View difference between Paste ID: kng6kSnZ and esKmjsZc

-C:\Program Files (x86)\Windows Kits\10\Include\10.0.10586.0\km\ntddk.h got some updates:
+C:\Program Files (x86)\Windows Kits\10\Include\10.0.10586.0\km\ntifs.h got some updates:
 
 
 #define SECURITY_USERMANAGER_ID_BASE_RID    (0x0000005DL)
 #define SECURITY_USERMANAGER_ID_RID_COUNT   (6L)
 
 #define SECURITY_WINRM_ID_BASE_RID    (0x0000005EL)
 #define SECURITY_WINRM_ID_RID_COUNT   (6L)
 
 typedef struct _SE_ADT_PARAMETER_ARRAY_EX {
 
     ULONG CategoryId;
     ULONG AuditId;
     ULONG Version;
     ULONG ParameterCount;
     ULONG Length;
     USHORT FlatSubCategoryId;
-/////
+
     ULONG Flags;
-not sure why this was added now here:
+
 
 } SE_ADT_PARAMETER_ARRAY_EX, *PSE_ADT_PARAMETER_ARRAY_EX;
 
-// Page/memory priorities.
+// V2 Drops support for LM hash, but adds the credential key
 typedef struct _MSV1_0_SUPPLEMENTAL_CREDENTIAL_V2 {
     ULONG Version;
-#define MEMORY_PRIORITY_LOWEST           0
+
-#define MEMORY_PRIORITY_VERY_LOW         1
+    UCHAR NtPassword[MSV1_0_OWF_PASSWORD_LENGTH];
-#define MEMORY_PRIORITY_LOW              2
+    UCHAR CredentialKey[MSV1_0_OWF_PASSWORD_LENGTH];
-#define MEMORY_PRIORITY_MEDIUM           3
+} MSV1_0_SUPPLEMENTAL_CREDENTIAL_V2, *PMSV1_0_SUPPLEMENTAL_CREDENTIAL_V2;
-#define MEMORY_PRIORITY_BELOW_NORMAL     4
+
-#define MEMORY_PRIORITY_NORMAL           5
+#if (_WIN32_WINNT >= _WIN32_WINNT_WINTHRESHOLD)
 #define FSCTL_QUERY_VOLUME_CONTAINER_STATE       CTL_CODE(FILE_DEVICE_FILE_SYSTEM, 228, METHOD_BUFFERED, FILE_ANY_ACCESS)
-/////////////
+#define FSCTL_SET_LAYER_ROOT                     CTL_CODE(FILE_DEVICE_FILE_SYSTEM, 229, METHOD_BUFFERED, FILE_ANY_ACCESS) // CONTAINER_ROOT_INFO_INPUT CONTAINER_ROOT_INFO_OUTPUT
 #endif
 
 //  TODO_WIN32_WINNT_WIN10_TH2
-// Process mitigation policy information
+#if (_WIN32_WINNT >= _WIN32_WINNT_WINTHRESHOLD)
-//  NtSetInformationProcess using ProcessMitigationPolicy
+#define FSCTL_QUERY_DIRECT_ACCESS_EXTENTS        CTL_CODE(FILE_DEVICE_FILE_SYSTEM, 230, METHOD_NEITHER, FILE_ANY_ACCESS)
 #define FSCTL_NOTIFY_STORAGE_SPACE_ALLOCATION    CTL_CODE(FILE_DEVICE_FILE_SYSTEM, 231, METHOD_BUFFERED, FILE_ANY_ACCESS)
 #define FSCTL_SSDI_STORAGE_REQUEST               CTL_CODE(FILE_DEVICE_FILE_SYSTEM, 232, METHOD_BUFFERED, FILE_ANY_ACCESS)
 
-typedef enum _PROCESS_MITIGATION_POLICY {
+
-    ProcessControlFlowGuardPolicy,
+#define FILE_STORAGE_TIER_FLAG_PARITY             (0x00800000)
-    ProcessImageLoadPolicy
+
-} PROCESS_MITIGATION_POLICY, *PPROCESS_MITIGATION_POLICY;
+#if (_WIN32_WINNT >= _WIN32_WINNT_WINTHRESHOLD)
 
-////////
+typedef struct _CONTAINER_VOLUME_STATE {
     ULONG Flags;
 } CONTAINER_VOLUME_STATE, *PCONTAINER_VOLUME_STATE;
-// Known extended CPU state feature BITs
+
 #define CONTAINER_VOLUME_STATE_HOSTING_CONTAINER    (0x00000001)
 
