The byeintegrity-lite from azagarampur

byeintegrity-lite's People

Contributors

Stargazers

Watchers

byeintegrity-lite's Issues

N/A

How can I merge my new dynamic signature locater with this?

I made a dynamic function location finder which does away with the need for signatures like in like line 78 of the c++ file (first use of UserAssocSetInternal). This returns the same memory address as your way does but I do not know how to implement my new function into your project, how would you recommend i do it?

My code:

#include <windows.h>
#include <stdio.h>
#include <dbghelp.h>
#include <iostream>
#pragma comment(lib , "dbghelp.lib")

HMODULE dllLocation;
int funcLocation;
int finalLocation;

HANDLE hProcess;

BOOL CALLBACK EnumSymProc(PSYMBOL_INFO pSymInfo, ULONG, PVOID UserContext) {
    size_t maxcmplen = strlen((PCHAR)UserContext);
    if (maxcmplen == pSymInfo->NameLen) {
        if ((strncmp(pSymInfo->Name, (PCHAR)UserContext, pSymInfo->NameLen)) == 0) {
            funcLocation = pSymInfo->Address;
        }
    }
    return TRUE;
}

void main(int argc, char* argv[]) {
    char pdbFileName[] = "SystemSettings.Handlers.pdb";
    char functionName[] = "SetUserAssoc";

    LoadLibraryExW(L"SystemSettings.Handlers.dll", nullptr, LOAD_LIBRARY_SEARCH_SYSTEM32);
    dllLocation = GetModuleHandle(L"SystemSettings.Handlers.dll");

    hProcess = GetCurrentProcess();
    SymInitialize(hProcess, NULL, FALSE);
    DWORD64 BaseOfDll = SymLoadModuleEx(hProcess, NULL, pdbFileName, NULL,
        0x400000, 0x20000, NULL, 0);
    SymEnumSymbols(hProcess, BaseOfDll, "*!*", EnumSymProc, functionName);
    SymCleanup(hProcess);


    std::wcout << std::hex << reinterpret_cast<uintptr_t>(dllLocation) + funcLocation << std::endl;
}

Example (Yours on top, mine below):

Also the pdb file needed for this (SystemSettings.Handlers.pdb) can be downloaded via https://github.com/rajkumar-rangaraj/PDB-Downloader/releases/download/v1.0/PDBDownloader.exe and loading SystemSettings.Handlers.dll as the input file