cyonjan/WeChatFerry
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

feat(message): impl send rich text

Browse Source
This commit is contained in:
Changhua 2025-02-27 00:23:44 +08:00
parent 686673add2
commit 77a3938e1f
3 changed files with 43 additions and 26 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

63
WeChatFerry/spy/message_sender.cpp
View File

@ -47,7 +47,9 @@ Sender::Sender()
func_send_image = reinterpret_cast<SendImage_t>(g_WeChatWinDllAddr + OsSend::IMAGE); func_send_image = reinterpret_cast<SendImage_t>(g_WeChatWinDllAddr + OsSend::IMAGE);
func_get_app_mgr = reinterpret_cast<GetAppMgr_t>(g_WeChatWinDllAddr + OsSend::APP_MGR); func_get_app_mgr = reinterpret_cast<GetAppMgr_t>(g_WeChatWinDllAddr + OsSend::APP_MGR);
func_send_file = reinterpret_cast<SendFile_t>(g_WeChatWinDllAddr + OsSend::FILE); func_send_file = reinterpret_cast<SendFile_t>(g_WeChatWinDllAddr + OsSend::FILE);
func_send_rich_text = reinterpret_cast<SendRichText_t>(g_WeChatWinDllAddr + OS_SEND_RICH_TEXT); func_new_mmreader = reinterpret_cast<New_t>(g_WeChatWinDllAddr + OsSend::NEW_MM_READER);
func_free_mmreader = reinterpret_cast<Free_t>(g_WeChatWinDllAddr + OsSend::FREE_MM_READER);
func_send_rich_text = reinterpret_cast<SendRichText_t>(g_WeChatWinDllAddr + OsSend::RICH_TEXT);
func_send_pat = reinterpret_cast<SendPat_t>(g_WeChatWinDllAddr + OS_SEND_PAT_MSG); func_send_pat = reinterpret_cast<SendPat_t>(g_WeChatWinDllAddr + OS_SEND_PAT_MSG);
func_forward = reinterpret_cast<Forward_t>(g_WeChatWinDllAddr + OS_FORWARD_MSG); func_forward = reinterpret_cast<Forward_t>(g_WeChatWinDllAddr + OS_FORWARD_MSG);
func_get_emotion_mgr = reinterpret_cast<GetEmotionMgr_t>(g_WeChatWinDllAddr + OsSend::EMOTION_MGR); func_get_emotion_mgr = reinterpret_cast<GetEmotionMgr_t>(g_WeChatWinDllAddr + OsSend::EMOTION_MGR);
@ -221,36 +223,49 @@ void Sender::send_emotion(const std::string &wxid, const std::string &path)
int Sender::send_rich_text(const RichText &rt) int Sender::send_rich_text(const RichText &rt)
{ {
#define SRTM_SIZE 0x3F0
QWORD status = -1; QWORD status = -1;
char *buff = static_cast<char *>(HeapAlloc(GetProcessHeap(), 0, SRTM_SIZE)); char *buff = util::AllocBuffer<char>(0x3F0);
if (!buff) { WxString *pReceiver = util::CreateWxString(rt.receiver);
WxString *pTitle = util::CreateWxString(rt.title);
WxString *pUrl = util::CreateWxString(rt.url);
WxString *pThumburl = util::CreateWxString(rt.thumburl);
WxString *pDigest = util::CreateWxString(rt.digest);
WxString *pAccount = util::CreateWxString(rt.account);
WxString *pName = util::CreateWxString(rt.name);
if (!buff || !pReceiver || !pTitle || !pUrl || !pThumburl || !pDigest || !pAccount || !pName) {
util::FreeWxString(pReceiver);
util::FreeWxString(pTitle);
util::FreeWxString(pUrl);
util::FreeWxString(pThumburl);
util::FreeWxString(pDigest);
util::FreeWxString(pAccount);
util::FreeWxString(pName);
util::FreeBuffer(buff);
LOG_ERROR("Out of Memory..."); LOG_ERROR("Out of Memory...");
return -1; return static_cast<int>(status);
} }
memset(buff, 0, SRTM_SIZE); func_new_mmreader(reinterpret_cast<QWORD>(buff));
func_get_instance(reinterpret_cast<QWORD>(buff)); memcpy(buff + 0x8, pTitle, sizeof(WxString));
memcpy(buff + 0x48, pUrl, sizeof(WxString));
memcpy(buff + 0xB0, pThumburl, sizeof(WxString));
memcpy(buff + 0xF0, pDigest, sizeof(WxString));
memcpy(buff + 0x2C0, pAccount, sizeof(WxString));
memcpy(buff + 0x2E0, pName, sizeof(WxString));
auto pReceiver = new_wx_string(rt.receiver); status = func_send_rich_text(func_get_app_mgr(), pReceiver, buff);
auto pTitle = new_wx_string(rt.title); func_free_mmreader(reinterpret_cast<QWORD>(buff));
auto pUrl = new_wx_string(rt.url);
auto pThumburl = new_wx_string(rt.thumburl);
auto pDigest = new_wx_string(rt.digest);
auto pAccount = new_wx_string(rt.account);
auto pName = new_wx_string(rt.name);
memcpy(buff + 0x8, pTitle.get(), sizeof(WxString)); // TODO: 验证是否有内存泄露
memcpy(buff + 0x48, pUrl.get(), sizeof(WxString)); // util::FreeWxString(pReceiver);
memcpy(buff + 0xB0, pThumburl.get(), sizeof(WxString)); // util::FreeWxString(pTitle);
memcpy(buff + 0xF0, pDigest.get(), sizeof(WxString)); // util::FreeWxString(pUrl);
memcpy(buff + 0x2C0, pAccount.get(), sizeof(WxString)); // util::FreeWxString(pThumburl);
memcpy(buff + 0x2E0, pName.get(), sizeof(WxString)); // util::FreeWxString(pDigest);
// util::FreeWxString(pAccount);
QWORD mgr = func_get_app_mgr(); // util::FreeWxString(pName);
status = func_send_rich_text(mgr, reinterpret_cast<QWORD>(pReceiver.get()), reinterpret_cast<QWORD>(buff)); util::FreeBuffer(buff);
func_free_chat_msg(reinterpret_cast<QWORD>(buff));
return static_cast<int>(status); return static_cast<int>(status);
} }

