Spoof ACPI and SMBIOS raw firmware tables dynamically

[doomedraven]

Surgically hooks the GetSystemFirmwareTable and EnumSystemFirmwareTables APIs exported by kernel32.dll to hide virtualization environments in-memory with 100% fidelity:

1. Intercepts ACPI table enumerations in EnumSystemFirmwareTables and deletes the virtual-guest-specific WAET (Windows ACPI Emulated devices Table) signature (0x54454157) on-the-fly, returning a seamless and continuous signature list.
2. Intercepts direct queries to the WAET table in GetSystemFirmwareTable and force-returns 0 (Not Found), perfectly simulating physical hardware.
3. Performs fast, safe, and bounded in-place ASCII memory replacements on other ACPI tables (DSDT, FACP, etc.) and Raw SMBIOS ('RSMB') tables to dynamically overwrite virtualization signatures (VMware, VirtualBox, QEMU, Hyper-V, Bochs) with physical OEM identifiers (Intel, HP, Dell, Samsung, ASUS), bypassing firmware checking scripts cleanly without corrupting structures or table checksums.