WeChatFerry/Spy/spy.cpp

45 lines
1.2 KiB
C++
Raw Normal View History

2022-08-13 20:03:22 +08:00
#include "load_calls.h"
#include "rpc_server.h"
#include "spy.h"
#include "util.h"
HANDLE g_hEvent = NULL;
2022-08-13 21:55:08 +08:00
BOOL g_rpcKeepAlive = false;
2022-08-13 20:03:22 +08:00
WxCalls_t g_WxCalls = { 0 };
DWORD g_WeChatWinDllAddr = 0;
2022-08-20 15:15:04 +08:00
void InitSpy()
2022-08-13 20:03:22 +08:00
{
wchar_t version[16] = { 0 };
2022-08-20 15:15:04 +08:00
g_WeChatWinDllAddr = (DWORD)GetModuleHandle(L"WeChatWin.dll"); //获取wechatWin模块地址
2022-08-13 20:03:22 +08:00
if (g_WeChatWinDllAddr == 0) {
MessageBox(NULL, L"获取wechatWin.dll模块地址失败", L"错误", 0);
2022-08-20 15:15:04 +08:00
return;
2022-08-13 20:03:22 +08:00
}
if (!GetWeChatVersion(version)) { //获取微信版本
MessageBox(NULL, L"获取微信版本失败", L"错误", 0);
2022-08-20 15:15:04 +08:00
return;
2022-08-13 20:03:22 +08:00
}
if (LoadCalls(version, &g_WxCalls) != 0) { //加载微信版本对应的Call地址
MessageBox(NULL, L"不支持当前版本", L"错误", 0);
2022-08-20 15:15:04 +08:00
return;
2022-08-13 20:03:22 +08:00
}
g_hEvent = CreateEvent(NULL, TRUE, FALSE, NULL);
2022-08-20 15:15:04 +08:00
HANDLE rpcThread = CreateThread(NULL, 0, (LPTHREAD_START_ROUTINE)RpcStartServer, NULL, NULL, 0);
2022-08-13 20:03:22 +08:00
if (rpcThread != 0) {
CloseHandle(rpcThread);
}
}
2022-08-20 15:15:04 +08:00
void DestroySpy(HMODULE hModule)
2022-08-13 23:33:37 +08:00
{
RpcStopServer();
2022-08-20 15:15:04 +08:00
FreeLibraryAndExitThread(hModule, 0);
2022-08-13 23:33:37 +08:00
}
2022-08-13 20:03:22 +08:00
2022-08-13 21:55:08 +08:00
int IsLogin(void) { return (int)GET_DWORD(g_WeChatWinDllAddr + g_WxCalls.login); }