mimikatz icon indicating copy to clipboard operation
mimikatz copied to clipboard

Build on Windows 11 ARM64 (Microsoft Visual Studio Community 2022)

Open symmetrisch opened this issue 3 years ago • 1 comments

Read that building for arm64 was possible some years (?) ago...

Current setup reports 3 errors in kuhl_m_sekurlsa_cloudap.c

  • CloudApReferences not declared
  • ...

Did someone manage to build this project for arm64?

symmetrisch avatar Jan 27 '22 10:01 symmetrisch

Having the same issue here. This is possibly due to CloudApReferences is not defined in the ARM64 macro, however adding that won't simply work... Note that _M_ARM64 needed to be add as a case here, however I don't know the magic bytes to make this work...

#if (defined(_M_X64))
BYTE PTRN_WALL_CloudApLocateLogonSession[]	= {0x44, 0x8b, 0x01, 0x44, 0x39, 0x42};//, 0x18, 0x75};
KULL_M_PATCH_GENERIC CloudApReferences[] = {
	{KULL_M_WIN_BUILD_10_1909,	{sizeof(PTRN_WALL_CloudApLocateLogonSession),	PTRN_WALL_CloudApLocateLogonSession},	{0, NULL}, {-9}},
};
#elif defined(_M_IX86)
BYTE PTRN_WALL_CloudApLocateLogonSession[]	= {0x8b, 0x31, 0x39, 0x72, 0x10, 0x75};
KULL_M_PATCH_GENERIC CloudApReferences[] = {
	{KULL_M_WIN_BUILD_10_1909,	{sizeof(PTRN_WALL_CloudApLocateLogonSession),	PTRN_WALL_CloudApLocateLogonSession},	{0, NULL}, {-8}},
};
#endif

OscarXvita avatar Apr 18 '24 14:04 OscarXvita