-// 8    IPT                                 Supervisor
+
 typedef struct _CONTAINER_ROOT_INFO_INPUT {
-#define XSTATE_IPT                          (8)
+
 } CONTAINER_ROOT_INFO_INPUT, *PCONTAINER_ROOT_INFO_INPUT;
-#define XSTATE_MASK_IPT                     (1ui64 << (XSTATE_IPT))
+
 typedef struct _CONTAINER_ROOT_INFO_OUTPUT {
     USHORT ContainerRootIdLength;
-// Define legal values for the SystemCall member.
+    UCHAR ContainerRootId[ANYSIZE_ARRAY];
 } CONTAINER_ROOT_INFO_OUTPUT, *PCONTAINER_ROOT_INFO_OUTPUT;
 
-#define SYSTEM_CALL_SYSCALL 0
+#define CONTAINER_ROOT_INFO_FLAG_SCRATCH_ROOT       (0x00000001)
-#define SYSTEM_CALL_INT_2E  1
+#define CONTAINER_ROOT_INFO_FLAG_LAYER_ROOT         (0x00000002)
 
-//////
+
 
 //
 //  Tag allocated to DropBox for HSM
-// On AMD64, this value is initialized to a nonzero value if the system
+//  GUID: C5BB0F16-68E9-4456-B6B9-5F5EE5F89965
-// operates with an altered view of the system service call mechanism.
+
 
 #define IO_REPARSE_TAG_DROPBOX_HSM              (0x00000044L)
-ULONG SystemCall;
+
 
 typedef enum _SharedVirtualDiskSupportType
-// Reserved, available for reuse.
+{
 //
     // The target device supports Continuous Data
-ULONG SystemCallPad0;
+    // Protection (log based) snapshots.
-ULONGLONG SystemCallPad[2];
+
     SharedVirtualDiskCDPSnapshotsSupported = 7
 } SharedVirtualDiskSupportType;
-    // A bitmask of enclave features supported on this system.
+
 #if (NTDDI_VERSION >= NTDDI_WINTHRESHOLD)
-
+
-    ULONG EnclaveFeatureMask[4];
+VOID
 SeAuditFipsCryptoSelftests(
     _In_ BOOLEAN bSuccess,
-// Assembler logic assumes a zero value for syscall and a nonzero value for
+    _In_ ULONG SelftestCode
-// int 2e, and that no other values exist presently for the SystemCall field.
+
 #endif
 
-C_ASSERT(SYSTEM_CALL_SYSCALL == 0);
+
-C_ASSERT(SYSTEM_CALL_INT_2E == 1);
+//  Registration version post threshold.
 //
 #define FSRTL_UNC_REGISTRATION_VERSION_0201  0x0201
-C_ASSERT(FIELD_OFFSET(KUSER_SHARED_DATA, SystemCall) == 0x308);
+
-C_ASSERT(FIELD_OFFSET(KUSER_SHARED_DATA, SystemCallPad0) == 0x30c);
+
-C_ASSERT(FIELD_OFFSET(KUSER_SHARED_DATA, SystemCallPad) == 0x310);
+
 //
-C_ASSERT(FIELD_OFFSET(KUSER_SHARED_DATA, EnclaveFeatureMask) == 0x36c);
+//  FSRTL_UNC_REGISTRATION_VERSION_0201 is available in post threshold only.
-C_ASSERT(FIELD_OFFSET(KUSER_SHARED_DATA, Reserved8) == 0x37c);
+//  Change NTDDI_WINTHRESHOLD to appropriate value when new
 //  version is avaialble.
 //
-Silo functions now at DISPATCH_LEVEL not APC_LEVEL:
+#if (NTDDI_VERSION >= NTDDI_WINTHRESHOLD)    /* ABRACADABRA_THRESHOLD */
 
-_IRQL_requires_max_(DISPATCH_LEVEL)
+#define FSRTL_UNC_REGISTRATION_CURRENT_VERSION FSRTL_UNC_REGISTRATION_VERSION_0201  // Current version is 2.1
 
-PESILO
+#elif (NTDDI_VERSION >= NTDDI_WINBLUE)    /* ABRACADABRA_THRESHOLD */
-PsGetCurrentServerSilo(
+
-    VOID
+#define FSRTL_UNC_REGISTRATION_CURRENT_VERSION FSRTL_UNC_REGISTRATION_VERSION_0200  // Current version is 2.0
 
