mirror of
https://github.com/HIllya51/LunaHook.git
synced 2024-10-22 23:18:16 +08:00
116 lines
3.1 KiB
C++
116 lines
3.1 KiB
C++
#include "TeethingRing.h"
|
|
|
|
bool TeethingRing_attach_function()
|
|
{
|
|
// https://vndb.org/v5635
|
|
// キミとボクとエデンの林檎
|
|
// HSF932#-C@85FB0:EDEN.exe
|
|
BYTE bytes[] = {
|
|
0x8B,0x0A,0x8B,0xC1,0x83,0xF8,0x20 ,
|
|
0x0F,0x8F,XX4,
|
|
0x0F,0x84,XX4,
|
|
0x48 ,
|
|
0xBE,0x0F,0x00,0x00,0x00,0x3B,0xC6 ,
|
|
0x77,XX,
|
|
};
|
|
auto addr=MemDbg::findBytes(bytes, sizeof(bytes), processStartAddress, processStopAddress);
|
|
if(addr==0)return false;
|
|
BYTE sehstart[]={
|
|
0x6a,0xff,
|
|
0x68,XX4,
|
|
0x64,0xa1,0,0,0,0
|
|
};
|
|
addr=reverseFindBytes(sehstart,sizeof(sehstart),addr-0x100,addr);
|
|
if(addr==0)return false;
|
|
HookParam hp;
|
|
hp.address = addr;//0x84C70+(DWORD)GetModuleHandle(0);
|
|
hp.type=USING_STRING|NO_CONTEXT|FULL_STRING;
|
|
hp.text_fun = [](hook_stack *stack, HookParam *hp, uintptr_t *data, uintptr_t *split, size_t *len)
|
|
{
|
|
auto _this = (void *)stack->THISCALLTHIS;
|
|
auto a2 = (DWORD *)stack->ARG1;
|
|
|
|
auto v2 = *a2;
|
|
if ((int)*a2 <= 32)
|
|
{
|
|
if (*a2 != 32)
|
|
{
|
|
switch (v2)
|
|
{
|
|
|
|
case 16:
|
|
auto v4 = (char *)(*(int(__thiscall **)(void *, DWORD))(*(DWORD *)_this + 60))(_this, a2[1]);
|
|
*data = (uintptr_t)v4;
|
|
*len = strlen(v4);
|
|
}
|
|
}
|
|
}
|
|
};
|
|
hp.filter_fun=[](void* data, size_t* len, HookParam* hp){
|
|
//#F【琉星】#F
|
|
if(all_ascii((char*)data,*len))return false;
|
|
auto str=std::string((char*)data,*len);
|
|
strReplace(str,"#F","");
|
|
return write_string_overwrite(data,len,str);
|
|
};
|
|
return NewHook(hp, "TeethingRing");
|
|
}
|
|
|
|
|
|
bool TeethingRing_attach_function2()
|
|
{
|
|
//https://vndb.org/v791
|
|
//きると
|
|
|
|
BYTE bytes[] = {
|
|
0x8b,0x4e,0x18,
|
|
0x83,0xf9,0x10,
|
|
0x53,
|
|
0x8d,0x5e,0x04,
|
|
0x72,0x04,
|
|
0x8b,0x13,
|
|
0xeb,0x02,
|
|
0x8b,0xd3,
|
|
0x83,0xf9,0x10,
|
|
0x72,0x04,
|
|
0x8b,0x0b,
|
|
0xeb,0x02,
|
|
};
|
|
auto addr=MemDbg::findBytes(bytes, sizeof(bytes), processStartAddress, processStopAddress);
|
|
if(addr==0)return false;
|
|
addr = MemDbg::findEnclosingAlignedFunction(addr);
|
|
if (addr == 0)return false;
|
|
HookParam hp;
|
|
hp.address = addr;
|
|
hp.type=USING_STRING|NO_CONTEXT|FULL_STRING;
|
|
hp.text_fun = [](hook_stack *stack, HookParam *hp, uintptr_t *data, uintptr_t *split, size_t *len)
|
|
{
|
|
auto _this=(DWORD*)stack->THISCALLTHIS;
|
|
auto v13 = _this[6];
|
|
auto v14 = _this + 1;
|
|
DWORD* v16;
|
|
if ( v13 < 0x10 )
|
|
v16 = _this + 1;
|
|
else
|
|
v16 = (DWORD *)*v14;
|
|
auto a2=stack->ARG1;
|
|
*data=(DWORD)v16+a2;
|
|
*len=strlen((char*)*data);
|
|
*split=(DWORD)_this;
|
|
};
|
|
hp.filter_fun=[](void* data, size_t* len, HookParam* hp){
|
|
if(all_ascii((char*)data,*len))return false;
|
|
auto str=std::string((char*)data,*len);
|
|
strReplace(str,"#F","");
|
|
//俺はこのアクシデントが、何か幸#<さい>先#<さき>のいいもののように思えて、鞄を抱え直してギルドへの階段を昇り始めた。
|
|
str = std::regex_replace(str, std::regex("#<(.*?)>"), "");
|
|
return write_string_overwrite(data,len,str);
|
|
};
|
|
return NewHook(hp, "TeethingRing");
|
|
}
|
|
|
|
|
|
bool TeethingRing::attach_function()
|
|
{
|
|
return TeethingRing_attach_function()||TeethingRing_attach_function2();
|
|
} |