frida22

SUBMITTED BY: Lucoz18

DATE: Feb. 29, 2024, 1:34 a.m.

UPDATED: Feb. 29, 2024, 2:16 a.m.

FORMAT: Text only

SIZE: 40.0 kB

History Raw Download

HITS: 896

Report
  1. async function main() {
  2. function getFunc(_0x3bc812, _0x530fbf, _0x3826f3, _0x5766aa) {
  3. let _0x270e51 = Module.findExportByName(_0x3bc812, _0x530fbf);
  4. return new NativeFunction(_0x270e51, _0x3826f3, _0x5766aa);
  5. }
  6. var malloc = getFunc("libc.so", "malloc", "pointer", ["int"])
  8. function createTString(str)
  9. {
  10. var str_pointer = malloc(4)
  11. var str_struct = malloc(str.length + 8)
  12. str_pointer.writePointer(str_struct)
  13. str_struct.writeInt(str.length)
  14. ptr(parseInt(str_struct) + 4).writeInt(1)
  15. ptr(parseInt(str_struct) + 8).writeUtf8String(str)
  16. return str_pointer
  18. }
  20. function readTString(str)
  21. {
  22. if(!str.isNull()){
  23. if(parseInt(str) != 0){
  24. var pstr = str.readPointer()
  25. if(!pstr.isNull()){
  26. var strlen = pstr.readInt()
  27. if(strlen > 0){
  28. var strStart = parseInt(pstr) + 8
  29. return ptr(strStart).readCString(strlen)
  30. }
  31. }
  32. }
  33. }
  34. }
  35. function showToast(text, time = 1) {
  36. Java.perform(() => {
  37. Java.scheduleOnMainThread(function() {
  38. var toast = Java.use("android.widget.Toast");
  39. toast.makeText(Java.use("android.app.ActivityThread").currentApplication().getApplicationContext(), Java.use("java.lang.String").$new(text), time).show();
  40. });
  41. });
  42. }
  44. let chatTxt = createTString(" ");
  45. let _0x17df51 = false;
  46. let _0x388c11 = false;
  47. let _0x54b591 = false;
  48. let _0x227bf3 = false;
  49. let _0x472c5c = false;
  50. let _0x2b3bb5 = false;
  51. let _0x83d9c = false;
  52. let freeMounts = false;
  53. let showAdm = false;
  54. let _0x3a39bf = null;
  55. let _0x58cc0e = null;
  56. let _0x185793 = null;
  57. let _0x3728c0 = false;
  58. let _0x240299 = false;
  59. let _0x58a400 = "off";
  60. let _0x427a48 = "off";
  61. let _0x48a23f = ["bow_walk"];
  62. const _0x51b522 = ["body_castleguard.png", "body_farmer.png", "newbody19.png", "newbody10.png", "body_shadow.png", "classiciphone_mattbody1.png", "newbody15.png", "newbody6.png", "classiciphone_mattbody3.png", "dc8bit_body0.png", "rainspearbody-fixed.png", "newbody20.png", "newbody1.png", "newbody2.png", "newbody3.png", "newbody4.png", "newbody5.png", "newbody6.png", "newbody7.png", "newbody8.png", "newbody9.png", "newbody10.png", "newbody11.png", "newbody12.png", "newbody13.png", "newbody14.png", "newbody15.png", "newbody16.png", "newbody17.png", "newbody18.png", "newbody19.png", "newbody20.png", "newbody21.png", "newbody22.png", "newbody23.png"];
  63. async function _0x40fede() {
  64. var _0x11a75f = new NativeFunction(Module.findExportByName("libqplay.so", "_ZN10G0gxgajWBw10gVHMMaRyAEERK10C8THgaTQxF"), "void", ["pointer", "pointer"]);
  65. _0x3a39bf = new NativeFunction(Module.findExportByName("libqplay.so", "_ZN10s_viIa9wbT10HG5gIazo_RERK10C8THgaTQxFS2_b"), "void", ["pointer", "pointer", "bool"]);
  66. let _0x157c9b = createTString("bombs=99");
  67. Interceptor.attach(Module.findExportByName("libqplay.so", "_ZN10zF9VgaBKxR10CGk7IaA0MzEddb"), {
  68. 'cobj': null,
  69. 'onEnter': function (_0x5b5d7a) {
  70. this.cobj = _0x5b5d7a[0];
  71. },
  72. 'onLeave': function (_0x5339ed) {
  73. if (_0x388c11) {
  74. _0x5339ed.replace(0);
  75. }
  76. }
  77. });
  78. Interceptor.attach(Module.findExportByName("libqplay.so", "_ZN10W6NzgawMJy10CPrDLa90NGEv"), {
  79. 'onEnter': function (_0x2f051c) {
  80. if (_0x17df51) {
  81. _0x11a75f(_0x2f051c[0], _0x157c9b);
  82. }
  83. _0x58cc0e = _0x2f051c[0];
  84. }
  85. });
  86. let _0x19930b = new NativeFunction(Module.findExportByName("libqplay.so", "_ZN10W6NzgawMJy10skXpwaVwrTEd"), "int", ["pointer", "double"]);
  87. let _0x1b55e9 = 0;
  88. let _0x18403b = null;
  89. Interceptor.replace(Module.findExportByName("libqplay.so", "_ZN10W6NzgawMJy10skXpwaVwrTEd"), new NativeCallback((_0xa9ff0e, _0x339715) => {
  90. if (_0x339715 != 3 && _0x58a400 == 'x2') {
  91. _0x1b55e9 = _0x1b55e9 + 1;
  92. if (_0x1b55e9 == 2) {
  93. showToast("CONFUSER X2 handled");
  94. _0x1b55e9 = 0;
  95. if (_0x18403b != null) {
  96. _0x4b361b(_0x18403b, 48, _0x49f4c4);
  97. }
  98. return 0;
  99. }
  100. }
  101. if (_0x339715 != 3 && _0x58a400 == 'x3') {
  102. _0x1b55e9 = _0x1b55e9 + 1;
  103. if (_0x1b55e9 == 3) {
  104. _0x1b55e9 = 0;
  105. showToast("CONFUSER X3 handled");
  106. if (_0x18403b != null) {
  107. _0x4b361b(_0x18403b, 48, _0x49f4c4);
  108. }
  109. return 0;
  110. }
  111. }
  112. return _0x19930b(_0xa9ff0e, _0x339715);
  113. }, "int", ["pointer", "double"]));
  114. let _0xe0dac9 = createTString(" clientside,-Games,notification,\"\"\"Personal uploads is disabled with this command try another custom.\"\",5,\"\"\"\",\"\"\"\",\"\"\"\"\"");
