LunaHook-mirror/LunaHook/engine64/AGES7.cpp

80 lines
2.1 KiB
C++
Raw Normal View History

2024-02-07 20:59:24 +08:00
#include"AGES7.h"
namespace{
//Muv-Luv Alternative - Total Eclipse
//https://vndb.org/v7052
bool _1(){
//HSN65001#-44@234699:te-win64vc14-release.exe
BYTE b1[]={
0x48,XX2,0xb0,0xfe,0xff,0xff,
0x4c,XX2,0xb8,0x01,0x00,0x00,
};
auto addr=MemDbg::findBytes(b1,sizeof(b1),processStartAddress,processStopAddress);
if(addr==0)return false;
HookParam hp;
hp.address=addr;
hp.type=USING_STRING|CODEC_UTF8|NO_CONTEXT;
hp.offset=get_reg(regs::rdi);
auto succ=NewHook(hp,"Ages7_1");
if(addr=MemDbg::findEnclosingAlignedFunction(addr)){
hp.address=addr;
hp.type=USING_STRING|CODEC_UTF8|NO_CONTEXT;
hp.offset=get_reg(regs::rbx);
succ|=NewHook(hp,"Ages7_3");
}
return succ;
}
bool _2(){
//HSN65001#-44@2346AC:te-win64vc14-release.exe
BYTE b1[]={
0x48,XX2,0x10,
0x48,XX2,0xb0,0x01,0x00,0x00,
XX2,0xc0,0x08,0x00,0x00
};
auto addr=MemDbg::findBytes(b1,sizeof(b1),processStartAddress,processStopAddress);
if(addr==0)return false;
HookParam hp;
hp.address=addr;
hp.type=USING_STRING|CODEC_UTF8|NO_CONTEXT;
hp.offset=get_reg(regs::rdi);
auto suc=NewHook(hp,"Ages7_2");
if(addr=MemDbg::findEnclosingAlignedFunction(addr)){
hp.address=addr;
hp.type=USING_STRING|CODEC_UTF8|NO_CONTEXT;
hp.offset=get_reg(regs::rbx);
suc|=NewHook(hp,"Ages7_3");
}
return suc;
}
bool _3(){
//HSN65001#-14@3D9814:te-win64vc14-release.exe
BYTE b1[]={
0x48,0x8b,0x1b,
0x48,0x8b,0x01,
0x48,0x8b,0xd3,
0xff,0x10,
0x48,0x8b,0x45,0xc8,
0x48,0x8b,0x4d,0xc0,
0x48,0x2b,0xc1,
0x48,0xc1,0xf8,0x03,
0x48,0x85,0xc0,
};
auto addr=MemDbg::findBytes(b1,sizeof(b1),processStartAddress,processStopAddress);
if(addr==0)return false;
HookParam hp;
hp.address=addr+3;
hp.type=USING_STRING|CODEC_UTF8|NO_CONTEXT;
hp.offset=get_reg(regs::rbx);
return NewHook(hp,"Ages7_4");
}
bool all(){
auto _=_1();
_=_2()||_;
_=_3()||_;
return _;
}
}
bool AGES7::attach_function(){
return all();
}