Compare commits

...

9 commits

10 changed files with 196 additions and 128 deletions

3
.gitignore vendored
View file

@ -1,2 +1,3 @@
/target
/build
**.zip

41
Cargo.lock generated
View file

@ -41,6 +41,14 @@ dependencies = [
"windows-sys",
]
[[package]]
name = "interceptor-rs"
version = "0.1.0"
source = "git+https://git.xeondev.com/xavo95/interceptor-rs.git#282da6f98b8e4a4e9844422343d4ce11606c9de6"
dependencies = [
"ilhook",
]
[[package]]
name = "lazy_static"
version = "1.5.0"
@ -61,9 +69,9 @@ checksum = "78ca9ab1a0babb1e7d5695e3530886289c18cf2f87ec19a575a0abdce112e3a3"
[[package]]
name = "proc-macro2"
version = "1.0.86"
version = "1.0.87"
source = "registry+https://github.com/rust-lang/crates.io-index"
checksum = "5e719e8df665df0d1c8fbfd238015744736151d4445ec0836b8e628aae103b77"
checksum = "b3e4daa0dcf6feba26f985457cdf104d4b4256fc5a09547140f3631bb076b19a"
dependencies = [
"unicode-ident",
]
@ -79,9 +87,9 @@ dependencies = [
[[package]]
name = "regex"
version = "1.11.0"
version = "1.11.1"
source = "registry+https://github.com/rust-lang/crates.io-index"
checksum = "38200e5ee88914975b69f657f0801b6f6dccafd44fd9326302a4aaeecfacb1d8"
checksum = "b544ef1b4eac5dc2db33ea63606ae9ffcfac26c1416a2806ae0bf5f56b201191"
dependencies = [
"aho-corasick",
"memchr",
@ -106,14 +114,6 @@ version = "0.8.5"
source = "registry+https://github.com/rust-lang/crates.io-index"
checksum = "2b15c43186be67a4fd63bee50d0303afffcef381492ebe2c5d87f324e1b8815c"
[[package]]
name = "shorekeeper-patch"
version = "0.1.0"
dependencies = [
"ilhook",
"windows",
]
[[package]]
name = "syn"
version = "2.0.79"
@ -151,6 +151,23 @@ version = "1.0.13"
source = "registry+https://github.com/rust-lang/crates.io-index"
checksum = "e91b56cd4cadaeb79bbf1a5645f6b4f8dc5bde8834ad5894a8db35fda9efa1fe"
[[package]]
name = "wicked-waifus-win-patch"
version = "0.1.0"
dependencies = [
"ilhook",
"interceptor-rs",
"regex",
"widestring",
"windows",
]
[[package]]
name = "widestring"
version = "1.1.0"
source = "registry+https://github.com/rust-lang/crates.io-index"
checksum = "7219d36b6eac893fa81e84ebe06485e7dcbb616177469b142df14f1f4deb1311"
[[package]]
name = "windows"
version = "0.58.0"

View file

@ -1,20 +1,26 @@
[package]
name = "shorekeeper-patch"
name = "wicked-waifus-win-patch"
version = "0.1.0"
edition = "2021"
[lib]
name = "shorekeeper"
name = "wicked_waifus_win"
crate-type = ["cdylib"]
[features]
cn_beta_1_4_0 = []
cn_beta_1_3_0 = []
cn_live_1_3_0 = []
os_live_1_3_0 = []
enable-sdk = []
only-sig-bypass = []
regular = ["dep:regex", "dep:widestring"]
[dependencies]
ilhook = "2.1.1"
interceptor-rs = { git = "https://git.xeondev.com/xavo95/interceptor-rs.git" }
regex = {version = "1.11.1", optional = true}
widestring = {version = "1.1.0", optional = true}
windows = { version = "0.58.0", features = [
"Win32_Foundation",
"Win32_System_LibraryLoader",

View file

@ -1,6 +1,6 @@
# shorekeeper-patch
# wicked-waifus-win-patch
PAK files signature check bypass for Wuthering Waves 1.3 beta
PAK files signature check bypass for the PC version of a certain game.
### How to use
Just inject it at early startup.