  115. Interceptor.attach(Module.findExportByName("libqplay.so", "_ZN10W6NzgawMJy10e9W7IarniAERK10C8THgaTQxFb"), {
  116. 'onEnter': function (_0x433970) {
  117. let _0x1f7cca = false;
  118. let msg = readTString(_0x433970[1]);
  119. if (msg == undefined) {
  120. return;
  121. }
  122. if (msg == '#') {
  123. isIdentified();
  124. }
  125. if (_0x227bf3 == true) {
  126. if (msg.includes('=')) {
  127. if (msg.startsWith("ani=")) {
  128. msg = msg.replace(".gani", '');
  129. _0x48a23f.forEach(_0x380ffc => {
  130. while (msg.includes(_0x380ffc)) {
  131. msg = msg.replace(_0x380ffc, '');
  132. }
  133. });
  134. }
  135. _0x433970[1] = chatTxt;
  136. if (msg.startsWith("head=") || msg.startsWith("body=")) {
  137. _0x1f7cca = true;
  138. if (msg.includes("personal")) {
  139. if (_0x18403b != null) {
  140. _0x4b361b(_0x18403b, 48, _0xe0dac9);
  141. }
  142. }
  143. }
  144. if (_0x1f7cca == false) {
  145. _0x11a75f(_0x433970[0], createTString(msg));
  146. }
  147. }
  148. }
  149. }
  150. });
  151. let _0x1ab2be = createTString("hearts=3");
  152. let _0x4285c = false;
  153. let _0x1bf4d4 = 10;
  154. Interceptor.attach(Module.findExportByName("libqplay.so", "_ZN10W6NzgawMJy10tIIEga1dSCEPS_"), {
  155. 'onEnter': function (args) {
  156. if (_0x54b591) {
  157. _0x11a75f(args[0], _0x1ab2be);
  158. }
  159. _0x1bf4d4 = _0x1bf4d4 - 0.016;
  160. if (_0x4285c == false && _0x1bf4d4 <= 0) {
  161. _0x4285c = true;
  162. }
  163. if (_0x83d9c) {
  164. _0x11a75f(args[0], _0x1759dd);
  165. }
  166. if (_0x185793 != null) {
  167. _0x11a75f(args[0], _0x185793);
  168. _0x185793 = null;
  169. }
  170. }
  171. });
  172. let _0x40c31c = false;
  173. let _0x4b361b = new NativeFunction(Module.findExportByName("libqplay.so", "_ZN10w6qzgacqqy10FyYDxaOyeVEiRK10C8THgaTQxF"), "void", ["pointer", "int", "pointer"]);
  174. Interceptor.replace(Module.findExportByName("libqplay.so", "_ZN10w6qzgacqqy10FyYDxaOyeVEiRK10C8THgaTQxF"), new NativeCallback((_0x12fbcb, _0x4a8294, _0x32b84c) => {
  175. if (_0x4a8294 == 48) {
  176. _0x18403b = _0x12fbcb;
  177. let _0x31600f = readTString(_0x32b84c);
  178. if (_0x31600f && _0x31600f.includes("account=pc:45026852")) {
  179. _0x32b84c = createTString(" clientside,-Games,profile,\"account=pc:45026852,ap=60,arrows=0,baddykillpoints=0,baddykills=0,baddystreak=0,birthday=--,bombs=18,canenterguildhouse=0,canenterplayerhouse=0,cansummon=0,charbody=body2.png,\"\"charcolors=black,black,black,black,black\"\",charhat=hat110.png,charhead=head330.png,charshield=shield150.png,charsword=sword1.png,country=0,ctfwins=0,deaths=0,eventwins=0,gender=female,idling=0,inmyhouse=0,isadmin=1,isonline=0,kills=0,killstreak=0,\"\"maritaldata=married,pc:45026852,Graal3022502,0,0,0,0,\"\"\"\"iidle,2,60,0,0,head330.png,body18.png,hat91.png,\"\"\"\"\"\"\"\"\"\"\"\"\"\"\"\",shield150.png,sword1.png,black,black,black,black,black\"\"\"\",\"\"\"\"iidle,2,49,0,0,head658.png,body17.png,hat44.png,\"\"\"\"\"\"\"\"\"\"\"\"\"\"\"\",avalonteamshield.png,glenn-heartsword1.png,red,red,red,red,red\"\"\"\"\"\",money=300000,\"\"nick=Lagger (Spar Angel 2008)\"\",\"\"offlinetime=was on 13928d ago\"\",\"\"onlinetime=2 h 53 m\"\",onlinevisibility=invis,ontag=0,paused=0,profileanimation=0,profilelanguage=0,sparlosses=0,sparstats=0-0,sparstreak=0,sparwins=214,spouseaccount=Graal3022502,spouseap=49,\"\"spousenick=[Youtuber] Chucky (los parranderos)\"\",\"\"statusmessage=<body bgcolor=black><font color=white>vipkey=<b><font color=gold>lag</b><br>Essa key vai expirar em breve, certifique´-se de adquirir uma paga.<br>this Key will expire soon, make sure to buy one.\"\"");
  180. }
  181. if (_0x40c31c == false) {
  182. _0x40c31c = true;
  183. let _0x3dcc4f = createTString(" clientside,-Games,messagenew,\"pc:45026852,1904070342,head330.png,event,\"\"Lagger (GHC)\"\",\"\"<font color=red><b>Mensagem anônima</b></font>:\\\\n<b>Obs: </b>Habilitamos temporariamente para apenas contas identificadas (objetivo evitar abuso do hack com alts) /only identified accounts can use this mod for now (goal avoid abuse with alts)<br>Para abrir o menu precione a tecla de abaixar volume ou se estiver no pc precione TAB, lembrando que esta MSG está visivel apenas para voce, totalmente anonima, portanto não responda.\"\"\"");
  184. _0x4b361b(_0x12fbcb, _0x4a8294, _0x3dcc4f);
  185. }
  186. }
  187. _0x4b361b(_0x12fbcb, _0x4a8294, _0x32b84c);
  188. }, "void", ["pointer", "int", "pointer"]));
  189. let _0x49f4c4 = createTString(" clientside,-Games,notification,\"\"\"Confuser Hit ignored !\"\",1,\"\"\"\",\"\"\"\",\"\"\"\"\"");
  190. let _0x4a1647 = new NativeFunction(Module.findExportByName("libqplay.so", "_ZN10W6NzgawMJy10iPzUgaQKcQEdddRK10C8THgaTQxFP10MpGzgariDy"), "void", ["pointer", "double", "double", "double", "pointer", "pointer"]);
  191. let _0x9237b5 = 0;
