Windows 11 23h2 issue & research

[Petya360]

I encountered the following issue while running on Windows 11 23h2, even when parsing the local file 'lsass. dmp'.
mimikatz # sekurlsa::minidump c:\lsass.dmp
Switch to MINIDUMP : 'c:\lsass.dmp'

mimikatz # sekurlsa::logonpasswords
ERROR kuhl_m_sekurlsa_acquireLSA ; Logon list

I tried to change the source code, added the internal version number of the system, and then decompiled 'lsasrv.dll' to add a new offset address.
Due to my limited technical skills, I am not quite able to understand the meaning of "-4" in the old version of the offset size. Therefore, I wrote the new code as {27,4} according to the meaning of the previous code and modified it to look like the one shown in the picture. Interestingly, it can now work normally.
Can someone help explain why changing it to this way can work normally? thank you.

[ebalo55]

have you been able to test this?
Do you want to provide the fix via a PullReq such that I can merge it? @Petya360

[Petya360]

have you been able to test this? Do you want to provide the fix via a PullReq such that I can merge it? @Petya360

I'm not quite sure how to obtain the correct feature code, but it happens to work properly on my device (laughs)
Of course, I would greatly appreciate it if you could provide a repair program for it.

[stilllearning65]

Could you explain where these changes were made? I can't seem to find them