admin/nickswink-Crystal-Kit-Xenon
1
0
Fork 0
mirror of https://github.com/nickswink/Crystal-Kit-Xenon synced 2026-06-21 14:02:19 +00:00
Code Issues Packages Projects Releases Wiki Activity

update sleep mask

Browse Source
This commit is contained in:
Rasta Mouse
2025-12-30 13:22:28 +00:00
parent c0f5156e3b
commit 57cf743947
8 changed files with 145 additions and 149 deletions
Download Patch File Download Diff File Expand all files Collapse all files
loader/pico.spec
+57 -55
View File
@@ -2,69 +2,71 @@ x64:
load "bin/pico.x64.o"
make object +disco
# merge the hook functions
load "bin/hooks.x64.o"
merge
# merge the hook functions
load "bin/hooks.x64.o"
merge
# merge the call stack spoofing
load "bin/spoof.x64.o"
merge
# merge the call stack spoofing
load "bin/spoof.x64.o"
merge
# merge the asm stub
load "bin/draugr.x64.bin"
linkfunc "draugr_stub"
# merge the asm stub
load "bin/draugr.x64.bin"
linkfunc "draugr_stub"
# merge mask
load "bin/mask.x64.o"
merge
# merge mask
load "bin/mask.x64.o"
merge
# generate and patch
# in a random key
generate $KEY 128
patch "xorkey" $KEY
# generate and patch in a random key
generate $KEY 128
patch "xorkey" $KEY
# merge cfg code
load "bin/cfg.x64.o"
merge
# merge cfg code
load "bin/cfg.x64.o"
merge
# merge cleanup
load "bin/cleanup.x64.o"
merge
# merge cleanup
load "bin/cleanup.x64.o"
merge
# export setup_hooks and setup_memory
exportfunc "setup_hooks" "__tag_setup_hooks"
exportfunc "setup_memory" "__tag_setup_memory"
# export setup_hooks and setup_memory
exportfunc "setup_hooks" "__tag_setup_hooks"
exportfunc "setup_memory" "__tag_setup_memory"
# hook functions in the DLL
addhook "WININET$InternetOpenA" "_InternetOpenA"
addhook "WININET$InternetConnectA" "_InternetConnectA"
addhook "KERNEL32$CloseHandle" "_CloseHandle"
addhook "KERNEL32$CreateFileMappingA" "_CreateFileMappingA"
addhook "KERNEL32$CreateProcessA" "_CreateProcessA"
addhook "KERNEL32$CreateRemoteThread" "_CreateRemoteThread"
addhook "KERNEL32$CreateThread" "_CreateThread"
addhook "KERNEL32$DuplicateHandle" "_DuplicateHandle"
addhook "KERNEL32$ExitThread" "_ExitThread"
addhook "KERNEL32$GetProcAddress" "_GetProcAddress"
addhook "KERNEL32$GetThreadContext" "_GetThreadContext"
addhook "KERNEL32$LoadLibraryA" "_LoadLibraryA"
addhook "KERNEL32$MapViewOfFile" "_MapViewOfFile"
addhook "KERNEL32$OpenProcess" "_OpenProcess"
addhook "KERNEL32$OpenThread" "_OpenThread"
addhook "KERNEL32$ReadProcessMemory" "_ReadProcessMemory"
addhook "KERNEL32$ResumeThread" "_ResumeThread"
addhook "KERNEL32$SetThreadContext" "_SetThreadContext"
addhook "KERNEL32$Sleep" "_Sleep"
addhook "KERNEL32$UnmapViewOfFile" "_UnmapViewOfFile"
addhook "KERNEL32$VirtualAlloc" "_VirtualAlloc"
