LunaHook-mirror/LunaHook/engine32/Ohgetsu.cpp

183 lines
4.7 KiB
C++
Raw Normal View History

2024-02-07 20:59:24 +08:00
#include"Ohgetsu.h"
namespace{
bool hook1() {
//Silvery White ~君と出逢った理由~
const BYTE bytes[] = {
0x8b,XX,0x10,
0x8b,XX,0x0C,
0x8b,XX,0x08,
0x8b,XX,
0xc1,XX,02,
0xf3,0xa5,
0x8b,XX,
0x83,XX,0x03,
0xf3,0xa4,
0x8b,XX,0x08,
0x03,XX,0x10,
0xC6,XX,0x00
};
ULONG addr = MemDbg::findBytes(bytes, sizeof(bytes), processStartAddress, processStopAddress);
if (!addr) return false;
addr= MemDbg::findEnclosingAlignedFunction(addr);
if (!addr) return false;
HookParam hp;
hp.address = addr ;
hp.offset=get_stack(2);
hp.type = USING_STRING;
hp.text_fun = [](hook_stack* stack, HookParam *hp, uintptr_t *data, uintptr_t *split, size_t*len) {
auto text = (LPCSTR)stack->stack[2];
auto size = stack->stack[3];
*data = (DWORD)text;
*len = size;
*split = stack->stack[0];
};
return NewHook(hp, "Ohgetsu");
}
bool hook2() {
//Palmyra ~熱砂の海と美なる戦姫~
const BYTE bytes[] = {
0x8b,XX,0x08,
0x0f,XX,0x08,
0xC1,XX,0x08,
0x8b,XX,0x08,
0x0f,0xb6,0x42,0x01,
0x0b,XX,
};
ULONG addr = MemDbg::findBytes(bytes, sizeof(bytes), processStartAddress, processStopAddress);
if (!addr) return false;
addr= MemDbg::findEnclosingAlignedFunction(addr);
if (!addr) return false;
HookParam hp;
hp.address = addr ;
hp.offset=get_stack(1);
hp.type = USING_STRING;
hp.text_fun = [](hook_stack* stack, HookParam *hp, uintptr_t *data, uintptr_t *split, size_t*len) {
auto text = (LPCSTR)stack->stack[1];
auto size = stack->stack[2];
*data = (DWORD)text;
*len = size;
*split = stack->stack[0];
};
return NewHook(hp, "Ohgetsu");
}
bool _3(){
//それは舞い散る桜のように FullEffect
auto addr = MemDbg::findCallerAddress((DWORD)GetGlyphOutlineA,0xec81, processStartAddress, processStopAddress);
if (!addr) { return false; }
//reladdr = 0x48ff0;
//reladdr = 0x48ff3;
HookParam hp;
hp.address = addr ;
hp.offset=get_stack(1);
hp.type = CODEC_ANSI_BE;
return NewHook(hp, "Basil");
}
bool _4(){
//それは舞い散る桜のように FullEffect
const BYTE bytes[] = {
0x3D,0x00,0x02,0xFF,0xFF,
XX2,
0x3D,0x01,0x02,0xFF,0xFF,
XX2,
0x3D,0x02,0x02,0xFF,0xFF,
XX2,
};
ULONG addr = MemDbg::findBytes(bytes, sizeof(bytes), processStartAddress, processStopAddress);
if (!addr) return false;
addr= MemDbg::findEnclosingAlignedFunction(addr);
if (!addr) return false;
HookParam hp;
hp.address = addr ;
hp.offset=get_stack(2);
hp.type = USING_STRING|EMBED_ABLE|EMBED_AFTER_NEW|EMBED_BEFORE_SIMPLE|EMBED_DYNA_SJIS;
hp.hook_font=F_GetGlyphOutlineA;
return NewHook(hp, "Basil2");
}
}
namespace{
bool _5(){
//仰せのままに★ご主人様!
const BYTE bytes[] = {
//memset(&byte_562568, 0, 0x20u);
//memset(byte_562588, 0, sizeof(byte_562588)); ->RS@562588
0x6a,0x20,
0x6a,0x00,
0x68,XX4,
0xe8,XX4,
0x83,0xc4,0x0c,
0x68,0x40,0x01,0x00,0x00,
0x6a,0x00,
0x68,XX4,
0xe8,XX4
};
ULONG addr = MemDbg::findBytes(bytes, sizeof(bytes), processStartAddress, processStopAddress);
if (!addr) return false;
addr=*(DWORD*)(addr+25);
if(IsBadReadPtr((LPVOID)addr,10)!=0)return false;
HookParam hp;
hp.address=addr;
hp.type=DIRECT_READ;
hp.filter_fun=[](LPVOID data, size_t* size, HookParam*){
auto text = reinterpret_cast<LPSTR>(data);
auto len = reinterpret_cast<size_t*>(size);
StringCharReplacer(text, len, "||", 2, '\n');
return true;
};
return NewHook(hp,"Ohgetsu");
}
bool _6(){
//仰せのままに★ご主人様!
//这个有人名,上面那个只有文本
const BYTE bytes[] = {
0x6a,0x46,
0x8b,0x4d,0xf4,
0x6b,0xc9,0x46,
0x81,0xc1,XX4,
0x51,
0x8b,0x55,0xf4,
0x83,0xea,0x05,
0x6b,0xd2,0x46,
0x81,0xc2,XX4,
0x52,
0xe8
};
ULONG addr = MemDbg::findBytes(bytes, sizeof(bytes), processStartAddress, processStopAddress);
if (!addr) return false;
addr = findfuncstart(addr);
if (!addr)return false;
HookParam hp;
hp.address=addr;
hp.type=USING_STRING;
hp.text_fun=[](hook_stack* stack, HookParam *hp, uintptr_t* data, uintptr_t* split, size_t* len){
*data = stack->stack[1];
*len = stack->stack[2];
};
hp.filter_fun=[](LPVOID data, size_t* size, HookParam*){
auto text = reinterpret_cast<LPSTR>(data);
auto len = reinterpret_cast<size_t*>(size);
StringCharReplacer(text, len, "||", 2, '\n');
return true;
};
return NewHook(hp,"Ohgetsu");
}
bool _7(){
return _6()||_5();
}
}
bool Ohgetsu::attach_function() {
bool ok=_4();
return hook1()||hook2()||_7()||_3()||ok;
}