2024-03-15 16:08:16 +08:00
|
|
|
|
#include"lucasystem.h"
|
2024-02-07 20:59:24 +08:00
|
|
|
|
|
|
|
|
|
bool InsertIG64Hook() {
|
|
|
|
|
//<2F><><EFBFBD>륿<EFBFBD><EBA5BF><EFBFBD><EFBFBD> FHD.exe
|
|
|
|
|
//char __fastcall sub_14004D820(_QWORD *a1, __int16 *a2, size_t a3)
|
|
|
|
|
|
|
|
|
|
const BYTE BYTES[] = {
|
|
|
|
|
0x48,0x8b,0x43,0x08,
|
|
|
|
|
0x33,0xc9,
|
|
|
|
|
0x66,0x89,0x08
|
|
|
|
|
};
|
|
|
|
|
auto addrs = Util::SearchMemory(BYTES, sizeof(BYTES), PAGE_EXECUTE, processStartAddress, processStopAddress);
|
|
|
|
|
auto suc=false;
|
|
|
|
|
for (auto addr : addrs) {
|
|
|
|
|
ConsoleOutput("IG64 %p", addr);
|
|
|
|
|
const BYTE aligned [] = {0xCC,0xCC};
|
|
|
|
|
addr = reverseFindBytes(aligned, sizeof(aligned), addr-0x1000, addr);
|
|
|
|
|
if (addr == 0)continue;
|
|
|
|
|
addr += 2;
|
|
|
|
|
ConsoleOutput("IG64 %p", addr);
|
|
|
|
|
HookParam hp;
|
|
|
|
|
hp.address = addr;
|
|
|
|
|
hp.type = CODEC_UTF16 | USING_STRING;
|
|
|
|
|
hp.offset=get_reg(regs::rdx);//rdx
|
|
|
|
|
suc|=NewHook(hp, "IG64");
|
|
|
|
|
}
|
|
|
|
|
return suc;
|
|
|
|
|
}
|
|
|
|
|
bool IG64filter(void* data, size_t* size, HookParam*) {
|
|
|
|
|
|
|
|
|
|
auto text = reinterpret_cast<LPWSTR>(data);
|
|
|
|
|
std::wstring str =std::wstring(text,*size / 2);
|
|
|
|
|
std::wregex reg1(L"\\$\\[(.*?)\\$/(.*?)\\$\\]");
|
|
|
|
|
std::wstring result1 = std::regex_replace(str, reg1, L"$1");
|
|
|
|
|
|
|
|
|
|
std::wregex reg2(L"@[^@]*@");
|
|
|
|
|
std::wstring result2 = std::regex_replace(result1, reg2, L"");
|
|
|
|
|
|
|
|
|
|
*size = (result2.size()) * 2;
|
|
|
|
|
wcscpy(text, result2.c_str());
|
|
|
|
|
return true;
|
|
|
|
|
};
|
|
|
|
|
bool InsertIG64Hook2() {
|
|
|
|
|
//hook1 <20><>ע<EFBFBD>͵<EFBFBD>ʱ<EFBFBD><CAB1><EFBFBD>Ͽ<EFBFBD><CFBF><EFBFBD><EFBFBD><EFBFBD><EFBFBD>hook<6F><6B><EFBFBD><EFBFBD>Ͽ<EFBFBD><CFBF><EFBFBD><EFBFBD><EFBFBD><EFBFBD>ǻᱣ<C7BB><E1B1A3>һЩ@[]֮<><D6AE>Ľű<C4BD><C5B1><EFBFBD><EFBFBD>š<EFBFBD>
|
|
|
|
|
//<2F><><EFBFBD>륿<EFBFBD><EBA5BF><EFBFBD><EFBFBD> FHD.exe
|
|
|
|
|
|
|
|
|
|
const BYTE BYTES[] = {
|
|
|
|
|
0xBA,0x3F,0xFF,0x00,0x00,
|
|
|
|
|
XX,0x8B,XX,
|
|
|
|
|
0xE8,XX2,0x00,0x00
|
|
|
|
|
};
|
|
|
|
|
bool ok=false;
|
|
|
|
|
auto addrs = Util::SearchMemory(BYTES, sizeof(BYTES), PAGE_EXECUTE, processStartAddress, processStopAddress);
|
|
|
|
|
for (auto addr : addrs) {
|
|
|
|
|
ConsoleOutput("IG642 %p", addr);
|
|
|
|
|
const BYTE aligned[] = { 0xCC,0xCC };
|
|
|
|
|
addr = reverseFindBytes(aligned, sizeof(aligned), addr - 0x10000, addr);
|
|
|
|
|
if (addr == 0)continue;
|
|
|
|
|
addr += 2;
|
|
|
|
|
ConsoleOutput("IG642 %p", addr);
