Skip to content

C
ComWeChatRobot

hzlo_o / ComWeChatRobot
与 Fork 源项目一致

从无法访问的项目Fork

通知 1
Star 0
Fork 0
C
ComWeChatRobot

前往新版Gitcode，体验更适合开发者的 AI 搜索 >>

提交 72c20b62 编写于 作者: L ljc545w
浏览文件
操作

新增获取A8Key功能

上级 7fc9898a
隐藏空白更改
内联 并排
Showing with 485 addition and 84 deletion
CWeChatRobot/GetA8Key.cpp 0 → 100644
浏览文件 @ 72c20b62
#include "pch.h"
struct GetA8KeyRespStruct
{
DWORD message;
DWORD length;
};
wstring GetA8Key(DWORD pid, wchar_t *url)
{
WeChatProcess hp(pid);
if (!hp.m_init)
return L"";
DWORD GetA8KeyReomteAddr = hp.GetProcAddr(GetA8KeyRemote);
if (GetA8KeyReomteAddr == 0)
{
return L"";
}
WeChatData<wchar_t *> r_url(hp.GetHandle(), url, TEXTLENGTH(url));
if (!r_url.GetAddr())
{
return L"";
}
DWORD dwRet = CallRemoteFunction(hp.GetHandle(), GetA8KeyReomteAddr, r_url.GetAddr());
DWORD dwReadSize;
GetA8KeyRespStruct ret_info = {0};
ReadProcessMemory(hp.GetHandle(), (LPCVOID)dwRet, &ret_info, sizeof(ret_info), &dwReadSize);
if (ret_info.message == 0)
return L"";
unique_ptr<char[]> buffer(new char[ret_info.length + 1]());
ReadProcessMemory(hp.GetHandle(), (LPCVOID)ret_info.message, buffer.get(), ret_info.length, &dwReadSize);
string result(buffer.get(), ret_info.length);
wstring wresult = gb2312_to_unicode(result.c_str());
return wresult;
}
CWeChatRobot/GetA8Key.h 0 → 100644
浏览文件 @ 72c20b62
#pragma once
#include <windows.h>
#include <iostream>
using namespace std;
wstring GetA8Key(DWORD pid, wchar_t *url);
CWeChatRobot/WeChatRobot.cpp
浏览文件 @ 72c20b62
......@@ -579,3 +579,14 @@ STDMETHODIMP CWeChatRobot::CGetQrcodeImage(DWORD pid, VARIANT *__result)
*__result = GetQrcodeImage(pid);
return S_OK;
}
/*
* 参数0：目标进程pid
* 参数1：公众号文章链接
* 参数2：预返回的值，调用时无需提供
*/
STDMETHODIMP CWeChatRobot::CGetA8Key(DWORD pid, BSTR url, BSTR *__result)
{
*__result = (_bstr_t)GetA8Key(pid, url).c_str();
return S_OK;
}
CWeChatRobot/WeChatRobot.h
浏览文件 @ 72c20b62
......@@ -87,6 +87,7 @@ public:
STDMETHODIMP CGetHistoryPublicMsg(DWORD pid, BSTR PublicId, BSTR Offset, VARIANT *__result);
STDMETHODIMP CForwardMessage(DWORD pid, BSTR wxid, ULONG64 msgid, int *__result);
STDMETHODIMP CGetQrcodeImage(DWORD pid, VARIANT *__result);
STDMETHODIMP CGetA8Key(DWORD pid, BSTR url, BSTR *__result);
};
OBJECT_ENTRY_AUTO(__uuidof(WeChatRobot), CWeChatRobot)
CWeChatRobot/WeChatRobotCOM.idl
浏览文件 @ 72c20b62
......@@ -62,6 +62,7 @@ interface IWeChatRobot : IDispatch
[id(47), helpstring("获取公众号历史消息")] HRESULT CGetHistoryPublicMsg([in] DWORD pid, [in] BSTR PublicId, [in] BSTR Offset, [out, retval] VARIANT * __result);
[id(48), helpstring("转发消息") ] HRESULT CForwardMessage([in] DWORD pid, [in] BSTR wxid, [in] unsigned long long localId, [out, retval] int * __result);
[id(49), helpstring("获取二维码")] HRESULT CGetQrcodeImage([in] DWORD pid, [out, retval] VARIANT * __result);
[id(50), helpstring("获取二维码")] HRESULT CGetA8Key([in] DWORD pid, [in] BSTR url, [ out, retval ] BSTR * __result);
};
[
object,
......
CWeChatRobot/WeChatRobotCOM.vcxproj
浏览文件 @ 72c20b62
......@@ -232,6 +232,7 @@
<ClInclude Include="ForwardMessage.h" />
<ClInclude Include="framework.h" />
<ClInclude Include="FriendList.h" />
<ClInclude Include="GetA8Key.h" />
<ClInclude Include="GetChatRoomMemberNickname.h" />
<ClInclude Include="GetChatRoomMembers.h" />
<ClInclude Include="GetDbHandles.h" />
......@@ -280,6 +281,7 @@
<ClCompile Include="EditRemark.cpp" />
<ClCompile Include="ForwardMessage.cpp" />
<ClCompile Include="FriendList.cpp" />
<ClCompile Include="GetA8Key.cpp" />
<ClCompile Include="GetChatRoomMemberNickname.cpp" />
<ClCompile Include="GetChatRoomMembers.cpp" />
<ClCompile Include="GetDbHandles.cpp" />
......
