wip pfree power point fix

popnhax/dllmain.cc

@@ -1822,11 +1822,101 @@ static bool force_show_details_result() {
     return true;
 }
 
+
 uint8_t g_pfree_song_offset = 0x54;
 uint16_t g_pfree_song_offset_2 = 0x558;
-int32_t g_power_point_value = -1;
 void (*popn22_get_powerpoints)();
 void (*popn22_get_chart_level)();
+
+/* POWER POINTS LIST FIX */
+uint8_t g_pplist_idx = 0;   // also serves as elem count
+int32_t g_pplist[20] = {0}; // 20 elements for power_point_list (always ordered)
+int32_t g_power_point_value = -1; // latest value (hook uses update_pplist() to add to g_pplist array)
+int32_t *g_real_pplist; // list that the game retrieves from server
+uint32_t *allocated_pplist_copy;
+
+void pplist_reset()
+{
+        for (int i=0; i<20; i++)
+            g_pplist[i] = -1;
+        g_pplist_idx = 0;
+}
+
+/* add new computed value to the circular buffer */
+void pplist_update()
+{
+    if ( g_power_point_value == -1 )
+        return;
+
+    if ( g_pplist_idx == 20 )
+    {
+        for (int i = 0; i < 19; i++)
+        {
+            g_pplist[i] = g_pplist[i+1];
+        }
+        g_pplist_idx = 19;
+    }
+
+    g_pplist[g_pplist_idx++] = g_power_point_value;
+    g_power_point_value = -1;
+}
+
+void pplist_init()
+{
+    for (int i = 0; i < 20; i++)
+    {
+        g_pplist[i] = g_real_pplist[i];
+    }
+
+    /* in the general case your pplist will be full from the start so this is optimal */
+    g_pplist_idx = 19;
+    while ( g_pplist[g_pplist_idx] == -1 )
+    {
+        if ( g_pplist_idx == 0 )
+            return;
+        g_pplist_idx--;
+    }
+    g_pplist_idx++;
+}
+
+void (*real_pfree_pplist_init)();
+void hook_pfree_pplist_init()
+{
+    __asm("push eax");
+    __asm("push ebx");
+    __asm("lea ebx, [eax+0x1C4]\n");
+    __asm("mov %0, ebx\n":"=m"(g_real_pplist));
+    __asm("call %0\n"::"a"(pplist_init));
+    __asm("pop ebx");
+    __asm("pop eax");
+    real_pfree_pplist_init();
+}
+
+void (*real_pfree_pplist_inject)();
+void hook_pfree_pplist_inject()
+{
+    __asm("lea esi, %0\n"::"m"(g_pplist[g_pplist_idx]));
+    __asm("mov dword ptr [esp+0x40], esi\n");
+
+    __asm("lea esi, %0\n"::"m"(g_pplist));
+    __asm("mov eax, dword ptr [esp+0x3C]\n");
+    __asm("mov %0, eax\n":"=m"(allocated_pplist_copy));
+    __asm("mov dword ptr [esp+0x3C], esi\n");
+    __asm("movzx eax, %0\n"::"m"(g_pplist_idx));
+
+    real_pfree_pplist_inject();
+}
+
+/* restore original pointer so that it can be freed */
+void (*real_pfree_pplist_inject_cleanup)();
+void hook_pfree_pplist_inject_cleanup()
+{
+    __asm("mov esi, %0\n"::"m"(allocated_pplist_copy));
+    __asm("call %0\n"::"a"(pplist_reset));
+
+    real_pfree_pplist_inject_cleanup();
+}
+
 /* hook is installed in stage increment function */
 void (*real_pfree_cleanup)();
 void hook_pfree_cleanup()
@@ -1841,7 +1931,8 @@ void hook_pfree_cleanup()
     __asm("lea esi, dword ptr [esi+ebx]\n");
     __asm("push esi\n");
     __asm("push edi\n");
-	
+    //TODO: FILTRER MUSIC ID SUPERIEUR A 4000
+    //TODO: EST-CE QU'ON FILTRE LES QUICK RETIRE
     /* compute powerpoints before cleanup */
     __asm("mov eax, dword ptr [edi-0x38]\n"); //music id (TODO: check offset dans usaneko->kaimei)
     __asm("push 0\n");
@@ -1867,7 +1958,7 @@ void hook_pfree_cleanup()
     __asm("mov eax, dword ptr [edi]\n"); //score
     __asm("call %0\n"::"b"(popn22_get_powerpoints));
     __asm("mov %0, eax\n":"=a"(g_power_point_value):);
-	//__asm("call %0\n"::"r"(update_pplist));
+    __asm("call %0\n"::"a"(pplist_update));
 
     /* can finally cleanup score */
     __asm("pop edi\n");
@@ -1996,6 +2087,7 @@ pfree_apply:
             return true;
         }
 
+        /* compute and save power points to g_pplist before cleaning up memory zone */
         MH_CreateHook((LPVOID)patch_addr, (LPVOID)hook_pfree_cleanup,
                      (void **)&real_pfree_cleanup);
     }
@@ -2020,7 +2112,51 @@ pfree_apply:
 
         popn22_get_powerpoints = (void(*)()) (data + pattern_offset);
     }
-	//
+    /* init pp_list */
+    {
+        int64_t pattern_offset = search(data, dllSize, "\x6B\xD2\x64\x2B\xCA\x51\x50\x68", 8, 0);
+        if (pattern_offset == -1) {
+        LOG("popnhax: pfree: cannot find power point load function\n");
+            return false;
+        }
+
+        uint64_t patch_addr = (int64_t)data + pattern_offset - 0x1A;
+
+        /* copy power point list to g_pplist on profile load and init g_pplist_idx */
+        MH_CreateHook((LPVOID)patch_addr, (LPVOID)hook_pfree_pplist_init,
+                     (void **)&real_pfree_pplist_init);
+    }
+
+    /* inject pp_list at end of credit */
+    {
+        int64_t pattern_offset = search(data, dllSize, "\x8B\x74\x24\x3C\x66\x8B\x04\x9E", 8, 0);
+        if (pattern_offset == -1) {
+        LOG("popnhax: pfree: cannot find end of credit power point handling function (1)\n");
+            return false;
+        }
+
+        uint64_t patch_addr = (int64_t)data + pattern_offset - 0x07;
+
+        /* make power point list pointers point to g_pplist at the end of processing */
+        MH_CreateHook((LPVOID)patch_addr, (LPVOID)hook_pfree_pplist_inject,
+                     (void **)&real_pfree_pplist_inject);
+    }
+
+    /* restore pp_list pointer so that it is freed at end of credit */
+    {
+        int64_t pattern_offset = search(data, dllSize, "\x7E\x04\x2B\xC1\x8B\xF8\x3B\xF5", 8, 0);
+        if (pattern_offset == -1) {
+        LOG("popnhax: pfree: cannot find end of credit power point handling function (2)\n");
+            return false;
+        }
+
+        uint64_t patch_addr = (int64_t)data + pattern_offset + 0x06;
+
+        /* make power point list pointers point to g_pplist at the end of processing */
+        MH_CreateHook((LPVOID)patch_addr, (LPVOID)hook_pfree_pplist_inject_cleanup,
+                     (void **)&real_pfree_pplist_inject_cleanup);
+    }
+
     LOG("popnhax: premium free enabled\n");
 
     return true;