fallrain / WeChat_Win_VersionFix.py

import subprocess import time import pymem import pymem.process import pymem.pattern def mod_mem(pid): # 打开进程 pm = pymem.Pymem(pid) module = pymem.process.module_from_name(pm.process_handle, 'WeChatWin.dll') # 查找并替换数值 new_value = 0x63090A13 # 在内存中搜索旧值 old_pattern = b'\x1E\x00\x07\x63' addresses = pymem.pattern.pattern_scan_module(pm.process_handle, module, old_pattern, return_multiple=True) for address in addresses: pm.write_int(address, new_value) print(f'Value at address {hex(address)} changed') def get_all_pids(image_name): # Correctly split the command arguments result = subprocess.run(['tasklist', '/FO', 'list', '/FI', 'IMAGENAME eq ' + image_name], stdout=subprocess.PIPE).stdout.decode('gbk') # store pids in array pids = set() for line in result.split('\n'): if 'PID' in line: pids.add(int(line.split(': ')[1])) return pids INAME = 'WeChat.exe' previous_pids = get_all_pids(INAME) while True: current_pids = get_all_pids(INAME) new_pids = list(current_pids - previous_pids) print('New pids:', new_pids) for pid in new_pids: time.sleep(1) mod_mem(pid) previous_pids = current_pids # sleep for 1 second time.sleep(1)