CWeChatRobot/WeChatRobotCOM.vcxproj.filters
浏览文件 @ 72c20b62
......@@ -131,6 +131,9 @@
<Filter Include="二维码">
<UniqueIdentifier>{fb5a07d9-648d-4e1c-aed3-158f872c3d3e}</UniqueIdentifier>
</Filter>
<Filter Include="浏览器相关\获取A8Key">
<UniqueIdentifier>{caeac105-0e3b-497e-a73e-f1233b3888aa}</UniqueIdentifier>
</Filter>
</ItemGroup>
<ItemGroup>
<ClInclude Include="framework.h">
......@@ -268,6 +271,9 @@
<ClInclude Include="GetQrcodeImage.h">
<Filter>二维码</Filter>
</ClInclude>
<ClInclude Include="GetA8Key.h">
<Filter>浏览器相关\获取A8Key</Filter>
</ClInclude>
</ItemGroup>
<ItemGroup>
<ClCompile Include="WeChatRobotCOM.cpp">
......@@ -405,6 +411,9 @@
<ClCompile Include="GetQrcodeImage.cpp">
<Filter>二维码</Filter>
</ClCompile>
<ClCompile Include="GetA8Key.cpp">
<Filter>浏览器相关\获取A8Key</Filter>
</ClCompile>
</ItemGroup>
<ItemGroup>
<ResourceCompile Include="WeChatRobotCOM.rc">
......
CWeChatRobot/WeChatRobotCOM_i.h
浏览文件 @ 72c20b62
......@@ -355,6 +355,11 @@ EXTERN_C const IID IID_IWeChatRobot;
/* [in] */ DWORD pid,
/* [retval][out] */ VARIANT *__result) = 0;
virtual /* [helpstring][id] */ HRESULT STDMETHODCALLTYPE CGetA8Key(
/* [in] */ DWORD pid,
/* [in] */ BSTR url,
/* [retval][out] */ BSTR *__result) = 0;
};
......@@ -700,6 +705,12 @@ EXTERN_C const IID IID_IWeChatRobot;
/* [in] */ DWORD pid,
/* [retval][out] */ VARIANT *__result);
/* [helpstring][id] */ HRESULT ( STDMETHODCALLTYPE *CGetA8Key )(
IWeChatRobot * This,
/* [in] */ DWORD pid,
/* [in] */ BSTR url,
/* [retval][out] */ BSTR *__result);
END_INTERFACE
} IWeChatRobotVtbl;
......@@ -874,6 +885,9 @@ EXTERN_C const IID IID_IWeChatRobot;
#define IWeChatRobot_CGetQrcodeImage(This,pid,__result) \
( (This)->lpVtbl -> CGetQrcodeImage(This,pid,__result) )
#define IWeChatRobot_CGetA8Key(This,pid,url,__result) \
( (This)->lpVtbl -> CGetA8Key(This,pid,url,__result) )
#endif /* COBJMACROS */
......
CWeChatRobot/WeChatRobotCOM_p.c
浏览文件 @ 72c20b62
......@@ -49,7 +49,7 @@
#include "WeChatRobotCOM_i.h"
#define TYPE_FORMAT_STRING_SIZE 1239
#define PROC_FORMAT_STRING_SIZE 2383
#define PROC_FORMAT_STRING_SIZE 2431
#define EXPR_FORMAT_STRING_SIZE 1
#define TRANSMIT_AS_TABLE_SIZE 0
#define WIRE_MARSHAL_TABLE_SIZE 2
......@@ -2194,20 +2194,20 @@ static const WeChatRobotCOM_MIDL_PROC_FORMAT_STRING WeChatRobotCOM__MIDL_ProcFor
/* 2272 */ 0x8, /* FC_LONG */
0x0, /* 0 */
/* Procedure CPostMessage */
/* Procedure CGetA8Key */
/* 2274 */ 0x33, /* FC_AUTO_HANDLE */
0x6c, /* Old Flags: object, Oi2 */
/* 2276 */ NdrFcLong( 0x0 ), /* 0 */
/* 2280 */ NdrFcShort( 0x7 ), /* 7 */
/* 2282 */ NdrFcShort( 0x20 ), /* x86 Stack size/offset = 32 */
/* 2284 */ NdrFcShort( 0x20 ), /* 32 */
/* 2286 */ NdrFcShort( 0x24 ), /* 36 */
/* 2288 */ 0x46, /* Oi2 Flags: clt must size, has return, has ext, */
0x6, /* 6 */
/* 2280 */ NdrFcShort( 0x35 ), /* 53 */
/* 2282 */ NdrFcShort( 0x14 ), /* x86 Stack size/offset = 20 */
/* 2284 */ NdrFcShort( 0x8 ), /* 8 */
/* 2286 */ NdrFcShort( 0x8 ), /* 8 */
/* 2288 */ 0x47, /* Oi2 Flags: srv must size, clt must size, has return, has ext, */
0x4, /* 4 */
/* 2290 */ 0x8, /* 8 */
0x45, /* Ext Flags: new corr desc, srv corr check, has range on conformance */
/* 2292 */ NdrFcShort( 0x0 ), /* 0 */
0x47, /* Ext Flags: new corr desc, clt corr check, srv corr check, has range on conformance */
/* 2292 */ NdrFcShort( 0x1 ), /* 1 */
/* 2294 */ NdrFcShort( 0x1 ), /* 1 */
/* 2296 */ NdrFcShort( 0x0 ), /* 0 */
......@@ -2218,83 +2218,126 @@ static const WeChatRobotCOM_MIDL_PROC_FORMAT_STRING WeChatRobotCOM__MIDL_ProcFor
/* 2302 */ 0x8, /* FC_LONG */
0x0, /* 0 */
/* Parameter msgtype */
/* Parameter url */
