获取用户名失败 about pywxdump HOT 94 CLOSED

    print("start")
    if len(self.mobile_addr) >= 1:
        mobile_offset = self.calculate_offset(self.mobile_addr[0])
    print("mobile_offset success")
    if len(self.name_addr) >= 1:
        name_offset = self.calculate_offset(self.name_addr[0])
    print("name_offset success")
    if len(self.account_addr) >= 1:
        if len(self.account_addr) >= 2:
            print("account_offset 1 success")
            account_offset = self.calculate_offset(self.account_addr[1])
        else:
            print("account_offset 0 success")
            account_offset = self.calculate_offset(self.account_addr[0])
    print("account_offset success")
    key_offset = self.calculate_offset(self.key_addr)

def run(mobile, name, account, key):
    proc_name = "WeChat.exe"
    proc_module_name = "WeChatWin.dll"

    pids = get_pid(proc_name)
    print(pids)
    for pid, proc in pids.items():
        print(pid, proc)
        ba = BaseAddr(pid, proc_module_name)
        print(ba)
        ba.search_memory_value(mobile, name, account)
        ba.get_key_addr(key)
        name_offset, account_offset, mobile_offset, _, key_offset = ba.get_offset()
        rdata = {ba.version: [name_offset, account_offset, mobile_offset, 0, key_offset]}
        return rdata

def run(mobile, name, account, key):
    proc_name = "WeChat.exe"
    proc_module_name = "WeChatWin.dll"

    pids = get_pid(proc_name)
    for pid, proc in pids.items():
        ba = BaseAddr(pid, proc_module_name)
        ba.search_memory_value(mobile, name, account)
        print("get key addr...")
        ba.get_key_addr(key)
        print("get offset...")
        name_offset, account_offset, mobile_offset, _, key_offset = ba.get_offset()
        print("name_offset: ", name_offset)
        rdata = {ba.version: [name_offset, account_offset, mobile_offset, 0, key_offset]}
        return rdata

        """
        获取key的地址
        :param key:
        :return:
        """
        key = bytes.fromhex(key)

        module_start_addr = 34199871460642
        module_end_addr = 0
        print("search key addr...")
        for module in self.proc.memory_maps(grouped=False):
            if "WeChat" in module.path:
                start_addr = int(module.addr, 16)
                end_addr = start_addr + module.rss

                if module_start_addr > start_addr:
                    module_start_addr = start_addr
                if module_end_addr < end_addr:
                    module_end_addr = end_addr
        print("module_start_addr: ", module_start_addr)
        Handle = ctypes.windll.kernel32.OpenProcess(0x1F0FFF, False, self.pid)
        array = ctypes.create_string_buffer(self.batch)
        print("search key addr1...")

        for i in range(module_start_addr, module_end_addr, self.batch):
            if ctypes.windll.kernel32.ReadProcessMemory(Handle, ctypes.c_void_p(i), array, self.batch, None) == 0:
                continue
            hex_string = array.raw  # 读取到的内存数据
            if key in hex_string:
                self.key_addr_tmp = i + hex_string.find(key)
                break
        print("search key addr2...")
        array_key = []
        for i in range(8):
            byte_value = (self.key_addr_tmp >> (i * 8)) & 0xFF
            hex_string = format(byte_value, '02x')
            byte_obj = bytes.fromhex(hex_string)
            array_key.append(byte_obj)
        # 合并数组
        array_key = b''.join(array_key)
        print("search key addr3...")
        array = ctypes.create_string_buffer(self.batch)
        for i in range(self.base_address, self.end_address, self.batch):
            if ctypes.windll.kernel32.ReadProcessMemory(Handle, ctypes.c_void_p(i), array, self.batch, None) == 0:
                continue

            hex_string = array.raw  # 读取到的内存数据
            if array_key in hex_string:
                self.key_addr = i + hex_string.find(array_key)
                return self.key_addr
        print("search key addr4...")