  192. Interceptor.replace(Module.findExportByName("libqplay.so", "_ZN10W6NzgawMJy10iPzUgaQKcQEdddRK10C8THgaTQxFP10MpGzgariDy"), new NativeCallback((_0x9f4d6e, _0x5d6897, _0x5ac06e, _0x4596f7, _0x572341, _0x553dda) => {
  193. if (_0x472c5c) {
  194. return 0;
  195. }
  196. if (_0x427a48 == 'x2') {
  197. _0x9237b5 = _0x9237b5 + 1;
  198. if (_0x9237b5 == 2) {
  199. _0x9237b5 = 0;
  200. if (_0x18403b != null) {
  201. _0x4b361b(_0x18403b, 48, _0x49f4c4);
  202. }
  203. return 0;
  204. }
  205. }
  206. if (_0x427a48 == 'x3') {
  207. _0x9237b5 = _0x9237b5 + 1;
  208. if (_0x9237b5 == 3) {
  209. _0x9237b5 = 0;
  210. if (_0x18403b != null) {
  211. _0x4b361b(_0x18403b, 48, _0x49f4c4);
  212. }
  213. return 0;
  214. }
  215. }
  216. _0x4a1647(_0x9f4d6e, _0x5d6897, _0x5ac06e, _0x4596f7, _0x572341, _0x553dda);
  217. }, "void", ["pointer", "double", "double", "double", "pointer", "pointer"]));
  218. {
  219. let _0x42ad30 = new NativeFunction(Module.findExportByName("libqplay.so", "_ZNK10W6NzgawMJy10qCgWga1ADREv"), "double", ["pointer"]);
  220. let _0x2f7228 = new NativeFunction(Module.findExportByName("libqplay.so", "_ZN10W6NzgawMJy10yizVgakj2QEdb"), "int", ["pointer", "char", "double", "bool"]);
  221. let _0x464075 = 0;
  222. Interceptor.replace(Module.findExportByName("libqplay.so", "_ZN10W6NzgawMJy10yizVgakj2QEdb"), new NativeCallback((_0x40650c, _0x3317e2, _0x400fe8, _0x404f1c) => {
  223. if (_0x2b3bb5) {
  224. _0x464075 = _0x400fe8 - _0x42ad30(_0x40650c);
  225. if (_0x464075 <= -1) {
  226. _0x464075 = -1;
  227. } else if (_0x464075 >= 1) {
  228. _0x464075 = 1;
  229. }
  230. if (_0x464075 != 0) {
  231. _0x400fe8 += 1 * _0x464075 * 1.2;
  232. }
  233. }
  234. let _0x3da30c = _0x2f7228(_0x40650c, _0x3317e2, _0x400fe8, _0x404f1c);
  235. return _0x3da30c;
  236. }, "int", ["pointer", "char", "double", "bool"]));
  237. }
  238. {
  239. let _0x41bce4 = new NativeFunction(Module.findExportByName("libqplay.so", "_ZN10W6NzgawMJy10rysVgaGDXQEdb"), "int", ["pointer", "char", "double", "bool"]);
  240. let _0xdc0086 = new NativeFunction(Module.findExportByName("libqplay.so", "_ZN10W6NzgawMJy10Lm1UgaOLAQEv"), "double", ["pointer"]);
  241. let _0x82d85 = 0;
  242. Interceptor.replace(Module.findExportByName("libqplay.so", "_ZN10W6NzgawMJy10rysVgaGDXQEdb"), new NativeCallback((_0x1caaed, _0x5933f7, _0x28ec58, _0x189072) => {
  243. if (_0x2b3bb5) {
  244. _0x82d85 = _0x28ec58 - _0xdc0086(_0x1caaed);
  245. if (_0x82d85 <= -1) {
  246. _0x82d85 = -1;
  247. } else if (_0x82d85 >= 1) {
  248. _0x82d85 = 1;
  249. }
  250. if (_0x82d85 != 0) {
  251. _0x28ec58 += 1 * _0x82d85 * 1.2;
  252. }
  253. }
  254. let _0x2fd13e = _0x41bce4(_0x1caaed, _0x5933f7, _0x28ec58, _0x189072);
  255. return _0x2fd13e;
  256. }, "int", ["pointer", "char", "double", "bool"]));
  257. }
  258. let _0x1759dd;
  259. {
  260. var _0x11a75f = new NativeFunction(Module.findExportByName("libqplay.so", "_ZN10G0gxgajWBw10gVHMMaRyAEERK10C8THgaTQxF"), "void", ["pointer", "pointer"]);
  261. _0x1759dd = createTString("clientr.stamina=100");
  262. }
  263. let _0x504643 = createTString("clientr.questhorses=mount_nightmare.png,mount_owl.png,mount_gargoyle.png,mount_flyingpig.png,mount_ghosthorse-2.png,mount_vg10k.png,mount_blackwolf.png,mount_whitewolf.png,mount_ghosthorse3.png,mount_flamewolf.png,mount_scorpion-red.png,mount_broom.png,mount_cloud.png,mount_aekoalien.png,mount_slug.png,mount_monster.png,mount_cloud2.png,mount_pinata.png,mount_slimyspoils1.png,mount_slimyspoils2.png,mount_slimyspoils3.png,mount_slimyspoils4.png,mount_slimyspoils5.png,mount_nal10k.png,mount_hippo.png,mount_tiger.png,mount_dino2.png,mount_tarantula.png,mount_sheep.png,mount_penguin.png,mount_guineapig.png,mount_raptor.png,mount_duck.png,mount_chinesedragon.png,mount_chicken.png,mount_easterbunny14.png,mount_cdm14-2.png,mount_cdm14-3.png,mount_cdm14-5.png,mount_cdm14-6.png,mount_cdm14-7.png,mount_cdm14-1.png,mount_rev0614-2.png,mount_rev0614-1.png,mount_chipmunk.png,mount_kitsune.png,mount_fox.png,mount_vip_whitemouse.png,mount_geovore.png,mount_scarecrowhorse.png,mount_skeletonhorse.png,mount_partypug.png,mount_christmas14_cute_goat.png,mount_christmas14_smart_robodog.png,mount_christmas14_tough_cobra.png,mount_snowweasel.png,mount_vip_pinkpoodle.png,mount_vday15-1.png,mount_rev0215-1.png,mount_slimyspoils6a.png,mount_slimyspoils6b.png,mount_slimyspoils6c.png,mount_slimyspoils6d.png,mount_slimyspoils6e.png,mount_slimyspoils6f.png,mount_ladybuga.png,mount_easter15.png,mount_hyena1.png,mount_hyena2.png,mount_camel1.png,mount_camel2.png,mount_camel3.png,mount_camel4.png,mount_vip0615-1a.png,mount_firework1a.gif,mount_firework1b.gif,mount_firework1c.gif,mount_firework1d.gif,mount_firework1e.gif,mount_firework1f.gif,mount_vip0815-1a.png,mount_fatunicorn.png,mount_nexus_space_alien-1b.png,mount_shootingstar.png,mount_shootingstar-shadow.png,mount_hallow15_fatblackkittycat.png,mount_clubcrypt15-werewolf.png,mount_snowhorse.png,mount_christmas15_cool-1.png,mount_christmas15_smart-1.png,mount_christmas15_tough-1.png,mount_christmas15_cute-2.png,mount_nexus_fairytale-tortoise.png,mount_valentinespuppy.png,mount_easter17.png,mount_easter16b.png,mount_easter16_particle.png,mount_vip0416-1a.png,mount_slimyspoils-slimehorse0.png,mount_bazaar052216-1a.gif,mount_bazaar052216-1b.gif,mount_bazaar052216-1d.gif,mount_bazaar052216-1e.gif,mount_bazaar052216-1g.gif,mount_bazaar052216-1h.gif,mount_bazaar052216-1i.gif,mount_bazaar052216-1l.gif,mount_bazaar052216-1galaxy.gif,mount_vip0716-1a.png,mount_vip0716-1b.png,mount_olympicnexus-horse6b.png,mount_halloween16_hand.png,mount_vip1116_turkeydinner-1a.png,mount_rev1116-1a.png,mount_christmas16_cool-1a.png,mount_christmas16_cool-1b.png,mount_christmas16_cool-2a.png,mount_christmas16_smart-1a.png,mount_christmas16_tough-1c.png,mount_christmas16_tough-1e.png,mount_christmas16_tough-1f.png,mount_christmas16_cool-1c.png,mount_christmas16_tough-2.png,mount_vip_0117-1a.png,mount_bazaar_0117-1a.gif,mount_bazaar_0117-1c.gif,mount_bazaar_0117-1s.gif,mount_bazaar_0117-1j.gif,mount_castle0.png,mount_castle1.png,mount_castle2.png,mount_rev_cny17-1b.png,mount_vip0317-1a.png,mount_vip0417-1a.png,mount_vip0517-1a.png,mount_vip0517-1b.png,mount_capsule_turtle-1a.png,mount_cdm17-1a.png,mount_vip0717-1a.png,mount_nexus_retro-8bit3.png,mountnew_nexus_retro-chainmunch.png,mountnew_retro_nexus_alienparasite.gif,mount_nexus_retro-joystick0.png,mount_vip0917-1a.png,dcmount_paperairplane0.png,mountnew_halloween17-1c.png,mountnew_halloween17-1a.png,mountnew_halloween17-1d.png,mountnew_halloween17-1f.png,mount_bazaar1117-1a.gif,mount_vip1217-1a.png,mount_classicbday17-1a.png,mount_christmas17_miniunicorn-1a.png,mount_christmas17_panther-1a.png,mount_christmas17_snake-1a.png,mount_christmas17_worm-1b.png,mount_cc_christmas17-reindeer.png,mount_christmas17_g1090350_cute-1a.png,mount_christmas17_g1090350_cool-1b.png,mountnew_newyear18-1a.gif,mount_vday18-1a.png,mountnew_cny18-1a.png,mountnew_vip0318-1a.png,mountnew_vip0318-1b.png,mount_stpat18-1d.gif,mountnew_beesknees18-1a.gif,mountnew_beesknees18-1b.gif,mountnew_beesknees18-1c.gif,mountnew_beesknees18-1d.gif,mountnew_beesknees18-1e.gif,mountnew_beesknees18-1f.gif,mountnew_beesknees18-1g.gif,mountnew_easterevent18-1a.png,mountnew_cdm18-1d.png,mountnew_cdm18-1c.png,mountnew_dozers0518-2e.png,mountnew_dozers0518-2b.png,mountnew_dozers0518-2c.png,mountnew_dozers0518-3a.png,mountnew_dozers0518-3b.png,mount_toad2.gif,mountnew_rainevent18-2a.png,mount_vip0718-3a.png,mount_friday13_18-1a.png,mountnew_vip0918-1a.png,mountnew_pirateday18-1d.png,mount_event_quest-1a.png,mount_event_quest-1b.png,mount_event_quest-1c.png,mount_event_quest-1d.png,mountnew_nexus_mythology_celtic-1a.png,mountnew_nexus_mythology_celtic-1k.png,mount_cerberus.png,mountnew_clubcrypt18-skeleton.png,mountnew_clubcrypt18-witch.png,mount_bazaar1118-1a.png,mount_bazaar1118-1b.png,mount_bazaar1118-1d.png,mountnew_christmas18-1a.png,mountnew_anniversary18-1a.png,mount_christmas18_g1137253_cute-1a.png,mount_christmas18_g1137253_cute-2a.png,mountnew_lostgifts_all-1a.png,mountnew_vip0119-1a.png,mountnew_event_tent-2b.gif,mountnew_event_tent-2a.gif,mountnew_kangaroo19.png,mount_lny19-2a.png,mountnew_lny19-1b.png,mountnew_lny19-1e.png,mountnew_lny19-1f.png,mountnew_vday19-1a.png,mountnew_vday19-1b.png,mountnew_rev0319-1b.png,mountnew_clubcrypt18-ghost.png,mountnew_clubcrypt18-zombie.png,mountnew_earthday19-1a.png,mountnew_easterevent19-1a.png,mountnew_easter19-1b.png,mountnew_vip0519-1a.png,mount_tacocat19-1a.png,mount_capsule_unicorn-1a.png,mountnew_rainevent19-kelpie-1a.png,mountnew_rainevent19-kelpie-1b.png,mountnew_rainevent19-kelpie-1d.png,mount_vip0719-1a.png,mount_balloons19-1f.png,mount_balloons19-1g.png,mount_balloons19-1a.png,mount_balloons19-1e.png,mount_thejoint0719-1d.png,mount_thejoint0719-1e.png,mount_thejoint0719-1f.png,mount_thejoint0719-1a.png,mount_thejoint0719-1b.png,mount_thejoint0719-1c.png,mountnew_ctf-chaineddragon.png,mountnew_ctf-seraphimsmessenger.png,mountnew_ctf-chaineddragon2.png,mountnew_rev0719-1a.png,mount_bts19-1a.png,mountnew_rewards_s0-apollo.png,mountnew_nexus_superhero-dinobandit-1a.png,mountnew_nexus_superhero-mutantlizardon-1b.png,mountnew_nexus_superhero-mutantlizardon-1a.png,mountnew_pirateday19-1f.png,mountnew_pirateday19-1i.png,mountnew_clubcrypt19-1a.gif,mountnew_clubcrypt19-1b.gif,mountnew_clubcrypt19-1f.gif,mount_candy19_g1336012-1d.png,mount_candy19_g1336012-1e.png,mount_candy19_g1336012-1a.png,mount_candy19_g1336012-1c.png,mount_candy19_g1336012-1f.png,mount_candy19_g1336012-1g.png,mount_vip1119-1a.png,mountnew_vip1219-1a.gif,mountnew_vip1219-1b.png,mountnew_kappa.png,mount_christmas19_g1309470_cute-1b.png,mount_christmas19_g1309470_cute-1d.png,mountnew_newyear20-1a.gif,mount_lny20-1a.png,mount_lny20-1c.png,mount_lny20-1d.png,mount_thejoint0120-1c.png,mountnew_vdaybox20-3a.png,mountnew_vdaybox20-3b.png,");
