mirror of
https://github.com/HIllya51/LunaHook.git
synced 2024-12-26 21:24:12 +08:00
51 lines
1.4 KiB
C++
51 lines
1.4 KiB
C++
#include"Regista.h"
|
||
namespace{
|
||
//ルートダブル -Before Crime * After Days-
|
||
bool old() {
|
||
const BYTE bytes[] = {
|
||
0x8a, 0x10, 0x83, 0xC0, 0x04, 0x83, 0xc1, 0x04, 0x84, 0xd2, 0x74
|
||
};
|
||
auto addr = MemDbg::findBytes(bytes, sizeof(bytes), processStartAddress, processStopAddress);
|
||
ConsoleOutput("%p", addr);
|
||
if (addr == 0)return false;
|
||
|
||
addr = findfuncstart(addr,0x40);
|
||
ConsoleOutput("%p", addr);
|
||
if (addr == 0)return false;
|
||
HookParam hp;
|
||
hp.address = addr;
|
||
hp.offset=get_stack(1);
|
||
hp.type = DATA_INDIRECT;
|
||
hp.index = 0;
|
||
return NewHook(hp, "Regista");
|
||
}
|
||
bool _2(){
|
||
const BYTE bytes[] = {
|
||
//old不是很好，old是strcmp，有很多乱七八糟的，这个是脚本的一些控制字符判断和shiftjis范围判断。
|
||
0x80 ,0xF9 ,0x81 ,
|
||
XX2,
|
||
0x80 ,0xF9 ,0x9F,
|
||
XX2,
|
||
0x80 ,0xF9 ,0xE0,
|
||
XX2,
|
||
0x80 ,0xF9 ,0xFC,
|
||
};
|
||
auto addr = MemDbg::findBytes(bytes, sizeof(bytes), processStartAddress, processStopAddress);
|
||
ConsoleOutput("%p", addr);
|
||
if (addr == 0)return false;
|
||
const BYTE start[] = {
|
||
0xCC,0xCC,0xCC,0xCC
|
||
};
|
||
addr = reverseFindBytes(start, sizeof(start), addr - 0x40, addr);
|
||
if (addr == 0)return false;
|
||
HookParam hp;
|
||
hp.address = addr+4;
|
||
hp.offset=get_reg(regs::edx);
|
||
hp.type=USING_STRING;
|
||
return NewHook(hp, "Regista");
|
||
}
|
||
}
|
||
|
||
bool Regista::attach_function() {
|
||
return _2()||old();
|
||
} |