mirror of
https://github.com/a244573118/WeChatIntercept.git
synced 2026-06-14 13:35:08 +08:00
支持微信4.1.9防撤回
This commit is contained in:
zhangyang131
parent
3b01d71c73
commit
d2ae29e2cd
424
patch.sh
Executable file
424
patch.sh
Executable file
|
|
@ -0,0 +1,424 @@
|
|||
#!/bin/bash
|
||||
#
|
||||
# ============================================================
|
||||
# 微信防撤回一键 Patch 脚本
|
||||
# ============================================================
|
||||
#
|
||||
# 适用版本: 微信 4.1.9 (CFBundleVersion: 268602)
|
||||
# 适用平台: macOS (Apple Silicon + Intel)
|
||||
# 依赖工具: python3, codesign, tar (macOS 系统自带)
|
||||
#
|
||||
# 使用方法:
|
||||
# chmod +x patch.sh # 首次使用需添加执行权限
|
||||
# ./patch.sh # 应用防撤回补丁
|
||||
# ./patch.sh --restore # 恢复原始微信（撤销补丁）
|
||||
# ./patch.sh --status # 查看当前补丁状态
|
||||
#
|
||||
# 原理:
|
||||
# 修改 wechat.dylib 中的 isRevokeMessage() 函数，
|
||||
# 使其始终返回 false，微信将不再识别撤回通知，
|
||||
# 消息保持可见。不影响自己主动撤回消息。
|
||||
#
|
||||
# 注意:
|
||||
# - 微信更新后需要重新运行此脚本
|
||||
# - 首次运行可能需要约 30 秒（解除系统保护）
|
||||
# - 同时 patch arm64 和 x86_64，Apple Silicon 和 Intel Mac 通用
|
||||
#
|
||||
# ============================================================
|
||||
|
||||
set -e
|
||||
|
||||
# ======================== 配置 ========================
|
||||
WECHAT_APP="/Applications/WeChat.app"
|
||||
DYLIB_PATH="$WECHAT_APP/Contents/Resources/wechat.dylib"
|
||||
BACKUP_DIR="$HOME/.wechat_patch_backup"
|
||||
EXPECTED_VERSION="268602"
|
||||
EXPECTED_VERSION_STR="4.1.9"
|
||||
|
||||
# arm64 patch 参数
|
||||
ARM64_SLICE_OFFSET="0x9B18000"
|
||||
ARM64_PATCH_VA="0x44E3D50"
|
||||
ARM64_PATCH_HEX="00008052C0035FD6" # MOV W0, #0; RET (8 bytes)
|
||||
ARM64_ORIGINAL_MASK="9F000000" # ADRP 指令掩码
|
||||
ARM64_ORIGINAL_EXPECT="90000000" # ADRP 指令特征
|
||||
ARM64_PATCH_LEN=8
|
||||
|
||||
# x86_64 patch 参数
|
||||
X86_SLICE_OFFSET="0x4000"
|
||||
X86_PATCH_VA="0x4AF08D0"
|
||||
X86_PATCH_HEX="31C0C3" # XOR EAX, EAX; RET (3 bytes)
|
||||
X86_ORIGINAL_HEX="488B05" # MOV RAX, [RIP+...] 前3字节
|
||||
X86_PATCH_LEN=3
|
||||
# =====================================================
|
||||
|
||||
print_banner() {
|
||||
echo ""
|
||||
echo "=============================="
|
||||
echo " 微信防撤回 Patch 工具"
|
||||
echo " 适用: macOS / 微信 $EXPECTED_VERSION_STR"
|
||||
echo " 支持: Apple Silicon + Intel"
|
||||
echo "=============================="
|
||||
echo ""
|
||||
}
|
||||
|
||||
print_usage() {
|
||||
echo "用法:"
|
||||
echo " $0 应用防撤回补丁"
|
||||
echo " $0 --restore 恢复原始微信"
|
||||
echo " $0 --status 查看补丁状态"
|
||||
echo " $0 --help 显示帮助"
|
||||
}
|
||||
|
||||
# 检查基本环境
|
||||
check_environment() {
|
||||
# 检查 python3
|
||||
if ! command -v python3 &>/dev/null; then
|
||||
echo "[ERROR] 未找到 python3，请安装 Xcode Command Line Tools:"
|
||||
echo " xcode-select --install"
|
||||
exit 1
|
||||
fi
|
||||
|
||||
# 检查微信是否存在
|
||||
if [ ! -d "$WECHAT_APP" ]; then
|
