mirror of
https://github.com/k1ng0fn0th1ng/reflectra
synced 2026-06-21 13:55:04 +00:00
john
47 lines
1.1 KiB
RPMSpec
47 lines
1.1 KiB
RPMSpec
x64:
|
|
load %path <> "pico/pico.x64.o"
|
|
make object +optimize +disco +mutate
|
|
|
|
load %path <> "evasion/spoof.x64.o"
|
|
merge
|
|
|
|
load %path <> "evasion/hooks.x64.o"
|
|
merge
|
|
|
|
load %path <> "evasion/syscalls.x64.o"
|
|
merge
|
|
|
|
load %path <> "evasion/mask.x64.o"
|
|
merge
|
|
|
|
load %path <> "utils/utils.x64.o"
|
|
merge
|
|
|
|
load %path <> "asm/draugr.x64.bin"
|
|
linkfunc "draugr_stub"
|
|
|
|
generate $KEY 128
|
|
patch "XOR_KEY" $KEY
|
|
|
|
# DLL Hooks
|
|
addhook "KERNEL32$VirtualAlloc" "_VirtualAlloc"
|
|
addhook "KERNEL32$VirtualProtect" "_VirtualProtect"
|
|
addhook "KERNEL32$VirtualFree" "_VirtualFree"
|
|
addhook "KERNEL32$Sleep" "_Sleep"
|
|
|
|
# Needed to free the loader
|
|
attach "KERNEL32$VirtualFree" "_VirtualFree"
|
|
# Needed to hook VirtualProtect in mask.c
|
|
attach "KERNEL32$VirtualProtect" "_VirtualProtect"
|
|
|
|
exportfunc "FreeLoader" "__tag_FreeLoader"
|
|
exportfunc "SetupHooks" "__tag_SetupHooks"
|
|
exportfunc "SetupMemory" "__tag_SetupMemory"
|
|
|
|
mergelib %root <> "/libtcg/libtcg.x64.zip"
|
|
|
|
pack $targetFunction "a" "GetVersions"
|
|
patch "TARGET_FUNCTION" $targetFunction
|
|
|
|
export
|