|
|
|
|
|
HookParam hp;
|
|
|
|
|
hp.address = addr;
|
2024-03-03 21:12:15 +08:00
|
|
|
|
hp.type = CODEC_UTF16 | USING_STRING |EMBED_ABLE|EMBED_BEFORE_SIMPLE|EMBED_AFTER_NEW;//可以内嵌英文
|
2024-02-07 20:59:24 +08:00
|
|
|
|
hp.filter_fun = IG64filter;
|
|
|
|
|
hp.offset=get_reg(regs::rdx);//rdx
|
|
|
|
|
ok|=NewHook(hp, "IG642");
|
|
|
|
|
}
|
|
|
|
|
return ok;
|
|
|
|
|
}
|
2024-03-15 16:08:16 +08:00
|
|
|
|
bool InsertLucaSystemHook()
|
|
|
|
|
{
|
|
|
|
|
/*
|
|
|
|
|
* Sample games:
|
|
|
|
|
* https://vndb.org/r108105
|
|
|
|
|
*/
|
|
|
|
|
const BYTE bytes[] = {
|
|
|
|
|
0xCC, // int 3
|
|
|
|
|
0x48, XX4, // mov [rsp+18],rbx <- hook here
|
|
|
|
|
0x55, // push rbp
|
|
|
|
|
0x56, // push rsi
|
|
|
|
|
0x57, // push rdi
|
|
|
|
|
0x41, 0x54, // push r12
|
|
|
|
|
0x41, 0x55, // push r13
|
|
|
|
|
0x41, 0x56, // push r14
|
|
|
|
|
0x41, 0x57, // push r15
|
|
|
|
|
0x48, 0x8D, 0xAC, 0x24, XX4, // lea rbp,[rsp-00003810]
|
|
|
|
|
0xB8, XX4 // mov eax,00003910
|
|
|
|
|
};
|
|
|
|
|
|
|
|
|
|
auto addr=MemDbg::findBytes(bytes, sizeof(bytes),processStartAddress, processStopAddress);
|
|
|
|
|
if(!addr)return false;
|
|
|
|
|
HookParam hp = {};
|
|
|
|
|
hp.address = addr + 1;
|
|
|
|
|
hp.offset = get_reg(regs::rdx) ; //RDX
|
|
|
|
|
hp.filter_fun = [](LPVOID data, size_t *size, HookParam *)
|
|
|
|
|
{
|
|
|
|
|
static std::wstring prevText;
|
|
|
|
|
auto text = reinterpret_cast<LPWSTR>(data);
|
|
|
|
|
auto len = reinterpret_cast<size_t *>(size);
|
|
|
|
|
|
|
|
|
|
if (text[0] == L'\x3000') { //removes space at the beginning of the sentence
|
|
|
|
|
*len -= 2;
|
|
|
|
|
::memmove(text, text + 1, *len);
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
if ( *text == L'@' ) //Name in square brackets instead of '@'
|
|
|
|
|
if ( wchar_t *match2 = cpp_wcsnchr(text+1, L'@', *len/2-1) ) {
|
|
|
|
|
*text = L'[';
|
|
|
|
|
*match2 = L']';
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
StringFilterBetween(text, len, L"$C(", 3, L")", 1);
|
|
|
|
|
StringFilter(text, len, L"$A", 3); // remove $A followed by 1 char
|
|
|
|
|
StringCharReplacer(text, len, L"$d", 2, L'\n');
|
|
|
|
|
CharFilter(text, len, L'\xFF3F');
|
|
|
|
|
//ruby
|
|
|
|
|
StringFilter(text, len, L"$[", 2);
|
|
|
|
|
StringFilterBetween(text, len, L"$/", 2, L"$]", 2);
|
|
|
|
|
|
|
|
|
|
return true;
|
|
|
|
|
};
|
|
|
|
|
hp.type = CODEC_UTF16 | USING_STRING;
|
|
|
|
|
NewHook(hp, "LucaSystem");
|
|
|
|
|
return true;
|
|
|
|
|
}
|
|
|
|
|
bool lucasystem::attach_function() {
|
|
|
|
|
return InsertIG64Hook2()|InsertLucaSystemHook();
|
2024-02-07 20:59:24 +08:00
|
|
|
|
}
|
|
|
|
|
|