View file

@ -4,20 +4,34 @@ GOTO:MAIN
SETLOCAL ENABLEDELAYEDEXPANSION
cargo clean
cargo build --release --no-default-features -F %~1
set features=%~1:,=-%
COPY target\release\shorekeeper.dll build\shorekeeper-%~1.dll
set features=%~1
set cleaned_features=%features:,=-%
COPY target\release\wicked_waifus_win.dll build\%~2\wicked-waifus-win-%cleaned_features%.dll
cargo clean
ENDLOCAL
EXIT /B 0
:buildAllVariants
SETLOCAL ENABLEDELAYEDEXPANSION
: Build for cn_beta_1_4_0
call:cargoReleaseBuild "cn_beta_1_4_0,%~1" %~1
: Build for cn_beta_1_3_0
call:cargoReleaseBuild "cn_beta_1_3_0,%~1" %~1
: Build for cn_live_1_3_0
call:cargoReleaseBuild "cn_live_1_3_0,%~1" %~1
: Build for os_live_1_3_0
call:cargoReleaseBuild "os_live_1_3_0,%~1" %~1
ENDLOCAL
EXIT /B 0
:MAIN
if exist "build" rd /q /s "build"
mkdir build
mkdir build\regular
mkdir build\only-sig-bypass
cargo clean
: Build for cn_beta_1_3_0
call:cargoReleaseBuild cn_beta_1_3_0
: Build for cn_live_1_3_0
call:cargoReleaseBuild cn_live_1_3_0
: Build for os_live_1_3_0
call:cargoReleaseBuild os_live_1_3_0
call:buildAllVariants regular
call:buildAllVariants only-sig-bypass
tar -acvf shorekeeper-patch-win64.zip -C build
tar -acvf wicked-waifus-win-patch-win64.zip -C build .

63
src/extras.rs Normal file
View file

@ -0,0 +1,63 @@
#![cfg(all(not(feature = "only-sig-bypass"), feature = "regular"))]
use std::sync::OnceLock;
use std::thread;
use std::time::Duration;
use ilhook::x64::Registers;
use windows::core::{PCSTR, PCWSTR};
use windows::Win32::System::LibraryLoader::GetModuleHandleA;
use crate::offsets::CONFIG;
use crate::replacer::{GenericReplacer, Replacer};
static CFG_SERVER_REPLACER: OnceLock<GenericReplacer> = OnceLock::new();
pub(crate) fn configure_extras(interceptor: &mut interceptor_rs::Interceptor) {
let module = unsafe { GetModuleHandleA(PCSTR::null()) }.unwrap();
println!("Game base: {:X}", module.0 as usize);
interceptor
.attach((module.0 as usize) + CONFIG.kuro_http_get, on_kurohttp_get)
.unwrap();
let krsdk_ex = loop {
match unsafe { GetModuleHandleA(CONFIG.disable_sdk.sdk_dll) } {
Ok(handle) => break handle,
Err(_) => thread::sleep(Duration::from_millis(1)),
}
};
interceptor
.replace((krsdk_ex.0 as usize) + CONFIG.disable_sdk.eula_accept, dummy)
.unwrap();
interceptor
.replace((krsdk_ex.0 as usize) + CONFIG.disable_sdk.sdk_go_away, dummy)
.unwrap();
}
unsafe extern "win64" fn on_kurohttp_get(reg: *mut Registers, _: usize) {
let wstr = *((*reg).rcx as *const usize) as *mut u16;
let url = PCWSTR::from_raw(wstr).to_string().unwrap();
println!("HTTP GET: {url}");
let replacer = CFG_SERVER_REPLACER.get_or_init(|| {
GenericReplacer {
regex: regex::Regex::new(r#"^(?:https|http)://.*/([a-zA-Z0-9]{32}/index\.json)$"#).unwrap(),
replacement: std::env::var("CFG_SERVER_URL").unwrap_or("127.0.0.1:10001".to_string()),
scheme: std::env::var("CFG_SERVER_SCHEME").unwrap_or("http".to_string()),
}
});
if let Some(result) = replacer.replace(url.as_str()) {
println!("Redirecting to: {result}");
// TODO: Track https://doc.rust-lang.org/nightly/unstable-book/library-features/str-from-utf16-endian.html to replace widestring when stabilized
let new_url = widestring::U16CString::from_str(result.as_str()).unwrap();
let new_wstr = PCWSTR::from_raw(new_url.as_ptr());
std::ptr::copy_nonoverlapping(new_wstr.as_ptr(), wstr, new_wstr.as_wide().len() + 2);
};
}
unsafe extern "win64" fn dummy(_: *mut Registers, _: usize, _: usize) -> usize {
1
}

