#include"AGS.h" bool InsertAGSHook() { const BYTE bytes1[] = { /*.text:0043E3A0 55 push ebp .text : 0043E3A1 8B EC mov ebp, esp .text : 0043E3A3 83 EC 38 sub esp, 38h .text : 0043E3A6 53 push ebx .text : 0043E3A7 56 push esi .text : 0043E3A8 8B F1 mov esi, ecx*/ 0x55, 0x8b,0xec, 0x83,0xec,0x38,0x53,0x56,0x8b,0xf1 }; ULONG addr = MemDbg::findBytes(bytes1, sizeof(bytes1), processStartAddress, processStopAddress); if (!addr) { return false; } const BYTE bytes2[] = { /* .text:0043E95E FF 75 08 push[ebp + arg_0] .text:0043E961 8B CE mov ecx, esi .text : 0043E963 E8 38 FA FF FF call sub_43E3A0*/ 0xff,0x75,0x08, 0x8b,0xce }; bool ok = false; auto addrs = findrelativecall(bytes2, sizeof(bytes2), addr, processStartAddress, processStopAddress); for(auto addr :addrs){ addr = findfuncstart(addr); if (!addr)continue; HookParam hp; hp.address = addr; hp.offset=get_reg(regs::eax); hp.type = USING_STRING; ConsoleOutput("INSERT HOOK_AGS %p",addr); ok |= NewHook(hp, "HOOK_AGS"); } return ok; } namespace{ bool hook2(){ //誘惑女教師~熟れた蜜の味~ for (auto addr : findiatcallormov_all((DWORD)TextOutA,processStartAddress,processStartAddress,processStopAddress,PAGE_EXECUTE)) { auto funcaddr = findfuncstart(addr,0x1000); ConsoleOutput("funcaddr %p",funcaddr); if (!funcaddr) continue; BYTE sig1[]={0x68,0x00,0x80,0x00,0x00,0x6a,0x00}; BYTE sig2[]={0x2D,0xC0,0x00,0x00,0x00,0xC1,0xE0,0x08}; BYTE sig3[]={0x83,0xC0,0x80,0xC1,0xE0,0x08}; BYTE sig4[]={0x3C,0xA0,0x0F,0xB6,0xC0}; int found=0; for(auto sigsz:std::vector>{{sig1,sizeof(sig1)},{sig2,sizeof(sig2)},{sig3,sizeof(sig3)},{sig4,sizeof(sig4)}}){ auto fd= MemDbg::findBytes(sigsz.first, sigsz.second, funcaddr, addr); ConsoleOutput("%p",fd); if(fd)found+=1; } if(found==4){ HookParam hp; hp.address = funcaddr; hp.type = DATA_INDIRECT; hp.offset=get_stack(1); hp.index=0; return NewHook(hp, "AGS"); } } return false; } } bool AGS::attach_function() { return InsertAGSHook()||hook2(); }