Skip to content

wand ehanced - #246

Open
macdeeakmal010-jpg wants to merge 2 commits into
k1tbyte:masterfrom
macdeeakmal010-jpg:master
Open

wand ehanced#246
macdeeakmal010-jpg wants to merge 2 commits into
k1tbyte:masterfrom
macdeeakmal010-jpg:master

Conversation

@macdeeakmal010-jpg

Copy link
Copy Markdown

No description provided.

gorlock777 and others added 2 commits August 27, 2026 19:43
… Wand 12.50+

Newer Wand builds (observed on 12.50.0-beta00) set DependentLoadFlags =
LOAD_LIBRARY_SEARCH_SYSTEM32 (0x0800) in the PE Load Config directory. That
flag forces every statically-imported DLL, including version.dll, to resolve
from %SystemRoot%\System32 only, so the proxy version.dll dropped next to
Wand.exe is never loaded. disable_asar_integrity() therefore never runs, the
Electron ASAR-integrity fuse stays enabled, and the patched app.asar is
rejected, making Wand exit immediately after a "successful" patch.

AttachProxyDll() now clears the bit in Wand.exe (DependentLoadFlags WORD at
offset 0x4E in IMAGE_LOAD_CONFIG_DIRECTORY) after writing the proxy. The change
is idempotent and a no-op on older builds that do not set the flag.

Verified on 12.50.0-beta00 x64: before = instant exit; after = Wand launches,
proxy VERSION.dll loads from the app directory, fuse[4] flips 0x31 -> 0x72 in
memory, and the patched app.asar is accepted.
fix: clear LOAD_LIBRARY_SEARCH_SYSTEM32 so version.dll proxy loads on Adding fix for 12.50
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

2 participants