Initial commit
This commit is contained in:
thexeondev
commit
f5ba39b513
16 changed files with 2181 additions and 0 deletions
398
.gitignore
vendored
Normal file
398
.gitignore
vendored
Normal file
|
|
@ -0,0 +1,398 @@
|
||||||
|
## Ignore Visual Studio temporary files, build results, and
|
||||||
|
## files generated by popular Visual Studio add-ons.
|
||||||
|
##
|
||||||
|
## Get latest from https://github.com/github/gitignore/blob/main/VisualStudio.gitignore
|
||||||
|
|
||||||
|
# User-specific files
|
||||||
|
*.rsuser
|
||||||
|
*.suo
|
||||||
|
*.user
|
||||||
|
*.userosscache
|
||||||
|
*.sln.docstates
|
||||||
|
|
||||||
|
# User-specific files (MonoDevelop/Xamarin Studio)
|
||||||
|
*.userprefs
|
||||||
|
|
||||||
|
# Mono auto generated files
|
||||||
|
mono_crash.*
|
||||||
|
|
||||||
|
# Build results
|
||||||
|
[Dd]ebug/
|
||||||
|
[Dd]ebugPublic/
|
||||||
|
[Rr]elease/
|
||||||
|
[Rr]eleases/
|
||||||
|
x64/
|
||||||
|
x86/
|
||||||
|
[Ww][Ii][Nn]32/
|
||||||
|
[Aa][Rr][Mm]/
|
||||||
|
[Aa][Rr][Mm]64/
|
||||||
|
bld/
|
||||||
|
[Bb]in/
|
||||||
|
[Oo]bj/
|
||||||
|
[Ll]og/
|
||||||
|
[Ll]ogs/
|
||||||
|
|
||||||
|
# Visual Studio 2015/2017 cache/options directory
|
||||||
|
.vs/
|
||||||
|
# Uncomment if you have tasks that create the project's static files in wwwroot
|
||||||
|
#wwwroot/
|
||||||
|
|
||||||
|
# Visual Studio 2017 auto generated files
|
||||||
|
Generated\ Files/
|
||||||
|
|
||||||
|
# MSTest test Results
|
||||||
|
[Tt]est[Rr]esult*/
|
||||||
|
[Bb]uild[Ll]og.*
|
||||||
|
|
||||||
|
# NUnit
|
||||||
|
*.VisualState.xml
|
||||||
|
TestResult.xml
|
||||||
|
nunit-*.xml
|
||||||
|
|
||||||
|
# Build Results of an ATL Project
|
||||||
|
[Dd]ebugPS/
|
||||||
|
[Rr]eleasePS/
|
||||||
|
dlldata.c
|
||||||
|
|
||||||
|
# Benchmark Results
|
||||||
|
BenchmarkDotNet.Artifacts/
|
||||||
|
|
||||||
|
# .NET Core
|
||||||
|
project.lock.json
|
||||||
|
project.fragment.lock.json
|
||||||
|
artifacts/
|
||||||
|
|
||||||
|
# ASP.NET Scaffolding
|
||||||
|
ScaffoldingReadMe.txt
|
||||||
|
|
||||||
|
# StyleCop
|
||||||
|
StyleCopReport.xml
|
||||||
|
|
||||||
|
# Files built by Visual Studio
|
||||||
|
*_i.c
|
||||||
|
*_p.c
|
||||||
|
*_h.h
|
||||||
|
*.ilk
|
||||||
|
*.meta
|
||||||
|
*.obj
|
||||||
|
*.iobj
|
||||||
|
*.pch
|
||||||
|
*.pdb
|
||||||
|
*.ipdb
|
||||||
|
*.pgc
|
||||||
|
*.pgd
|
||||||
|
*.rsp
|
||||||
|
*.sbr
|
||||||
|
*.tlb
|
||||||
|
*.tli
|
||||||
|
*.tlh
|
||||||
|
*.tmp
|
||||||
|
*.tmp_proj
|
||||||
|
*_wpftmp.csproj
|
||||||
|
*.log
|
||||||
|
*.tlog
|
||||||
|
*.vspscc
|
||||||
|
*.vssscc
|
||||||
|
.builds
|
||||||
|
*.pidb
|
||||||
|
*.svclog
|
||||||
|
*.scc
|
||||||
|
|
||||||
|
# Chutzpah Test files
|
||||||
|
_Chutzpah*
|
||||||
|
|
||||||
|
# Visual C++ cache files
|
||||||
|
ipch/
|
||||||
|
*.aps
|
||||||
|
*.ncb
|
||||||
|
*.opendb
|
||||||
|
*.opensdf
|
||||||
|
*.sdf
|
||||||
|
*.cachefile
|
||||||
|
*.VC.db
|
||||||
|
*.VC.VC.opendb
|
||||||
|
|
||||||
|
# Visual Studio profiler
|
||||||
|
*.psess
|
||||||
|
*.vsp
|
||||||
|
*.vspx
|
||||||
|
*.sap
|
||||||
|
|
||||||
|
# Visual Studio Trace Files
|
||||||
|
*.e2e
|
||||||
|
|
||||||
|
# TFS 2012 Local Workspace
|
||||||
|
$tf/
|
||||||
|
|
||||||
|
# Guidance Automation Toolkit
|
||||||
|
*.gpState
|
||||||
|
|
||||||
|
# ReSharper is a .NET coding add-in
|
||||||
|
_ReSharper*/
|
||||||
|
*.[Rr]e[Ss]harper
|
||||||
|
*.DotSettings.user
|
||||||
|
|
||||||
|
# TeamCity is a build add-in
|
||||||
|
_TeamCity*
|
||||||
|
|
||||||
|
# DotCover is a Code Coverage Tool
|
||||||
|
*.dotCover
|
||||||
|
|
||||||
|
# AxoCover is a Code Coverage Tool
|
||||||
|
.axoCover/*
|
||||||
|
!.axoCover/settings.json
|
||||||
|
|
||||||
|
# Coverlet is a free, cross platform Code Coverage Tool
|
||||||
|
coverage*.json
|
||||||
|
coverage*.xml
|
||||||
|
coverage*.info
|
||||||
|
|
||||||
|
# Visual Studio code coverage results
|
||||||
|
*.coverage
|
||||||
|
*.coveragexml
|
||||||
|
|
||||||
|
# NCrunch
|
||||||
|
_NCrunch_*
|
||||||
|
.*crunch*.local.xml
|
||||||
|
nCrunchTemp_*
|
||||||
|
|
||||||
|
# MightyMoose
|
||||||
|
*.mm.*
|
||||||
|
AutoTest.Net/
|
||||||
|
|
||||||
|
# Web workbench (sass)
|
||||||
|
.sass-cache/
|
||||||
|
|
||||||
|
# Installshield output folder
|
||||||
|
[Ee]xpress/
|
||||||
|
|
||||||
|
# DocProject is a documentation generator add-in
|
||||||
|
DocProject/buildhelp/
|
||||||
|
DocProject/Help/*.HxT
|
||||||
|
DocProject/Help/*.HxC
|
||||||
|
DocProject/Help/*.hhc
|
||||||
|
DocProject/Help/*.hhk
|
||||||
|
DocProject/Help/*.hhp
|
||||||
|
DocProject/Help/Html2
|
||||||
|
DocProject/Help/html
|
||||||
|
|
||||||
|
# Click-Once directory
|
||||||
|
publish/
|
||||||
|
|
||||||
|
# Publish Web Output
|
||||||
|
*.[Pp]ublish.xml
|
||||||
|
*.azurePubxml
|
||||||
|
# Note: Comment the next line if you want to checkin your web deploy settings,
|
||||||
|
# but database connection strings (with potential passwords) will be unencrypted
|
||||||
|
*.pubxml
|
||||||
|
*.publishproj
|
||||||
|
|
||||||
|
# Microsoft Azure Web App publish settings. Comment the next line if you want to
|
||||||
|
# checkin your Azure Web App publish settings, but sensitive information contained
|
||||||
|
# in these scripts will be unencrypted
|
||||||
|
PublishScripts/
|
||||||
|
|
||||||
|
# NuGet Packages
|
||||||
|
*.nupkg
|
||||||
|
# NuGet Symbol Packages
|
||||||
|
*.snupkg
|
||||||
|
# The packages folder can be ignored because of Package Restore
|
||||||
|
**/[Pp]ackages/*
|
||||||
|
# except build/, which is used as an MSBuild target.
|
||||||
|
!**/[Pp]ackages/build/
|
||||||
|
# Uncomment if necessary however generally it will be regenerated when needed
|
||||||
|
#!**/[Pp]ackages/repositories.config
|
||||||
|
# NuGet v3's project.json files produces more ignorable files
|
||||||
|
*.nuget.props