/* 2304 */ NdrFcShort( 0x48 ), /* Flags: in, base type, */
/* 2304 */ NdrFcShort( 0x8b ), /* Flags: must size, must free, in, by val, */
/* 2306 */ NdrFcShort( 0x8 ), /* x86 Stack size/offset = 8 */
/* 2308 */ 0x8, /* FC_LONG */
/* 2308 */ NdrFcShort( 0x2a ), /* Type Offset=42 */
/* Parameter __result */
/* 2310 */ NdrFcShort( 0x2113 ), /* Flags: must size, must free, out, simple ref, srv alloc size=8 */
/* 2312 */ NdrFcShort( 0xc ), /* x86 Stack size/offset = 12 */
/* 2314 */ NdrFcShort( 0x4ba ), /* Type Offset=1210 */
/* Return value */
/* 2316 */ NdrFcShort( 0x70 ), /* Flags: out, return, base type, */
/* 2318 */ NdrFcShort( 0x10 ), /* x86 Stack size/offset = 16 */
/* 2320 */ 0x8, /* FC_LONG */
0x0, /* 0 */
/* Procedure CPostMessage */
/* 2322 */ 0x33, /* FC_AUTO_HANDLE */
0x6c, /* Old Flags: object, Oi2 */
/* 2324 */ NdrFcLong( 0x0 ), /* 0 */
/* 2328 */ NdrFcShort( 0x7 ), /* 7 */
/* 2330 */ NdrFcShort( 0x20 ), /* x86 Stack size/offset = 32 */
/* 2332 */ NdrFcShort( 0x20 ), /* 32 */
/* 2334 */ NdrFcShort( 0x24 ), /* 36 */
/* 2336 */ 0x46, /* Oi2 Flags: clt must size, has return, has ext, */
0x6, /* 6 */
/* 2338 */ 0x8, /* 8 */
0x45, /* Ext Flags: new corr desc, srv corr check, has range on conformance */
/* 2340 */ NdrFcShort( 0x0 ), /* 0 */
/* 2342 */ NdrFcShort( 0x1 ), /* 1 */
/* 2344 */ NdrFcShort( 0x0 ), /* 0 */
/* Parameter pid */
/* 2346 */ NdrFcShort( 0x48 ), /* Flags: in, base type, */
/* 2348 */ NdrFcShort( 0x4 ), /* x86 Stack size/offset = 4 */
/* 2350 */ 0x8, /* FC_LONG */
0x0, /* 0 */
/* Parameter msgtype */
/* 2352 */ NdrFcShort( 0x48 ), /* Flags: in, base type, */
/* 2354 */ NdrFcShort( 0x8 ), /* x86 Stack size/offset = 8 */
/* 2356 */ 0x8, /* FC_LONG */
0x0, /* 0 */
/* Parameter msgid */
/* 2310 */ NdrFcShort( 0x48 ), /* Flags: in, base type, */
/* 2312 */ NdrFcShort( 0xc ), /* x86 Stack size/offset = 12 */
/* 2314 */ 0xb, /* FC_HYPER */
/* 2358 */ NdrFcShort( 0x48 ), /* Flags: in, base type, */
/* 2360 */ NdrFcShort( 0xc ), /* x86 Stack size/offset = 12 */
/* 2362 */ 0xb, /* FC_HYPER */
0x0, /* 0 */
/* Parameter msg */
/* 2316 */ NdrFcShort( 0x10b ), /* Flags: must size, must free, in, simple ref, */
/* 2318 */ NdrFcShort( 0x14 ), /* x86 Stack size/offset = 20 */
/* 2320 */ NdrFcShort( 0x4cc ), /* Type Offset=1228 */
/* 2364 */ NdrFcShort( 0x10b ), /* Flags: must size, must free, in, simple ref, */
/* 2366 */ NdrFcShort( 0x14 ), /* x86 Stack size/offset = 20 */
/* 2368 */ NdrFcShort( 0x4cc ), /* Type Offset=1228 */
/* Parameter __result */
/* 2322 */ NdrFcShort( 0x2150 ), /* Flags: out, base type, simple ref, srv alloc size=8 */
/* 2324 */ NdrFcShort( 0x18 ), /* x86 Stack size/offset = 24 */
/* 2326 */ 0x8, /* FC_LONG */
/* 2370 */ NdrFcShort( 0x2150 ), /* Flags: out, base type, simple ref, srv alloc size=8 */
/* 2372 */ NdrFcShort( 0x18 ), /* x86 Stack size/offset = 24 */
/* 2374 */ 0x8, /* FC_LONG */
0x0, /* 0 */
/* Return value */
/* 2328 */ NdrFcShort( 0x70 ), /* Flags: out, return, base type, */
/* 2330 */ NdrFcShort( 0x1c ), /* x86 Stack size/offset = 28 */
/* 2332 */ 0x8, /* FC_LONG */
/* 2376 */ NdrFcShort( 0x70 ), /* Flags: out, return, base type, */
/* 2378 */ NdrFcShort( 0x1c ), /* x86 Stack size/offset = 28 */
/* 2380 */ 0x8, /* FC_LONG */
0x0, /* 0 */
/* Procedure CRegisterWxPidWithCookie */
/* 2334 */ 0x33, /* FC_AUTO_HANDLE */
/* 2382 */ 0x33, /* FC_AUTO_HANDLE */
0x6c, /* Old Flags: object, Oi2 */
/* 2336 */ NdrFcLong( 0x0 ), /* 0 */
/* 2340 */ NdrFcShort( 0x8 ), /* 8 */
/* 2342 */ NdrFcShort( 0x14 ), /* x86 Stack size/offset = 20 */
/* 2344 */ NdrFcShort( 0x10 ), /* 16 */
/* 2346 */ NdrFcShort( 0x24 ), /* 36 */