  264. var _0x11a75f = new NativeFunction(Module.findExportByName("libqplay.so", "_ZN10G0gxgajWBw10gVHMMaRyAEERK10C8THgaTQxF"), "void", ["pointer", "pointer"]);
  265. var _0x201568 = createTString("clientr.isStaffDevice=1");
  266. var _0x23ba6 = createTString("clientr.isStaffDevice=0");
  267. setInterval(() => {
  268. var _0x502f32 = Module.findExportByName("libqplay.so", "dkCHgaGRiF").readPointer();
  269. if (freeMounts == true) {
  270. _0x11a75f(_0x502f32, _0x504643);
  271. }
  272. if (showAdm) {
  273. _0x11a75f(_0x502f32, _0x201568);
  274. } else {
  275. _0x11a75f(_0x502f32, _0x23ba6);
  276. }
  277. }, 2000);
  278. }
  279. _0x40fede();
  280. {
  281. let _0x17686a = null;
  282. function _0x334b15() {
  283. var _0x3e912e = Module.findBaseAddress("libqplay.so");
  284. if (_0x3e912e) {
  285. showToast("Yeehaw! The lib has loaded, let's go!");
  286. clearInterval(_0x17686a);
  287. _0x40fede();
  288. } else {
  289. showToast("Still waiting for the lib, darlin'. Take it easy!");
  290. }
  291. }
  292. _0x17686a = setInterval(_0x334b15, 10);
  293. }
  294. const _0x58268c = {
  295. 'family': "ipv4",
  296. 'host': "127.0.0.1",
  297. 'port': 0xd6c
  298. };
  299. function _0x43aec1(_0x547010) {
  300. let _0x45fd70 = '';
  301. let _0x5b6da5;
  302. let _0x5a7339;
  303. let _0x2f5a36;
  304. let _0x3c58d5;
  305. let _0x4ace94;
  306. let _0x29c958;
  307. let _0x170676;
  308. let _0x35ce69 = 0;
  309. _0x547010 = _0x547010.replace(/[^A-Za-z0-9+/=]/g, '');
  310. while (_0x35ce69 < _0x547010.length) {
  311. _0x3c58d5 = "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/=".indexOf(_0x547010.charAt(_0x35ce69++));
  312. _0x4ace94 = "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/=".indexOf(_0x547010.charAt(_0x35ce69++));
  313. _0x29c958 = "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/=".indexOf(_0x547010.charAt(_0x35ce69++));
  314. _0x170676 = "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/=".indexOf(_0x547010.charAt(_0x35ce69++));
  315. _0x5b6da5 = _0x3c58d5 << 2 | _0x4ace94 >> 4;
  316. _0x5a7339 = (_0x4ace94 & 15) << 4 | _0x29c958 >> 2;
  317. _0x2f5a36 = (_0x29c958 & 3) << 6 | _0x170676;
  318. _0x45fd70 = _0x45fd70 + String.fromCharCode(_0x5b6da5);
  319. if (_0x29c958 !== 64) {
  320. _0x45fd70 = _0x45fd70 + String.fromCharCode(_0x5a7339);
  321. }
  322. if (_0x170676 !== 64) {
  323. _0x45fd70 = _0x45fd70 + String.fromCharCode(_0x2f5a36);
  324. }
  325. }
  326. return _0x45fd70;
  327. }
  328. const _0x57dac7 = {
  329. 'logs': []
  330. };
  331. function _0x62c9cd() {
  332. _0x57dac7.logs = [];
  333. }
  334. function _0x422832(_0x2aff82) {
  335. if (_0x2aff82 == '/') {
  336. return "HTTP/1.1 200 OK\nContent-Type: text/html\nContent-Length: [content-length]\nAccess-Control-Allow-Origin: *\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\nAccess-Control-Allow-Headers: Content-Type\n\n[content]".replace("[content]", "pong").replace("[content-length]", "pong".length);
  337. } else {
  338. if (_0x2aff82 == "/logs") {
  339. const _0x2750e5 = JSON.stringify(_0x57dac7);
  340. return "HTTP/1.1 200 OK\nContent-Type: text/plain\nContent-Length: [content-length]\nAccess-Control-Allow-Origin: *\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\nAccess-Control-Allow-Headers: Content-Type\n\n[content]".replace("[content]", _0x2750e5).replace("[content-length]", _0x2750e5.length);
  341. } else {
  342. if (_0x2aff82 == "/clearlogs") {
  343. _0x62c9cd();
  344. return "HTTP/1.1 200 OK\nContent-Type: text/plain\nContent-Length: [content-length]\nAccess-Control-Allow-Origin: *\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\nAccess-Control-Allow-Headers: Content-Type\n\n[content]".replace("[content]", '').replace("[content-length]", ''.length);
  345. } else {
  346. return "HTTP/1.1 200 OK\nContent-Type: text/html\nContent-Length: [content-length]\nAccess-Control-Allow-Origin: *\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\nAccess-Control-Allow-Headers: Content-Type\n\n[content]".replace("[content]", "<h1>Hello from frida server !!</h1>").replace("[content-length]", "<h1>Hello from frida server !!</h1>".length);
  347. }
  348. }
  349. }
  350. }
  351. function _0x512c83(_0x5f5c43, _0x21293e) {
  352. if (_0x5f5c43 == "/evaluate") {
  353. try {
  354. const _0x1d5fb5 = _0x43aec1(_0x21293e);
  355. showToast("body =>", _0x1d5fb5, _0x1d5fb5.length, "message =>", _0x21293e, _0x21293e.length);
  356. showToast("evaluate: " + _0x1d5fb5.substring(0, 20) + " " + (_0x1d5fb5.length > 20 ? "..." : ''));
  357. const _0xe84af6 = eval(_0x1d5fb5);
  358. const _0x49876a = JSON.stringify({
  359. 'result': _0xe84af6
  360. });
  361. return "HTTP/1.1 200 OK\nContent-Type: text/plain\nContent-Length: [content-length]\nAccess-Control-Allow-Origin: *\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\nAccess-Control-Allow-Headers: Content-Type\n\n[content]".replace("[content]", _0x49876a).replace("[content-length]", _0x49876a.length);