 #endif
-/////////
+
 #if (NTDDI_VERSION >= NTDDI_THRESHOLD)
-#if (NTDDI_VERSION >= NTDDI_WIN10)
+
 #define ATOMIC_CREATE_ECP_IN_FLAG_SPARSE_SPECIFIED          0x0001
-NTSTATUS
+#define ATOMIC_CREATE_ECP_IN_FLAG_REPARSE_POINT_SPECIFIED   0x0002
-IoVolumeDeviceNameToGuid(
+#define ATOMIC_CREATE_ECP_IN_FLAG_EOF_SPECIFIED             0x0004
-    _In_  PUNICODE_STRING VolumeDeviceName,
+#define ATOMIC_CREATE_ECP_IN_FLAG_VDL_SPECIFIED             0x0008
-    _Out_ GUID            *Guid
+#define ATOMIC_CREATE_ECP_IN_FLAG_OPERATION_MASK            0x00ff
 
 #define ATOMIC_CREATE_ECP_IN_FLAG_BEST_EFFORT               0x0100
 
-#if (NTDDI_VERSION >= NTDDI_WIN10)
+#define ATOMIC_CREATE_ECP_OUT_FLAG_SPARSE_SET               0x0001
-_Must_inspect_result_
+#define ATOMIC_CREATE_ECP_OUT_FLAG_REPARSE_POINT_SET        0x0002
 #define ATOMIC_CREATE_ECP_OUT_FLAG_EOF_SET                  0x0004
-NTSTATUS
+#define ATOMIC_CREATE_ECP_OUT_FLAG_VDL_SET                  0x0008
-IoVolumeDeviceNameToGuidPath(
+#define ATOMIC_CREATE_ECP_OUT_FLAG_OPERATION_MASK           0x00ff
-    _In_  PUNICODE_STRING VolumeDeviceName,
+
-    _Out_ _At_(GuidPath->Buffer,
+typedef struct _ATOMIC_CREATE_ECP_CONTEXT {
-            __drv_allocatesMem(Mem)
+
-            _Post_notnull_)
+
-          PUNICODE_STRING GuidPath
+    //  Size of this context structure.
     //
 
     USHORT Size;
-////
+
     //
-typedef struct _IO_FOEXT_SILO_PARAMETERS {
+    //  ATOMIC_CREATE_ECP_IN_FLAG_xxx flags.
     //
 
-    PESILO SiloContext;
+    USHORT InFlags;
 
-} IO_FOEXT_SILO_PARAMETERS, *PIO_FOEXT_SILO_PARAMETERS;
+
     //  ATOMIC_CREATE_ECP_OUT_FLAG_xxx flags.
     //
-PIO_FOEXT_SILO_PARAMETERS
+
-IoGetSiloParameters (
+    USHORT OutFlags;
-    _In_ PFILE_OBJECT FileObject
+
     //
     //  Size of the ReparseBuffer below.
     //
-//////////
+    //  This can't exceed MAXIMUM_REPARSE_DATA_BUFFER_SIZE (16K).
     //
-typedef enum _HAL_SET_INFORMATION_CLASS {
+
-HalSetResetParkDisposition,        // Set whether to park processors on reset (LOGICAL)
+    USHORT ReparseBufferLength;
-} HAL_SET_INFORMATION_CLASS, *PHAL_SET_INFORMATION_CLASS;
+
     //
     //  Optional REPARSE_DATA_BUFFER or REPARSE_GUID_DATA_BUFFER.
     //
 
     _Field_size_bytes_opt_(ReparseBufferLength) PREPARSE_DATA_BUFFER ReparseBuffer;
 
     //
     //  Optional file size.
     //
 
     LONGLONG FileSize;
 
     //
     //  Optional valid data length.
     //
 
     LONGLONG ValidDataLength;
 
 } ATOMIC_CREATE_ECP_CONTEXT, *PATOMIC_CREATE_ECP_CONTEXT;
 
 //
 //  The GUID used for the ATOMIC_CREATE_ECP_CONTEXT structure.
 //
 //  {4720bd83-52ac-4104-a130-d1ec6a8cc8e5}
 //
 
 DEFINE_GUID( GUID_ECP_ATOMIC_CREATE,
              0x4720bd83,
              0x52ac,
              0x4104,
              0xa1, 0x30, 0xd1, 0xec, 0x6a, 0x8c, 0xc8, 0xe5 );
 
 #endif
 
 
 typedef struct _SEC_TOKEN_BINDING {
     unsigned char MajorVersion;                 // Supported major version of the Token Binding protocol
     unsigned char MinorVersion;                 // Supported minor version of the Token Binding protocol
     unsigned short KeyParametersSize;           // Size in bytes of the Token Binding key parameter IDs array
     unsigned char KeyParameters[ANYSIZE_ARRAY]; // Token Binding key parameter IDs, most preferred first
 } SEC_TOKEN_BINDING, *PSEC_TOKEN_BINDING;