addhook "KERNEL32$VirtualAllocEx" "_VirtualAllocEx"
addhook "KERNEL32$VirtualFree" "_VirtualFree"
addhook "KERNEL32$VirtualProtect" "_VirtualProtect"
addhook "KERNEL32$VirtualProtectEx" "_VirtualProtectEx"
addhook "KERNEL32$VirtualQuery" "_VirtualQuery"
addhook "KERNEL32$WriteProcessMemory" "_WriteProcessMemory"
addhook "OLE32$CoCreateInstance" "_CoCreateInstance"
# hook functions in the DLL
addhook "WININET$InternetOpenA" "_InternetOpenA"
addhook "WININET$InternetConnectA" "_InternetConnectA"
addhook "KERNEL32$CloseHandle" "_CloseHandle"
addhook "KERNEL32$CreateFileMappingA" "_CreateFileMappingA"
addhook "KERNEL32$CreateProcessA" "_CreateProcessA"
addhook "KERNEL32$CreateRemoteThread" "_CreateRemoteThread"
addhook "KERNEL32$CreateThread" "_CreateThread"
addhook "KERNEL32$DuplicateHandle" "_DuplicateHandle"
addhook "KERNEL32$ExitThread" "_ExitThread"
addhook "KERNEL32$GetProcAddress" "_GetProcAddress"
addhook "KERNEL32$GetThreadContext" "_GetThreadContext"
addhook "KERNEL32$LoadLibraryA" "_LoadLibraryA"
addhook "KERNEL32$MapViewOfFile" "_MapViewOfFile"
addhook "KERNEL32$OpenProcess" "_OpenProcess"
addhook "KERNEL32$OpenThread" "_OpenThread"
addhook "KERNEL32$ReadProcessMemory" "_ReadProcessMemory"
addhook "KERNEL32$ResumeThread" "_ResumeThread"
addhook "KERNEL32$SetThreadContext" "_SetThreadContext"
addhook "KERNEL32$Sleep" "_Sleep"
addhook "KERNEL32$UnmapViewOfFile" "_UnmapViewOfFile"
addhook "KERNEL32$VirtualAlloc" "_VirtualAlloc"
addhook "KERNEL32$VirtualAllocEx" "_VirtualAllocEx"
addhook "KERNEL32$VirtualFree" "_VirtualFree"
addhook "KERNEL32$VirtualProtect" "_VirtualProtect"
addhook "KERNEL32$VirtualProtectEx" "_VirtualProtectEx"
addhook "KERNEL32$VirtualQuery" "_VirtualQuery"
addhook "KERNEL32$WriteProcessMemory" "_WriteProcessMemory"
addhook "OLE32$CoCreateInstance" "_CoCreateInstance"
mergelib "../libtcg.x64.zip"
# hook functions in pico
attach "KERNEL32$VirtualProtect" "_VirtualProtect" # this is needed to hook VirtualProtect in mask.c
mergelib "../libtcg.x64.zip"
export
loader/src/cleanup.c
-1
View File
@@ -11,7 +11,6 @@ DECLSPEC_IMPORT LPVOID WINAPI KERNEL32$HeapAlloc ( HANDLE, DWORD, SI
DECLSPEC_IMPORT VOID WINAPI KERNEL32$RtlCaptureContext ( PCONTEXT );
DECLSPEC_IMPORT VOID WINAPI KERNEL32$Sleep ( DWORD );
DECLSPEC_IMPORT BOOL WINAPI KERNEL32$VirtualFree ( LPVOID, SIZE_T, DWORD );
DECLSPEC_IMPORT ULONG NTAPI NTDLL$NtContinue ( CONTEXT *, BOOLEAN );
#define memcpy(x, y, z) __movsb ( ( unsigned char * ) x, ( unsigned char * ) y, z );
loader/src/mask.c
-2
View File
@@ -1,8 +1,6 @@
#include <windows.h>
#include "memory.h"
#include "spoof.h"
DECLSPEC_IMPORT VOID WINAPI KERNEL32$Sleep ( DWORD );
