diff --git a/Source/Akagi/sup.c b/Source/Akagi/sup.c index 6156784..dd91aac 100644 --- a/Source/Akagi/sup.c +++ b/Source/Akagi/sup.c @@ -1,12 +1,12 @@ /******************************************************************************* * -* (C) COPYRIGHT AUTHORS, 2015 - 2020 +* (C) COPYRIGHT AUTHORS, 2015 - 2021 * * TITLE: SUP.C * -* VERSION: 3.53 +* VERSION: 3.54 * -* DATE: 11 Nov 2020 +* DATE: 30 Dec 2020 * * THIS CODE AND INFORMATION IS PROVIDED "AS IS" WITHOUT WARRANTY OF * ANY KIND, EITHER EXPRESSED OR IMPLIED, INCLUDING BUT NOT LIMITED @@ -3490,7 +3490,39 @@ NTSTATUS supFindUserAssocSet( if (sectionBase == NULL || sectionSize == 0) return STATUS_INVALID_ADDRESS; - ptrCode = (PBYTE)supFindPattern(sectionBase, sectionSize, patternPtr, patternSize); + // + // Lookup signature. + // + ptrCode = (PBYTE)supFindPattern(sectionBase, + sectionSize, + patternPtr, + patternSize); + + if (ptrCode == NULL) { + + switch (g_ctx->dwBuildNumber) { + + case 19041: + + // + // Try Windows 10 20H2 signature. + // + patternPtr = UserAssocSet_19042; + patternSize = sizeof(UserAssocSet_19042); + + ptrCode = (PBYTE)supFindPattern(sectionBase, + sectionSize, + patternPtr, + patternSize); + + break; + + default: + break; + } + + } + if (ptrCode == NULL) return STATUS_NOT_FOUND; diff --git a/UACME.sha256 b/UACME.sha256 index 3aac29e..b04c52a 100644 --- a/UACME.sha256 +++ b/UACME.sha256 @@ -21,7 +21,7 @@ c90cec4c10cde815fd286d83601b4cd3738097e8e0b2e592dc28c1325c12918d *Source\Akagi\r e5029dd194323b141dd1c0a501b51b6e67456211edc3eda83523e76d9b08f91e *Source\Akagi\Resource.rc ef0994019dd8afe1dcafe432b21b04171106b22d61e254a0ef29cac3039cb01f *Source\Akagi\stub.c 03808c43548835d632239b38e3aa9db0873fe9933ae93dd8f8becb57853ceaf8 *Source\Akagi\stub.h -4b6569093e42e74e2efcc778c28094f227329337507ad282a93de38e7d89af14 *Source\Akagi\sup.c +88523179165f724a5263252b573bc9dff7a752ff5b0af3489ef6ae3512436efe *Source\Akagi\sup.c 8ca6989653dd35159152b8ca1b675ad4c2fee4bc543e631caf63a03b789339d0 *Source\Akagi\sup.h b9b6522f1adb15cd11c34dff4f399d434f8ae28dfa514bf652c34bfcd7007fe0 *Source\Akagi\uacme.vcxproj 37901a20792335fa6d59be559ef37133311122e6c0c2588da5416106c02fbe70 *Source\Akagi\uacme.vcxproj.filters