4
WeChatFerry/spy/message_sender.h
View File

@ -50,7 +50,7 @@ private:
using SendImage_t = QWORD (*)(QWORD, QWORD, QWORD, QWORD, QWORD); using SendImage_t = QWORD (*)(QWORD, QWORD, QWORD, QWORD, QWORD);
using SendFile_t = QWORD (*)(QWORD, char *, WxString *, WxString *, QWORD, QWORD *, QWORD, QWORD *, QWORD, QWORD *, using SendFile_t = QWORD (*)(QWORD, char *, WxString *, WxString *, QWORD, QWORD *, QWORD, QWORD *, QWORD, QWORD *,
QWORD, QWORD); QWORD, QWORD);
using SendRichText_t = QWORD (*)(QWORD, QWORD, QWORD); using SendRichText_t = QWORD (*)(QWORD, WxString *, char *);
using SendPat_t = QWORD (*)(QWORD, QWORD); using SendPat_t = QWORD (*)(QWORD, QWORD);
using Forward_t = QWORD (*)(QWORD, QWORD, QWORD, QWORD); using Forward_t = QWORD (*)(QWORD, QWORD, QWORD, QWORD);
using GetEmotionMgr_t = QWORD (*)(); using GetEmotionMgr_t = QWORD (*)();
@ -65,6 +65,8 @@ private:
SendText_t func_send_text; SendText_t func_send_text;
SendImage_t func_send_image; SendImage_t func_send_image;
SendFile_t func_send_file; SendFile_t func_send_file;
New_t func_new_mmreader;
Free_t func_free_mmreader;
SendRichText_t func_send_rich_text; SendRichText_t func_send_rich_text;
SendPat_t func_send_pat; SendPat_t func_send_pat;
Forward_t func_forward; Forward_t func_forward;

2
WeChatFerry/spy/rpc_server.cpp
View File

@ -253,7 +253,7 @@ const std::unordered_map<Functions, RpcServer::FunctionHandler> RpcServer::rpcFu
{ Functions_FUNC_SEND_FILE, [](const Request &r, uint8_t *out, size_t *len) { return RpcServer::getInstance().sender_.rpc_send_file(r.msg.file, out, len); } }, { Functions_FUNC_SEND_FILE, [](const Request &r, uint8_t *out, size_t *len) { return RpcServer::getInstance().sender_.rpc_send_file(r.msg.file, out, len); } },
{ Functions_FUNC_SEND_XML, [](const Request &r, uint8_t *out, size_t *len) { return RpcServer::getInstance().sender_.rpc_send_xml(r.msg.xml, out, len); } }, { Functions_FUNC_SEND_XML, [](const Request &r, uint8_t *out, size_t *len) { return RpcServer::getInstance().sender_.rpc_send_xml(r.msg.xml, out, len); } },
{ Functions_FUNC_SEND_EMOTION, [](const Request &r, uint8_t *out, size_t *len) { return RpcServer::getInstance().sender_.rpc_send_emotion(r.msg.file, out, len); } }, { Functions_FUNC_SEND_EMOTION, [](const Request &r, uint8_t *out, size_t *len) { return RpcServer::getInstance().sender_.rpc_send_emotion(r.msg.file, out, len); } },
// { Functions_FUNC_SEND_RICH_TXT, [](const Request &r, uint8_t *out, size_t *len) { return sender.rpc_send_rich_text(r.msg.rt, out, len); } }, { Functions_FUNC_SEND_RICH_TXT, [](const Request &r, uint8_t *out, size_t *len) { return RpcServer::getInstance().sender_.rpc_send_rich_text(r.msg.rt, out, len); } },
// { Functions_FUNC_SEND_PAT_MSG, [](const Request &r, uint8_t *out, size_t *len) { return sender.rpc_send_pat(r.msg.pm, out, len); } }, // { Functions_FUNC_SEND_PAT_MSG, [](const Request &r, uint8_t *out, size_t *len) { return sender.rpc_send_pat(r.msg.pm, out, len); } },
// { Functions_FUNC_FORWARD_MSG, [](const Request &r, uint8_t *out, size_t *len) { return sender.rpc_forward(r.msg.fm, out, len); } }, // { Functions_FUNC_FORWARD_MSG, [](const Request &r, uint8_t *out, size_t *len) { return sender.rpc_forward(r.msg.fm, out, len); } },
// { Functions_FUNC_EXEC_DB_QUERY, [](const Request &r, uint8_t *out, size_t *len) { return db::rpc_exec_db_query(r.msg.query, out, len); } }, // { Functions_FUNC_EXEC_DB_QUERY, [](const Request &r, uint8_t *out, size_t *len) { return db::rpc_exec_db_query(r.msg.query, out, len); } },