Memory Partitions

Memory partitions are new for Windows 10. A memory partition is a collection of physical pages that are managed essentially independently of the physical pages in other partitions.

Each memory partition is abstracted as a partition object that is accessed through a handle. User-mode software obtains and uses these handles through the native API functions NtCreatePartition, NtManagePartition and NtOpenPartition. These are exported by name from NTDLL (along with their aliases that have the Zw prefix). The kernel does not export them with either prefix.

One memory partition is built-in. In the object namespace it is KernelObjects\MemoryPartition0. In 32-bit Windows, this system partition is the only memory partition and those native API functions are all made to fail trivially.