From 83979fafba4e7fe8d577bbc0ea3cdfc557ff3311 Mon Sep 17 00:00:00 2001 From: cxc Date: Fri, 4 Sep 2026 20:39:10 +0800 Subject: [PATCH] [config] support WMPF 25558 (Windows x86_64) Located via the same static pipeline as 25510 (scene magic 1101 unique encoding, direct-caller backtracking, SendToClientFilter anchor). Verified live: OnLoadStart hooked, scene patched to 1101, miniapp connected, Runtime.evaluate round-trip succeeded. --- README.md | 3 ++- README.zh.md | 3 ++- frida/config/win32/addresses.25558.json | 13 +++++++++++++ 3 files changed, 17 insertions(+), 2 deletions(-) create mode 100644 frida/config/win32/addresses.25558.json diff --git a/README.md b/README.md index b7763b0..6563669 100644 --- a/README.md +++ b/README.md @@ -13,7 +13,8 @@ This debugger (tweak) exploits Remote Debug feature provided by wechatdevtools a **Version histories:** -* 25510 (latest, credit @potacotion) +* 25558 (latest, credit @potacotion) +* 25510 (credit @potacotion) * 25459 (credit @1147529365) * 25364 (credit @lyratu) * 25297 (credit @Yinuo0602, @82539474) diff --git a/README.zh.md b/README.zh.md index 08129ad..dfea1ab 100644 --- a/README.zh.md +++ b/README.zh.md @@ -11,7 +11,8 @@ **支持的 WMPF 版本：** -* 25510 (最新, credit @potacotion) +* 25558 (最新, credit @potacotion) +* 25510 (credit @potacotion) * 25459 (credit @1147529365) * 25364 (credit @lyratu) * 25297 (credit @Yinuo0602, @82539474) diff --git a/frida/config/win32/addresses.25558.json b/frida/config/win32/addresses.25558.json new file mode 100644 index 0000000..132eac9 --- /dev/null +++ b/frida/config/win32/addresses.25558.json @@ -0,0 +1,13 @@ +{ + "Version": 25558, + "LoadStartHookOffset": "0x2ce7c50", + "CDPFilterHookOffset": "0x3978930", + "SceneOffsets": [ + 64, + 1536, + 8, + 1472, + 16, + 456 + ] +}