mirror of
https://github.com/HIllya51/LunaHook.git
synced 2024-12-27 13:44:11 +08:00
55 lines
1.5 KiB
C++
55 lines
1.5 KiB
C++
|
#include"utawarerumono.h"
|
||
|
|
||
|
bool utawarerumonoh() {
|
||
|
const BYTE bytes[] = {
|
||
|
0x80,XX,0x5C,
|
||
|
0x75
|
||
|
//*a2 != 92 || a2[1] != 107
|
||
|
};
|
||
|
const BYTE bytes2[] = {
|
||
|
0x80,XX,XX,XX,0x5C,
|
||
|
0x75
|
||
|
};
|
||
|
auto addr1 = MemDbg::findBytes(bytes, sizeof(bytes), processStartAddress, processStopAddress);
|
||
|
auto addr2 = MemDbg::findBytes(bytes2, sizeof(bytes2), processStartAddress, processStopAddress);
|
||
|
auto succ=false;
|
||
|
for (auto addr : { addr1,addr2 }) {
|
||
|
if (addr == 0)continue;
|
||
|
const BYTE funcstart[] = {
|
||
|
0x51,0x53
|
||
|
};
|
||
|
addr = reverseFindBytes(funcstart, sizeof(funcstart), addr - 0x100, addr);
|
||
|
if (addr == 0)return false;
|
||
|
HookParam hp;
|
||
|
hp.address = addr;
|
||
|
hp.offset=get_stack(1);
|
||
|
hp.type = CODEC_UTF8 | USING_STRING | NO_CONTEXT;
|
||
|
ConsoleOutput("utawarerumono");
|
||
|
succ|=NewHook(hp, "utawarerumono");
|
||
|
}
|
||
|
return succ;
|
||
|
}
|
||
|
bool utawarerumonoh2() {
|
||
|
const BYTE bytes2[] = {
|
||
|
0x8b,0xca,
|
||
|
0xc1,0xe9,0x02,
|
||
|
0xf3,0xa5
|
||
|
};
|
||
|
auto addr2 = Util::SearchMemory(bytes2, sizeof(bytes2),PAGE_EXECUTE, processStartAddress, processStopAddress);
|
||
|
auto succ=false;
|
||
|
for (auto addr : addr2) {
|
||
|
HookParam hp;
|
||
|
hp.address = addr+2;
|
||
|
hp.offset=get_reg(regs::esi);
|
||
|
hp.type = CODEC_UTF8 | USING_STRING|NO_CONTEXT;
|
||
|
ConsoleOutput("utawarerumono %p",addr);
|
||
|
succ|=NewHook(hp, "utawarerumono");
|
||
|
}
|
||
|
return succ;
|
||
|
}
|
||
|
|
||
|
bool utawarerumono::attach_function() {
|
||
|
bool b1=utawarerumonoh();
|
||
|
bool b2=utawarerumonoh2();
|
||
|
return b1||b2;
|
||
|
}
|