|
||||||
|
*.nuget.targets
|
||||||
|
|
||||||
|
# Microsoft Azure Build Output
|
||||||
|
csx/
|
||||||
|
*.build.csdef
|
||||||
|
|
||||||
|
# Microsoft Azure Emulator
|
||||||
|
ecf/
|
||||||
|
rcf/
|
||||||
|
|
||||||
|
# Windows Store app package directories and files
|
||||||
|
AppPackages/
|
||||||
|
BundleArtifacts/
|
||||||
|
Package.StoreAssociation.xml
|
||||||
|
_pkginfo.txt
|
||||||
|
*.appx
|
||||||
|
*.appxbundle
|
||||||
|
*.appxupload
|
||||||
|
|
||||||
|
# Visual Studio cache files
|
||||||
|
# files ending in .cache can be ignored
|
||||||
|
*.[Cc]ache
|
||||||
|
# but keep track of directories ending in .cache
|
||||||
|
!?*.[Cc]ache/
|
||||||
|
|
||||||
|
# Others
|
||||||
|
ClientBin/
|
||||||
|
~$*
|
||||||
|
*~
|
||||||
|
*.dbmdl
|
||||||
|
*.dbproj.schemaview
|
||||||
|
*.jfm
|
||||||
|
*.pfx
|
||||||
|
*.publishsettings
|
||||||
|
orleans.codegen.cs
|
||||||
|
|
||||||
|
# Including strong name files can present a security risk
|
||||||
|
# (https://github.com/github/gitignore/pull/2483#issue-259490424)
|
||||||
|
#*.snk
|
||||||
|
|
||||||
|
# Since there are multiple workflows, uncomment next line to ignore bower_components
|
||||||
|
# (https://github.com/github/gitignore/pull/1529#issuecomment-104372622)
|
||||||
|
#bower_components/
|
||||||
|
|
||||||
|
# RIA/Silverlight projects
|
||||||
|
Generated_Code/
|
||||||
|
|
||||||
|
# Backup & report files from converting an old project file
|
||||||
|
# to a newer Visual Studio version. Backup files are not needed,
|
||||||
|
# because we have git ;-)
|
||||||
|
_UpgradeReport_Files/
|
||||||
|
Backup*/
|
||||||
|
UpgradeLog*.XML
|
||||||
|
UpgradeLog*.htm
|
||||||
|
ServiceFabricBackup/
|
||||||
|
*.rptproj.bak
|
||||||
|
|
||||||
|
# SQL Server files
|
||||||
|
*.mdf
|
||||||
|
*.ldf
|
||||||
|
*.ndf
|
||||||
|
|
||||||
|
# Business Intelligence projects
|
||||||
|
*.rdl.data
|
||||||
|
*.bim.layout
|
||||||
|
*.bim_*.settings
|
||||||
|
*.rptproj.rsuser
|
||||||
|
*- [Bb]ackup.rdl
|
||||||
|
*- [Bb]ackup ([0-9]).rdl
|
||||||
|
*- [Bb]ackup ([0-9][0-9]).rdl
|
||||||
|
|
||||||
|
# Microsoft Fakes
|
||||||
|
FakesAssemblies/
|
||||||
|
|
||||||
|
# GhostDoc plugin setting file
|
||||||
|
*.GhostDoc.xml
|
||||||
|
|
||||||
|
# Node.js Tools for Visual Studio
|
||||||
|
.ntvs_analysis.dat
|
||||||
|
node_modules/
|
||||||
|
|
||||||
|
# Visual Studio 6 build log
|
||||||
|
*.plg
|
||||||
|
|
||||||
|
# Visual Studio 6 workspace options file
|
||||||
|
*.opt
|
||||||
|
|
||||||
|
# Visual Studio 6 auto-generated workspace file (contains which files were open etc.)
|
||||||
|
*.vbw
|
||||||
|
|
||||||
|
# Visual Studio 6 auto-generated project file (contains which files were open etc.)
|
||||||
|
*.vbp
|
||||||
|
|
||||||
|
# Visual Studio 6 workspace and project file (working project files containing files to include in project)
|
||||||
|
*.dsw
|
||||||
|
*.dsp
|
||||||
|
|
||||||
|
# Visual Studio 6 technical files
|
||||||
|
*.ncb
|
||||||
|
*.aps
|
||||||
|
|
||||||
|
# Visual Studio LightSwitch build output
|
||||||
|
**/*.HTMLClient/GeneratedArtifacts
|
||||||
|
**/*.DesktopClient/GeneratedArtifacts
|
||||||
|
**/*.DesktopClient/ModelManifest.xml
|
||||||
|
**/*.Server/GeneratedArtifacts
|
||||||
|
**/*.Server/ModelManifest.xml
|
||||||
|
_Pvt_Extensions
|
||||||
|
|
||||||
|
# Paket dependency manager
|
||||||
|
.paket/paket.exe
|
||||||
|
paket-files/
|
||||||
|
|
||||||
|
# FAKE - F# Make
|
||||||
|
.fake/
|
||||||
|
|
||||||
|
# CodeRush personal settings
|
||||||
|
.cr/personal
|
||||||
|
|
||||||
|
# Python Tools for Visual Studio (PTVS)
|
||||||
|
__pycache__/
|
||||||
|
*.pyc
|
||||||
|
|
||||||
|
# Cake - Uncomment if you are using it
|
||||||
|
# tools/**
|
||||||
|
# !tools/packages.config
|
||||||
|
|
||||||
|
# Tabs Studio
|
||||||
|
*.tss
|
||||||
|
|
||||||
|
# Telerik's JustMock configuration file
|
||||||
|
*.jmconfig
|
||||||
|
|
||||||
|
# BizTalk build output
|
||||||
|
*.btp.cs
|
||||||
|
*.btm.cs
|
||||||
|
*.odx.cs
|
||||||
|
*.xsd.cs
|
||||||
|
|
||||||
|
# OpenCover UI analysis results
|
||||||
|
OpenCover/
|
||||||
|
|
||||||
|
# Azure Stream Analytics local run output
|
||||||
|
ASALocalRun/
|
||||||
|
|
||||||
|
# MSBuild Binary and Structured Log
|
||||||
|
*.binlog
|
||||||
|
|
||||||
|
# NVidia Nsight GPU debugger configuration file
|
||||||
|
*.nvuser
|
||||||
|
|
||||||
|
# MFractors (Xamarin productivity tool) working folder
|
||||||
|
.mfractor/
|
||||||
|
|
||||||
|
# Local History for Visual Studio
|
||||||
|
.localhistory/
|
||||||
|
|
||||||
|
# Visual Studio History (VSHistory) files
|
||||||
|
.vshistory/
|
||||||
|
|
||||||
|
# BeatPulse healthcheck temp database
|
||||||
|
healthchecksdb
|
||||||
|
|
||||||
|
# Backup folder for Package Reference Convert tool in Visual Studio 2017
|
||||||
|
MigrationBackup/
|
||||||
|
|
||||||
|
# Ionide (cross platform F# VS Code tools) working folder
|
||||||
|
.ionide/
|
||||||
|
|
||||||
|
# Fody - auto-generated XML schema
|
||||||
|
FodyWeavers.xsd
|
||||||
|
|
||||||
|
# VS Code files for those working on multiple tools
|
||||||
|
.vscode/*
|
||||||
|
!.vscode/settings.json
|
||||||
|
!.vscode/tasks.json
|
||||||
|
!.vscode/launch.json
|
||||||
|
!.vscode/extensions.json
|
||||||
|
*.code-workspace
|
||||||
|
|
||||||
|
# Local History for Visual Studio Code
|
||||||
|
.history/
|
||||||
|
|
||||||
|
# Windows Installer files from build outputs
|
||||||
|
*.cab
|
||||||
|
*.msi
|
||||||
|
*.msix
|
||||||
|
*.msm
|
||||||
|
*.msp
|
||||||
|
|
||||||
|
# JetBrains Rider
|
||||||
|
*.sln.iml
|
||||||
8
README.md
Normal file
8
README.md
Normal file
|
|
@ -0,0 +1,8 @@
|
||||||
|
# EncryptionPatch
|
||||||
|
RSA Patch for Genshin Impact 4.2
|
||||||
|
|
||||||
|
- bypass rsa sign check for query_cur_region and server_rand_key in GetPlayerTokenRsp
