111 lines
2.9 KiB
C++
Raw Normal View History

2024-07-28 01:34:40 +08:00
#include "Jellyfish.h"
2024-02-07 20:59:24 +08:00
2024-07-28 01:34:40 +08:00
bool Jellyfish::Jellyfish_attach_function()
{
// https://vndb.org/r13456
// GREEN秋空のスクリーン STANDARD EDITION
// https://vndb.org/r1136
// LOVERS恋に落ちたら…
2024-02-07 20:59:24 +08:00
const BYTE bytes[] = {
2024-07-28 01:34:40 +08:00
0x8a,
XX,
0x01, // mov cl, [ecx+1]
0x80,
XX,
0x6e, // cmp cl, 6Eh ; 'n'
0x75,
XX,
2024-02-07 20:59:24 +08:00
};
ULONG addr = MemDbg::findBytes(bytes, sizeof(bytes), minaddr, maxaddr);
2024-07-28 01:34:40 +08:00
if (addr == 0)
return false;
addr = MemDbg::findEnclosingAlignedFunction(addr, 0x1000);
if (addr == 0)
return false;
2024-02-07 20:59:24 +08:00
HookParam hp;
hp.address = addr;
2024-07-28 01:34:40 +08:00
hp.offset = get_stack(1);
hp.type = USING_STRING;
hp.filter_fun = [](LPVOID data, size_t *size, HookParam *)
{
if (*size == 2)
return false;
StringCharReplacer(reinterpret_cast<char *>(data), size, "\\n", 2, '\n');
StringCharReplacer(reinterpret_cast<char *>(data), size, "\\N", 2, '\n');
return write_string_overwrite(data, size, std::regex_replace(std::string(reinterpret_cast<char *>(data), *size), std::regex("\\\\[0-7a-zA-Z]"), ""));
2024-02-07 20:59:24 +08:00
};
2024-07-28 01:34:40 +08:00
2024-06-05 15:09:08 +08:00
return NewHook(hp, "Jellyfish");
}
2024-07-28 01:34:40 +08:00
bool Jellyfish::Jellyfish_attach_function2()
{
// https://vndb.org/r109826
// Sisters: Last Day of Summer
2024-06-05 15:09:08 +08:00
const BYTE bytes[] = {
2024-07-28 01:34:40 +08:00
0x68, 0xB0, 0x04, 0x00, 0x00, 0x68, 0x40, 0x06, 0x00, 0x00};
std::map<DWORD, int> count;
DWORD maxa = 0;
int maxi = 0;
for (auto _ : Util::SearchMemory(bytes, sizeof(bytes), PAGE_EXECUTE, minaddr, maxaddr))
{
2024-06-05 15:09:08 +08:00
_ = findfuncstart(_);
2024-07-28 01:34:40 +08:00
if (_ == 0)
continue;
if (count.find(_) == count.end())
count[_] = 0;
count[_] += 1;
if (count[_] >= maxi)
{
maxi = count[_];
maxa = _;
2024-06-05 15:09:08 +08:00
}
}
2024-07-28 01:34:40 +08:00
if (maxa == 0)
return false;
2024-06-05 15:09:08 +08:00
HookParam hp;
2024-07-28 01:34:40 +08:00
hp.address = maxa; // 0x2F2E1+(DWORD)ism;
hp.type = USING_CHAR | CODEC_UTF16;
hp.text_fun = [](hook_stack *stack, HookParam *hp, uintptr_t *data, uintptr_t *split, size_t *len)
{
if (stack->ARG3 == 3)
return;
*split = (stack->ARG3) != 0; // 多行文本
*data = stack->ARG1;
*len = 2;
// 不可以快进,否则会有重复
2024-06-05 15:09:08 +08:00
};
2024-07-28 01:34:40 +08:00
2024-02-07 20:59:24 +08:00
return NewHook(hp, "Jellyfish");
2024-07-28 01:34:40 +08:00
}
bool Jellyfish::Jellyfish_attach_function3()
{
// https://vndb.org/v2249
// DEEP VOICE
// 不可以快进,否则会有重复
const BYTE bytes[] = {
0x03, 0xd0,
0x81, 0xFA, 0xE0, 0x01, 0x00, 0x00,
0x0f, 0x8f, XX4};
auto addr = MemDbg::findBytes(bytes, sizeof(bytes), minaddr, maxaddr);
if (!addr)
return false;
addr = MemDbg::findEnclosingAlignedFunction(addr);
if (!addr)
return false;
HookParam hp;
hp.address = addr;
hp.offset = get_stack(1);
hp.type = USING_CHAR;
return NewHook(hp, "Jellyfish3");
}
bool Jellyfish::attach_function()
{
std::tie(minaddr, maxaddr) = Util::QueryModuleLimits(ism);
return Jellyfish_attach_function() || Jellyfish_attach_function2() || Jellyfish_attach_function3();
2024-02-07 20:59:24 +08:00
}