/* 2348 */ 0x44, /* Oi2 Flags: has return, has ext, */
/* 2384 */ NdrFcLong( 0x0 ), /* 0 */
/* 2388 */ NdrFcShort( 0x8 ), /* 8 */
/* 2390 */ NdrFcShort( 0x14 ), /* x86 Stack size/offset = 20 */
/* 2392 */ NdrFcShort( 0x10 ), /* 16 */
/* 2394 */ NdrFcShort( 0x24 ), /* 36 */
/* 2396 */ 0x44, /* Oi2 Flags: has return, has ext, */
0x4, /* 4 */
/* 2350 */ 0x8, /* 8 */
/* 2398 */ 0x8, /* 8 */
0x41, /* Ext Flags: new corr desc, has range on conformance */
/* 2352 */ NdrFcShort( 0x0 ), /* 0 */
/* 2354 */ NdrFcShort( 0x0 ), /* 0 */
/* 2356 */ NdrFcShort( 0x0 ), /* 0 */
/* 2400 */ NdrFcShort( 0x0 ), /* 0 */
/* 2402 */ NdrFcShort( 0x0 ), /* 0 */
/* 2404 */ NdrFcShort( 0x0 ), /* 0 */
/* Parameter pid */
/* 2358 */ NdrFcShort( 0x48 ), /* Flags: in, base type, */
/* 2360 */ NdrFcShort( 0x4 ), /* x86 Stack size/offset = 4 */
/* 2362 */ 0x8, /* FC_LONG */
/* 2406 */ NdrFcShort( 0x48 ), /* Flags: in, base type, */
/* 2408 */ NdrFcShort( 0x4 ), /* x86 Stack size/offset = 4 */
/* 2410 */ 0x8, /* FC_LONG */
0x0, /* 0 */
/* Parameter cookie */
/* 2364 */ NdrFcShort( 0x48 ), /* Flags: in, base type, */
/* 2366 */ NdrFcShort( 0x8 ), /* x86 Stack size/offset = 8 */
/* 2368 */ 0x8, /* FC_LONG */
/* 2412 */ NdrFcShort( 0x48 ), /* Flags: in, base type, */
/* 2414 */ NdrFcShort( 0x8 ), /* x86 Stack size/offset = 8 */
/* 2416 */ 0x8, /* FC_LONG */
0x0, /* 0 */
/* Parameter __result */
/* 2370 */ NdrFcShort( 0x2150 ), /* Flags: out, base type, simple ref, srv alloc size=8 */
/* 2372 */ NdrFcShort( 0xc ), /* x86 Stack size/offset = 12 */
/* 2374 */ 0x8, /* FC_LONG */
/* 2418 */ NdrFcShort( 0x2150 ), /* Flags: out, base type, simple ref, srv alloc size=8 */
/* 2420 */ NdrFcShort( 0xc ), /* x86 Stack size/offset = 12 */
/* 2422 */ 0x8, /* FC_LONG */
0x0, /* 0 */
/* Return value */
/* 2376 */ NdrFcShort( 0x70 ), /* Flags: out, return, base type, */
/* 2378 */ NdrFcShort( 0x10 ), /* x86 Stack size/offset = 16 */
/* 2380 */ 0x8, /* FC_LONG */
/* 2424 */ NdrFcShort( 0x70 ), /* Flags: out, return, base type, */
/* 2426 */ NdrFcShort( 0x10 ), /* x86 Stack size/offset = 16 */
/* 2428 */ 0x8, /* FC_LONG */
0x0, /* 0 */
0x0
......@@ -3187,7 +3230,8 @@ static const unsigned short IWeChatRobot_FormatStringOffsetTable[] =
2076,
2124,
2178,
2232
2232,
2274
};
static const MIDL_STUBLESS_PROXY_INFO IWeChatRobot_ProxyInfo =
......@@ -3211,7 +3255,7 @@ static const MIDL_SERVER_INFO IWeChatRobot_ServerInfo =
0,
0,
0};
CINTERFACE_PROXY_VTABLE(53) _IWeChatRobotProxyVtbl =
CINTERFACE_PROXY_VTABLE(54) _IWeChatRobotProxyVtbl =
{
&IWeChatRobot_ProxyInfo,
&IID_IWeChatRobot,
......@@ -3267,7 +3311,8 @@ CINTERFACE_PROXY_VTABLE(53) _IWeChatRobotProxyVtbl =
(void *) (INT_PTR) -1 /* IWeChatRobot::COpenBrowser */ ,
(void *) (INT_PTR) -1 /* IWeChatRobot::CGetHistoryPublicMsg */ ,
(void *) (INT_PTR) -1 /* IWeChatRobot::CForwardMessage */ ,
(void *) (INT_PTR) -1 /* IWeChatRobot::CGetQrcodeImage */
(void *) (INT_PTR) -1 /* IWeChatRobot::CGetQrcodeImage */ ,
(void *) (INT_PTR) -1 /* IWeChatRobot::CGetA8Key */
};
......@@ -3322,6 +3367,7 @@ static const PRPC_STUB_FUNCTION IWeChatRobot_table[] =
NdrStubCall2,
NdrStubCall2,
NdrStubCall2,
NdrStubCall2,
NdrStubCall2
};
......@@ -3329,7 +3375,7 @@ CInterfaceStubVtbl _IWeChatRobotStubVtbl =
{
&IID_IWeChatRobot,
&IWeChatRobot_ServerInfo,
53,
54,
&IWeChatRobot_table[-3],
CStdStubBuffer_DELEGATING_METHODS
};
......@@ -3345,8 +3391,8 @@ static const unsigned short IRobotEvent_FormatStringOffsetTable[] =
(unsigned short) -1,
(unsigned short) -1,
(unsigned short) -1,
2274,
2334
2322,
2382
};
static const MIDL_STUBLESS_PROXY_INFO IRobotEvent_ProxyInfo =
......
