Vichingo455/wufuc
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

delete loose files

Browse Source
This commit is contained in:
zeffy
2017-10-03 15:50:06 -07:00
parent bd15048101
commit 680efe9ba3
4 changed files with 5 additions and 91 deletions
Download Patch File Download Diff File Expand all files Collapse all files

20
wufuc/ntcstr.h
View File

@@ -1,20 +0,0 @@
#pragma once
#include <phnt_windows.h>
#define _countof(_Array) (sizeof(_Array) / sizeof(_Array[0]))
#define _max(a,b) (((a) > (b)) ? (a) : (b))
#define _min(a,b) (((a) < (b)) ? (a) : (b))
#define _MAX_PATH 260 // max. length of full pathname
#define _MAX_DRIVE 3 // max. length of drive component
#define _MAX_DIR 256 // max. length of path component
#define _MAX_FNAME 256 // max. length of file name component
#define _MAX_EXT 256 // max. length of extension component
typedef int(__cdecl *LPFN__WCSICMP_NTDLL)(const wchar_t *string1, const wchar_t *string2);
int _wcsicmp_Ntdll(
const wchar_t *string1,
const wchar_t *string2
);

35
wufuc/shimlib.c
View File

@@ -1,35 +0,0 @@
#include "shimlib.h"
#include "hooks.h"
#include <Windows.h>
PHOOKAPI g_pHookApiArray;
PHOOKAPI WINAPI GetHookAPIs(LPCSTR szCommandLine, LPCWSTR wszShimName, PDWORD pdwHookCount) {
g_pHookApiArray = calloc(2, sizeof(HOOKAPI));
if ( g_pHookApiArray ) {
g_pHookApiArray[0].LibraryName = "advapi32.dll";
g_pHookApiArray[0].FunctionName = "RegQueryValueExW";
g_pHookApiArray[0].ReplacementFunction = RegQueryValueExW_hook;
g_pHookApiArray[1].LibraryName = "kernel32.dll";
g_pHookApiArray[1].FunctionName = "LoadLibraryExW";
g_pHookApiArray[1].ReplacementFunction = LoadLibraryExW_hook;
*pdwHookCount = 2;
}
return NULL;
}
BOOL WINAPI NotifyShims(DWORD fdwReason, PLDR_DATA_TABLE_ENTRY pLdrEntry) {
switch ( fdwReason ) {
case SHIM_NOTIFY_ATTACH:
break;
case SHIM_NOTIFY_DETACH:
break;
case SHIM_NOTIFY_DLL_LOAD:
break;
case SHIM_NOTIFY_DLL_UNLOAD:
break;
}
return TRUE;
}

33
wufuc/shimlib.h
View File

@@ -1,33 +0,0 @@
#ifndef SHIM_H
#define SHIM_H
#pragma once
#define WIN32_NO_STATUS
#include <windows.h>
#undef WIN32_NO_STATUS
#include <winternl.h>
typedef struct tagHOOKAPI {
PCSTR LibraryName;
PCSTR FunctionName;
PVOID ReplacementFunction;
PVOID OriginalFunction;
PVOID Reserved[2];
} HOOKAPI, *PHOOKAPI;
#define SHIM_REASON_INIT 100
#define SHIM_REASON_DEINIT 101
#define SHIM_REASON_DLL_LOAD 102 /* Arg: PLDR_DATA_TABLE_ENTRY */
#define SHIM_REASON_DLL_UNLOAD 103 /* Arg: PLDR_DATA_TABLE_ENTRY */
#define SHIM_NOTIFY_ATTACH 1
#define SHIM_NOTIFY_DETACH 2
#define SHIM_NOTIFY_DLL_LOAD 3 /* Arg: PLDR_DATA_TABLE_ENTRY */
#define SHIM_NOTIFY_DLL_UNLOAD 4 /* Arg: PLDR_DATA_TABLE_ENTRY */
extern PHOOKAPI g_pHookApiArray;
PHOOKAPI WINAPI GetHookAPIs(LPCSTR szCommandLine, LPCWSTR wszShimName, PDWORD pdwHookCount);
BOOL WINAPI NotifyShims(DWORD fdwReason, PLDR_DATA_TABLE_ENTRY pLdrEntry);
#endif

8
wufuc/wufuc.vcxproj.filters
View File

@@ -66,12 +66,14 @@
<Filter>Source Files</Filter>
</ClCompile>
</ItemGroup>
<ItemGroup>
<None Include="wufuc.rch" />
</ItemGroup>
<ItemGroup>
<ResourceCompile Include="wufuc.rc">
<Filter>Resource Files</Filter>
</ResourceCompile>
</ItemGroup>
<ItemGroup>
<None Include="wufuc.rch">
<Filter>Resource Files</Filter>
</None>
</ItemGroup>
</Project>