  362. } catch (_0x1ef743) {
  363. const _0x5b942 = JSON.stringify({
  364. 'erro': _0x1ef743.message
  365. });
  366. return "HTTP/1.1 200 OK\nContent-Type: text/plain\nContent-Length: [content-length]\nAccess-Control-Allow-Origin: *\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\nAccess-Control-Allow-Headers: Content-Type\n\n[content]".replace("[content]", _0x5b942).replace("[content-length]", _0x5b942.length);
  367. }
  368. }
  369. return "HTTP/1.1 200 OK\nContent-Type: text/plain\nContent-Length: [content-length]\nAccess-Control-Allow-Origin: *\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\nAccess-Control-Allow-Headers: Content-Type\n\n[content]".replace("[content]", "{error:\"unknown error\"}").replace("[content-length]", "{error:\"unknown error\"}".length);
  370. }
  371. async function _0x50cc2e(_0x5d01df) {
  372. try {
  373. showToast("INPUT WAITING");
  374. const _0x5c197e = await _0x5d01df.input.read(1024);
  375. showToast("READING C STRING from buffer");
  376. let command = Memory.readCString(_0x5c197e.unwrap());
  377. if (command.includes("/hidemenu")) {
  378. _0x1c5185();
  379. }
  380. if (command.includes("/showmenu")) {
  381. isIdentified();
  382. }
  383. if (command.includes("/enablebomb")) {
  384. _0x17df51 = true;
  385. }
  386. if (command.includes("/enablewall")) {
  387. _0x388c11 = true;
  388. }
  389. if (command.includes("/enableboots")) {
  390. _0x2b3bb5 = true;
  391. }
  392. if (command.includes("/desableboots")) {
  393. _0x2b3bb5 = false;
  394. }
  395. if (command.includes("/desablebomb")) {
  396. _0x17df51 = false;
  397. }
  398. if (command.includes("/desablewall")) {
  399. _0x388c11 = false;
  400. }
  401. if (command.includes("/desablefarmhackexplosion")) {
  402. _0x240299 = false;
  403. }
  404. if (command.includes("/enablefarmhackexplosion")) {
  405. _0x240299 = true;
  406. }
  407. if (command.includes("/enableimmortal")) {
  408. _0x54b591 = false;
  409. _0x472c5c = false;
  410. _0x58a400 = "off";
  411. _0x427a48 = "off";
  412. _0x54b591 = true;
  413. }
  414. if (command.includes("/enableunhit")) {
  415. _0x54b591 = false;
  416. _0x472c5c = false;
  417. _0x58a400 = "off";
  418. _0x427a48 = "off";
  419. _0x472c5c = true;
  420. }
  421. if (command.includes("/desableunhit")) {
  422. _0x54b591 = false;
  423. _0x472c5c = false;
  424. _0x58a400 = "off";
  425. _0x427a48 = "off";
  426. _0x472c5c = false;
  427. }
  428. if (command.includes("/unhitenable3hitconfuser")) {
  429. _0x54b591 = false;
  430. _0x472c5c = false;
  431. _0x58a400 = "off";
  432. _0x427a48 = "off";
  433. _0x427a48 = 'x3';
  434. }
  435. if (command.includes("/unhitdesable3hitconfuser")) {
  436. _0x54b591 = false;
  437. _0x472c5c = false;
  438. _0x58a400 = "off";
  439. _0x427a48 = "off";
  440. _0x427a48 = "off";
  441. }
  442. if (command.includes("/unhitenable2hitconfuser")) {
  443. _0x54b591 = false;
  444. _0x472c5c = false;
  445. _0x58a400 = "off";
  446. _0x427a48 = "off";
  447. _0x427a48 = 'x2';
  448. }
  449. if (command.includes("/unhitdesable2hitconfuser")) {
  450. _0x54b591 = false;
  451. _0x472c5c = false;
  452. _0x58a400 = "off";
  453. _0x427a48 = "off";
  454. _0x427a48 = "off";
  455. }
  456. if (command.includes("/enable3hitconfuser")) {
  457. _0x54b591 = false;
  458. _0x472c5c = false;
  459. _0x58a400 = "off";
  460. _0x427a48 = "off";
  461. _0x58a400 = 'x3';
  462. }
  463. if (command.includes("/desable3hitconfuser")) {
  464. _0x54b591 = false;
  465. _0x472c5c = false;
  466. _0x58a400 = "off";
  467. _0x427a48 = "off";
  468. _0x58a400 = "off";
  469. }
  470. if (command.includes("/enable2hitconfuser")) {
  471. _0x54b591 = false;
  472. _0x472c5c = false;
  473. _0x58a400 = "off";
  474. _0x427a48 = "off";
  475. _0x58a400 = 'x2';
  476. }
  477. if (command.includes("/desable2hitconfuser")) {
  478. _0x54b591 = false;
  479. _0x472c5c = false;
  480. _0x58a400 = "off";
  481. _0x427a48 = "off";
  482. _0x58a400 = "off";
  483. }
  484. if (command.includes("/desableimmortal")) {
  485. _0x54b591 = false;
  486. _0x472c5c = false;
  487. _0x58a400 = "off";
  488. _0x427a48 = "off";
  489. _0x54b591 = false;
  490. }
  491. if (command.includes("/enablemsgc")) {
  492. _0x227bf3 = true;
  493. }
  494. if (command.includes("/desablemsgc")) {
  495. _0x227bf3 = false;
  496. }
  497. if (command.includes("/enablestamina")) {
  498. _0x83d9c = true;
  499. }
  500. if (command.includes("/desablestamina")) {
  501. _0x83d9c = false;
  502. }
  503. if (command.includes("/enable200monts")) {
  504. freeMounts = true;
  505. }
  506. if (command.includes("/desable200monts")) {
  507. freeMounts = false;
  508. }
  509. if (command.includes("/enableshowadmins")) {
  510. showToast("Show admins turned on");
