#include namespace Components { Ceg::Ceg() { Utils::Hook::Signature signature(0x401000, 0x740000); // Generic killer caller. signature.add({ "\x56\x8B\x00\x24\x0c\x85\xF6\x7F\x0E", "xx?xxxxxx", [](char* address) { Utils::Hook::Set(address, 0xC3); } }); signature.process(); // Some more generic obfuscation (mov al, 1; retn) Utils::Hook::Set(0x471B20, 0xC301B0); Utils::Hook::Set(0x43A070, 0xC301B0); Utils::Hook::Set(0x4C8B30, 0xC301B0); Utils::Hook::Set(0x469340, 0xC301B0); // Other checks Utils::Hook::Set(0x401000, 0xC301B0); Utils::Hook::Set(0x45F8B0, 0xC301B0); Utils::Hook::Set(0x46FAE0, 0xC301B0); // Removed in 159 SP binaries Utils::Hook::Nop(0x46B173, 9); Utils::Hook::Nop(0x43CA16, 9); Utils::Hook::Nop(0x505426, 9); // Something useless that can be skipped Utils::Hook::Nop(0x4BB671, 2); Utils::Hook::Nop(0x40A54D, 2); // Random checks scattered throughout the binary Utils::Hook::Set(0x499F90, 0xC3); Utils::Hook::Set(0x4FC700, 0xC3); Utils::Hook::Set(0x4C4170, 0xC3); Utils::Hook::Set(0x49E8C0, 0xC3); Utils::Hook::Set(0x42DB00, 0xC3); Utils::Hook::Set(0x4F4CF0, 0xC3); } }