in PPLGuard/utils.cpp [52:91]
VOID PrintUsage()
{
wprintf(L""
" ____ ____ __ ______ __\n"
" / __ \\/ __ \\/ / / ____/_ ______ __________/ /\n"
" / /_/ / /_/ / / / / __/ / / / __ `/ ___/ __ / \n"
" / ____/ ____/ /___/ /_/ / /_/ / /_/ / / / /_/ / \n"
"/_/ /_/ /_____/\\____/\\__,_/\\__,_/_/ \\__,_/ \n"
"\n"
"version %ws by %ws\n"
"based on PPLDump by %ws by %ws\n"
"\n"
"Description:\n"
" Use a userland Admin -> PP exploit to mitigate itself until reboot.\n"
"\n",
VERSION, AUTHOR,
FORK_VERSION, FORK_AUTHOR
);
wprintf(
L"Usage: \n"
" PPLGuard.exe [-v] [-d] [-f] [-a]\n"
"\n"
);
wprintf(
L"Options:\n"
" -v (Verbose) Enable verbose mode\n"
" -d (Debug) Enable debug mode (implies verbose)\n"
" -f (Force) Bypass DefineDosDevice error check\n"
" -a (AntiMalware) Instead of hardening KnownDlls, harden the tokens of AntiMalware processes\n"
"\n"
);
wprintf(
L"Examples:\n"
" PPLGuard.exe\n"
" PPLGuard.exe -d\n"
);
}