|
||||||
|
- second mt init seed set to 1337
|
||||||
|
|
||||||
|
### Any questions?
|
||||||
|
Join our [discord server](https://discord.gg/reversedrooms)
|
||||||
31
RSAPatch.sln
Normal file
31
RSAPatch.sln
Normal file
|
|
@ -0,0 +1,31 @@
|
||||||
|
|
||||||
|
Microsoft Visual Studio Solution File, Format Version 12.00
|
||||||
|
# Visual Studio Version 17
|
||||||
|
VisualStudioVersion = 17.3.32929.385
|
||||||
|
MinimumVisualStudioVersion = 10.0.40219.1
|
||||||
|
Project("{8BC9CEB8-8B4A-11D0-8D11-00A0C91BC942}") = "RSAPatch", "RSAPatch\RSAPatch.vcxproj", "{F5C0E12E-F8C7-4E7E-8689-526D8F8952F4}"
|
||||||
|
EndProject
|
||||||
|
Global
|
||||||
|
GlobalSection(SolutionConfigurationPlatforms) = preSolution
|
||||||
|
Debug|x64 = Debug|x64
|
||||||
|
Debug|x86 = Debug|x86
|
||||||
|
Release|x64 = Release|x64
|
||||||
|
Release|x86 = Release|x86
|
||||||
|
EndGlobalSection
|
||||||
|
GlobalSection(ProjectConfigurationPlatforms) = postSolution
|
||||||
|
{F5C0E12E-F8C7-4E7E-8689-526D8F8952F4}.Debug|x64.ActiveCfg = Debug|x64
|
||||||
|
{F5C0E12E-F8C7-4E7E-8689-526D8F8952F4}.Debug|x64.Build.0 = Debug|x64
|
||||||
|
{F5C0E12E-F8C7-4E7E-8689-526D8F8952F4}.Debug|x86.ActiveCfg = Debug|Win32
|
||||||
|
{F5C0E12E-F8C7-4E7E-8689-526D8F8952F4}.Debug|x86.Build.0 = Debug|Win32
|
||||||
|
{F5C0E12E-F8C7-4E7E-8689-526D8F8952F4}.Release|x64.ActiveCfg = Release|x64
|
||||||
|
{F5C0E12E-F8C7-4E7E-8689-526D8F8952F4}.Release|x64.Build.0 = Release|x64
|
||||||
|
{F5C0E12E-F8C7-4E7E-8689-526D8F8952F4}.Release|x86.ActiveCfg = Release|Win32
|
||||||
|
{F5C0E12E-F8C7-4E7E-8689-526D8F8952F4}.Release|x86.Build.0 = Release|Win32
|
||||||
|
EndGlobalSection
|
||||||
|
GlobalSection(SolutionProperties) = preSolution
|
||||||
|
HideSolutionNode = FALSE
|
||||||
|
EndGlobalSection
|
||||||
|
GlobalSection(ExtensibilityGlobals) = postSolution
|
||||||
|
SolutionGuid = {71BB5149-3E87-42F2-99BA-9549D0AC0B3F}
|
||||||
|
EndGlobalSection
|
||||||
|
EndGlobal
|
||||||
54
RSAPatch/Console.cpp
Normal file
54
RSAPatch/Console.cpp
Normal file
|
|
@ -0,0 +1,54 @@
|
||||||
|
#include "Console.h"
|
||||||
|
|
||||||
|
HANDLE _out = NULL, _old_out = NULL;
|
||||||
|
HANDLE _err = NULL, _old_err = NULL;
|
||||||
|
HANDLE _in = NULL, _old_in = NULL;
|
||||||
|
|
||||||
|
void Console::Attach()
|
||||||
|
{
|
||||||
|
_old_out = GetStdHandle(STD_OUTPUT_HANDLE);
|
||||||
|
_old_err = GetStdHandle(STD_ERROR_HANDLE);
|
||||||
|
_old_in = GetStdHandle(STD_INPUT_HANDLE);
|
||||||
|
|
||||||
|
::AllocConsole() && ::AttachConsole(GetCurrentProcessId());
|
||||||
|
|
||||||
|
_out = GetStdHandle(STD_OUTPUT_HANDLE);
|
||||||
|
_err = GetStdHandle(STD_ERROR_HANDLE);
|
||||||
|
_in = GetStdHandle(STD_INPUT_HANDLE);
|
||||||
|
|
||||||
|
SetConsoleMode(_out,
|
||||||
|
ENABLE_PROCESSED_OUTPUT | ENABLE_WRAP_AT_EOL_OUTPUT);
|
||||||
|
|
||||||
|
SetConsoleMode(_in,
|
||||||
|
ENABLE_INSERT_MODE | ENABLE_EXTENDED_FLAGS |
|
||||||
|
ENABLE_PROCESSED_INPUT | ENABLE_QUICK_EDIT_MODE);
|
||||||
|
}
|
||||||
|
|
||||||
|
void Console::Detach()
|
||||||
|
{
|
||||||
|
if (_out && _err && _in) {
|
||||||
|
FreeConsole();
|
||||||
|
|
||||||
|
if (_old_out)
|
||||||
|
SetStdHandle(STD_OUTPUT_HANDLE, _old_out);
|
||||||
|
if (_old_err)
|
||||||
|
SetStdHandle(STD_ERROR_HANDLE, _old_err);
|
||||||
|
if (_old_in)
|
||||||
|
SetStdHandle(STD_INPUT_HANDLE, _old_in);
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
bool Console::Print(const char* fmt, ...)
