mirror of https://github.com/hfiref0x/UACME.git
parent
3938440c66
commit
97d3d4b19e
|
@ -1,12 +1,12 @@
|
|||
/*******************************************************************************
|
||||
*
|
||||
* (C) COPYRIGHT AUTHORS, 2015 - 2020
|
||||
* (C) COPYRIGHT AUTHORS, 2015 - 2021
|
||||
*
|
||||
* TITLE: SUP.C
|
||||
*
|
||||
* VERSION: 3.53
|
||||
* VERSION: 3.54
|
||||
*
|
||||
* DATE: 11 Nov 2020
|
||||
* DATE: 30 Dec 2020
|
||||
*
|
||||
* THIS CODE AND INFORMATION IS PROVIDED "AS IS" WITHOUT WARRANTY OF
|
||||
* ANY KIND, EITHER EXPRESSED OR IMPLIED, INCLUDING BUT NOT LIMITED
|
||||
|
@ -3490,7 +3490,39 @@ NTSTATUS supFindUserAssocSet(
|
|||
if (sectionBase == NULL || sectionSize == 0)
|
||||
return STATUS_INVALID_ADDRESS;
|
||||
|
||||
ptrCode = (PBYTE)supFindPattern(sectionBase, sectionSize, patternPtr, patternSize);
|
||||
//
|
||||
// Lookup signature.
|
||||
//
|
||||
ptrCode = (PBYTE)supFindPattern(sectionBase,
|
||||
sectionSize,
|
||||
patternPtr,
|
||||
patternSize);
|
||||
|
||||
if (ptrCode == NULL) {
|
||||
|
||||
switch (g_ctx->dwBuildNumber) {
|
||||
|
||||
case 19041:
|
||||
|
||||
//
|
||||
// Try Windows 10 20H2 signature.
|
||||
//
|
||||
patternPtr = UserAssocSet_19042;
|
||||
patternSize = sizeof(UserAssocSet_19042);
|
||||
|
||||
ptrCode = (PBYTE)supFindPattern(sectionBase,
|
||||
sectionSize,
|
||||
patternPtr,
|
||||
patternSize);
|
||||
|
||||
break;
|
||||
|
||||
default:
|
||||
break;
|
||||
}
|
||||
|
||||
}
|
||||
|
||||
if (ptrCode == NULL)
|
||||
return STATUS_NOT_FOUND;
|
||||
|
||||
|
|
|
@ -21,7 +21,7 @@ c90cec4c10cde815fd286d83601b4cd3738097e8e0b2e592dc28c1325c12918d *Source\Akagi\r
|
|||
e5029dd194323b141dd1c0a501b51b6e67456211edc3eda83523e76d9b08f91e *Source\Akagi\Resource.rc
|
||||
ef0994019dd8afe1dcafe432b21b04171106b22d61e254a0ef29cac3039cb01f *Source\Akagi\stub.c
|
||||
03808c43548835d632239b38e3aa9db0873fe9933ae93dd8f8becb57853ceaf8 *Source\Akagi\stub.h
|
||||
4b6569093e42e74e2efcc778c28094f227329337507ad282a93de38e7d89af14 *Source\Akagi\sup.c
|
||||
88523179165f724a5263252b573bc9dff7a752ff5b0af3489ef6ae3512436efe *Source\Akagi\sup.c
|
||||
8ca6989653dd35159152b8ca1b675ad4c2fee4bc543e631caf63a03b789339d0 *Source\Akagi\sup.h
|
||||
b9b6522f1adb15cd11c34dff4f399d434f8ae28dfa514bf652c34bfcd7007fe0 *Source\Akagi\uacme.vcxproj
|
||||
37901a20792335fa6d59be559ef37133311122e6c0c2588da5416106c02fbe70 *Source\Akagi\uacme.vcxproj.filters
|
||||
|
|
Loading…
Reference in New Issue