UACME/Source/Akagi/consts.h

135 lines
6.4 KiB
C
Raw Normal View History

/*******************************************************************************
*
2017-01-17 06:15:28 +00:00
* (C) COPYRIGHT AUTHORS, 2015 - 2017
*
* TITLE: CONSTS.H
*
* VERSION: 2.59
*
* DATE: 15 Mar 2017
*
* Global consts definition file.
*
* THIS CODE AND INFORMATION IS PROVIDED "AS IS" WITHOUT WARRANTY OF
* ANY KIND, EITHER EXPRESSED OR IMPLIED, INCLUDING BUT NOT LIMITED
* TO THE IMPLIED WARRANTIES OF MERCHANTABILITY AND/OR FITNESS FOR A
* PARTICULAR PURPOSE.
*
*******************************************************************************/
#pragma once
#define AKAGI_XOR_KEY 'naka'
#define T_IFEO L"MACHINE\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Image File Execution Options"
#define T_UACKEY L"MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\policies\\system"
#define T_APP_PATH L"Software\\Microsoft\\Windows\\CurrentVersion\\App Paths\\"
#define CMD_EXTRACT_SYSTEM32 L"/c wusa %ws /extract:%%windir%%\\system32"
#define CMD_EXTRACT_WINSAT L"/c wusa %ws /extract:%%windir%%\\system32\\sysprep"
#define CMD_EXTRACT_MIGWIZ L"/c wusa %ws /extract:%%windir%%\\system32\\migwiz"
#define T_SCHTASKS_CMD L"/run /tn \"\\Microsoft\\Windows\\DiskCleanup\\SilentCleanup\" /i"
2017-01-17 06:15:28 +00:00
#define T_CLSID_MYCOMPUTER_COMET L"\\Comet.{20D04FE0-3AEA-1069-A2D8-08002B30309D}"
#define T_SDDL_ALL_FOR_EVERYONE L"D:(A;;GA;;;WD)"
2017-01-17 06:15:28 +00:00
#define T_PROGRAMDATA L"ProgramData"
2016-05-29 08:05:10 +00:00
#define MANIFEST_EXT L".manifest"
#define ELLOCNAK_MSU L"ellocnak.msu"
#define NTDLL_DLL L"ntdll.dll"
2016-05-29 08:05:10 +00:00
#define KERNEL32_DLL L"kernel32.dll"
#define OLE32_DLL L"ole32.dll"
#define SHELL32_DLL L"shell32.dll"
#define APPHELP_DLL L"apphelp.dll"
2016-07-07 14:16:12 +00:00
#define COMCTL32_DLL L"comctl32.dll"
2016-07-05 08:28:44 +00:00
#define HIBIKI_DLL L"Hibiki.dll"
#define WBEMCOMN_DLL L"wbemcomn.dll"
#define SLC_DLL L"SLC.dll"
#define NETUTILS_DLL L"netutils.dll"
#define ACTIONQUEUE_DLL L"ActionQueue.dll"
#define WDSCORE_DLL L"wdscore.dll"
2016-06-19 08:57:23 +00:00
#define MSCOREE_DLL L"MSCOREE.DLL"
#define DBGCORE_DLL L"dbgcore.dll"
#define SHCORE_DLL L"shcore.dll"
#define CRYPTBASE_DLL L"cryptbase.dll"
#define NTWDBLIB_DLL L"ntwdblib.dll"
#define ELSEXT_DLL L"elsext.dll"
#define POWRPROF_DLL L"powrprof.dll"
#define DEVOBJ_DLL L"devobj.dll"
#define UNBCL_DLL L"unbcl.dll"
#define DISMCORE_DLL L"dismcore.dll"
#define LOGPROVIDER_DLL L"LogProvider.dll"
#define PROVPROVIDER_DLL L"ProvProvider.dll"
#define CLICONFG_EXE L"cliconfg.exe"
#define OOBE_EXE L"oobe.exe"
#define WINSAT_EXE L"winsat.exe"
#define CREDWIZ_EXE L"credwiz.exe"
#define INETMGR_EXE L"InetMgr.exe"
#define MMC_EXE L"mmc.exe"
#define EXPLORER_EXE L"explorer.exe"
2016-05-29 08:05:10 +00:00
#define TASKHOST_EXE L"taskhost.exe"
#define TZSYNC_EXE L"tzsync.exe"
2016-07-06 17:11:21 +00:00
