Files
Wand-Enhancer-luanslimadev/tools/asar-fuses-bypass/library.c
T
2025-11-30 00:19:26 +02:00

88 lines
2.4 KiB
C

//
// Created by kitbyte on 30.11.2025.
//
#include <Windows.h>
extern BOOL disable_asar_integrity(void);
#ifdef _WIN64
#define WRAPPER_GENFUNC(name) \
FARPROC orig_##name; \
void _##name(); \
__asm__( \
".global _" #name "\n" \
"_" #name ":\n" \
" movq orig_" #name "(%rip), %rax\n" \
" jmp *%rax\n" \
);
#else
#define WRAPPER_GENFUNC(name) \
FARPROC orig_##name; \
__declspec(naked) void _##name() \
{ \
asm("jmp *_orig_"#name); \
}
#endif
WRAPPER_GENFUNC(GetFileVersionInfoA)
WRAPPER_GENFUNC(GetFileVersionInfoByHandle)
WRAPPER_GENFUNC(GetFileVersionInfoExW)
WRAPPER_GENFUNC(GetFileVersionInfoExA)
WRAPPER_GENFUNC(GetFileVersionInfoSizeA)
WRAPPER_GENFUNC(GetFileVersionInfoSizeExA)
WRAPPER_GENFUNC(GetFileVersionInfoSizeExW)
WRAPPER_GENFUNC(GetFileVersionInfoSizeW)
WRAPPER_GENFUNC(GetFileVersionInfoW)
WRAPPER_GENFUNC(VerFindFileA)
WRAPPER_GENFUNC(VerFindFileW)
WRAPPER_GENFUNC(VerInstallFileA)
WRAPPER_GENFUNC(VerInstallFileW)
WRAPPER_GENFUNC(VerLanguageNameA)
WRAPPER_GENFUNC(VerLanguageNameW)
WRAPPER_GENFUNC(VerQueryValueA)
WRAPPER_GENFUNC(VerQueryValueW)
#define WRAPPER_FUNC(name) orig_##name = GetProcAddress(hOriginalDll, #name);
void SourceInit()
{
TCHAR source[MAX_PATH];
GetSystemDirectory(source, MAX_PATH);
strcat_s(source, sizeof source, "\\version.dll");
HMODULE hOriginalDll = LoadLibrary(source);
WRAPPER_FUNC(GetFileVersionInfoA);
WRAPPER_FUNC(GetFileVersionInfoByHandle);
WRAPPER_FUNC(GetFileVersionInfoExW);
WRAPPER_FUNC(GetFileVersionInfoExA);
WRAPPER_FUNC(GetFileVersionInfoSizeA);
WRAPPER_FUNC(GetFileVersionInfoSizeExW);
WRAPPER_FUNC(GetFileVersionInfoSizeExA);
WRAPPER_FUNC(GetFileVersionInfoSizeW);
WRAPPER_FUNC(GetFileVersionInfoW);
WRAPPER_FUNC(VerFindFileA);
WRAPPER_FUNC(VerFindFileW);
WRAPPER_FUNC(VerInstallFileA);
WRAPPER_FUNC(VerInstallFileW);
WRAPPER_FUNC(VerLanguageNameA);
WRAPPER_FUNC(VerLanguageNameW);
WRAPPER_FUNC(VerQueryValueA);
WRAPPER_FUNC(VerQueryValueW);
}
void Payload()
{
disable_asar_integrity();
}
BOOL WINAPI DllMain(HMODULE hinstDLL, DWORD fdwReason, LPVOID lpvReserved)
{
if (fdwReason == DLL_PROCESS_ATTACH)
{
DisableThreadLibraryCalls(hinstDLL);
SourceInit();
Payload();
}
return TRUE;
}