|
||||||
|
{
|
||||||
|
if (!_out)
|
||||||
|
return false;
|
||||||
|
|
||||||
|
char buf[1024];
|
||||||
|
va_list va;
|
||||||
|
|
||||||
|
va_start(va, fmt);
|
||||||
|
_vsnprintf_s(buf, 1024, fmt, va);
|
||||||
|
va_end(va);
|
||||||
|
|
||||||
|
return !!WriteConsoleA(_out, buf, static_cast<DWORD>(strlen(buf)), nullptr, nullptr);
|
||||||
|
}
|
||||||
14
RSAPatch/Console.h
Normal file
14
RSAPatch/Console.h
Normal file
|
|
@ -0,0 +1,14 @@
|
||||||
|
#ifndef CONSOLE_H
|
||||||
|
#define CONSOLE_H
|
||||||
|
|
||||||
|
#include <Windows.h>
|
||||||
|
#include <stdio.h>
|
||||||
|
|
||||||
|
namespace Console
|
||||||
|
{
|
||||||
|
void Attach();
|
||||||
|
void Detach();
|
||||||
|
bool Print(const char* fmt, ...);
|
||||||
|
}
|
||||||
|
|
||||||
|
#endif
|
||||||
19
RSAPatch/Exports.def
Normal file
19
RSAPatch/Exports.def
Normal file
|
|
@ -0,0 +1,19 @@
|
||||||
|
|
||||||
|
EXPORTS
|
||||||
|
GetFileVersionInfoA
|
||||||
|
GetFileVersionInfoByHandle
|
||||||
|
GetFileVersionInfoExA
|
||||||
|
GetFileVersionInfoExW
|
||||||
|
GetFileVersionInfoSizeA
|
||||||
|
GetFileVersionInfoSizeExA
|
||||||
|
GetFileVersionInfoSizeExW
|
||||||
|
GetFileVersionInfoSizeW
|
||||||
|
GetFileVersionInfoW
|
||||||
|
VerFindFileA
|
||||||
|
VerFindFileW
|
||||||
|
VerInstallFileA
|
||||||
|
VerInstallFileW
|
||||||
|
VerLanguageNameA
|
||||||
|
VerLanguageNameW
|
||||||
|
VerQueryValueA
|
||||||
|
VerQueryValueW
|
||||||
61
RSAPatch/Memory.cpp
Normal file
61
RSAPatch/Memory.cpp
Normal file
|
|
@ -0,0 +1,61 @@
|
||||||
|
#include "Memory.h"
|
||||||
|
|
||||||
|
void Memory::WriteByteArray(uintptr_t address, uint8_t* value, size_t length)
|
||||||
|
{
|
||||||
|
DWORD oldProtection;
|
||||||
|
VirtualProtect(reinterpret_cast<void**>(address), length, PAGE_EXECUTE_READWRITE, &oldProtection);
|
||||||
|
memcpy((void*)address, value, length);
|
||||||
|
VirtualProtect(reinterpret_cast<void**>(address), length, oldProtection, &oldProtection);
|
||||||
|
}
|
||||||
|
|
||||||
|
uintptr_t Memory::Scan(LPCSTR module, LPCSTR pattern)
|
||||||
|
{
|
||||||
|
static auto pattern_to_byte = [](const char* pattern) {
|
||||||
|
|
||||||
|
auto bytes = std::vector<int>{};
|
||||||
|
|
||||||
|
auto start = const_cast<char*>(pattern);
|
||||||
|
|
||||||
|
auto end = const_cast<char*>(pattern) + strlen(pattern);
|
||||||
|
|
||||||
|
for (auto current = start; current < end; ++current) {
|
||||||
|
if (*current == '?') {
|
||||||
|
++current;
|
||||||
|
if (*current == '?')
|
||||||
|
++current;
|
||||||
|
bytes.push_back(-1);
|
||||||
|
}
|
||||||
|
else {
|
||||||
|
bytes.push_back(strtoul(current, ¤t, 16));
|
||||||
|
}
|
||||||
|
}
|
||||||
|
return bytes;
|
||||||
|
};
|
||||||
|
|
||||||
|
auto mod = GetModuleHandleA(module);
|
||||||
|
if (!mod)
|
||||||
|
return 0;
|
||||||
|
|
||||||
|
auto dosHeader = (PIMAGE_DOS_HEADER)mod;
|
||||||
|
auto ntHeaders = (PIMAGE_NT_HEADERS)((std::uint8_t*)mod + dosHeader->e_lfanew);
|
||||||
|
auto sizeOfImage = ntHeaders->OptionalHeader.SizeOfImage;
|
||||||
|
auto patternBytes = pattern_to_byte(pattern);
|
||||||
|
auto scanBytes = reinterpret_cast<std::uint8_t*>(mod);
|
||||||
|
auto s = patternBytes.size();
|
||||||
|
auto d = patternBytes.data();
|
||||||
|
|
||||||
|
for (auto i = 0ul; i < sizeOfImage - s; ++i) {
|
||||||
|
bool found = true;
|
||||||
|
for (auto j = 0ul; j < s; ++j) {
|
||||||
|
if (scanBytes[i + j] != d[j] && d[j] != -1) {
|
||||||
|
found = false;
|
||||||
|
break;
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
if (found) {
|
||||||
|
return (uintptr_t)&scanBytes[i];
|
||||||
|
}
|
||||||
|
}
|
||||||
|
return 0;
|
||||||
|
}
|
||||||
13
RSAPatch/Memory.h
Normal file
13
RSAPatch/Memory.h
Normal file
|
|
@ -0,0 +1,13 @@
|
||||||
|
#ifndef MEMORY_H
|
||||||
|
#define MEMORY_H
|
||||||
|
|
||||||
|
#include <Windows.h>
|
||||||
|
#include <vector>
|
||||||
|
|
||||||
|
namespace Memory
|
||||||
|
{
|
||||||
|
void WriteByteArray(uintptr_t address, uint8_t* value, size_t length);
|
||||||
|
uintptr_t Scan(LPCSTR module, LPCSTR pattern);
|
||||||
|
}
|
||||||
|
|
||||||
|
#endif
|
||||||
155
RSAPatch/RSAPatch.vcxproj
Normal file
155
RSAPatch/RSAPatch.vcxproj
Normal file
|
|
@ -0,0 +1,155 @@
|
||||||
|
<?xml version="1.0" encoding="utf-8"?>
|
||||||
|
<Project DefaultTargets="Build" xmlns="http://schemas.microsoft.com/developer/msbuild/2003">
|
||||||
|
<ItemGroup Label="ProjectConfigurations">
|
||||||
|
<ProjectConfiguration Include="Debug|Win32">
|
||||||
|
<Configuration>Debug</Configuration>
|
||||||
|
<Platform>Win32</Platform>
|
||||||
|
</ProjectConfiguration>
|
||||||
|
<ProjectConfiguration Include="Release|Win32">
|
||||||
|
<Configuration>Release</Configuration>
|
||||||
|
<Platform>Win32</Platform>
|
||||||
|
</ProjectConfiguration>
|
||||||
|
<ProjectConfiguration Include="Debug|x64">
|
||||||
|
<Configuration>Debug</Configuration>
|
||||||
|
<Platform>x64</Platform>
|
||||||
|
</ProjectConfiguration>
|
||||||
|
<ProjectConfiguration Include="Release|x64">
|
||||||
|
<Configuration>Release</Configuration>
|
||||||
|
<Platform>x64</Platform>
|
||||||
|
</ProjectConfiguration>
|
||||||
|
</ItemGroup>
|
||||||
|
<PropertyGroup Label="Globals">
|
||||||
|
<VCProjectVersion>16.0</VCProjectVersion>
|
||||||
|
<Keyword>Win32Proj</Keyword>
|
||||||
|
<ProjectGuid>{f5c0e12e-f8c7-4e7e-8689-526d8f8952f4}</ProjectGuid>
|
||||||
|
<RootNamespace>RSAPatch</RootNamespace>
|
||||||
|
<WindowsTargetPlatformVersion>10.0</WindowsTargetPlatformVersion>
|
||||||
|
</PropertyGroup>
|
||||||
|
<Import Project="$(VCTargetsPath)\Microsoft.Cpp.Default.props" />
|
||||||
|