||||
echo "[ERROR] 未找到微信: $WECHAT_APP"
|
||||
exit 1
|
||||
fi
|
||||
|
||||
# 检查版本
|
||||
VERSION=$(defaults read "$WECHAT_APP/Contents/Info.plist" CFBundleVersion 2>/dev/null)
|
||||
if [ "$VERSION" != "$EXPECTED_VERSION" ]; then
|
||||
echo "[ERROR] 微信版本不匹配"
|
||||
echo " 期望: $EXPECTED_VERSION ($EXPECTED_VERSION_STR)"
|
||||
echo " 实际: $VERSION"
|
||||
echo ""
|
||||
echo " 此脚本仅适用于微信 $EXPECTED_VERSION_STR 版本。"
|
||||
echo " 请确认你的微信版本，或联系脚本提供者获取对应版本的补丁。"
|
||||
exit 1
|
||||
fi
|
||||
|
||||
# 检查 wechat.dylib
|
||||
if [ ! -f "$DYLIB_PATH" ]; then
|
||||
echo "[ERROR] 未找到核心文件: $DYLIB_PATH"
|
||||
echo " 微信安装可能不完整，请重新安装微信后再试。"
|
||||
exit 1
|
||||
fi
|
||||
}
|
||||
|
||||
# 获取当前 patch 状态 (同时检查两个架构)
|
||||
get_patch_status() {
|
||||
python3 -c "
|
||||
import struct
|
||||
|
||||
dylib = '$DYLIB_PATH'
|
||||
arm64_off = $ARM64_SLICE_OFFSET + $ARM64_PATCH_VA
|
||||
x86_off = $X86_SLICE_OFFSET + $X86_PATCH_VA
|
||||
|
||||
with open(dylib, 'rb') as f:
|
||||
# 检查 arm64
|
||||
f.seek(arm64_off)
|
||||
arm64_bytes = f.read($ARM64_PATCH_LEN)
|
||||
arm64_patched = (arm64_bytes == bytes.fromhex('$ARM64_PATCH_HEX'))
|
||||
|
||||
# 检查 x86_64
|
||||
f.seek(x86_off)
|
||||
x86_bytes = f.read($X86_PATCH_LEN)
|
||||
x86_patched = (x86_bytes == bytes.fromhex('$X86_PATCH_HEX'))
|
||||
|
||||
if arm64_patched and x86_patched:
|
||||
print('patched')
|
||||
elif not arm64_patched and not x86_patched:
|
||||
# 验证是否是原始字节
|
||||
insn = struct.unpack_from('<I', arm64_bytes, 0)[0]
|
||||
arm64_ok = (insn & 0x$ARM64_ORIGINAL_MASK) == 0x$ARM64_ORIGINAL_EXPECT
|
||||
x86_ok = (x86_bytes == bytes.fromhex('$X86_ORIGINAL_HEX'))
|
||||
if arm64_ok and x86_ok:
|
||||
print('original')
|
||||
else:
|
||||
print('unknown')
|
||||
elif arm64_patched or x86_patched:
|
||||
print('partial')
|
||||
else:
|
||||
print('unknown')
|
||||
" 2>/dev/null
|
||||
}
|
||||
|
||||
# 保存原始字节用于恢复
|
||||
save_original_bytes() {
|
||||
mkdir -p "$BACKUP_DIR"
|
||||
python3 -c "
|
||||
dylib = '$DYLIB_PATH'
|
||||
arm64_off = $ARM64_SLICE_OFFSET + $ARM64_PATCH_VA
|
||||
x86_off = $X86_SLICE_OFFSET + $X86_PATCH_VA
|
||||
|
||||
with open(dylib, 'rb') as f:
|
||||
f.seek(arm64_off)
|
||||
arm64_orig = f.read($ARM64_PATCH_LEN)
|
||||
f.seek(x86_off)
|
||||
x86_orig = f.read($X86_PATCH_LEN)
|
||||
|
||||
with open('$BACKUP_DIR/arm64.bytes', 'wb') as f:
|
||||
f.write(arm64_orig)
|
||||
with open('$BACKUP_DIR/x86_64.bytes', 'wb') as f:
|
||||
f.write(x86_orig)
|
||||
print('saved')
|
||||
" 2>/dev/null
|
||||
}
|
||||
|
||||
# 关闭微信
|
||||
kill_wechat() {
|
||||
if pgrep -x WeChat >/dev/null 2>&1; then
|
||||
echo "[INFO] 关闭微信..."
|
||||
killall WeChat 2>/dev/null || true
|
||||
sleep 2
|
||||
fi
|
||||
}
|
||||
|
||||
# 解除 provenance 保护
|
||||
remove_provenance() {
|
||||
echo "[INFO] 检测到系统保护，正在解除..."
|
||||
echo "[INFO] 重建 WeChat.app 中（约 30 秒）..."