DECLSPEC_IMPORT BOOL WINAPI KERNEL32$VirtualProtect ( LPVOID, SIZE_T, DWORD, PDWORD );
char xorkey [ 128 ] = { 1 };
local-loader/loader.spec
+4 -5
View File
@@ -21,11 +21,10 @@ x64:
linkfunc "draugr_stub"
# hook functions that the loader uses
attach "KERNEL32$LoadLibraryA" "_LoadLibraryA"
attach "KERNEL32$VirtualAlloc" "_VirtualAlloc"
attach "KERNEL32$VirtualProtect" "_VirtualProtect"
attach "KERNEL32$VirtualFree" "_VirtualFree"
attach "KERNEL32$LoadLibraryA" "_LoadLibraryA"
attach "KERNEL32$VirtualAlloc" "_VirtualAlloc"
attach "KERNEL32$VirtualProtect" "_VirtualProtect"
attach "KERNEL32$VirtualFree" "_VirtualFree"
preserve "KERNEL32$LoadLibraryA" "init_frame_info"
# mask & link the dll
local-loader/pico.spec
+57 -54
View File
@@ -2,68 +2,71 @@ x64:
load "bin/pico.x64.o"
make object +disco
# merge the hook functions
load "bin/hooks.x64.o"
merge
# merge the hook functions
load "bin/hooks.x64.o"
merge
# merge the call stack spoofing
load "bin/spoof.x64.o"
merge
# merge the call stack spoofing
load "bin/spoof.x64.o"
merge
# merge the asm stub
load "bin/draugr.x64.bin"
linkfunc "draugr_stub"
# merge the asm stub
load "bin/draugr.x64.bin"
linkfunc "draugr_stub"
# merge mask
load "bin/mask.x64.o"
merge
# merge mask
load "bin/mask.x64.o"
merge
# generate and patch
# in a random key
generate $KEY 128
patch "xorkey" $KEY
# generate and patch in a random key
generate $KEY 128
patch "xorkey" $KEY
# merge cfg code
load "bin/cfg.x64.o"
merge
# merge cfg code
load "bin/cfg.x64.o"
merge
# merge cleanup
load "bin/cleanup.x64.o"
merge
# merge cleanup
load "bin/cleanup.x64.o"
merge
# export setup_hooks and setup_memory
exportfunc "setup_hooks" "__tag_setup_hooks"
exportfunc "setup_memory" "__tag_setup_memory"
# export setup_hooks and setup_memory
exportfunc "setup_hooks" "__tag_setup_hooks"
exportfunc "setup_memory" "__tag_setup_memory"
# hook functions in the DLL
addhook "WININET$InternetOpenA" "_InternetOpenA"
addhook "WININET$InternetConnectA" "_InternetConnectA"
addhook "KERNEL32$CloseHandle" "_CloseHandle"
addhook "KERNEL32$CreateFileMappingA" "_CreateFileMappingA"
addhook "KERNEL32$CreateProcessA" "_CreateProcessA"
addhook "KERNEL32$CreateRemoteThread" "_CreateRemoteThread"
addhook "KERNEL32$CreateThread" "_CreateThread"
addhook "KERNEL32$DuplicateHandle" "_DuplicateHandle"
addhook "KERNEL32$ExitThread" "_ExitThread"
addhook "KERNEL32$GetThreadContext" "_GetThreadContext"
addhook "KERNEL32$LoadLibraryA" "_LoadLibraryA"
addhook "KERNEL32$MapViewOfFile" "_MapViewOfFile"
addhook "KERNEL32$OpenProcess" "_OpenProcess"
addhook "KERNEL32$OpenThread" "_OpenThread"
addhook "KERNEL32$ReadProcessMemory" "_ReadProcessMemory"
addhook "KERNEL32$ResumeThread" "_ResumeThread"