CWeChatRobot/robotdata.h
浏览文件 @ 72c20b62
......@@ -31,6 +31,7 @@
#include "GetHistoryPublicMsg.h"
#include "ForwardMessage.h"
#include "GetQrcodeImage.h"
#include "GetA8Key.h"
#define DLLNAME L"DWeChatRobot.dll"
......@@ -91,3 +92,4 @@
#define OpenBrowserRemote "OpenBrowserRemote"
#define GetHistoryPublicMsgRemote "GetHistoryPublicMsgRemote"
#define GetQrcodeImageRemote "GetQrcodeImageRemote"
#define GetA8KeyRemote "GetA8KeyRemote"
DWeChatRobot/DWeChatRobot.vcxproj
浏览文件 @ 72c20b62
......@@ -320,6 +320,7 @@ xcopy /y /d "$(OutDir)..\..\Python\http\wxDriver.py" "$(SolutionDir)build\http
<ClInclude Include="ForwardMessage.h" />
<ClInclude Include="framework.h" />
<ClInclude Include="FriendList.h" />
<ClInclude Include="GetA8Key.h" />
<ClInclude Include="GetChatRoomMemberNickname.h" />
<ClInclude Include="GetChatRoomMembers.h" />
<ClInclude Include="GetDbHandles.h" />
......@@ -366,6 +367,7 @@ xcopy /y /d "$(OutDir)..\..\Python\http\wxDriver.py" "$(SolutionDir)build\http
<ClCompile Include="EditRemark.cpp" />
<ClCompile Include="ForwardMessage.cpp" />
<ClCompile Include="FriendList.cpp" />
<ClCompile Include="GetA8Key.cpp" />
<ClCompile Include="GetChatRoomMemberNickname.cpp" />
<ClCompile Include="GetChatRoomMemebers.cpp" />
<ClCompile Include="GetDbHandles.cpp" />
......
DWeChatRobot/DWeChatRobot.vcxproj.filters
浏览文件 @ 72c20b62
......@@ -130,6 +130,9 @@
<Filter Include="二维码">
<UniqueIdentifier>{a0a64bc2-f48e-41a0-838a-45b9985f8d68}</UniqueIdentifier>
</Filter>
<Filter Include="浏览器相关\获取A8Key">
<UniqueIdentifier>{10054e30-1115-49df-b387-07c207f6cac4}</UniqueIdentifier>
</Filter>
</ItemGroup>
<ItemGroup>
<ClInclude Include="framework.h">
......@@ -255,6 +258,9 @@
<ClInclude Include="wxsignal.h">
<Filter>通用标头</Filter>
</ClInclude>
<ClInclude Include="GetA8Key.h">
<Filter>浏览器相关\获取A8Key</Filter>
</ClInclude>
</ItemGroup>
<ItemGroup>
<ClCompile Include="dllmain.cpp">
......@@ -383,5 +389,8 @@
<ClCompile Include="GetQrcodeImage.cpp">
<Filter>二维码</Filter>
</ClCompile>
<ClCompile Include="GetA8Key.cpp">
<Filter>浏览器相关\获取A8Key</Filter>
</ClCompile>
</ItemGroup>
</Project>
DWeChatRobot/GetA8Key.cpp 0 → 100644
浏览文件 @ 72c20b62
#include "pch.h"
#include "json/json.hpp"
using namespace nlohmann;
#define GetBufferCallOffset 0x79C2F9FD - 0x78220000
#define GetA8KeyCall1Offset 0x78991980 - 0x78220000
#define GetA8KeyCall2Offset 0x78801650 - 0x78220000
#define GetA8KeyCall3Offset 0x784B98F0 - 0x78220000
#define GetA8KeyCall4Offset 0x783441F0 - 0x78220000
#define GetA8KeyCall5Offset 0x787B9490 - 0x78220000
#define DelNetSceneA8KeyCallOffset 0x105E1B40 - 0x10000000
#define HookA8KeyAddrOffset 0x78BD368E - 0x785F0000
#define HookA8KeyJmpBackAddrOffset 0x78BD3704 - 0x785F0000
static BOOL A8KeyBufHooked = FALSE;
static char A8KeyBufOldAsmCode[5] = {0};
static DWORD HookAddr = 0;
static DWORD JmpBackAddr = 0;
static string response = "";
static DWORD SignalThreadId = 0;
void GetA8KeyBuf(DWORD addr)
{
json jData;
DWORD p_url = *(DWORD *)(addr + 0x8);
int length = *(int *)(p_url + 0x10);
string full_url;
if (length == 0)
{
full_url = "";
}
else
{
char *buffer = (length <= 0xF) ? (char *)p_url : (char *)(*(DWORD *)p_url);
full_url = string(buffer, length);
}
jData["full_url"] = full_url;
vector<string> arr_1 = split(full_url, '?');
if (arr_1.size() > 1)
{
vector<string> params = split(arr_1[1], '&');
for (auto param : params)
{
vector<string> temp = split(param, '=');
if (temp.size() > 1)
{
string key = temp[0], value = temp[1];
if (key == "__biz")
{
value += "==";