|
||||
|
||||
TMP_DIR=$(mktemp -d)
|
||||
tar --no-xattrs -cf - -C /Applications WeChat.app | tar -xf - -C "$TMP_DIR/"
|
||||
rm -rf "$WECHAT_APP"
|
||||
mv "$TMP_DIR/WeChat.app" "$WECHAT_APP"
|
||||
rm -rf "$TMP_DIR"
|
||||
|
||||
echo "[INFO] 系统保护已解除"
|
||||
}
|
||||
|
||||
# 写入 patch 字节 (同时 patch 两个架构)
|
||||
write_patch() {
|
||||
python3 -c "
|
||||
import struct
|
||||
|
||||
dylib = '$DYLIB_PATH'
|
||||
arm64_off = $ARM64_SLICE_OFFSET + $ARM64_PATCH_VA
|
||||
x86_off = $X86_SLICE_OFFSET + $X86_PATCH_VA
|
||||
arm64_patch = bytes.fromhex('$ARM64_PATCH_HEX')
|
||||
x86_patch = bytes.fromhex('$X86_PATCH_HEX')
|
||||
|
||||
try:
|
||||
with open(dylib, 'r+b') as f:
|
||||
# 验证 arm64 原始字节
|
||||
f.seek(arm64_off)
|
||||
arm64_orig = f.read(4)
|
||||
insn = struct.unpack_from('<I', arm64_orig, 0)[0]
|
||||
if (insn & 0x$ARM64_ORIGINAL_MASK) != 0x$ARM64_ORIGINAL_EXPECT:
|
||||
# 可能已经 patch 过
|
||||
if arm64_orig[:len(arm64_patch)] == arm64_patch[:4]:
|
||||
pass # 已 patch，继续处理 x86
|
||||
else:
|
||||
print('bad_arm64')
|
||||
exit()
|
||||
|
||||
# 验证 x86_64 原始字节
|
||||
f.seek(x86_off)
|
||||
x86_orig = f.read(3)
|
||||
if x86_orig != bytes.fromhex('$X86_ORIGINAL_HEX'):
|
||||
if x86_orig == x86_patch:
|
||||
pass # 已 patch
|
||||
else:
|
||||
print('bad_x86')
|
||||
exit()
|
||||
|
||||
# 写入 arm64 patch
|
||||
f.seek(arm64_off)
|
||||
f.write(arm64_patch)
|
||||
|
||||
# 写入 x86_64 patch
|
||||
f.seek(x86_off)
|
||||
f.write(x86_patch)
|
||||
|
||||
print('ok')
|
||||
except PermissionError:
|
||||
print('permission_denied')
|
||||
except Exception as e:
|
||||
print(f'error:{e}')
|
||||
" 2>/dev/null
|
||||
}
|
||||
|
||||
# 恢复原始字节
|
||||
write_restore() {
|
||||
python3 -c "
|
||||
dylib = '$DYLIB_PATH'
|
||||
arm64_off = $ARM64_SLICE_OFFSET + $ARM64_PATCH_VA
|
||||
x86_off = $X86_SLICE_OFFSET + $X86_PATCH_VA
|
||||
|
||||
try:
|
||||
with open('$BACKUP_DIR/arm64.bytes', 'rb') as f:
|
||||
arm64_orig = f.read()
|
||||
with open('$BACKUP_DIR/x86_64.bytes', 'rb') as f:
|
||||
x86_orig = f.read()
|
||||
|
||||
with open(dylib, 'r+b') as f:
|
||||
f.seek(arm64_off)
|
||||
f.write(arm64_orig)
|
||||
f.seek(x86_off)
|
||||
f.write(x86_orig)
|
||||
|
||||
print('ok')
|
||||
except PermissionError:
|
||||
print('permission_denied')
|
||||
except FileNotFoundError as e:
|
||||
print('no_backup')
|
||||
except Exception as e:
|
||||
print(f'error:{e}')
|
||||
" 2>/dev/null
|
||||
}
|
||||
|
||||
# 重签名
|
||||
resign_app() {
|
||||
echo "[INFO] 重签名..."
|
||||
codesign --force --sign - "$DYLIB_PATH" 2>/dev/null
|
||||
codesign --force --deep --sign - "$WECHAT_APP" 2>/dev/null
|
||||
xattr -cr "$WECHAT_APP" 2>/dev/null || true
|
||||
}
|
||||
|
||||
# ======================== 主命令: patch ========================
|
||||
do_patch() {
|
||||
print_banner
|
||||
check_environment
|
||||
|
||||
echo "[INFO] 微信版本: $EXPECTED_VERSION_STR ($EXPECTED_VERSION)"
|
||||
echo "[INFO] 当前架构: $(uname -m)"
|
||||
|
||||
STATUS=$(get_patch_status)
|
||||
if [ "$STATUS" = "patched" ]; then
|
||||
echo "[INFO] 防撤回补丁已生效，无需重复操作。"
|
||||
echo ""
|
||||
echo "[DONE] 直接打开微信即可: open /Applications/WeChat.app"
|
||||
exit 0
|
||||
fi
|
||||
|
||||
kill_wechat
|
||||
|
||||
# 保存原始字节
|
||||
save_original_bytes
|
||||
|
||||
# 尝试写入
|
||||
echo "[INFO] 正在应用补丁 (arm64 + x86_64)..."
|
||||
RESULT=$(write_patch)
|
||||
|
||||
# 如果权限不够，解除保护后重试
|
||||
if [ "$RESULT" = "permission_denied" ]; then
|
||||
remove_provenance
|
||||
RESULT=$(write_patch)
|
||||
fi
|
||||
|
||||
if [ "$RESULT" != "ok" ]; then
|
||||
echo "[ERROR] 补丁写入失败: $RESULT"
|
||||
echo " 请确认微信未在运行，或尝试重新安装微信后再试。"
|
||||
exit 1
|
||||
fi
|
||||
|
||||
# 重签名
|
||||
resign_app
|
||||
|
||||
# 验证
|
||||
if [ "$(get_patch_status)" = "patched" ]; then
|
||||
echo ""
|
||||
echo "=============================="
|
||||
echo " 补丁成功！防撤回已生效"
|
||||
echo "=============================="
|
||||
echo ""
|
||||
echo " 打开微信: open /Applications/WeChat.app"
|
||||
echo ""
|
||||
echo " 恢复原始: $0 --restore"
|
||||
echo " 查看状态: $0 --status"
|
||||
echo ""
|
||||
else
|
||||
echo "[ERROR] 补丁验证失败!"
|
||||
exit 1
|
||||
fi
|
||||
}
|
||||
|
||||
# ======================== 主命令: restore ========================
|
||||
do_restore() {
|
||||
print_banner
|
||||
check_environment
|
||||
|
||||
STATUS=$(get_patch_status)
|
||||
if [ "$STATUS" = "original" ]; then
|
||||
echo "[INFO] 微信未被修改，无需恢复。"
|
||||
exit 0
|
||||
fi
|
||||
|
||||
if [ ! -f "$BACKUP_DIR/arm64.bytes" ] || [ ! -f "$BACKUP_DIR/x86_64.bytes" ]; then
|
||||
echo "[ERROR] 未找到备份文件: $BACKUP_DIR/"
|
||||
echo " 无法恢复。建议重新安装微信。"
|
||||
exit 1
|
||||
fi
|
||||
|
||||
kill_wechat
|
||||
|
||||
echo "[INFO] 正在恢复原始微信..."
|
||||
|
||||
RESULT=$(write_restore)
|
||||
|
||||
if [ "$RESULT" = "permission_denied" ]; then
|
||||
remove_provenance
|
||||
RESULT=$(write_restore)
|
||||
fi
|
||||
|
||||
if [ "$RESULT" != "ok" ]; then
|
||||
echo "[ERROR] 恢复失败: $RESULT"
|
||||
exit 1
|
||||
fi
|
||||
|
||||
resign_app
|
||||
|
||||
echo ""
|
||||
echo "=============================="
|
||||
echo " 已恢复原始微信"
|
||||
echo "=============================="
|
||||
echo ""
|
||||
}
|
||||
|
||||
# ======================== 主命令: status ========================
|
||||
do_status() {
|
||||
print_banner
|
||||
check_environment
|
||||
|
||||
STATUS=$(get_patch_status)
|
||||
echo "[INFO] 微信版本: $EXPECTED_VERSION_STR ($EXPECTED_VERSION)"
|
||||
echo "[INFO] 当前架构: $(uname -m)"
|
||||
case "$STATUS" in
|
||||
patched)
|
||||
echo "[INFO] 补丁状态: 已生效 (arm64 + x86_64 均已 patch)"
|
||||
;;
|
||||
partial)
|
||||
echo "[WARN] 补丁状态: 部分生效 (建议重新运行 $0)"
|
||||
;;
|
||||
original)
|
||||
echo "[INFO] 补丁状态: 未应用 (原始状态)"
|
||||
;;
|
||||
*)
|
||||
echo "[WARN] 补丁状态: 未知 (文件可能被其他工具修改)"
|
||||
;;
|
||||
esac
|
||||
echo ""
|
||||
}
|
||||
|
||||
# ======================== 入口 ========================
|
||||
case "${1:-}" in
|
||||
--restore|-r)
|
||||
do_restore
|
||||
;;
|
||||
--status|-s)
|
||||
do_status
|
||||
;;
|
||||
--help|-h)
|
||||
print_banner
|
||||
print_usage
|
||||
;;
|
||||
"")
|
||||
do_patch
|
||||
;;
|
||||
*)
|
||||
echo "[ERROR] 未知参数: $1"
|
||||
echo ""
|
||||
print_usage
|
||||
exit 1
|
||||
;;
|
||||
esac
|
||||
Loading…
Reference in New Issue
Block a user