cyonjan/PyWxDump
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

缩短使用db_path的运行时间

Browse Source
This commit is contained in:
xaoyo 2023-10-09 12:04:44 +08:00
parent 37c850ae1e
commit b6a7c5df11
1 changed files with 29 additions and 19 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

46
Program/get_base_addr.py
View File

@ -120,26 +120,11 @@ class BaseAddr:
result = self.search_memory_value(key, self.module_name) result = self.search_memory_value(key, self.module_name)
return result return result
def get_key_bias(self, wx_db_path): def get_key_bias(self, wx_db_path, account_bias=0):
wx_db_path = os.path.join(wx_db_path, "Msg", "MicroMsg.db") wx_db_path = os.path.join(wx_db_path, "Msg", "MicroMsg.db")
if not os.path.exists(wx_db_path): if not os.path.exists(wx_db_path):
return False return False
module_name = "WeChatWin.dll"
pm = self.pm
module = pymem.process.module_from_name(pm.process_handle, module_name)
start_addr = module.lpBaseOfDll
size = module.SizeOfImage
mem_data = pm.read_bytes(start_addr, size)
min_addr = 0xffffffffffffffffffffffff
max_addr = 0
for module1 in pm.list_modules():
if module1.lpBaseOfDll < min_addr:
min_addr = module1.lpBaseOfDll
if module1.lpBaseOfDll > max_addr:
max_addr = module1.lpBaseOfDll
def read_key(addr): def read_key(addr):
key = ctypes.create_string_buffer(35) key = ctypes.create_string_buffer(35)
if ReadProcessMemory(pm.process_handle, void_p(addr - 1), key, 35, 0) == 0: if ReadProcessMemory(pm.process_handle, void_p(addr - 1), key, 35, 0) == 0:
@ -180,6 +165,30 @@ class BaseAddr:
return keys[i] return keys[i]
return b"", 0 return b"", 0
module_name = "WeChatWin.dll"
pm = self.pm
module = pymem.process.module_from_name(pm.process_handle, module_name)
start_addr = module.lpBaseOfDll
size = module.SizeOfImage
min_addr = 0xffffffffffffffffffffffff
max_addr = 0
for module1 in pm.list_modules():
if module1.lpBaseOfDll < min_addr:
min_addr = module1.lpBaseOfDll
if module1.lpBaseOfDll > max_addr:
max_addr = module1.lpBaseOfDll
if account_bias > 1:
maybe_key = []
for i in [0x24, 0x40]:
addr = start_addr + account_bias - i
mem_data = pm.read_bytes(addr, 8)
key = read_key(int.from_bytes(mem_data, byteorder='little'))
if key != b"":
maybe_key.append([key, addr - start_addr])
else:
mem_data = pm.read_bytes(start_addr, size)
maybe_key = get_maybe_key(mem_data) maybe_key = get_maybe_key(mem_data)
key, bais = verify_key(maybe_key, wx_db_path) key, bais = verify_key(maybe_key, wx_db_path)
return bais return bais
@ -194,7 +203,7 @@ class BaseAddr:
if self.key: if self.key:
key_bias = self.search_key(self.key) key_bias = self.search_key(self.key)
elif self.db_path: elif self.db_path:
key_bias = self.get_key_bias(self.db_path) key_bias = self.get_key_bias(self.db_path, account_bias)
else: else:
key_bias = 0 key_bias = 0
return {self.version: [name_bias, account_bias, mobile_bias, 0, key_bias]} return {self.version: [name_bias, account_bias, mobile_bias, 0, key_bias]}
@ -224,9 +233,10 @@ if __name__ == '__main__':
key = args.key key = args.key
db_path = args.db_path db_path = args.db_path
st = time.time()
# 调用 run 函数，并传入参数 # 调用 run 函数，并传入参数
rdata = BaseAddr(account, mobile, name, key, db_path).run() rdata = BaseAddr(account, mobile, name, key, db_path).run()
print(f"耗时：{time.time() - st}")
print(rdata) print(rdata)
# 添加到version_list.json # 添加到version_list.json