View file

@ -1,50 +0,0 @@
use ilhook::x64::{
CallbackOption, Hooker, HookFlags, HookPoint, HookType, JmpBackRoutine, RetnRoutine,
};
pub struct Interceptor {
pub hooks: Vec<HookPoint>,
}
impl Interceptor {
pub const fn new() -> Self {
Self { hooks: Vec::new() }
}
#[allow(dead_code)]
pub fn attach(
&mut self,
addr: usize,
routine: JmpBackRoutine,
) -> Result<(), ilhook::HookError> {
let hooker = Hooker::new(
addr,
HookType::JmpBack(routine),
CallbackOption::None,
0,
HookFlags::empty(),
);
let hook_point = unsafe { hooker.hook() }?;
self.hooks.push(hook_point);
Ok(())
}
pub fn replace(
&mut self,
addr: usize,
routine: RetnRoutine,
) -> Result<(), ilhook::HookError> {
let hooker = Hooker::new(
addr,
HookType::Retn(routine),
CallbackOption::None,
0,
HookFlags::empty(),
);
let hook_point = unsafe { hooker.hook() }?;
self.hooks.push(hook_point);
Ok(())
}
}

View file

@ -2,17 +2,20 @@ use std::thread;
use std::time::Duration;
use ilhook::x64::Registers;
use windows::core::{PCSTR, PCWSTR, w};
use interceptor_rs::Interceptor;
use windows::core::{PCSTR, PCWSTR};
use windows::Win32::Foundation::HINSTANCE;
use windows::Win32::System::Console;
use windows::Win32::System::LibraryLoader::GetModuleHandleA;
use windows::Win32::System::SystemServices::DLL_PROCESS_ATTACH;
use interceptor::Interceptor;
use offsets::CONFIG;
mod interceptor;
mod offsets;
#[cfg(all(not(feature = "only-sig-bypass"), feature = "regular"))]
mod replacer;
#[cfg(all(not(feature = "only-sig-bypass"), feature = "regular"))]
mod extras;
fn thread_func() {
unsafe { Console::AllocConsole() }.unwrap();
@ -21,7 +24,7 @@ fn thread_func() {
println!("Waiting for ACE init");
let module = unsafe { GetModuleHandleA(PCSTR::null()) }.unwrap();
let pak_file_offset = ((module.0 as usize) + CONFIG.f_pak_file_check) as *const u128;
let pak_file_offset = ((module.0 as usize) + CONFIG.f_pak_file_check) as *const u64;
loop {
if unsafe { std::ptr::read(pak_file_offset) } == CONFIG.f_pak_file_check_preamble {
println!("ACE Initialization finished");
@ -35,44 +38,14 @@ fn thread_func() {
.replace((module.0 as usize) + CONFIG.f_pak_file_check, fpakfile_check_replacement)
.unwrap();
let module = unsafe { GetModuleHandleA(PCSTR::null()) }.unwrap();
println!("Game base: {:X}", module.0 as usize);
#[cfg(all(not(feature = "only-sig-bypass"), feature = "regular"))]
extras::configure_extras(&mut interceptor);
interceptor
.attach((module.0 as usize) + CONFIG.kuro_http_get, on_kurohttp_get)
.unwrap();
let krsdk_ex = loop {
match unsafe { GetModuleHandleA(CONFIG.disable_sdk.sdk_dll) } {
Ok(handle) => break handle,
Err(_) => thread::sleep(Duration::from_millis(1)),
}
};
interceptor
.replace((krsdk_ex.0 as usize) + CONFIG.disable_sdk.eula_accept, dummy)
.unwrap();
interceptor
.replace((krsdk_ex.0 as usize) + CONFIG.disable_sdk.sdk_go_away, dummy)
.unwrap();
println!("Successfully initialized!");
thread::sleep(Duration::from_secs(u64::MAX));
}
unsafe extern "win64" fn on_kurohttp_get(reg: *mut Registers, _: usize) {
let wstr = *((*reg).rcx as *const usize) as *mut u16;
let url = PCWSTR::from_raw(wstr).to_string().unwrap();
println!("HTTP GET: {url}");
if url.ends_with("/index.json") {
println!("index.json requested, redirecting");
let new_wstr = w!("http://127.0.0.1:10001/index.json");
std::ptr::copy_nonoverlapping(new_wstr.as_ptr(), wstr, new_wstr.as_wide().len() + 2);
}
}
unsafe extern "win64" fn fpakfile_check_replacement(
reg: *mut Registers,
_: usize,
@ -85,10 +58,6 @@ unsafe extern "win64" fn fpakfile_check_replacement(
1
}
unsafe extern "win64" fn dummy(_: *mut Registers, _: usize, _: usize) -> usize {
1
}
#[no_mangle]
unsafe extern "system" fn DllMain(_: HINSTANCE, call_reason: u32, _: *mut ()) -> bool {
if call_reason == DLL_PROCESS_ATTACH {