addhook "KERNEL32$SetThreadContext" "_SetThreadContext"
addhook "KERNEL32$Sleep" "_Sleep"
addhook "KERNEL32$UnmapViewOfFile" "_UnmapViewOfFile"
addhook "KERNEL32$VirtualAlloc" "_VirtualAlloc"
addhook "KERNEL32$VirtualAllocEx" "_VirtualAllocEx"
addhook "KERNEL32$VirtualFree" "_VirtualFree"
addhook "KERNEL32$VirtualProtect" "_VirtualProtect"
addhook "KERNEL32$VirtualProtectEx" "_VirtualProtectEx"
addhook "KERNEL32$VirtualQuery" "_VirtualQuery"
addhook "KERNEL32$WriteProcessMemory" "_WriteProcessMemory"
addhook "OLE32$CoCreateInstance" "_CoCreateInstance"
# hook functions in the DLL
addhook "WININET$InternetOpenA" "_InternetOpenA"
addhook "WININET$InternetConnectA" "_InternetConnectA"
addhook "KERNEL32$CloseHandle" "_CloseHandle"
addhook "KERNEL32$CreateFileMappingA" "_CreateFileMappingA"
addhook "KERNEL32$CreateProcessA" "_CreateProcessA"
addhook "KERNEL32$CreateRemoteThread" "_CreateRemoteThread"
addhook "KERNEL32$CreateThread" "_CreateThread"
addhook "KERNEL32$DuplicateHandle" "_DuplicateHandle"
addhook "KERNEL32$ExitThread" "_ExitThread"
addhook "KERNEL32$GetProcAddress" "_GetProcAddress"
addhook "KERNEL32$GetThreadContext" "_GetThreadContext"
addhook "KERNEL32$LoadLibraryA" "_LoadLibraryA"
addhook "KERNEL32$MapViewOfFile" "_MapViewOfFile"
addhook "KERNEL32$OpenProcess" "_OpenProcess"
addhook "KERNEL32$OpenThread" "_OpenThread"
addhook "KERNEL32$ReadProcessMemory" "_ReadProcessMemory"
addhook "KERNEL32$ResumeThread" "_ResumeThread"
addhook "KERNEL32$SetThreadContext" "_SetThreadContext"
addhook "KERNEL32$Sleep" "_Sleep"
addhook "KERNEL32$UnmapViewOfFile" "_UnmapViewOfFile"
addhook "KERNEL32$VirtualAlloc" "_VirtualAlloc"
addhook "KERNEL32$VirtualAllocEx" "_VirtualAllocEx"
addhook "KERNEL32$VirtualFree" "_VirtualFree"
addhook "KERNEL32$VirtualProtect" "_VirtualProtect"
addhook "KERNEL32$VirtualProtectEx" "_VirtualProtectEx"
addhook "KERNEL32$VirtualQuery" "_VirtualQuery"
addhook "KERNEL32$WriteProcessMemory" "_WriteProcessMemory"
addhook "OLE32$CoCreateInstance" "_CoCreateInstance"
mergelib "../libtcg.x64.zip"
# hook functions in pico
attach "KERNEL32$VirtualProtect" "_VirtualProtect" # this is needed to hook VirtualProtect in mask.c
mergelib "../libtcg.x64.zip"
export
postex-loader/loader.spec
+4 -5
View File
@@ -23,11 +23,10 @@ x64:
link "draugr_stub"
# hook functions that the loader uses
attach "KERNEL32$LoadLibraryA" "_LoadLibraryA"
attach "KERNEL32$VirtualAlloc" "_VirtualAlloc"
attach "KERNEL32$VirtualProtect" "_VirtualProtect"
attach "KERNEL32$VirtualFree" "_VirtualFree"
attach "KERNEL32$LoadLibraryA" "_LoadLibraryA"
attach "KERNEL32$VirtualAlloc" "_VirtualAlloc"
attach "KERNEL32$VirtualProtect" "_VirtualProtect"
