Updated T1118 Path and Code (redcanaryco#510)

* Update T1118.yaml

* Update T1118.cs

atomics/T1118/T1118.yaml

@@ -12,9 +12,24 @@ atomic_tests:
     filename:
       description: location of the payload
       type: Path
-      default: T1118.dll
+      default: C:\AtomicRedTeam\atomics\T1118\src\T1118.dll
   executor:
     name: command_prompt
     command: |
-      C:\Windows\Microsoft.NET\Framework\v4.0.30319\csc.exe /target:library T1118.cs
+      C:\Windows\Microsoft.NET\Framework\v4.0.30319\csc.exe /target:library /out:C:\AtomicRedTeam\atomics\T1118\src\T1118.dll C:\AtomicRedTeam\atomics\T1118\src\T1118.cs 
       C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe /logfile= /LogToConsole=false /U #{filename}
+- name: InstallUtil GetHelp method call
+  description: |
+    Executes the Uninstall Method
+  supported_platforms:
+    - windows
+  input_arguments:
+    filename:
+      description: location of the payload
+      type: Path
+      default: C:\AtomicRedTeam\atomics\T1118\src\T1118.dll
+  executor:
+    name: command_prompt
+    command: |
+      C:\Windows\Microsoft.NET\Framework\v4.0.30319\csc.exe /target:library /out:C:\AtomicRedTeam\atomics\T1118\src\T1118.dll C:\AtomicRedTeam\atomics\T1118\src\T1118.cs 
+      C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe /? #{filename}

atomics/T1118/src/T1118.cs

@@ -12,6 +12,11 @@
 C:\Windows\Microsoft.NET\Framework\v4.0.30319\csc.exe /target:library T1118.cs
 Step Two:
 C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe /U /logfile= /logtoconsole=false T1118.dll
+
+HelpText Invocation:
+C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe /? T1118.dll
+
+
 */
 
 public class Program
@@ -35,4 +40,16 @@ public override void Uninstall(System.Collections.IDictionary savedState)
 
 		Console.WriteLine("Hello There From Uninstall, If you are reading this, prevention has failed.\n");
 	}
+
+	// Override the property 'HelpText'.
+	//
+	public override string HelpText
+	{
+	   get
+	   {
+
+		  return "Hello There From HelpText, If you are reading this, prevention has failed.\n";
+	   }
+	}
+
 }