-
Notifications
You must be signed in to change notification settings - Fork 1
/
Copy pathdllmain.c
95 lines (75 loc) · 2.52 KB
/
dllmain.c
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
#define _CRT_SECURE_NO_WARNINGS
#define WIN32_LEAN_AND_MEAN
#include <stdio.h>
#include <stdlib.h>
#include <Windows.h>
#pragma comment(lib, "Version")
int (__stdcall *O_AIL_open_stream)(void *, char *, int);
int __stdcall H_AIL_open_stream(void *ptr, char *stream, int arg3)
{
char szPath[MAX_PATH];
char *temp;
int ret;
char *basePath = (char *)0x3CFA788;
temp = strrchr(basePath, '/');
sprintf(szPath, "%s%s", temp ? temp + 1 : basePath, stream + 5);
if (ret = O_AIL_open_stream(ptr, szPath, arg3)) return ret;
return O_AIL_open_stream(ptr, stream, arg3);
}
BOOL WINAPI DllMain(HINSTANCE hinstDLL, DWORD fdwReason, LPVOID lpvReserved)
{
DWORD_PTR dwPatchBase;
DWORD dwOldProtect;
if (fdwReason == DLL_PROCESS_ATTACH)
{
char szPath[MAX_PATH];
DWORD dwSize;
DWORD dwHandle;
void *pVersionInfo;
char *pStringFileInfoValue;
UINT fileInfoLen;
DisableThreadLibraryCalls(hinstDLL);
GetModuleFileName(NULL, szPath, sizeof(szPath));
if (!(dwSize = GetFileVersionInfoSize(szPath, &dwHandle)))
{
goto fail;
}
if (!(pVersionInfo = malloc(dwSize)))
{
goto fail;
}
if (!GetFileVersionInfo(szPath, dwHandle, dwSize, pVersionInfo)
|| !VerQueryValue(pVersionInfo, "\\StringFileInfo\\040904b0\\FileDescription", (LPVOID *)&pStringFileInfoValue, &fileInfoLen)
|| strcmp(pStringFileInfoValue, "Half-Life Launcher")
|| !VerQueryValue(pVersionInfo, "\\StringFileInfo\\040904b0\\FileVersion", (LPVOID *)&pStringFileInfoValue, &fileInfoLen)
|| strcmp(pStringFileInfoValue, "1, 1, 1, 0"))
{
free(pVersionInfo);
fail: return FALSE;
}
free(pVersionInfo);
dwPatchBase = 0x404541;
if (*(BYTE *)dwPatchBase == 27)
{
VirtualProtect((LPVOID)dwPatchBase, sizeof(BYTE), PAGE_EXECUTE_READWRITE, &dwOldProtect);
*(BYTE *)dwPatchBase = 28;
VirtualProtect((LPVOID)dwPatchBase, sizeof(BYTE), dwOldProtect, &dwOldProtect);
}
dwPatchBase = 0x4AD7E8;
VirtualProtect((LPVOID)dwPatchBase, sizeof(DWORD_PTR), PAGE_READWRITE, &dwOldProtect);
(DWORD_PTR)O_AIL_open_stream = *(DWORD_PTR *)dwPatchBase;
*(DWORD_PTR *)dwPatchBase = (DWORD_PTR)H_AIL_open_stream;
VirtualProtect((LPVOID)dwPatchBase, sizeof(DWORD_PTR), dwOldProtect, &dwOldProtect);
}
else if (fdwReason == DLL_PROCESS_DETACH)
{
if (O_AIL_open_stream)
{
dwPatchBase = 0x4AD7E8;
VirtualProtect((LPVOID)dwPatchBase, sizeof(DWORD_PTR), PAGE_READWRITE, &dwOldProtect);
*(DWORD_PTR *)dwPatchBase = (DWORD_PTR)O_AIL_open_stream;
VirtualProtect((LPVOID)dwPatchBase, sizeof(DWORD_PTR), dwOldProtect, &dwOldProtect);
}
}
return TRUE;
}