Public-Mirror/LunaHook-mirror
1
0
Fork 0
mirror of https://github.com/HIllya51/LunaHook.git synced 2025-01-11 20:39:34 +08:00
Code Issues Projects Releases Wiki Activity

Update Elf.cpp

Browse Source
This commit is contained in:
恍兮惚兮 2024-09-24 10:49:24 +08:00
parent b7254033d6
commit fa654f8002
1 changed files with 35 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

36
LunaHook/engine32/Elf.cpp
View File

@ -461,10 +461,44 @@ namespace
return NewHook(hp, "Elf4");
}
}
namespace
{
bool nvxijiazu()
{
// https://vndb.org/v3327
// 女系家族～淫謀～
BYTE sig[] = {
//clang-format off
0X55,
0x8b, 0xec, // mov ebp,esp
0x51, 0x53, 0x56,
0x8b, 0xf1,
0x66, 0xc7, 0x45, 0xfd, 0x00, 0x00,
0x66, 0x8b, 0x4d, 0x10, // mov ecx,[ebp+10]
0x66, 0x8b, 0xd1,
0x66, 0xc1, 0xea, 0x08,
0x80, 0xfa, 0x81, // cmp dl,0x81
0x72, 0x05,
0x80, 0xfa, 0x9f, // cmp dl,0x9f
0x76, XX,
//clang-format on
};
// clang-format on
ULONG addr = MemDbg::findBytes(sig, sizeof(sig), processStartAddress, processStopAddress);
if (!addr)
return false;
HookParam hp;
hp.address = addr;
hp.type = USING_CHAR | CODEC_ANSI_BE | DATA_INDIRECT; // 不可以NO_CONTEXT，因为有彩色可点击文字，会在另一个context有很多垃圾文本
hp.offset = get_reg(regs::esp);
hp.index = 0x10;
return NewHook(hp, "Elf4");
}
}
bool Elf::attach_function()
{
auto _1 = InsertElfHook() || __() || elf4() || elf3();
auto _1 = InsertElfHook() || __() || elf4() || nvxijiazu() || elf3();
return ScenarioHook::attach(processStartAddress, processStopAddress) || _1;
}