View file

@ -1,7 +1,7 @@
#[cfg(not(feature = "enable-sdk"))]
#[cfg(all(not(feature = "enable-sdk"), not(feature = "only-sig-bypass"), feature = "regular"))]
use windows::core::{PCSTR, s};
#[cfg(not(feature = "enable-sdk"))]
#[cfg(all(not(feature = "enable-sdk"), not(feature = "only-sig-bypass"), feature = "regular"))]
pub(crate) struct DisableSdkConfiguration {
pub(crate) sdk_dll: PCSTR,
pub(crate) eula_accept: usize,
@ -10,18 +10,34 @@ pub(crate) struct DisableSdkConfiguration {
pub(crate) struct InjectConfiguration {
pub(crate) f_pak_file_check: usize,
pub(crate) f_pak_file_check_preamble: u128,
pub(crate) f_pak_file_check_preamble: u64,
#[cfg(all(not(feature = "only-sig-bypass"), feature = "regular"))]
pub(crate) kuro_http_get: usize,
#[cfg(not(feature = "enable-sdk"))]
#[cfg(all(not(feature = "enable-sdk"), not(feature = "only-sig-bypass"), feature = "regular"))]
pub(crate) disable_sdk: DisableSdkConfiguration,
}
#[cfg(feature = "cn_beta_1_4_0")]
pub(crate) const CONFIG: InjectConfiguration = InjectConfiguration {
f_pak_file_check: 0x3E37D90, // 0x3E37D90
f_pak_file_check_preamble: 0x8148574157565340,
#[cfg(all(not(feature = "only-sig-bypass"), feature = "regular"))]
kuro_http_get: 0xFE9E00,
#[cfg(all(not(feature = "enable-sdk"), not(feature = "only-sig-bypass"), feature = "regular"))]
disable_sdk: DisableSdkConfiguration{
sdk_dll: s!("KRSDKEx.dll"),
eula_accept: 0x4A6D0,
sdk_go_away: 0x8BB40,
}
};
#[cfg(feature = "cn_beta_1_3_0")]
pub(crate) const CONFIG: InjectConfiguration = InjectConfiguration {
f_pak_file_check: 0x3D2F460,
f_pak_file_check_preamble: 0x943D80000000A8EC8148574157565340,
f_pak_file_check_preamble: 0x8148574157565340,
#[cfg(all(not(feature = "only-sig-bypass"), feature = "regular"))]
kuro_http_get: 0xFC8CF0,
#[cfg(not(feature = "enable-sdk"))]
#[cfg(all(not(feature = "enable-sdk"), not(feature = "only-sig-bypass"), feature = "regular"))]
disable_sdk: DisableSdkConfiguration{
sdk_dll: s!("KRSDKEx.dll"),
eula_accept: 0x4A690,
@ -32,9 +48,10 @@ pub(crate) const CONFIG: InjectConfiguration = InjectConfiguration {
#[cfg(feature = "cn_live_1_3_0")]
pub(crate) const CONFIG: InjectConfiguration = InjectConfiguration {
f_pak_file_check: 0x3D35DF0,
f_pak_file_check_preamble: 0x943D80000000A8EC8148574157565340,
f_pak_file_check_preamble: 0x8148574157565340,
#[cfg(all(not(feature = "only-sig-bypass"), feature = "regular"))]
kuro_http_get: 0xFC9900,
#[cfg(not(feature = "enable-sdk"))]
#[cfg(all(not(feature = "enable-sdk"), not(feature = "only-sig-bypass"), feature = "regular"))]
disable_sdk: DisableSdkConfiguration{
sdk_dll: s!("KRSDKEx.dll"),
eula_accept: 0x4A690,
@ -45,12 +62,13 @@ pub(crate) const CONFIG: InjectConfiguration = InjectConfiguration {
#[cfg(feature = "os_live_1_3_0")]
pub(crate) const CONFIG: InjectConfiguration = InjectConfiguration {
f_pak_file_check: 0x3CDC430,
f_pak_file_check_preamble: 0x943D80000000A8EC8148574157565340,
f_pak_file_check_preamble: 0x8148574157565340,
#[cfg(all(not(feature = "only-sig-bypass"), feature = "regular"))]
kuro_http_get: 0xFC6C20,
#[cfg(not(feature = "enable-sdk"))]
#[cfg(all(not(feature = "enable-sdk"), not(feature = "only-sig-bypass"), feature = "regular"))]
disable_sdk: DisableSdkConfiguration{
sdk_dll: s!("KRSDK.dll"),
eula_accept: 0x94710,
sdk_go_away: 0x9FE10
eula_accept: 0x95440,
sdk_go_away: 0xA1280
}
};

30
src/replacer.rs Normal file
View file

@ -0,0 +1,30 @@
#![cfg(all(not(feature = "only-sig-bypass"), feature = "regular"))]
pub(crate) trait Replacer {
fn replace(&self, original: &str) -> Option<String>;
}
pub(crate) struct GenericReplacer {
pub(crate) regex: regex::Regex,
pub(crate) replacement: String,
pub(crate) scheme: String,
}
impl Replacer for GenericReplacer {
fn replace(&self, original: &str) -> Option<String> {
// Prepare output array
let mut results: Vec<String> = vec![];
// Perform the capture over input
for (_, [path]) in self.regex.captures_iter(original).map(|c| c.extract()) {
results.push(format!("{}://{}/{}", self.scheme, self.replacement, path));
}
// We are supposed to only parse one entry from text
if 1 == results.len() {
return Some(results.remove(0));
} else if results.is_empty() {
println!("No valid url match found so returning original url");
} else {
println!("Invalid number of entries parsed, expected 1, obtained {:?}", results.len());
}
None
}
}