}
else if (key == "uin")
{
value = value.substr(0, value.length() - 6) + "==";
jData["wxuin"] = base64_decode(value.c_str());
}
jData[key] = value;
}
}
}
#ifndef USE_SOCKET
response = utf8_to_gb2312(jData.dump().c_str());
#else
response = jData.dump();
#endif
SIGNAL(SignalThreadId, WM_WAIT_HOOK_DATA);
}
_declspec(naked) void dealA8KeyBuf()
{
__asm {
pushad;
pushfd;
mov eax,dword ptr ds:[ebp - 0x4C];
push eax;
call GetA8KeyBuf;
add esp,0x4;
popfd;
popad;
mov edi,dword ptr ds:[ebp - 0x5C];
jmp JmpBackAddr;
}
}
void HookA8KeyBuf()
{
if (A8KeyBufHooked)
return;
DWORD WeChatWinBase = GetWeChatWinBase();
HookAddr = WeChatWinBase + HookA8KeyAddrOffset;
JmpBackAddr = WeChatWinBase + HookA8KeyJmpBackAddrOffset;
HookAnyAddress(HookAddr, (LPVOID)dealA8KeyBuf, A8KeyBufOldAsmCode);
A8KeyBufHooked = TRUE;
}
void UnHookA8KeyBuf()
{
if (!A8KeyBufHooked)
return;
UnHookAnyAddress(HookAddr, A8KeyBufOldAsmCode);
A8KeyBufHooked = FALSE;
}
BOOL __stdcall GetA8Key(wchar_t *url)
{
HookA8KeyBuf();
response = "";
DWORD WeChatWinBase = GetWeChatWinBase();
DWORD GetBufferCall = WeChatWinBase + GetBufferCallOffset;
DWORD GetA8KeyCall1 = WeChatWinBase + GetA8KeyCall1Offset;
DWORD GetA8KeyCall2 = WeChatWinBase + GetA8KeyCall2Offset;
DWORD GetA8KeyCall3 = WeChatWinBase + GetA8KeyCall3Offset;
DWORD GetA8KeyCall4 = WeChatWinBase + GetA8KeyCall4Offset;
DWORD GetA8KeyCall5 = WeChatWinBase + GetA8KeyCall5Offset;
DWORD DelNetSceneA8KeyCall = WeChatWinBase + DelNetSceneA8KeyCallOffset;
DWORD NetSceneA8Key = 0;
DWORD param[2] = {0};
WxString p_url(url);
WxString p_null(NULL);
WxSignal sg(WM_WAIT_HOOK_DATA, SignalThreadId);
int isSuccess = 0;
__asm {
pushad;
pushfd;
mov ebx,0x7;
push 0x238;
call GetBufferCall;
mov edi,eax;
add esp,0x4;
mov NetSceneA8Key,edi;
push 0;
sub esp,0x14;
mov esi,0x1;
lea eax,p_null;
mov ecx,esp;
push eax;
call GetA8KeyCall1;
push 0x2;
push esi;
push 0;
lea eax,p_url;
push ebx;
sub esp,0x14;
mov ecx,esp;
push eax;
call GetA8KeyCall1;
mov ecx,edi;
call GetA8KeyCall2;
push eax;
lea ecx,param;
call GetA8KeyCall3;
call GetA8KeyCall4;
lea esi,param;
mov esi,dword ptr [esi + 0x4];
sub esp,0x8;
mov ecx,esp;
mov edx,eax;
mov dword ptr [ecx],0x0;
mov dword ptr [ecx + 0x4],0x0;
inc dword ptr [esi + 0x4];
mov eax,dword ptr [param];
mov dword ptr [ecx],eax;
mov dword ptr [ecx + 0x4],esi;
mov ecx,edx;
call GetA8KeyCall5;
movzx eax,al;
mov isSuccess,eax;
popfd;
popad;
}
sg.wait(5000);
// 必须等待一定时长才可以析构，不然会出现指针悬挂
Sleep(100);
__asm {
pushad;
pushfd;
push 0x1;
mov ecx, dword ptr [NetSceneA8Key];
call DelNetSceneA8KeyCall;
popfd;
popad;
}
return isSuccess == 1;
}
#ifndef USE_SOCKET
struct GetA8KeyStruct
{
DWORD response;
DWORD length;
} static ret = {0};
DWORD GetA8KeyRemote(wchar_t *url)
{
if (url == NULL || wcslen(url) == 0)
return 0;
BOOL isSuccess = GetA8Key(url);
if (!isSuccess || response.length() == 0)
return 0;
ret.response = (DWORD)response.c_str();
ret.length = response.length();
return (DWORD)&ret;
}
#else
string __stdcall GetA8Key(wstring url)
{
if (url.length() == 0)
return "";
BOOL isSuccess = GetA8Key((wchar_t *)url.c_str());
if (!isSuccess)
return "";
return response;
}
#endif
DWeChatRobot/GetA8Key.h 0 → 100644
浏览文件 @ 72c20b62
#pragma once
#include <windows.h>
BOOL __stdcall GetA8Key(wchar_t *url);
void UnHookA8KeyBuf();
void HookA8KeyBuf();
#ifndef USE_SOCKET
extern "C" __declspec(dllexport) DWORD GetA8KeyRemote(wchar_t *url);
#else
string __stdcall GetA8Key(wstring url);
#endif
DWeChatRobot/GetHistoryPublicMsg.cpp
浏览文件 @ 72c20b62
......@@ -11,7 +11,7 @@
