cyonjan/PyWxDump
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

更换更高效的key地址计算方式

Browse Source
This commit is contained in:
xaoyo 2023-10-08 21:46:16 +08:00
parent 8ac366e1a4
commit 75c790079f
1 changed files with 1 additions and 17 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

18
Program/get_wx_info.py
View File

@ -84,17 +84,7 @@ def get_hex(h_process, lp_base_address):
num = 32 num = 32
array2 = (ctypes.c_ubyte * num)() array2 = (ctypes.c_ubyte * num)()
lp_base_address2 = int.from_bytes(array, byteorder='little') # 逆序转换为int地址（key地址）
lp_base_address2 = (
(int(binascii.hexlify(array[7]), 16) << 56) +
(int(binascii.hexlify(array[6]), 16) << 48) +
(int(binascii.hexlify(array[5]), 16) << 40) +
(int(binascii.hexlify(array[4]), 16) << 32) +
(int(binascii.hexlify(array[3]), 16) << 24) +
(int(binascii.hexlify(array[2]), 16) << 16) +
(int(binascii.hexlify(array[1]), 16) << 8) +
int(binascii.hexlify(array[0]), 16)
)
if ctypes.windll.kernel32.ReadProcessMemory(h_process, ctypes.c_void_p(lp_base_address2), ctypes.byref(array2), num, if ctypes.windll.kernel32.ReadProcessMemory(h_process, ctypes.c_void_p(lp_base_address2), ctypes.byref(array2), num,
0) == 0: 0) == 0:
return "" return ""
@ -103,7 +93,6 @@ def get_hex(h_process, lp_base_address):
def get_file_version(file_path): def get_file_version(file_path):
info = win32api.GetFileVersionInfo(file_path, "\\") info = win32api.GetFileVersionInfo(file_path, "\\")
ms = info['FileVersionMS'] ms = info['FileVersionMS']
ls = info['FileVersionLS'] ls = info['FileVersionLS']
@ -111,9 +100,6 @@ def get_file_version(file_path):
# version = parse(file_version) # version = parse(file_version)
return file_version return file_version
# def get_wx_id(h_process, lp_base_address):
def read_info(version_list): def read_info(version_list):
support_list = None support_list = None
@ -137,8 +123,6 @@ def read_info(version_list):
tmp_rd['version'] = file_version_str tmp_rd['version'] = file_version_str
# print("[+] WeChatVersion: " + file_version_str)
if file_version_str not in version_list: if file_version_str not in version_list:
return "[-] WeChat Current Version Is: " + file_version_str + " Not Supported" return "[-] WeChat Current Version Is: " + file_version_str + " Not Supported"
else: else: