open-source/WeChatIntercept
1
0
Fork 0
mirror of https://github.com/a244573118/WeChatIntercept.git synced 2026-06-14 13:35:08 +08:00
Code Issues Packages Projects Releases Wiki Activity

fix

Browse Source
This commit is contained in:
zhangyang131 2026-06-11 10:05:42 +08:00
parent 034b3be345
commit a39fbc91b5
2 changed files with 21 additions and 1138 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1137
doc/reverse-engineering-guide.md
View File

File diff suppressed because it is too large Load Diff

22
patch.sh Executable file → Normal file
View File

@ -223,7 +223,27 @@ _Bool hook_isRevokeMessage(void *msg) {
load_my_user_id(); load_my_user_id();
const char *sender = (const char *)((uint8_t *)msg + 0x18); // 动态寻址 sender 字符串：+0x18 在新 build 中可能是标记字节
// 从 +0x18 开始搜第一个可打印 C 字符串
int sender_off = 0x18;
{
int found = 0;
for (int off = 0x18; off <= 0x20; off++) {
const unsigned char *p = (const unsigned char *)msg + off;
if (p[0] >= 0x20 && p[0] <= 0x7E &&
p[1] >= 0x20 && p[1] <= 0x7E &&
p[2] >= 0x20 && p[2] <= 0x7E) {
sender_off = off;
found = 1;
break;
}
}
if (!found) {
// 极端 fallback 仍然用 +0x18
sender_off = 0x18;
}
}
const char *sender = (const char *)((uint8_t *)msg + sender_off);
if (!is_valid_sender(sender)) { if (!is_valid_sender(sender)) {
ARLOG("WARN: sender 区域非可打印 ASCII，跳过此次调用"); ARLOG("WARN: sender 区域非可打印 ASCII，跳过此次调用");