#define SYSPREP_EXE L"sysprep.exe"
2016-05-29 08:05:10 +00:00
#define SETUPSQM_EXE L"oobe\\setupsqm.exe" //always in this dir
#define MIGWIZ_EXE L"migwiz.exe"
2016-07-07 14:16:12 +00:00
#define CONSENT_EXE L"consent.exe"
#define EVENTVWR_EXE L"eventvwr.exe"
#define SCHTASKS_EXE L"schtasks.exe"
#define COMPMGMTLAUNCHER_EXE L"CompMgmtLauncher.exe"
#define PKGMGR_EXE L"pkgmgr.exe"
#define INFDEFAULTINSTALL_EXE L"InfDefaultInstall.exe"
#define SDCLT_EXE L"sdclt.exe"
#define CONTROL_EXE L"control.exe"
#define SYSPREP_DIR L"sysprep\\"
#define INETSRV_DIR L"inetsrv\\"
#define WBEM_DIR L"wbem\\"
2016-05-29 08:05:10 +00:00
#define MIGWIZ_DIR L"migwiz\\"
#define RUNAS_VERB L"runas"
2016-07-05 08:28:44 +00:00
#define EVENTVWR_MSC L"eventvwr.msc"
#define RSOP_MSC L"rsop.msc"
#define PACKAGE_XML L"ellocnak.xml"
#define PACKAGE_INF L"ellocnak.inf"
#ifdef _WIN64
#define KONGOU_CD L"Kongou64.cd"
#else
#define KONGOU_CD L"Kongou32.cd"
#endif
2017-01-17 06:15:28 +00:00
#define T_DEFAULT_CMD L"%systemroot%\\system32\\cmd.exe"
2016-07-07 14:16:12 +00:00
#define LOCAL_SXS L".local"
#define FAKE_LOCAL_SXS L".hawawa"
2016-06-19 08:57:23 +00:00
#define INETMGR_SXS L"microsoft-windows-iis-managementconsole"
2016-07-07 14:16:12 +00:00
#define COMCTL32_SXS L"microsoft.windows.common-controls"
2016-06-19 08:57:23 +00:00
#define APPCMDLINE L"Not a security boundary! Just hack-o-rama. Keep it as is!"
#define PROGRAMTITLE L"UACMe"
#define WOW64STRING L"Wow64 detected, use x64 version of this tool."
#define WOW64WIN32ONLY L"This method only works with x86-32 Windows or from Wow64"
2016-07-05 08:28:44 +00:00
#define WIN64ONLY L"This method only works with x86-64 Windows"
#define LAZYWOW64UNSUPPORTED L"Use 32 bit version of this tool on 32 bit OS version"
#define OSTOOOLD L"This method require Windows 7 and above"
#define WINBLUEWANTED L"This method require Windows 8 and above"
#define WIN10ONLY L"This method require Windows 10 and above"
#define UACFIX L"This method fixed/unavailable in the current version of Windows, do you still want to continue?"
#define T_AKAGI_KEY L"Software\\Akagi"
#define T_AKAGI_PARAM L"LoveLetter"
2016-07-07 14:16:12 +00:00
#define T_AKAGI_FLAG L"Flag"
//COM objects elevation
#define ISECURITYEDITOR_ELEMONIKER L"Elevation:Administrator!new:{4D111E08-CBF7-4f12-A926-2C7920AF52FC}"
#define IFILEOP_ELEMONIKER L"Elevation:Administrator!new:{3AD05575-8857-4850-9277-11B85BDB8E09}"
#define T_CLSID_ShellSecurityEditor L"{4D111E08-CBF7-4f12-A926-2C7920AF52FC}"
#define T_CLSID_UninstallStringLauncher L"{FCC74B77-EC3E-4DD8-A80B-008A702075A9}"
#define T_IID_ISecurityEditor L"{14B2C619-D07A-46EF-8B62-31B64F3B845C}"
#define T_IID_IARPUninstallStringLauncher L"{F885120E-3789-4FD9-865E-DC9B4A6412D2}"
//
// Global const
//
// SGVsbG8sIHhzeXN2ZXJtaW4uIFlvdSBzdHVwaWQgcmlwcGVyIGZyb20gQ2hpbmEsIGhvcGUgeW91IHdpbGwgZGllIGluIHBhaW4gZnJvbSBkaWFycmhlYSA6KSBIYXZlIGEgbmljZSBkYXksIGZ1Y2tlci4=
//