static BOOL H5ExtBufHooked = FALSE;
static char H5ExtBufOldAsmCode[5] = {0};
static DWORD HookAddr = 0;
static DWORD JmpBackAdrr = 0;
static DWORD JmpBackAddr = 0;
static string response = "";
static unsigned long long systemtime()
......@@ -64,7 +64,7 @@ _declspec(naked) void dealH5ExtBuf()
popfd;
popad;
mov edi,dword ptr ds:[ebp - 0x5C];
jmp JmpBackAdrr;
jmp JmpBackAddr;
}
}
......@@ -74,7 +74,7 @@ void HookH5ExtBuf()
return;
DWORD WeChatWinBase = GetWeChatWinBase();
HookAddr = WeChatWinBase + GetHistoryPublicHookAddrOffset;
JmpBackAdrr = WeChatWinBase + GetHistoryPublicJmpBackAddrOffset;
JmpBackAddr = WeChatWinBase + GetHistoryPublicJmpBackAddrOffset;
HookAnyAddress(HookAddr, (LPVOID)dealH5ExtBuf, H5ExtBufOldAsmCode);
H5ExtBufHooked = TRUE;
}
......
DWeChatRobot/GetQrcodeImage.cpp
浏览文件 @ 72c20b62
......@@ -45,7 +45,7 @@ static unique_ptr<QrcodeStruct> qc(new QrcodeStruct);
void SaveQrcodeImage(unsigned char *src, int size)
{
qc->update(src, size);
SIGNAL(SignalThreadId, WM_WAIT_QRCODE);
SIGNAL(SignalThreadId, WM_WAIT_HOOK_DATA);
}
_declspec(naked) void dealQrcodeImage()
......@@ -112,8 +112,7 @@ DWORD GetQrcodeImageRemote()
return 0;
if (!SaveQrcodeImageHooked)
HookQrcodeImage();
WxSignal sg(WM_WAIT_QRCODE);
SignalThreadId = sg.GetThreadId();
WxSignal sg(WM_WAIT_HOOK_DATA, SignalThreadId);
SwitchToQrcodeLogin();
sg.wait(5000);
return (DWORD)qc.get();
......@@ -125,7 +124,7 @@ BYTE *__stdcall GetQrcodeImage(int &size)
return NULL;
if (!SaveQrcodeImageHooked)
HookQrcodeImage();
WxSignal sg(WM_WAIT_QRCODE);
WxSignal sg(WM_WAIT_HOOK_DATA, SignalThreadId);
SignalThreadId = sg.GetThreadId();
SwitchToQrcodeLogin();
sg.wait(5000);
......
DWeChatRobot/SelfInfo.cpp
浏览文件 @ 72c20b62
......@@ -73,6 +73,7 @@ wstring GetSelfInfo()
self_info_addr["wxCity"] = WeChatWinBase + 0x2366214;
self_info_addr["PhoneNumber"] = WeChatWinBase + 0x2366128;
self_info_addr["wxFilePath"] = *(DWORD *)(WeChatWinBase + 0x2385020);
self_info_addr["uin"] = WeChatWinBase + 0x23661C8;
for (auto it = self_info_addr.begin(); it != self_info_addr.end(); it++)
{
string key = it->first;
......@@ -87,6 +88,11 @@ wstring GetSelfInfo()
{
utf8_str = unicode_to_utf8((wchar_t *)addr);
}
else if (key == "uin")
{
jData[key] = *(unsigned int *)addr;
continue;
}
else
{
if (*(DWORD *)addr == 0)
......
DWeChatRobot/pch.cpp
浏览文件 @ 72c20b62
......@@ -189,6 +189,7 @@ void UnHookAll()
UnHookImageMsg();
UnHookH5ExtBuf();
UnHookQrcodeImage();
UnHookA8KeyBuf();
return;
}
......@@ -269,34 +270,24 @@ void PrintProcAddr()
BOOL(__stdcall * get_history_public_msg)
(wchar_t *, wchar_t *) = GetHistoryPublicMsg;
printf("GetHistoryPublicMsg 0x%08X\n", (DWORD)get_history_public_msg);
BOOL(__stdcall * get_a8_key)
(wchar_t *) = GetA8Key;
printf("GetA8Key 0x%08X\n", (DWORD)get_a8_key);
}
BOOL ProcessIsWeChat()
{
char szFileFullPath[MAX_PATH] = {0}, szProcessName[MAX_PATH] = {0};
char szFileFullPath[MAX_PATH] = {0};
GetModuleFileNameA(NULL, szFileFullPath, MAX_PATH);
int length = ::strlen(szFileFullPath);
for (int i = length - 1; i >= 0; i--)
{
if (szFileFullPath[i] == '\\')
{
i++;
for (int j = 0; i <= length; j++)
{
szProcessName[j] = szFileFullPath[i++];
}
break;
}
}
if (::strcmp(szProcessName, "WeChat.exe") != 0)
{
return FALSE;
}
else
string szFile(szFileFullPath);
size_t pos = szFile.find_last_of('\\');
string szProcessName = szFile.substr(pos + 1, szFile.length() - pos - 1);
if (szProcessName == "WeChat.exe")
{
return TRUE;
}
return FALSE;
}
DWORD OffsetFromIdaAddr(DWORD idaAddr)
......
