@@ -4,8 +4,10 @@ var base = Process.findModuleByName("WeChatAppEx.exe").base
44
55
66for ( let key in address ) {
7+
78 address [ key ] = base . add ( address [ key ] ) ;
89}
10+ send ( "[+] WeChatAppEx.exe 注入成功!" ) ;
911
1012function readStdString ( s ) {
1113 var flag = s . add ( 23 ) . readU8 ( )
@@ -38,7 +40,7 @@ function writeStdString(s, content) {
3840 }
3941}
4042
41- //过新版8555检测
43+ // 过新版8555检测
4244if ( address . MenuItemDevToolsString ) {
4345 var menuItemDevToolsStringCr = new Uint8Array ( address . MenuItemDevToolsString . readByteArray ( 7 ) ) ;
4446 var intptr_ = ( menuItemDevToolsStringCr [ 3 ] & 0xFF ) | ( ( menuItemDevToolsStringCr [ 4 ] & 0xFF ) << 8 ) | ( ( menuItemDevToolsStringCr [ 5 ] & 0xFF ) << 16 ) | ( ( menuItemDevToolsStringCr [ 6 ] & 0xFF ) << 24 ) ;
@@ -54,7 +56,6 @@ Interceptor.attach(address.LaunchAppletBegin, {
5456 for ( var i = 0 ; i < 0x1000 ; i += 8 ) {
5557 try {
5658 var s = readStdString ( args [ 2 ] . add ( i ) )
57-
5859 var s1 = s . replaceAll ( "md5" , "md6" )
5960 . replaceAll ( '"enable_vconsole":false' , '"enable_vconsole": true' )
6061 . replaceAll ( '"frameset":false' , '"frameset": true' )
@@ -78,17 +79,23 @@ if(address.WechatVersionSwitch){
7879 send ( "[+] 已还原完整F12" )
7980 }
8081 } )
81- send ( "[+] WeChatAppEx.exe 注入成功!" )
8282
8383} else {
8484
85- Interceptor . attach ( address . WechatWebHtml , {
86- onEnter ( args ) {
87-
88- this . context . rdx = address . WechatWebHtml ;
89- send ( "[+] 已还原完整F12" )
85+ Interceptor . attach ( address . WechatAppHtml , {
86+
87+ onEnter ( args ) {
88+ try {
89+ var _adr = ptr ( "0x00007FF7920CE5BE" ) ;
90+ const newData = [ 0x77 , 0x65 , 0x62 ] ;
91+ Memory . protect ( _adr , 3 , 'rwx' ) ;
92+ Memory . writeByteArray ( _adr , newData ) ;
93+ Memory . readByteArray ( _adr , 3 ) ;
94+ send ( "[+] 已还原完整F12" )
95+ } catch ( error ) {
96+ send ( "发生错误: " + error . message ) ;
97+ }
98+
9099 }
91100} )
92101}
93-
94-
0 commit comments