New Kernel Version 1703 Exports

This page lists the functions that are newly exported from the Windows kernel in its 1703 release. Hardly any seem to be documented by Microsoft as far as shows up in a search online today (7th October 2018). With version 1703 adding almost as many exports as did version 1607, Microsoft makes very clear that Windows is now free to evolve much more rapidly, at least in terms of exported functionality. Two half-yearly updates in succession each change Windows more than any one service pack ever did.

Documentation status is summarised by colour coding so that more detail can be given as Remarks with less text. Functions that have their own non-trivial documentation are shown with no background colour. If the function is documented as reserved or obsolete, with or without a prototype, it is shaded red or shaded grey, respectively. An undocumented function that is at least declared in one or another header file from the Windows Driver Kit (WDK) is shaded orange. If the only declaration that Microsoft is known to have disclosed publicly is from the “minwin” directory of the Enterprise WDK for Windows 10 version 1511, specifically, then the function is highlighted orange. Functions that appear to be completely undocumented are highlighted yellow. If a function is documented now but is known not to have been documented in the first contemporaneous Device Driver Kit (DDK), WDK or Installable File System (IFS) Kit, then it is shaded yellow to retain some of its previous status as undocumented.

Name Remarks
ExAcquireFastResourceExclusive  
ExAcquireFastResourceShared  
ExAcquireFastResourceSharedStarveExclusive  
ExConvertFastResourceExclusiveToShared  
ExDeleteFastResource  
ExDisownFastResource  
ExInitializeFastOwnerEntry  
ExInitializeFastResource  
ExIsFastResourceContended  
ExIsFastResourceHeld  
ExIsFastResourceHeldExclusive  
ExReinitializeFastResource  
ExReleaseDisownedFastResource  
ExReleaseDisownedFastResourceExclusive  
ExReleaseDisownedFastResourceShared  
ExReleaseFastResource  
ExReleaseFastResourceExclusive  
ExReleaseFastResourceShared  
ExSvmBeginDeviceReset  
ExSvmFinalizeDeviceReset  
ExTryToConvertFastResourceSharedToExclusive  
HvlInvokeHypercall  
IoGetAdapterCryptoEngineExtension  
IoQueryInformationByName  
IoSetAdapterCryptoEngineExtension  
KdPowerTransitionEx  
NtCompareSigningLevels  
NtImageInfo (data)  
PoFxRegisterDripsWatchdogCallback  
PoSetPowerButtonHoldState  
PsAssignProcessToJobObject  
PsGetProcessSequenceNumber  
PsGetProcessStartKey  
PsGetWin32KFilterSet  
RtlAddAccessFilterAce  
RtlDeriveCapabilitySidsFromName  
RtlDrainNonVolatileFlush x64 only
RtlFindUnicodeSubstring  
RtlFlushNonVolatileMemory x64 only
RtlFlushNonVolatileMemoryRanges x64 only
RtlFreeNonVolatileToken x64 only
RtlGetNonVolatileToken x64 only
RtlGetNtSystemRoot  
RtlGetSessionProperties  
RtlGetTokenNamedObjectPath  
RtlIsElevatedRid  
RtlIsNonEmptyDirectoryReparsePointAllowed  
RtlIsPlaceholderFileHandle discontinued in 1709
RtlIsPlaceholderFileInfo discontinued in 1709
RtlWriteNonVolatileMemory x64 only
SeAdjustAccessStateForAccessConstraints  
SeConvertSecurityDescriptorToStringSecurityDescriptor  
SeConvertSidToStringSid  
SeConvertStringSecurityDescriptorToSecurityDescriptor  
SeConvertStringSidToSid  
VmColdPagesHint discontinued in 1709
VslCreateSecureSection not initially declared;
documentation allows “Windows 10” as minimum;
documentation has “not yet available” warning
VslDeleteSecureSection not initially declared;
documentation allows “Windows 10” as minimum;
documentation has “not yet available” warning
VslQuerySecureDevice  
ZwAllocateReserveObject  
ZwCancelWaitCompletionPacket  
ZwQueryInformationByName  
ZwSetIoCompletion  
ZwSetIoCompletionEx  

Version 1703 also exports WheaAttemptPhysicalPageOffline in the x86 builds, this function having been an x64 export since version 6.1.