<PropertyGroup Condition="'$(Configuration)|$(Platform)'=='Debug|Win32'" Label="Configuration">
|
||||||
|
<ConfigurationType>Application</ConfigurationType>
|
||||||
|
<UseDebugLibraries>true</UseDebugLibraries>
|
||||||
|
<PlatformToolset>v143</PlatformToolset>
|
||||||
|
<CharacterSet>Unicode</CharacterSet>
|
||||||
|
</PropertyGroup>
|
||||||
|
<PropertyGroup Condition="'$(Configuration)|$(Platform)'=='Release|Win32'" Label="Configuration">
|
||||||
|
<ConfigurationType>Application</ConfigurationType>
|
||||||
|
<UseDebugLibraries>false</UseDebugLibraries>
|
||||||
|
<PlatformToolset>v143</PlatformToolset>
|
||||||
|
<WholeProgramOptimization>true</WholeProgramOptimization>
|
||||||
|
<CharacterSet>Unicode</CharacterSet>
|
||||||
|
</PropertyGroup>
|
||||||
|
<PropertyGroup Condition="'$(Configuration)|$(Platform)'=='Debug|x64'" Label="Configuration">
|
||||||
|
<ConfigurationType>DynamicLibrary</ConfigurationType>
|
||||||
|
<UseDebugLibraries>true</UseDebugLibraries>
|
||||||
|
<PlatformToolset>v143</PlatformToolset>
|
||||||
|
<CharacterSet>Unicode</CharacterSet>
|
||||||
|
</PropertyGroup>
|
||||||
|
<PropertyGroup Condition="'$(Configuration)|$(Platform)'=='Release|x64'" Label="Configuration">
|
||||||
|
<ConfigurationType>DynamicLibrary</ConfigurationType>
|
||||||
|
<UseDebugLibraries>false</UseDebugLibraries>
|
||||||
|
<PlatformToolset>v143</PlatformToolset>
|
||||||
|
<WholeProgramOptimization>true</WholeProgramOptimization>
|
||||||
|
<CharacterSet>Unicode</CharacterSet>
|
||||||
|
</PropertyGroup>
|
||||||
|
<Import Project="$(VCTargetsPath)\Microsoft.Cpp.props" />
|
||||||
|
<ImportGroup Label="ExtensionSettings">
|
||||||
|
<Import Project="$(VCTargetsPath)\BuildCustomizations\masm.props" />
|
||||||
|
</ImportGroup>
|
||||||
|
<ImportGroup Label="Shared">
|
||||||
|
</ImportGroup>
|
||||||
|
<ImportGroup Label="PropertySheets" Condition="'$(Configuration)|$(Platform)'=='Debug|Win32'">
|
||||||
|
<Import Project="$(UserRootDir)\Microsoft.Cpp.$(Platform).user.props" Condition="exists('$(UserRootDir)\Microsoft.Cpp.$(Platform).user.props')" Label="LocalAppDataPlatform" />
|
||||||
|
</ImportGroup>
|
||||||
|
<ImportGroup Label="PropertySheets" Condition="'$(Configuration)|$(Platform)'=='Release|Win32'">
|
||||||
|
<Import Project="$(UserRootDir)\Microsoft.Cpp.$(Platform).user.props" Condition="exists('$(UserRootDir)\Microsoft.Cpp.$(Platform).user.props')" Label="LocalAppDataPlatform" />
|
||||||
|
</ImportGroup>
|
||||||
|
<ImportGroup Label="PropertySheets" Condition="'$(Configuration)|$(Platform)'=='Debug|x64'">
|
||||||
|
<Import Project="$(UserRootDir)\Microsoft.Cpp.$(Platform).user.props" Condition="exists('$(UserRootDir)\Microsoft.Cpp.$(Platform).user.props')" Label="LocalAppDataPlatform" />
|
||||||
|
</ImportGroup>
|
||||||
|
<ImportGroup Label="PropertySheets" Condition="'$(Configuration)|$(Platform)'=='Release|x64'">
|
||||||
|
<Import Project="$(UserRootDir)\Microsoft.Cpp.$(Platform).user.props" Condition="exists('$(UserRootDir)\Microsoft.Cpp.$(Platform).user.props')" Label="LocalAppDataPlatform" />
|
||||||
|
</ImportGroup>
|
||||||
|
<PropertyGroup Label="UserMacros" />
|
||||||
|
<ItemDefinitionGroup Condition="'$(Configuration)|$(Platform)'=='Debug|Win32'">
|
||||||
|
<ClCompile>
|
||||||
|
<WarningLevel>Level3</WarningLevel>
|
||||||
|
<SDLCheck>true</SDLCheck>
|
||||||
|
<PreprocessorDefinitions>WIN32;_DEBUG;_CONSOLE;%(PreprocessorDefinitions)</PreprocessorDefinitions>
|
||||||
|
<ConformanceMode>true</ConformanceMode>
|
||||||
|
</ClCompile>
|
||||||
|
<Link>
|
||||||
|
<SubSystem>Console</SubSystem>
|
||||||
|
<GenerateDebugInformation>true</GenerateDebugInformation>
|
||||||
|
</Link>
|
||||||
|
</ItemDefinitionGroup>
|
||||||
|
<ItemDefinitionGroup Condition="'$(Configuration)|$(Platform)'=='Release|Win32'">
|
||||||
|
<ClCompile>
|
||||||
|
<WarningLevel>Level3</WarningLevel>
|
||||||
|
<FunctionLevelLinking>true</FunctionLevelLinking>
|
||||||
|
<IntrinsicFunctions>true</IntrinsicFunctions>
|
||||||
|
<SDLCheck>true</SDLCheck>
|
||||||
|
<PreprocessorDefinitions>WIN32;NDEBUG;_CONSOLE;%(PreprocessorDefinitions)</PreprocessorDefinitions>
|
||||||
|
<ConformanceMode>true</ConformanceMode>
|
||||||
|
</ClCompile>
|
||||||
|
<Link>
|
||||||
|
<SubSystem>Console</SubSystem>
|
||||||
|
<EnableCOMDATFolding>true</EnableCOMDATFolding>
|
||||||
|
<OptimizeReferences>true</OptimizeReferences>
|
||||||
|
<GenerateDebugInformation>true</GenerateDebugInformation>
|
||||||
|
</Link>
|
||||||
|
</ItemDefinitionGroup>
|
||||||
|
<ItemDefinitionGroup Condition="'$(Configuration)|$(Platform)'=='Debug|x64'">
|
||||||
|
<ClCompile>
|
||||||
|
<WarningLevel>Level3</WarningLevel>
|
||||||
|
<SDLCheck>true</SDLCheck>
|
||||||
|
<PreprocessorDefinitions>_DEBUG;_CONSOLE;%(PreprocessorDefinitions)</PreprocessorDefinitions>
|
||||||
|
<ConformanceMode>true</ConformanceMode>
|
||||||
|
<LanguageStandard>stdcpp17</LanguageStandard>
|
||||||
|
</ClCompile>
|
||||||
|
<Link>
|
||||||
|
<SubSystem>Console</SubSystem>
|
||||||
|
<GenerateDebugInformation>true</GenerateDebugInformation>
|
||||||
|
<ModuleDefinitionFile>$(ProjectDir)Exports.def</ModuleDefinitionFile>
|
||||||
|
</Link>
|
||||||
|
</ItemDefinitionGroup>
|
||||||
|
<ItemDefinitionGroup Condition="'$(Configuration)|$(Platform)'=='Release|x64'">
|
||||||
|
<ClCompile>
|
||||||
|
<WarningLevel>Level3</WarningLevel>
|
||||||
|
<FunctionLevelLinking>true</FunctionLevelLinking>
|
||||||
|
<IntrinsicFunctions>true</IntrinsicFunctions>
|
||||||
|
<SDLCheck>true</SDLCheck>
|
||||||
|
<PreprocessorDefinitions>NDEBUG;_CONSOLE;%(PreprocessorDefinitions)</PreprocessorDefinitions>
|
||||||
|
<ConformanceMode>true</ConformanceMode>
|
||||||
