LunaHook-mirror/LunaHook/engine32/Alice.cpp

#include "Alice.h"

/********************************************************************************************
System40 hook:
  System40 is a game engine developed by Alicesoft.
  Afaik, there are 2 very different types of System40. Each requires a particular hook.

  Pattern 1: Either SACTDX.dll or SACT2.dll exports SP_TextDraw.
  The first relative call in this function draw text to some surface.
  Text pointer is return by last absolute indirect call before that.
  Split parameter is a little tricky. The first register pushed onto stack at the begining
  usually is used as font size later. According to instruction opcode map, push
  eax -- 50, ecx -- 51, edx -- 52, ebx --53, esp -- 54, ebp -- 55, esi -- 56, edi -- 57
  Split parameter value:
  eax - -8,   ecx - -C,  edx - -10, ebx - -14, esp - -18, ebp - -1C, esi - -20, edi - -24
  Just extract the low 4 bit and shift left 2 bit, then minus by -8,
  will give us the split parameter. e.g. push ebx 53->3 *4->C, -8-C=-14.
  Sometimes if split function is enabled, ITH will split text spoke by different
  character into different thread. Just open hook dialog and uncheck split parameter.
  Then click modify hook.

  Pattern 2: *engine.dll exports SP_SetTextSprite.
  At the entry point, EAX should be a pointer to some structure, character at +0x8.
  Before calling this function, the caller put EAX onto stack, we can also find this
  value on stack. But seems parameter order varies from game release. If a future
  game breaks the EAX rule then we need to disassemble the caller code to determine
  data offset dynamically.
********************************************************************************************/

static bool InsertAliceHook1(DWORD addr)
{
  if (!addr)
  {
    ConsoleOutput("AliceHook1: failed");
    return false;
  }
  for (DWORD i = addr, s = addr; i < s + 0x100; i++)
    if (*(BYTE *)i == 0xe8)
    { // Find the first relative call.
      DWORD j = i + 5 + *(DWORD *)(i + 1);
      while (true)
      { // Find the first register push onto stack.
        DWORD c = ::disasm((BYTE *)s);
        if (c == 1)
          break;
        s += c;
      }
      DWORD c = *(BYTE *)s;
      HookParam hp;
      hp.address = j;
      hp.offset = get_reg(regs::eax);
      hp.split = -8 - ((c & 0xf) << 2);
      hp.type = USING_STRING | USING_SPLIT;
      // if (s>j) hp.type^=USING_SPLIT;
      ConsoleOutput("INSERT AliceHook1");

      // RegisterEngineType(ENGINE_SYS40);
      return NewHook(hp, "System40");
    }
  ConsoleOutput("AliceHook1: failed");
  return false;
}
static bool InsertAliceHook2(DWORD addr)
{
  if (!addr)
  {
    ConsoleOutput("AliceHook2: failed");
    return false;
  }
  HookParam hp;
  hp.address = addr;
  hp.offset = get_reg(regs::eax);
  hp.index = 0x8;
  hp.type = DATA_INDIRECT;
  ConsoleOutput("INSERT AliceHook2");
  return NewHook(hp, "System40");
  // RegisterEngineType(ENGINE_SYS40);
}

// jichi 8/23/2013 Move here from engine.cc
// Do not work for the latest Alice games
// jichi 5/13/2015: Looking for function entries in StoatSpriteEngine.dll
bool InsertAliceHook()
{
  bool ok = false;
  if (auto addr = Util::FindFunction("SP_TextDraw"))
  {

    ok |= InsertAliceHook1(addr);
  }
  // if (GetFunctionAddr("SP_SetTextSprite", &addr, &low, &high, 0) && addr) {
  //  InsertAliceHook2(addr);
  //  return true;
  //}
  if (auto addr = Util::FindFunction("SP_SetTextSprite"))
  { // Artikash 6/27/2018 not sure if this works

    ok |= InsertAliceHook2(addr);
  }
  // ConsoleOutput("AliceHook: failed");
  return ok;
}

bool Alice::attach_function()
{

  return InsertAliceHook();
}