diff --git a/APISetMap/APISetMap.cpp b/APISetMap/APISetMap.cpp index faa6448..ed0021e 100644 --- a/APISetMap/APISetMap.cpp +++ b/APISetMap/APISetMap.cpp @@ -5,7 +5,7 @@ void PrintHeader() { printf("ApiSetMap - list API Set mappings - version 1.0\n"); - printf("(C)2017 Alex Ionescu and Pavel Yosifovich\n"); + printf("(c) Alex Ionescu, Pavel Yosifovich, and Contributors\n"); printf("http://www.alex-ionescu.com\n\n"); } @@ -22,13 +22,15 @@ int main() { UNICODE_STRING nameString, valueString; for (ULONG i = 0; i < apiSetMap->Count; i++) { + auto isSealed = nsEntry->Flags & API_SET_SCHEMA_ENTRY_FLAGS_SEALED != 0; + // // Build a UNICODE_STRING for this contract // nameString.MaximumLength = static_cast(nsEntry->NameLength); nameString.Length = static_cast(nsEntry->NameLength); nameString.Buffer = reinterpret_cast(apiSetMapAsNumber + nsEntry->NameOffset); - printf("%56wZ.dll -> {", &nameString); + printf("%56wZ.dll -> %s{", &nameString, (isSealed ? "s" : "" )); // // Iterate the values (i.e.: the hosts for this set) diff --git a/APISetMap/ApiSet.h b/APISetMap/ApiSet.h index 2391a18..f389238 100644 --- a/APISetMap/ApiSet.h +++ b/APISetMap/ApiSet.h @@ -1,11 +1,6 @@ #pragma once -LONG -RtlCompareUnicodeString( - _In_ PUNICODE_STRING Src1, - _In_ PUNICODE_STRING Src2, - _In_ BOOLEAN CaseInSensitive -); +#define API_SET_SCHEMA_ENTRY_FLAGS_SEALED 1 typedef struct _API_SET_NAMESPACE { ULONG Version;