|
<LanguageStandard>stdcpp17</LanguageStandard>
|
||||||
|
</ClCompile>
|
||||||
|
<Link>
|
||||||
|
<SubSystem>Console</SubSystem>
|
||||||
|
<EnableCOMDATFolding>true</EnableCOMDATFolding>
|
||||||
|
<OptimizeReferences>true</OptimizeReferences>
|
||||||
|
<GenerateDebugInformation>true</GenerateDebugInformation>
|
||||||
|
<ModuleDefinitionFile>$(ProjectDir)Exports.def</ModuleDefinitionFile>
|
||||||
|
</Link>
|
||||||
|
</ItemDefinitionGroup>
|
||||||
|
<ItemGroup>
|
||||||
|
<ClCompile Include="dllmain.cpp" />
|
||||||
|
<ClCompile Include="exports.cpp" />
|
||||||
|
<ClCompile Include="Console.cpp" />
|
||||||
|
<ClCompile Include="Memory.cpp" />
|
||||||
|
</ItemGroup>
|
||||||
|
<ItemGroup>
|
||||||
|
<ClInclude Include="exports.h" />
|
||||||
|
<ClInclude Include="Memory.h" />
|
||||||
|
<ClInclude Include="Console.h" />
|
||||||
|
</ItemGroup>
|
||||||
|
<ItemGroup>
|
||||||
|
<None Include="Exports.def" />
|
||||||
|
</ItemGroup>
|
||||||
|
<ItemGroup>
|
||||||
|
<MASM Include="version.asm" />
|
||||||
|
</ItemGroup>
|
||||||
|
<Import Project="$(VCTargetsPath)\Microsoft.Cpp.targets" />
|
||||||
|
<ImportGroup Label="ExtensionTargets">
|
||||||
|
<Import Project="$(VCTargetsPath)\BuildCustomizations\masm.targets" />
|
||||||
|
</ImportGroup>
|
||||||
|
</Project>
|
||||||
52
RSAPatch/RSAPatch.vcxproj.filters
Normal file
52
RSAPatch/RSAPatch.vcxproj.filters
Normal file
|
|
@ -0,0 +1,52 @@
|
||||||
|
<?xml version="1.0" encoding="utf-8"?>
|
||||||
|
<Project ToolsVersion="4.0" xmlns="http://schemas.microsoft.com/developer/msbuild/2003">
|
||||||
|
<ItemGroup>
|
||||||
|
<Filter Include="Source Files">
|
||||||
|
<UniqueIdentifier>{4FC737F1-C7A5-4376-A066-2A32D752A2FF}</UniqueIdentifier>
|
||||||
|
<Extensions>cpp;c;cc;cxx;c++;cppm;ixx;def;odl;idl;hpj;bat;asm;asmx</Extensions>
|
||||||
|
</Filter>
|
||||||
|
<Filter Include="Header Files">
|
||||||
|
<UniqueIdentifier>{93995380-89BD-4b04-88EB-625FBE52EBFB}</UniqueIdentifier>
|
||||||
|
<Extensions>h;hh;hpp;hxx;h++;hm;inl;inc;ipp;xsd</Extensions>
|
||||||
|
</Filter>
|
||||||
|
<Filter Include="Resource Files">
|
||||||
|
<UniqueIdentifier>{67DA6AB6-F800-4c08-8B7A-83BB121AAD01}</UniqueIdentifier>
|
||||||
|
<Extensions>rc;ico;cur;bmp;dlg;rc2;rct;bin;rgs;gif;jpg;jpeg;jpe;resx;tiff;tif;png;wav;mfcribbon-ms</Extensions>
|
||||||
|
</Filter>
|
||||||
|
</ItemGroup>
|
||||||
|
<ItemGroup>
|
||||||
|
<ClCompile Include="dllmain.cpp">
|
||||||
|
<Filter>Source Files</Filter>
|
||||||
|
</ClCompile>
|
||||||
|
<ClCompile Include="Console.cpp">
|
||||||
|
<Filter>Source Files</Filter>
|
||||||
|
</ClCompile>
|
||||||
|
<ClCompile Include="exports.cpp">
|
||||||
|
<Filter>Source Files</Filter>
|
||||||
|
</ClCompile>
|
||||||
|
<ClCompile Include="Memory.cpp">
|
||||||
|
<Filter>Source Files</Filter>
|
||||||
|
</ClCompile>
|
||||||
|
</ItemGroup>
|
||||||
|
<ItemGroup>
|
||||||
|
<ClInclude Include="Console.h">
|
||||||
|
<Filter>Header Files</Filter>
|
||||||
|
</ClInclude>
|
||||||
|
<ClInclude Include="exports.h">
|
||||||
|
<Filter>Header Files</Filter>
|
||||||
|
</ClInclude>
|
||||||
|
<ClInclude Include="Memory.h">
|
||||||
|
<Filter>Header Files</Filter>
|
||||||
|
</ClInclude>
|
||||||
|
</ItemGroup>
|
||||||
|
<ItemGroup>
|
||||||
|
<None Include="Exports.def">
|
||||||
|
<Filter>Source Files</Filter>
|
||||||
|
</None>
|
||||||
|
</ItemGroup>
|
||||||
|
<ItemGroup>
|
||||||
|
<MASM Include="version.asm">
|
||||||
|
<Filter>Source Files</Filter>
|
||||||
|
</MASM>
|
||||||
|
</ItemGroup>
|
||||||
|
</Project>
|
||||||
1059
RSAPatch/detours.h
Normal file
1059
RSAPatch/detours.h
Normal file
File diff suppressed because it is too large
Load diff
BIN
RSAPatch/detours.lib
Normal file
BIN
RSAPatch/detours.lib
Normal file
Binary file not shown.
141
RSAPatch/dllmain.cpp
Normal file
141
RSAPatch/dllmain.cpp
Normal file
|
|
@ -0,0 +1,141 @@
|
||||||
|
#include <Windows.h>
|
||||||
|
#include <winternl.h>
|
||||||
|
#include <intrin.h>
|
||||||
|
#include <fstream>
|
||||||
|
#include <filesystem>
|
||||||
|
#include <string>
|
||||||
|
#include "exports.h"
|
||||||
|
#include "Console.h"
|
||||||
|
#include "Memory.h"
|
||||||
|
|
||||||
|
#pragma comment(lib, "ntdll.lib")
|
||||||
|
|
||||||
|
typedef enum _SECTION_INFORMATION_CLASS {
|
||||||
|
SectionBasicInformation,
|
||||||
|
SectionImageInformation
|
||||||
|
} SECTION_INFORMATION_CLASS, * PSECTION_INFORMATION_CLASS;
|
||||||
|
EXTERN_C NTSTATUS __stdcall NtQuerySection(HANDLE SectionHandle, SECTION_INFORMATION_CLASS InformationClass, PVOID InformationBuffer, ULONG InformationBufferSize, PULONG ResultLength);
|
||||||
|
EXTERN_C NTSTATUS __stdcall NtProtectVirtualMemory(HANDLE ProcessHandle, PVOID* BaseAddress, PULONG NumberOfBytesToProtect, ULONG NewAccessProtection, PULONG OldAccessProtection);
|
||||||
|
EXTERN_C NTSTATUS __stdcall NtPulseEvent(HANDLE EventHandle, PULONG PreviousState);
|
||||||
|
|
||||||
|
void DisableVMP()
|
||||||
|
{
|
||||||
|
// restore hook at NtProtectVirtualMemory
|
||||||
|
auto ntdll = GetModuleHandleA("ntdll.dll");
|
||||||
|
if (ntdll == NULL) return;
|
||||||
|
|
||||||
|
bool linux = GetProcAddress(ntdll, "wine_get_version") != nullptr;
|
||||||
|
void* routine = linux ? (void*)NtPulseEvent : (void*)NtQuerySection;
|
||||||
|
DWORD old;
|
||||||
|
VirtualProtect(NtProtectVirtualMemory, 1, PAGE_EXECUTE_READWRITE, &old);
|
||||||
|
*(uintptr_t*)NtProtectVirtualMemory = *(uintptr_t*)routine & ~(0xFFui64 << 32) | (uintptr_t)(*(uint32_t*)((uintptr_t)routine + 4) - 1) << 32;
|
||||||
|
VirtualProtect(NtProtectVirtualMemory, 1, old, &old);
|
||||||
|
}
|
||||||
|
|
||||||
|
void DisableLogReport()
|
||||||
|
{
|