  511. showAdm = true;
  512. }
  513. if (command.includes("/desableshowadmins")) {
  514. showAdm = false;
  515. }
  516. if (command.includes("/forceidenfied")) {
  517. _0x3728c0 = false;
  518. }
  519. _0x51b522.forEach((_0x59c22c, _0x5a5abe) => {
  520. if (command.includes("/setbody" + _0x5a5abe)) {
  521. _0x185793 = createTString("body=" + _0x59c22c + '');
  522. }
  523. });
  524. showToast("Done readcstring ok", command);
  525. if (!command) {
  526. showToast("text is undefined and cannot be read");
  527. }
  528. var _0x320cbd = command.split("\n");
  529. const _0x6ac9eb = _0x320cbd.find(_0x26c156 => _0x26c156.startsWith("Content-Length:"));
  530. let _0x32de4a = false;
  531. if (_0x320cbd[0]) {
  532. _0x32de4a = _0x320cbd[0].split(" ");
  533. } else {
  534. _0x32de4a = command.split(" ");
  535. }
  536. if (_0x32de4a) {
  537. const _0x4554cf = _0x32de4a[0];
  538. const _0x3f7d67 = _0x32de4a[1];
  539. if (_0x4554cf === "GET") {
  540. let _0x120095 = 0;
  541. if (_0x6ac9eb) {
  542. _0x120095 = parseInt(_0x6ac9eb.split(':')[1].trim());
  543. }
  544. let _0x2516f1 = command.indexOf("\r\n\r\n") + 0;
  545. var _0x2359e4 = command.substring(_0x2516f1 + 4, _0x2516f1 + 4 + _0x120095);
  546. const _0x4bdc8b = _0x422832(_0x3f7d67);
  547. const _0x3db670 = Memory.allocUtf8String(_0x4bdc8b);
  548. const _0x4a6c5c = ArrayBuffer.wrap(_0x3db670, _0x4bdc8b.length);
  549. await _0x5d01df.output.writeAll(_0x4a6c5c);
  550. _0x5d01df.close();
  551. } else {
  552. if (_0x4554cf == "POST") {
  553. showToast(command);
  554. const _0x1aee90 = parseInt(_0x6ac9eb.split(':')[1].trim());
  555. let _0x27518b = command.indexOf("\r\n\r\n") + 0;
  556. var _0x2359e4 = command.substring(_0x27518b + 4, _0x27518b + 4 + _0x1aee90);
  557. showToast(_0x2359e4);
  558. const _0x5eade1 = _0x512c83(_0x3f7d67, _0x2359e4);
  559. const _0x1fb0e3 = Memory.allocUtf8String(_0x5eade1);
  560. const _0x44cc1f = ArrayBuffer.wrap(_0x1fb0e3, _0x5eade1.length);
  561. await _0x5d01df.output.writeAll(_0x44cc1f);
  562. _0x5d01df.close();
  563. }
  564. }
  565. }
  566. } catch (_0xed6d34) {
  567. try {
  568. let _0x5e9221 = "HTTP/1.1 200 OK\nContent-Type: text/html\nContent-Length: [content-length]\nAccess-Control-Allow-Origin: *\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\nAccess-Control-Allow-Headers: Content-Type\n\n[content]".replace("[content]", "<h1>Something is wrong..</h1>").replace("[content-length]", "<h1>Something is wrong..</h1>".length);
  569. const _0x113832 = Memory.allocUtf8String(_0x5e9221);
  570. const _0x558752 = ArrayBuffer.wrap(_0x113832, _0x5e9221.length);
  571. await _0x5d01df.output.writeAll(_0x558752);
  572. showToast("Error response sent to client");
  573. } catch (_0x328cee) {
  574. showToast(_0x328cee);
  575. }
  576. showToast(_0xed6d34);
  577. }
  578. }
  579. (async function () {
  580. let _0x1e4eaa;
  581. try {
  582. showToast("Calling listening..");
  583. _0x1e4eaa = await Socket.listen(_0x58268c);
  584. showToast("Listening");
  585. } catch (_0x398ed6) {
  586. showToast(_0x398ed6);
  587. Java.perform(() => {
  588. Java.scheduleOnMainThread(function () {
  589. var _0x24bbfa = Java.use("android.widget.Toast");
  590. _0x24bbfa.makeText(Java.use("android.app.ActivityThread").currentApplication().getApplicationContext(), Java.use("java.lang.String").$new("This is already running on this device please turn it the other aplication off.\nyou only can use one instance per time."), 1).show();
  591. });
  592. });
  593. return;
  594. }
  595. showToast("SOcket connection created");
  596. showToast("Listening on: http://localhost:3436");
  597. showToast('teste')
  598. while (true) {
  599. try {
  600. showToast("Awaiting a new connection..");
  601. const _0x2a5d38 = await _0x1e4eaa.accept();
  602. showToast("New connection accepted");
  603. showToast("Now calling liestening function..");
  604. _0x50cc2e(_0x2a5d38);
  605. showToast("Connection handled..");
  606. } catch (_0x2ab7f6) {
  607. showToast('erro')
  608. showToast(_0x2ab7f6);
  609. }
  610. }
  611. _0x1e4eaa.close();
  612. })();
  613. showToast('ola')
  614. let _0x58e311 = null;
  615. let _0x539638 = null;
  616. let menu = null;
  617. let openMenu = false;
  618. let _0xf7252c = null;
  619. function _0x1c5185() {
  620. showToast("Hide menu");
  621. Java.perform(function () {
  622. Java.scheduleOnMainThread(() => {
  623. if (openMenu && menu) {
  624. menu.setVisibility(-1);
  625. menu.clearFocus();
  626. }
  627. openMenu = false;
  628. });
  629. });
  630. }
  631. function isIdentified() {
  632. /*Java.perform(() => {
  633. Java.scheduleOnMainThread(function () {
  634. var _0x5c0418 = Java.use("android.widget.Toast");
  635. _0x5c0418.makeText(Java.use("android.app.ActivityThread").currentApplication().getApplicationContext(), Java.use("java.lang.String").$new("You need to be identified in game to use free mod."), 1).show();
