#pragma comment(lib, "detours.lib")
#define _CRT_SECURE_NO_WARNINGS
#include <Windows.h>
#include <wincrypt.h>
#include <stdlib.h>
#include <detours.h>
#include <direct.h>
#include <io.h>
#include<stdio.h>
using fntCertVerifyTimeValidity = decltype(CertVerifyTimeValidity);
using fntGetLocalTime = decltype(GetLocalTime);
int year = -1;
int month = -1;
int day = -1;
int dayofweek = -1;
int hour = -1;
int minute = -1;
int second = -1;
int milliseconds = -1;
fntCertVerifyTimeValidity *pOldCertVerifyTimeValidity = NULL;
fntGetLocalTime *pOldGetLocalTime = NULL;
LONG WINAPI NewCertVerifyTimeValidity(
LPFILETIME pTimeToVerify,
PCERT_INFO pCertInfo
)
{
return 0;
}
void WINAPI NewGetLocalTime(
LPSYSTEMTIME lpSystemTime
)
{
pOldGetLocalTime(lpSystemTime);
if (year >= 0)
lpSystemTime->wYear = year;
if (month >= 0)
lpSystemTime->wMonth = month;
if (day >= 0)
lpSystemTime->wDay = day;
if (dayofweek >= 0)
lpSystemTime->wDayOfWeek = dayofweek;
if (hour >= 0)
lpSystemTime->wHour = hour;
if (minute >= 0)
lpSystemTime->wMinute = minute;
if (second >= 0)
lpSystemTime->wSecond = second;
if (milliseconds >= 0)
lpSystemTime->wMilliseconds = milliseconds;
}
BOOL WINAPI DllMain(
_In_ HINSTANCE hinstDLL,
_In_ DWORD fdwReason,
_In_ LPVOID lpvReserved)
{
if (fdwReason == DLL_PROCESS_ATTACH)
{
//Get config file
char buf[260];
char* p = strstr(GetCommandLineA(), "-config ");
if (p) {
strcat_s(buf, p);
}
else {
_getcwd(buf, sizeof(buf));
strcat_s(buf, "\\hook.ini");
}
year = GetPrivateProfileInt("Time", "Year", -1, buf);
month = GetPrivateProfileInt("Time", "Month", -1, buf);
day = GetPrivateProfileInt("Time", "Day", -1, buf);
dayofweek = GetPrivateProfileInt("Time", "DayOfWeek", -1, buf);
hour = GetPrivateProfileInt("Time", "Hour", -1, buf);
minute = GetPrivateProfileInt("Time", "Minute", -1, buf);
second = GetPrivateProfileInt("Time", "Second", -1, buf);
milliseconds = GetPrivateProfileInt("Time", "Milliseconds", -1, buf);
memset(buf, 0, sizeof(buf));
strcpy_s(buf, getenv("APPDATA"));
strcat_s(buf, "\\TrustAsia\\DSignTool\\hook");
//Check is first run
if (_access(buf, 0)) {
if (MessageBoxA(NULL, "欢迎使用JemmyLoveJenny修改版的数字签名工具\r\n初次使用时建议您先阅读README了解修改版的变化\r\n是否打开README？", "欢迎使用", MB_YESNO) == IDYES) {
memset(buf, 0, sizeof(buf));
_getcwd(buf, sizeof(buf));
strcat_s(buf, "\\README.txt");
if (!_access(buf, 0)) {
char buf2[260];
strcpy_s(buf2, "notepad.exe \"");
strcat_s(buf2, buf);
strcat_s(buf2, "\"");
WinExec(buf2, 1);
}
else {
strcat_s(buf, " 不存在");
MessageBoxA(NULL, buf, "文件不存在", MB_OK | MB_ICONERROR);
}
}
memset(buf, 0, sizeof(buf));
strcpy_s(buf, getenv("APPDATA"));
strcat_s(buf, "\\TrustAsia\\DSignTool\\hook");
FILE *fp;
fp = fopen(buf, "w+");
fclose(fp);
}
pOldCertVerifyTimeValidity = (fntCertVerifyTimeValidity *)GetProcAddress(LoadLibraryW(L"crypt32.dll"), "CertVerifyTimeValidity");
pOldGetLocalTime = (fntGetLocalTime *)GetProcAddress(LoadLibraryW(L"kernel32.dll"), "GetLocalTime");
DetourTransactionBegin();
DetourAttach(&(PVOID&)pOldCertVerifyTimeValidity, NewCertVerifyTimeValidity);
DetourAttach(&(PVOID&)pOldGetLocalTime, NewGetLocalTime);
DetourTransactionCommit();
}
return 1;
}
extern "C" __declspec(dllexport) int attach()
{
return 0;
}
[复制链接]
来自 #
|
发表于 2019-3-1 20:55
|楼主
发表于 2019-2-24 03:01
收藏
淘帖
有用
分享到朋友圈