||||||
|
char szProcessPath[MAX_PATH]{};
|
||||||
|
GetModuleFileNameA(nullptr, szProcessPath, MAX_PATH);
|
||||||
|
|
||||||
|
auto path = std::filesystem::path(szProcessPath);
|
||||||
|
auto ProcessName = path.filename().string();
|
||||||
|
ProcessName = ProcessName.substr(0, ProcessName.find_last_of('.'));
|
||||||
|
|
||||||
|
auto Astrolabe = path.parent_path() / (ProcessName + "_Data\\Plugins\\Astrolabe.dll");
|
||||||
|
auto MiHoYoMTRSDK = path.parent_path() / (ProcessName + "_Data\\Plugins\\MiHoYoMTRSDK.dll");
|
||||||
|
|
||||||
|
// open exclusive access to these two dlls
|
||||||
|
// so they cannot be loaded
|
||||||
|
HANDLE hFile = CreateFileA(Astrolabe.string().c_str(), GENERIC_READ | GENERIC_WRITE, 0, nullptr, OPEN_EXISTING, FILE_ATTRIBUTE_NORMAL, nullptr);
|
||||||
|
hFile = CreateFileA(MiHoYoMTRSDK.string().c_str(), GENERIC_READ | GENERIC_WRITE, 0, nullptr, OPEN_EXISTING, FILE_ATTRIBUTE_NORMAL, nullptr);
|
||||||
|
}
|
||||||
|
|
||||||
|
DWORD __stdcall ThreadFunc(LPVOID p)
|
||||||
|
{
|
||||||
|
Console::Attach();
|
||||||
|
|
||||||
|
Console::Print("anime encryption patcher by xeondev\n\n\n");
|
||||||
|
Console::Print("waiting for anime software startup..");
|
||||||
|
|
||||||
|
auto pid = GetCurrentProcessId();
|
||||||
|
while (true)
|
||||||
|
{
|
||||||
|
// use EnumWindows to pinpoint the target window
|
||||||
|
// as there could be other window with the same class name
|
||||||
|
EnumWindows([](HWND hwnd, LPARAM lParam)->BOOL __stdcall {
|
||||||
|
|
||||||
|
DWORD wndpid = 0;
|
||||||
|
GetWindowThreadProcessId(hwnd, &wndpid);
|
||||||
|
|
||||||
|
char szWindowClass[256]{};
|
||||||
|
GetClassNameA(hwnd, szWindowClass, 256);
|
||||||
|
if (!strcmp(szWindowClass, "UnityWndClass") && wndpid == *(DWORD*)lParam)
|
||||||
|
{
|
||||||
|
*(DWORD*)lParam = 0;
|
||||||
|
return FALSE;
|
||||||
|
}
|
||||||
|
|
||||||
|
return TRUE;
|
||||||
|
|
||||||
|
}, (LPARAM)&pid);
|
||||||
|
|
||||||
|
if (!pid)
|
||||||
|
break;
|
||||||
|
|
||||||
|
Sleep(2000); // wait another 2 seconds and then re-check for window creation
|
||||||
|
Console::Print(".");
|
||||||
|
}
|
||||||
|
Console::Print("OK\n");
|
||||||
|
|
||||||
|
DisableVMP();
|
||||||
|
|
||||||
|
// RSA Signature verification bypass (HTTP)
|
||||||
|
uint8_t dontJmp[] = { 0x90, 0x90 };
|
||||||
|
uintptr_t afterRSAVerify = Memory::Scan("UserAssembly.dll", "48 83 F8 01 75 08 49 8B C7 E9 E7 00 00 00 4C 8B 0D 9F E6 AB");
|
||||||
|
Memory::WriteByteArray(afterRSAVerify + 4, dontJmp, 2);
|
||||||
|
|
||||||
|
// RSA Signature verification bypass (Seed)
|
||||||
|
uint8_t dontJmpInDecryptSeed[] = { 0x90, 0x90, 0x90, 0x90, 0x90, 0x90 };
|
||||||
|
uintptr_t afterRSAVerifyInDecryptSeed = Memory::Scan("UserAssembly.dll", "0F 85 EF 00 00 00 33 D2 49 8B CF E8 6B D2 6E 05 48 8B F8");
|
||||||
|
Memory::WriteByteArray(afterRSAVerifyInDecryptSeed, dontJmpInDecryptSeed, 6);
|
||||||
|
|
||||||
|
// hardcode SECOND mt19937 initialization seed to 1337
|
||||||
|
uint8_t setSeed[] = { 0xC7, 0xC3, 0x39, 0x05, 0x00, 0x00, 0x90 };
|
||||||
|
uintptr_t preMtInitCall = Memory::Scan("UserAssembly.dll", "8B D8 E9 00 00 00 00 E8 DC 4A B5 F2 48 8B C8 49");
|
||||||
|
Memory::WriteByteArray(preMtInitCall, setSeed, 7);
|
||||||
|
|
||||||
|
Console::Print("We're done here.\n");
|
||||||
|
return 0;
|
||||||
|
}
|
||||||
|
|
||||||
|
DWORD __stdcall DllMain(HINSTANCE hInstance, DWORD fdwReason, LPVOID lpReserved)
|
||||||
|
{
|
||||||
|
if (hInstance)
|
||||||
|
DisableThreadLibraryCalls(hInstance);
|
||||||
|
|
||||||
|
if (fdwReason == DLL_PROCESS_ATTACH)
|
||||||
|
{
|
||||||
|
if (HANDLE hThread = CreateThread(nullptr, 0, ThreadFunc, hInstance, 0, nullptr))
|
||||||
|
CloseHandle(hThread);
|
||||||
|
}
|
||||||
|
|
||||||
|
return TRUE;
|
||||||
|
}
|
||||||
|
|
||||||
|
bool EarlyInitDone = false;
|
||||||
|
|
||||||
|
// this runs way before dllmain
|
||||||
|
void __stdcall TlsCallback(PVOID hModule, DWORD fdwReason, PVOID pContext)
|
||||||
|
{
|
||||||
|
if (!EarlyInitDone)
|
||||||
|
{
|
||||||
|
DisableLogReport();
|
||||||
|
Exports::Load();
|
||||||
|
EarlyInitDone = true;
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
#pragma comment (linker, "/INCLUDE:_tls_used")
|
||||||
|
#pragma comment (linker, "/INCLUDE:tls_callback_func")
|
||||||
|
#pragma const_seg(".CRT$XLF")
|
||||||
|
EXTERN_C const PIMAGE_TLS_CALLBACK tls_callback_func = TlsCallback;
|
||||||
32
RSAPatch/exports.cpp
Normal file
32
RSAPatch/exports.cpp
Normal file
|
|
@ -0,0 +1,32 @@
|
||||||
|
#include "exports.h"
|
||||||
|
#include "Console.h"
|
||||||
|
|
||||||
|
FARPROC OriginalFuncs_version[17];
|
||||||
|
|
||||||
|
void Exports::Load()
|
||||||
|
{
|
||||||
|
char szSystemDirectory[MAX_PATH]{};
|
||||||
|
GetSystemDirectoryA(szSystemDirectory, MAX_PATH);
|
||||||
|
|
||||||
|
std::string OriginalPath = szSystemDirectory;
|
||||||
|
OriginalPath += "\\version.dll";
|
||||||
|
|
||||||
|
HMODULE version = LoadLibraryA(OriginalPath.c_str());
|
||||||
|
// load version.dll from system32
|
||||||
|
if (!version)
|
||||||
|
{
|
||||||
|
Console::Print("Failed to load version.dll from system32\n");
|
||||||
|
return;
|
||||||
|
}
|
||||||
|
|
||||||
|
// get addresses of original functions
|
||||||
|
for (int i = 0; i < 17; i++)
|
||||||
|
{
|
||||||
|
OriginalFuncs_version[i] = GetProcAddress(version, ExportNames_version[i].c_str());
|
||||||
|
if (!OriginalFuncs_version[i])
|
||||||
|
{
|
||||||
|
Console::Print("Failed to get address of %s\n", ExportNames_version[i].c_str());
|
||||||
|
return;
|
||||||
|
}
|
||||||
|
}
|
||||||
|
}
|
||||||
32
RSAPatch/exports.h
Normal file
32
RSAPatch/exports.h
Normal file
