExclusiveAtDpcLevel  
ExTryAcquireSpinLockSharedAtDpcLevel  
FsRtlIsDaxVolume declared for Windows Threshold (10.0) and higher;
with TODO comment suggesting Windows 10 TH2 (1511)
FsRtlIsExtentDangling declared for Windows Threshold (10.0) and higher;
with TODO comment suggesting Windows 10 TH2 (1511)
FsRtlIsNonEmptyDirectoryReparsePointAllowed  
FsRtlVolumeDeviceToCorrelationId  
HvlQueryProcessorTopologyEx  
IoCleanupIrp  
IoGetIoAttributionHandle  
IoGetSilo  
IoRecordIoAttribution  
IoSetIoAttributionIrp  
KeQueryUnbiasedInterruptTimePrecise declared for Windows Threshold (10.0) and higher
MmAllocatePartitionNodePagesForMdlEx  
MmFreePagesFromMdlEx  
MmGetPhysicalMemoryRangesEx  
MmPartitionObjectType (data) discontinued in 1607
MmSetPermanentCacheAttribute  
PsAcquireSiloHardReference  
PsAllocSiloContextSlot  
PsCreateSiloContext  
PsDereferenceSiloContext  
PsFreeSiloContextSlot  
PsGetEffectiveServerSilo  
PsGetHostSilo  
PsGetJobSilo  
PsGetPermanentSiloContext  
PsGetProcessDxgProcess  
PsGetSiloContext  
PsGetSiloMonitorContextSlot  
PsInsertPermanentSiloContext  
PsInsertSiloContext  
PsIsProcessCommitRelinquished  
PsIsWin32KFilterAuditEnabled  
PsIsWin32KFilterEnabled  
PsMakeSiloContextPermanent  
PsQueryProcessCommandLine  
PsReferenceSiloContext  
PsRegisterSiloMonitor  
PsReleaseSiloHardReference  
PsRemoveSiloContext  
PsReplaceSiloContext  
PsSetProcessDxgProcess  
PsSiloContextNonPagedType (data)  
PsSiloContextPagedType (data)  
PsStartSiloMonitor  
PsTerminateServerSilo  
PsUnregisterSiloMonitor  
PsWow64GetProcessMachine  
RtlFindNextForwardRunClearCapped  
RtlGetActiveConsoleId  
RtlGetConsoleSessionForegroundProcessId  
RtlGetNtProductType  
RtlGetSuiteMask documentation allows “Windows 10” as minimum;
documentation has “pre-released product” warning;
documentation is for export from NTDLL
RtlIsMultiUsersInSessionSku  
RtlRaiseStatus  
RtlSetActiveConsoleId  
RtlSetConsoleSessionForegroundProcessId  
SeEtwWriteKMCveEvent documentation allows “Windows 10” as minimum
SeILSigningPolicyPtr (data)  
SeQuerySecureBootPlatformManifest  
SeQuerySecurityAttributesTokenAccessInformation  
TtmNotifyDeviceArrival  
TtmNotifyDeviceDeparture  
TtmNotifyDeviceInput  
VmPauseResumeNotify discontinued in 1709
ZwCommitRegistryTransaction declared for Windows 10 TH2 (1511) and higher
ZwCreatePartition  
ZwCreateProcessEx  
ZwCreateProfileEx  
ZwCreateRegistryTransaction declared for Windows 10 TH2 (1511) and higher
ZwManagePartition  
ZwOpenPartition  
ZwOpenRegistryTransaction  
ZwQueryIntervalProfile  
ZwQueryTimerResolution  
ZwRollbackRegistryTransaction  
ZwSetIntervalProfile  
ZwSetTimerResolution  
ZwStartProfile  
ZwStopProfile