DWeChatRobot/wxapi.h
浏览文件 @ 72c20b62
......@@ -33,6 +33,7 @@
#include "GetHistoryPublicMsg.h"
#include "ForwardMessage.h"
#include "GetQrcodeImage.h"
#include "GetA8Key.h"
using namespace std;
#pragma comment(lib, "version.lib")
......
DWeChatRobot/wxdata.h
浏览文件 @ 72c20b62
......@@ -3,7 +3,7 @@
using namespace std;
// 用于Hook到数据后，给主线程发送信号
#define WM_WAIT_QRCODE WM_USER + 0x1
#define WM_WAIT_HOOK_DATA WM_USER + 0x1
/*
* 微信中的基础数据结构
......
DWeChatRobot/wxsignal.h
浏览文件 @ 72c20b62
......@@ -6,9 +6,10 @@
class WxSignal
{
public:
WxSignal(UINT uMsg)
WxSignal(UINT uMsg, DWORD &dwThread)
{
this->hThread = CreateThread(NULL, 0, (LPTHREAD_START_ROUTINE)this->Pump, (LPVOID)uMsg, 0, &this->threadId);
dwThread = this->threadId;
}
~WxSignal()
{
......
DWeChatRobot/wxsocket.cpp
浏览文件 @ 72c20b62
......@@ -576,7 +576,6 @@ void request_event(mg_http_message *hm, string &ret, struct mg_connection *c)
{
int size = 0;
BYTE *image = GetQrcodeImage(size);
// string b64data = base64_encode(image, size,false);
if (image != NULL)
{
mg_printf(c, "HTTP/1.1 200 OK\r\nTransfer-Encoding: chunked\r\nContent-Type: image/png\r\n\r\n");
......@@ -596,6 +595,14 @@ void request_event(mg_http_message *hm, string &ret, struct mg_connection *c)
}
break;
}
case WECHAT_GET_A8KEY:
{
wstring url = get_http_param_str(hm, jData, "url", method);
string response = GetA8Key(url);
json ret_data = {{"msg", response}, {"result", "OK"}};
ret = ret_data.dump();
break;
}
default:
// char* wxid = mg_json_get_str(hm->body, "$.wxid");
break;
......
DWeChatRobot/wxsocketapi.h
浏览文件 @ 72c20b62
......@@ -73,6 +73,7 @@ typedef enum WECHAT_HTTP_APISTag
// IJ
WECHAT_MSG_FORWARD_MESSAGE,
WECHAT_GET_QRCODE_IMAGE,
WECHAT_GET_A8KEY,
} WECHAT_HTTP_APIS,
*PWECHAT_HTTP_APIS;
#endif
Python/com/wxRobot.py
浏览文件 @ 72c20b62
......@@ -1079,6 +1079,28 @@ class WeChatRobot:
data = self.robot.CGetQrcodeImage(self.pid)
return bytes(data)
def GetA8Key(self,url:str) -> dict or str:
"""
获取A8Key
Parameters
----------
url : str
公众号文章链接.
Returns
-------
dict
成功返回A8Key信息，失败返回空字符串.
"""
ret = self.robot.CGetA8Key(self.pid,url)
try:
ret = json.loads(ret)
except json.JSONDecodeError:
pass
return ret
def get_wechat_pid_list() -> list:
"""
......
Python/http/wxDriver.py
浏览文件 @ 72c20b62
......@@ -85,6 +85,7 @@ class WECHAT_HTTP_APIS:
WECHAT_MSG_FORWARD_MESSAGE = 40 # 转发消息
WECHAT_GET_QRCODE_IMAGE = 41 # 获取二维码
WECHAT_GET_A8KEY = 42
APIS = WECHAT_HTTP_APIS
......@@ -189,7 +190,8 @@ class WECHAT_HTTP_API_PARAM_TEMPLATES:
APIS.WECHAT_GET_PUBLIC_MSG: {"public_id": "","offset": ""},
APIS.WECHAT_MSG_FORWARD_MESSAGE: {"wxid": "filehelper","msgid": 2 ** 64 - 1},
APIS.WECHAT_GET_QRCODE_IMAGE: {}
APIS.WECHAT_GET_QRCODE_IMAGE: {},
APIS.WECHAT_GET_A8KEY: {"url":""}
}
def get_http_template(self, api_number):
......@@ -309,6 +311,10 @@ def test_get_public_msg(test_port,public_id):
Title = info['Title']
Digest = info['Digest']
ContentUrl = info['ContentUrl']
a8key_dict = post_wechat_http_api(APIS.WECHAT_GET_A8KEY,
port = test_port,
data = {"url":ContentUrl})
print(a8key_dict)
post_wechat_http_api(APIS.WECHAT_BROWSER_OPEN_WITH_URL,
test_port,
{"url":ContentUrl}
......
Markdown is supported
0% 或 .
You are about to add 0 people to the discussion. Proceed with caution.
先完成此消息的编辑！
想要评论请 注册 或