|
|
@ -0,0 +1,32 @@
|
||||||
|
#pragma once
|
||||||
|
#include <Windows.h>
|
||||||
|
#include <vector>
|
||||||
|
#include <string>
|
||||||
|
#include <filesystem>
|
||||||
|
|
||||||
|
extern "C" FARPROC OriginalFuncs_version[17];
|
||||||
|
|
||||||
|
inline std::vector<std::string> ExportNames_version = {
|
||||||
|
"GetFileVersionInfoA",
|
||||||
|
"GetFileVersionInfoByHandle",
|
||||||
|
"GetFileVersionInfoExA",
|
||||||
|
"GetFileVersionInfoExW",
|
||||||
|
"GetFileVersionInfoSizeA",
|
||||||
|
"GetFileVersionInfoSizeExA",
|
||||||
|
"GetFileVersionInfoSizeExW",
|
||||||
|
"GetFileVersionInfoSizeW",
|
||||||
|
"GetFileVersionInfoW",
|
||||||
|
"VerFindFileA",
|
||||||
|
"VerFindFileW",
|
||||||
|
"VerInstallFileA",
|
||||||
|
"VerInstallFileW",
|
||||||
|
"VerLanguageNameA",
|
||||||
|
"VerLanguageNameW",
|
||||||
|
"VerQueryValueA",
|
||||||
|
"VerQueryValueW"
|
||||||
|
};
|
||||||
|
|
||||||
|
namespace Exports
|
||||||
|
{
|
||||||
|
void Load();
|
||||||
|
}
|
||||||
112
RSAPatch/version.asm
Normal file
112
RSAPatch/version.asm
Normal file
|
|
@ -0,0 +1,112 @@
|
||||||
|
ifdef RAX
|
||||||
|
.code
|
||||||
|
extern OriginalFuncs_version:QWORD
|
||||||
|
GetFileVersionInfoA proc
|
||||||
|
jmp QWORD ptr OriginalFuncs_version[0 * 8]
|
||||||
|
GetFileVersionInfoA endp
|
||||||
|
GetFileVersionInfoByHandle proc
|
||||||
|
jmp QWORD ptr OriginalFuncs_version[1 * 8]
|
||||||
|
GetFileVersionInfoByHandle endp
|
||||||
|
GetFileVersionInfoExA proc
|
||||||
|
jmp QWORD ptr OriginalFuncs_version[2 * 8]
|
||||||
|
GetFileVersionInfoExA endp
|
||||||
|
GetFileVersionInfoExW proc
|
||||||
|
jmp QWORD ptr OriginalFuncs_version[3 * 8]
|
||||||
|
GetFileVersionInfoExW endp
|
||||||
|
GetFileVersionInfoSizeA proc
|
||||||
|
jmp QWORD ptr OriginalFuncs_version[4 * 8]
|
||||||
|
GetFileVersionInfoSizeA endp
|
||||||
|
GetFileVersionInfoSizeExA proc
|
||||||
|
jmp QWORD ptr OriginalFuncs_version[5 * 8]
|
||||||
|
GetFileVersionInfoSizeExA endp
|
||||||
|
GetFileVersionInfoSizeExW proc
|
||||||
|
jmp QWORD ptr OriginalFuncs_version[6 * 8]
|
||||||
|
GetFileVersionInfoSizeExW endp
|
||||||
|
GetFileVersionInfoSizeW proc
|
||||||
|
jmp QWORD ptr OriginalFuncs_version[7 * 8]
|
||||||
|
GetFileVersionInfoSizeW endp
|
||||||
|
GetFileVersionInfoW proc
|
||||||
|
jmp QWORD ptr OriginalFuncs_version[8 * 8]
|
||||||
|
GetFileVersionInfoW endp
|
||||||
|
VerFindFileA proc
|
||||||
|
jmp QWORD ptr OriginalFuncs_version[9 * 8]
|
||||||
|
VerFindFileA endp
|
||||||
|
VerFindFileW proc
|
||||||
|
jmp QWORD ptr OriginalFuncs_version[10 * 8]
|
||||||
|
VerFindFileW endp
|
||||||
|
VerInstallFileA proc
|
||||||
|
jmp QWORD ptr OriginalFuncs_version[11 * 8]
|
||||||
|
VerInstallFileA endp
|
||||||
|
VerInstallFileW proc
|
||||||
|
jmp QWORD ptr OriginalFuncs_version[12 * 8]
|
||||||
|
VerInstallFileW endp
|
||||||
|
VerLanguageNameA proc
|
||||||
|
jmp QWORD ptr OriginalFuncs_version[13 * 8]
|
||||||
|
VerLanguageNameA endp
|
||||||
|
VerLanguageNameW proc
|
||||||
|
jmp QWORD ptr OriginalFuncs_version[14 * 8]
|
||||||
|
VerLanguageNameW endp
|
||||||
|
VerQueryValueA proc
|
||||||
|
jmp QWORD ptr OriginalFuncs_version[15 * 8]
|
||||||
|
VerQueryValueA endp
|
||||||
|
VerQueryValueW proc
|
||||||
|
jmp QWORD ptr OriginalFuncs_version[16 * 8]
|
||||||
|
VerQueryValueW endp
|
||||||
|
else
|
||||||
|
.model flat, C
|
||||||
|
.stack 4096
|
||||||
|
.code
|
||||||
|
extern OriginalFuncs_version:DWORD
|
||||||
|
GetFileVersionInfoA proc
|
||||||
|
jmp DWORD ptr OriginalFuncs_version[0 * 4]
|
||||||
|
GetFileVersionInfoA endp
|
||||||
|
GetFileVersionInfoByHandle proc
|
||||||
|
jmp DWORD ptr OriginalFuncs_version[1 * 4]
|
||||||
|
GetFileVersionInfoByHandle endp
|
||||||
|
GetFileVersionInfoExA proc
|
||||||
|
jmp DWORD ptr OriginalFuncs_version[2 * 4]
|
||||||
|
GetFileVersionInfoExA endp
|
||||||
|
GetFileVersionInfoExW proc
|
||||||
|
jmp DWORD ptr OriginalFuncs_version[3 * 4]
|
||||||
|
GetFileVersionInfoExW endp
|
||||||
|
GetFileVersionInfoSizeA proc
|
||||||
|
jmp DWORD ptr OriginalFuncs_version[4 * 4]
|
||||||
|
GetFileVersionInfoSizeA endp
|
||||||
|
GetFileVersionInfoSizeExA proc
|
||||||
|
jmp DWORD ptr OriginalFuncs_version[5 * 4]
|
||||||
|
GetFileVersionInfoSizeExA endp
|
||||||
|
GetFileVersionInfoSizeExW proc
|
||||||
|
jmp DWORD ptr OriginalFuncs_version[6 * 4]
|
||||||
|
GetFileVersionInfoSizeExW endp
|
||||||
|
GetFileVersionInfoSizeW proc
|
||||||
|
jmp DWORD ptr OriginalFuncs_version[7 * 4]
|
||||||
|
GetFileVersionInfoSizeW endp
|
||||||
|
GetFileVersionInfoW proc
|
||||||
|
jmp DWORD ptr OriginalFuncs_version[8 * 4]
|
||||||
|
GetFileVersionInfoW endp
|
||||||
|
VerFindFileA proc
|
||||||
|
jmp DWORD ptr OriginalFuncs_version[9 * 4]
|
||||||
|
VerFindFileA endp
|
||||||
|
VerFindFileW proc
|
||||||
|
jmp DWORD ptr OriginalFuncs_version[10 * 4]
|
||||||
|
VerFindFileW endp
|
||||||
|
VerInstallFileA proc
|
||||||
|
jmp DWORD ptr OriginalFuncs_version[11 * 4]
|
||||||
|
VerInstallFileA endp
|
||||||
|
VerInstallFileW proc
|
||||||
|
jmp DWORD ptr OriginalFuncs_version[12 * 4]
|
||||||
|
VerInstallFileW endp
|
||||||
|
VerLanguageNameA proc
|
||||||
|
jmp DWORD ptr OriginalFuncs_version[13 * 4]
|
||||||
|
VerLanguageNameA endp
|
||||||
|
VerLanguageNameW proc
|
||||||
|
jmp DWORD ptr OriginalFuncs_version[14 * 4]
|
||||||
|
VerLanguageNameW endp
|
||||||
|
VerQueryValueA proc
|
||||||
|
jmp DWORD ptr OriginalFuncs_version[15 * 4]
|
||||||
|
VerQueryValueA endp
|
||||||
|
VerQueryValueW proc
|
||||||
|
jmp DWORD ptr OriginalFuncs_version[16 * 4]
|
||||||
|
VerQueryValueW endp
|
||||||
|
endif
|
||||||
|
end
|
||||||
Loading…
Reference in a new issue