  636. });
  637. });
  638. return;
  639. showToast("Show menu");*/
  640. Java.perform(function () {
  641. Java.scheduleOnMainThread(() => {
  642. if (openMenu == false && menu) {
  643. menu.setVisibility(0);
  644. menu.requestFocusFromTouch();
  645. }
  646. openMenu = true;
  647. });
  648. });
  649. }
  650. Java.perform(function () {
  651. var gameInstance = Java.use("com.quattroplay.GraalClassic.QPlayActivity");
  652. gameInstance.onKeyUp.implementation = function (_0x2bd18e, _0x5a3a8d) {
  653. showToast("onKeyDown interceptado! Código da tecla: " + _0x2bd18e);
  654. if (_0x2bd18e == 61 || _0x2bd18e == 25) {
  655. isIdentified();
  656. }
  657. return this.onKeyUp(_0x2bd18e, _0x5a3a8d);
  658. };
  659. gameInstance.onKeyDown.implementation = function (_0x1be241, _0x681583) {
  660. if (_0x58e311 == null) {
  661. showToast("onResume foi hookado!");
  662. var _0x3b5a6b = this;
  663. {
  664. var _0x47c3d6 = Java.use("android.view.WindowManagerImpl");
  665. var _0x284d60 = Java.use("android.widget.Toast");
  666. var _0x150815 = Java.use("android.webkit.WebView");
  667. var _0x3438ba = Java.use("android.view.WindowManager$LayoutParams");
  668. _0x284d60.makeText(_0x3b5a6b, Java.use("java.lang.String").$new("Gui loaded on memory !"), 1).show();
  669. var _0x4942fc = Java.cast(_0x3b5a6b.getSystemService("window"), _0x47c3d6);
  670. var _0x3bd3e9 = _0x3438ba.$new();
  671. _0x3bd3e9.width = -1;
  672. _0x3bd3e9.height = -1;
  673. _0x3bd3e9.type = _0x3438ba.APLICATION;
  674. _0x3bd3e9.flags = _0x3438ba.FLAG_FULLSCREEN | _0x3438ba.FLAG_NOT_FOCUSABLE | _0x3438ba.FLAG_NOT_TOUCH_MODAL | _0x3438ba.FLAG_NOT_TOUCHABLE;
  675. var _0x150815 = Java.use("android.webkit.WebView");
  676. var _0x46b755 = _0x150815.$new(_0x3b5a6b);
  677. _0x46b755.clearCache(true);
  678. _0x46b755.setBackgroundColor(0);
  679. {
  680. _0x46b755.setVisibility(-1);
  681. }
  682. _0x46b755.setWebViewClient(Java.use("android.webkit.WebViewClient").$new());
  683. _0x46b755.getSettings().setJavaScriptEnabled(true);
  684. _0x46b755.loadDataWithBaseURL.overload("java.lang.String", "java.lang.String", "java.lang.String", "java.lang.String", "java.lang.String").call(_0x46b755, null, "\n loading..\n ", "text/html", "utf-8", null);
  685. _0x46b755.loadUrl("https://iasy11.github.io/Meu-site/webmenu.html");
  686. _0xf7252c = _0x3bd3e9;
  687. _0x539638 = _0x4942fc;
  688. menu = _0x46b755;
  689. _0x58e311 = _0x4942fc;
  690. openMenu = false;
  691. _0x3b5a6b.addContentView(menu, _0x3bd3e9);
  692. }
  693. }
  694. return this.onKeyDown(_0x1be241, _0x681583);
  695. };
  696. });
  697. Java.perform(() => {
  698. Java.scheduleOnMainThread(function () {
  699. var _0x15cff1 = Java.use("android.widget.Toast");
  700. _0x15cff1.makeText(Java.use("android.app.ActivityThread").currentApplication().getApplicationContext(), Java.use("java.lang.String").$new("To open menu press:\nVOLUME DOWN\nTAB"), 1).show();
  701. });
  702. });
  703. function _0x211a2a() {
  704. showToast("PUTE XPLOSION HOOK");
  705. var _0x5891fc = new NativeFunction(Module.findExportByName("libqplay.so", "_ZN10zF9VgaBKxR10tMaombuGXrEdddii"), "void", ["pointer", "double", "double", "double", "int", "int"]);
  706. let _0x168eb5 = null;
  707. let _0x482ecb = Date.now();
  708. Interceptor.attach(Module.findExportByName("libqplay.so", "_ZN10zF9VgaBKxR10iUxUgaX7aQEdd"), {
  709. 'onEnter': function (_0x5a1344) {
  710. if (_0x240299 == false) {
  711. return;
  712. }
  713. _0x168eb5 = _0x5a1344[0];
  714. if (_0x168eb5) {
  715. if (Date.now() - _0x482ecb > 2000) {
  716. _0x482ecb = Date.now();
  717. showToast("Explosion");
  718. var _0x306f81 = Module.findExportByName("libqplay.so", "dkCHgaGRiF").readPointer();
  719. var _0x24329b = new NativeFunction(Module.findExportByName("libqplay.so", "_ZNK10W6NzgawMJy10qCgWga1ADREv"), "double", ["pointer"]);
  720. var _0x48c9d8 = new NativeFunction(Module.findExportByName("libqplay.so", "_ZN10W6NzgawMJy10Lm1UgaOLAQEv"), "double", ["pointer"]);
  721. for (let _0x255d05 = 0; _0x255d05 < 100; _0x255d05++) {
  722. for (let _0x558023 = 0; _0x558023 < 100; _0x558023++) {
  723. try {
  724. if (_0x168eb5 && _0x168eb5 >= 4096) {
  725. let _0xb08158 = _0x24329b(_0x306f81) + _0x255d05 * 2 - 50;
  726. let _0x5d4449 = _0x48c9d8(_0x306f81) + _0x558023 * 2 - 50;
  727. let _0x5a9e8f = _0x24329b(_0x306f81) - _0xb08158;
  728. let _0x593bba = _0x48c9d8(_0x306f81) - _0x5d4449;
  729. if (_0x5a9e8f * _0x5a9e8f + _0x593bba * _0x593bba > 36) {
  730. _0x5891fc(_0x168eb5, _0xb08158, _0x5d4449, 3, 1, 1);
  731. }
  732. }
  733. } catch (_0x3c87ec) {}
  734. }
  735. }
  736. }
  737. }
  738. },
  739. 'onLeave': function (_0x87948) {}
  740. });
  741. }
  742. setTimeout(_0x211a2a, 3000);
  743. }
  744. setTimeout(main,5000)
comments powered by Disqus