diff --git a/modules/AdminImpersonate.hpp b/modules/AdminImpersonate.hpp index 6d93e1d..4171a25 100644 --- a/modules/AdminImpersonate.hpp +++ b/modules/AdminImpersonate.hpp @@ -84,7 +84,7 @@ class AdminImpersonate : public ModuleBase { static NTSTATUS NTAPI DetourNtAccessCheckAndAuditAlarm(PUNICODE_STRING A, HANDLE B, PUNICODE_STRING C, PUNICODE_STRING D, PSECURITY_DESCRIPTOR E, ACCESS_MASK F, PGENERIC_MAPPING G, BOOLEAN H, PACCESS_MASK I , PBOOLEAN J, PBOOLEAN K) { - auto res = MessageBoxA(nullptr, "Unsupported method called.", "Policy Tool Warning", MB_CANCELTRYCONTINUE); + auto res = MessageBoxA(nullptr, "Unsupported NT function called: NtAccessCheckAndAuditAlarm" , "Policy Tool Warning", MB_CANCELTRYCONTINUE); switch (res) { case IDCANCEL: return STATUS_NOT_IMPLEMENTED; case IDTRYAGAIN: return STATUS_SUCCESS;