attach "KERNEL32$VirtualFree" "_VirtualFree"
preserve "KERNEL32$LoadLibraryA" "init_frame_info"
# mask & link the dll
postex-loader/pico.spec
+23 -22
View File
@@ -2,34 +2,35 @@ x64:
load "bin/pico.x64.o"
make object +disco
# merge the hook functions
load "bin/hooks.x64.o"
merge
# merge the hook functions
load "bin/hooks.x64.o"
merge
# merge the call stack spoofing
load "bin/spoof.x64.o"
merge
# merge the call stack spoofing
load "bin/spoof.x64.o"
merge
# merge the asm stub
load "bin/draugr.x64.bin"
linkfunc "draugr_stub"
# merge the asm stub
load "bin/draugr.x64.bin"
linkfunc "draugr_stub"
# merge cfg code
load "bin/cfg.x64.o"
merge
# merge cfg code
load "bin/cfg.x64.o"
merge
# merge cleanup
load "bin/cleanup.x64.o"
merge
# merge cleanup
load "bin/cleanup.x64.o"
merge
# export setup_hooks and setup_memory
exportfunc "setup_hooks" "__tag_setup_hooks"
exportfunc "setup_memory" "__tag_setup_memory"
# export setup_hooks and setup_memory
exportfunc "setup_hooks" "__tag_setup_hooks"
exportfunc "setup_memory" "__tag_setup_memory"
# hook functions in the DLL
addhook "KERNEL32$LoadLibraryW" "_LoadLibraryW"
addhook "KERNEL32$ExitThread" "_ExitThread"
# hook functions in the DLL
addhook "KERNEL32$GetProcAddress" "_GetProcAddress"
addhook "KERNEL32$LoadLibraryW" "_LoadLibraryW"
addhook "KERNEL32$ExitThread" "_ExitThread"
mergelib "../libtcg.x64.zip"
mergelib "../libtcg.x64.zip"
export
postex-loader/src/cleanup.c
-5
View File
@@ -1,7 +1,6 @@
#include <windows.h>
#include "memory.h"
#include "cfg.h"
#include "spoof.h"
#include "tcg.h"
DECLSPEC_IMPORT HANDLE WINAPI KERNEL32$CreateTimerQueue ( );
@@ -12,7 +11,6 @@ DECLSPEC_IMPORT LPVOID WINAPI KERNEL32$HeapAlloc ( HANDLE, DWORD, SI
DECLSPEC_IMPORT VOID WINAPI KERNEL32$RtlCaptureContext ( PCONTEXT );
DECLSPEC_IMPORT VOID WINAPI KERNEL32$Sleep ( DWORD );
DECLSPEC_IMPORT BOOL WINAPI KERNEL32$VirtualFree ( LPVOID, SIZE_T, DWORD );
DECLSPEC_IMPORT ULONG NTAPI NTDLL$NtContinue ( CONTEXT *, BOOLEAN );
#define memcpy(x, y, z) __movsb ( ( unsigned char * ) x, ( unsigned char * ) y, z );
@@ -81,9 +79,6 @@ void cleanup_memory ( MEMORY_LAYOUT * memory )
ctx_free[ 1 ].Rdx = ( DWORD64 ) ( 0 );
ctx_free[ 1 ].R8 = ( DWORD64 ) ( MEM_RELEASE );
dprintf("dll @ 0x%p\n", memory->Dll.BaseAddress);
dprintf("pico @ 0x%p\n", memory->Pico.BaseAddress);
/* give a decent delay so ExitThread has time to be called */
KERNEL32$CreateTimerQueueTimer ( &timer, timer_queue, ( WAITORTIMERCALLBACK ) ( NTDLL$NtContinue ), &ctx_free [ 0 ], 500, 0, WT_EXECUTEINTIMERTHREAD );
KERNEL32$CreateTimerQueueTimer ( &timer, timer_queue, ( WAITORTIMERCALLBACK ) ( NTDLL$NtContinue ), &ctx_free [ 1 ], 500, 0, WT_EXECUTEINTIMERTHREAD );