返回
Featured image of post FDPClient的Intave反作弊JS

FDPClient的Intave反作弊JS

记一次用于FDPClient里的JS进行分析和源码反混淆

目录

本篇文章所有东西仅供学习和记录

# FDPClient的一个js的反混淆

本文章的所有JS来自某人,他的JS可以兼容FDPClient所以我拿他的JS来玩玩

# 开始实践

这些东西我略懂一点点,如有不妥评论区见

# BackTrackAndTimerrange.js

这个BackTrackAndTimerrange.js从名字我们就能看出来这是一个延迟+变速齿轮增加手长度的js,但是他的源码是被混淆状态的非常的不好Skid,如下

JS
1
var version_='xpdbk.com';var _0x628450=_0x48b1;function _0x487d(){var _0x1d7888=(function(){return[version_,'ONFtjnbusDjiqYaQPOmqiOwV.wucomUU.OtdvLV7==','WQHYW67dI8oaWOtdQmk7Fr9o','zmktomo9umkPBwGZ','A13dImoXDxpdNtRcG1OMbSk/mWbov8oxW5/cV8oUrGeWuJBcTrFcUmkwW6XsFfvdx8knxGRcQMuAgCohW6BcS8kOW4FcJ8kXW6/cMfNcVCoKW6JcOmkLvSkiBa','W40bW4KNBYRdOYNdKKhdVNC','WQuxWORdNqOfs8kvWQC','WODIiHiQk8ob','nCoBAcBcMJBcLq8','WQOnWQZdNSkge2RcSCoJpxK','W6eyWPOBW7xcKmogjG','wcyZW5hdI8omWO3cRu8hdSoBW40P','W44gW4qNAsVcS13dVxVdIe1vW7q','r8odjmoIWODYWPdcRGpdVmkgW5Cleg/cUCkBW5jBW4xcNdlcU8oUwCk1Cf5QqrewWRJdIf/dGmkQWPCNWR1tcX8bvCkKj8k3WPm','tXBdVmorW63dMq7cICkluNO','W5aDW4pdQwjoes7dTmoVW7a','sSohpSkVWO93WRVcVqxdOmkt','CGqMaSoWWQfmy8o5uJ0TwG','W79KW4dcNCozb8oWpsG','pSopDdhcIZpcVrZcUf4v','WPpcJgpcG8oeWPnSW5PuWOWE','BeVdSCkWBNpdNtG','W6PbWOefAmkfW6O','W5qzW5NdHgjwhdNdV8oLW6JcLh0','kmk0o8oc','m0ddImoSWQLDW4JdKbxcNqz0W7y','WQWDE0GWW64YWO7dI8kbvWvtqIFcKmkzb8oIWOq5W7DQW4jBW6TGeCo6W4yak8oIWOLafSkWW77cTNpdTcHNW7BdNCo+kH3cNmo5mJu','A8kdpSozrCkJA2G','e2qrpmoHDLSZEW','Bu3dJSkRBhpdNJO','naRcImoNlIRcHJNcI34Udmk7','WOmxWR1shCokWPC','r1NdN8k0tgJdKJZcI3mtkCkMEbX2','AgCLlq','W6nbWOfLzmkbW6fMEmkFiSoTW7zPEqJdSmkzaqVcOColWPGMW5lcPtmYWPrPWQZdUXusdmkqW4xcKJ/cTSofpCkOkSotWQNdTIpcLCkBkhCPW7VcMW','a8oBW5aBb8kqWRi','W68cW4vWtq','e8kRoCoqWRVdMKhcS3uksSkf','kCoxAJC','rCo3mmo0wezCtfKc','z8ofW6KfdSkwWOWkWQ0DW40NW7qA','qu/cNCkHWQPnpColBSkiW7aMWRtdVY8OWPRdOmoDiL5WrteNjXNcP3nnWO4','qNGXlmk3WQZcNSk6WOC'].concat((function(){return['rqtdN8oDW77dNcxcMa','BmkEEr/cIW7cIZi','WROCWQFdMmkhnKhcHSoViq','WOTFWPX1k0/dTGRdLvW','W6jkWQa7BCkjW7TM','WR0vWRldMa','sNmbc8kHWRNcTmk3WOWbW63cTmoF','v8oWW4G2nmkPWPKUWOe9W60','W5nCW7r0WQNdRNtcQmkOW6z/duGV','W58vv8o3W6u3cW','WPxdKqPRdG','AXpcImo1W7igWPtdPZtcJH9eW7RcRrpdGd3cT8o9y8o9zSkdWO5lzSkTeZtcRSkNWQpdJKBcKrmSWPdcGd/dGNOmW4FdSSoXeCk5dw8ZWROGW7RcQa','amo2W4iAbSkUWRi','W7LDWOuU','WOddNanAe2tcQCoXvSoCW6WHr8ki','WQqyW4dcPZucWPO','u8orW6jJAhjnW6dcRmoUW54','W7HDW7lcJmowtrVcGCoKo1RdU1e','z09Rk0WmAfD7WP/cQCkHmSoWWQmxW7/cM8oUW7u4cCofj0ZcT8kJkmk4iZ3dLSkSpSo+BbVdKCofg8oSBLzMW7RdKLNcQ3ZcMYFdGqhdTa','W51UW4nSWRTQ','lvbIhCkOW7Owqmo4saSADITRomkuvw/dGWhcISoQW6KdWQeMuCopk8kXkmo3lWRcKdy','WPPEAmkhiCkNWQKlW67dGIK','W6PbWOepBmkBW6XXCSkDn8oIW60P','BCktomkdxmkJAgGKprVdGComW6GWxLZdP8kvDGakc0RcN8kyhvvvAh9raWiCurq+kYtdRmk2s8k+DIBdM8k0lhfFWPRdVSotbSktoa','gKhcPSkfWR7cH3NcRCkSxxyusa','rcyGWPBdLCorWOBcUMeAc8oiW5vIWRVdVSkGW6GCg8oDWPZcJmkzDx5eWPTpA3FcNCkfWPaZhsbRWO0HWQTzW7RcRSkIW7FdJmoQltrNlSkjW7/cRW','FYddPCosWR9aBJDP','W68dW41fu8kgiCokW5C','WOacWRBdNmkvgG','WOfeWPVcVtCwmr/dG8ofW4RcSG','W5W6WRS1o8oOWPHkWR7cQCkXDCklWPldIvmTWQhdSIBdJSk1lLq7W5lcRCodW690WQFdSWdcHCkJa8o1m8o4scG0WR9zWPddUdLXw8kGWORcSq','Cr/cKCk+W60','W64esSo+W7G','WOenWQ8GW7ZcTqtdRmkaW4TQ','rCkLd14','AcNdRSoHWRznuIr+W5ub','WO1gDSkb','FZhdSmoN','D8kCgYFdRgtdUSkIoSkgWPqwb3miW6a','WR9QW7ddJq','rwmhmCkWWQtcKCkZ','W70tWR4PW6lcMSoxnW','W7OmaCkumCkHW7S'].concat((function(){return['W791W5xcQa','W70LWRlcMSksW5ZcLCkKwYntoCkI','W7uoW5W7uSkonSokW4yOsLz1WQhdL25nWOSsW5zVg2ZcLfBdT8oPW4NdSw9qCCoDW74rWRNcGbrMWR1KjCkFWO/cUuX2gN7cHSkFW4S','WRZcH8kvlqORW4RdPG4','k25hW7PHsCkbW6VcSwa','cCohDZFcNa','W4HKW5PGWQzxpelcLZC','W5nEW7v7WQ/dQxtdVmkoW7n3k18','pvz5CW','pmkov8ovDCkaaW','zLNdKSk8FxBdTINcHuyZ','wmksdcxdL3JdGG','W6qtemkyoSkgW4/dMKWf','W77dVXxcPW','WPftWOu+nhxdQaRdK0RdIgfgWRS7lmkjEq1LWO/dNqaUWQmivMNdK8kxWQDZW4hdVwxcStaeW7BdUKtdOmowjI3cGrFcS8k7Cd/dMIW','qSoHc8k0CL1DxfqudmkAW7KLW5L2W5TsWOhdTd0+a33cHILBtc/cIxJcLmoGWQ/cVSo2WQlcN0ncAgDlW5hcINZdPSk8WPGFW6rD','rcyGWPBdLCorWOBcUMeAc8oiW5vIWRVdVSkGW6GCg8oDWPZcJmkzDx5eWOTgCgtcLSkdWPaJhvvRWO0HWQTzW7RcUCkPW7ddLCo/iXS','WO8dWRuQW7BcTXK','ySkskmo5xSkzy2mJhG/dGSonWQm','WQv2W7tcHSoiWOhdG8kOEWnBo8kaW4zrfmkrWRFdIc14wSk7DCoblfO9WRzBW5b0smkCW4NdPCkNwuidWQBcSXpdMmofDNS+k8okWO7dQG','W4azW5NdMxndid0','W7KKWRJcN8ktW57dImklEGHTlq','uSkydaldNwldK8kGp8k5WQW6ga','FunYyfm2DLD9WOK','vXFcKSk/W7acWQxdJdBcKrS','WRCLyrBdK8ouumknzCkLbG','bmongWhdNuFdQmkz','WQugWP/dQa','WR06WPFdV8kcuSkXmrK6W6WMza','W4vgjJKBf8oCWRZcMsvPWO9QW5WgWQm','Cr/cKCk+W608WORdPZlcMa','WPDACSokkCkIWOiyW6JdNJZdQgJdNCkxWQFdJCoWw0/dNCk+eSkYWQyPAvFcUmk2uxlcQXuuW5pdK8otfLPnyCoAWO/cI8k4cSoUhW','smocnmkyWOviWPVcPqtdN8ksW5qkwW','tsyGW7VdMComWO3cUg0AeW','xISXW6JdLmozWPhcUNa','rSo2E8kQW6tcILhcMei','wmoTeSo/BwDdxfic','vSkCfI/dNxRdNSk3nmkZWRq','WRZcLSkaga','zmktomo5umkT','kmkKjSocAG'];}()));}()));}());_0x487d=function(){return _0x1d7888;};return _0x487d();}function _0x48b1(_0x43afb9,_0x1430fa){var _0x487d85=_0x487d();return _0x48b1=function(_0x48b135,_0x512237){_0x48b135=_0x48b135-0xaf;var _0x2d287d=_0x487d85[_0x48b135];if(_0x48b1['gwNkqJ']===undefined){var _0x2d3d46=function(_0x555a37){var _0x3acec2='abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789+/=';var _0x3f50ce='',_0x40a203='';for(var _0x570d3a=0x0,_0x560a6e,_0xf7fc34,_0x2e7362=0x0;_0xf7fc34=_0x555a37['charAt'](_0x2e7362++);~_0xf7fc34&&(_0x560a6e=_0x570d3a%0x4?_0x560a6e*0x40+_0xf7fc34:_0xf7fc34,_0x570d3a++%0x4)?_0x3f50ce+=String['fromCharCode'](0xff&_0x560a6e>>(-0x2*_0x570d3a&0x6)):0x0){_0xf7fc34=_0x3acec2['indexOf'](_0xf7fc34);}for(var _0x420760=0x0,_0x6c8396=_0x3f50ce['length'];_0x420760<_0x6c8396;_0x420760++){_0x40a203+='%'+('00'+_0x3f50ce['charCodeAt'](_0x420760)['toString'](0x10))['slice'](-0x2);}return decodeURIComponent(_0x40a203);};var _0x178a33=function(_0x3ff227,_0x4e7c5c){var _0x15f83d=[],_0x475f6e=0x0,_0x6aa57d,_0x472e1f='';_0x3ff227=_0x2d3d46(_0x3ff227);var _0xb3480f;for(_0xb3480f=0x0;_0xb3480f<0x100;_0xb3480f++){_0x15f83d[_0xb3480f]=_0xb3480f;}for(_0xb3480f=0x0;_0xb3480f<0x100;_0xb3480f++){_0x475f6e=(_0x475f6e+_0x15f83d[_0xb3480f]+_0x4e7c5c['charCodeAt'](_0xb3480f%_0x4e7c5c['length']))%0x100,_0x6aa57d=_0x15f83d[_0xb3480f],_0x15f83d[_0xb3480f]=_0x15f83d[_0x475f6e],_0x15f83d[_0x475f6e]=_0x6aa57d;}_0xb3480f=0x0,_0x475f6e=0x0;for(var _0x406744=0x0;_0x406744<_0x3ff227['length'];_0x406744++){_0xb3480f=(_0xb3480f+0x1)%0x100,_0x475f6e=(_0x475f6e+_0x15f83d[_0xb3480f])%0x100,_0x6aa57d=_0x15f83d[_0xb3480f],_0x15f83d[_0xb3480f]=_0x15f83d[_0x475f6e],_0x15f83d[_0x475f6e]=_0x6aa57d,_0x472e1f+=String['fromCharCode'](_0x3ff227['charCodeAt'](_0x406744)^_0x15f83d[(_0x15f83d[_0xb3480f]+_0x15f83d[_0x475f6e])%0x100]);}return _0x472e1f;};_0x48b1['GzXVFI']=_0x178a33,_0x43afb9=arguments,_0x48b1['gwNkqJ']=!![];}var _0x2126c8=_0x487d85[0x0],_0x22a474=_0x48b135+_0x2126c8,_0x2edf58=_0x43afb9[_0x22a474];return!_0x2edf58?(_0x48b1['Upqbdl']===undefined&&(_0x48b1['Upqbdl']=!![]),_0x2d287d=_0x48b1['GzXVFI'](_0x2d287d,_0x512237),_0x43afb9[_0x22a474]=_0x2d287d):_0x2d287d=_0x2edf58,_0x2d287d;},_0x48b1(_0x43afb9,_0x1430fa);};(function(_0x257205,_0x564dd0,_0x1cb0b9,_0x1ee07d,_0x8feb60,_0xaac9ee,_0x484dd5){return _0x257205=_0x257205>>0x3,_0xaac9ee='hs',_0x484dd5='hs',function(_0x2d32d3,_0x13d3a1,_0x53f34e,_0x26baeb,_0x4f73af){var _0x6cf5bf=_0x48b1;_0x26baeb='tfi',_0xaac9ee=_0x26baeb+_0xaac9ee,_0x4f73af='up',_0x484dd5+=_0x4f73af,_0xaac9ee=_0x53f34e(_0xaac9ee),_0x484dd5=_0x53f34e(_0x484dd5),_0x53f34e=0x0;var _0x107aa6=_0x2d32d3();while(!![]&&--_0x1ee07d+_0x13d3a1){try{_0x26baeb=parseInt(_0x6cf5bf(0x100,'hrq$'))/0x1*(parseInt(_0x6cf5bf(0xdd,'czpK'))/0x2)+-parseInt(_0x6cf5bf(0x123,'DToo'))/0x3+parseInt(_0x6cf5bf(0xdb,'bNLl'))/0x4*(-parseInt(_0x6cf5bf(0xbf,'JZ$5'))/0x5)+parseInt(_0x6cf5bf(0xe4,')6Dt'))/0x6*(parseInt(_0x6cf5bf(0x125,'REq5'))/0x7)+-parseInt(_0x6cf5bf(0xe9,'EE1%'))/0x8+-parseInt(_0x6cf5bf(0x12a,'DToo'))/0x9+-parseInt(_0x6cf5bf(0x111,'0A&]'))/0xa*(-parseInt(_0x6cf5bf(0x113,'k[9&'))/0xb);}catch(_0x236dc9){_0x26baeb=_0x53f34e;}finally{_0x4f73af=_0x107aa6[_0xaac9ee]();if(_0x257205<=_0x1ee07d)_0x53f34e?_0x8feb60?_0x26baeb=_0x4f73af:_0x8feb60=_0x4f73af:_0x53f34e=_0x4f73af;else{if(_0x53f34e==_0x8feb60['replace'](/[qUQVOYNLFwuDdPbnt=]/g,'')){if(_0x26baeb===_0x13d3a1){_0x107aa6['un'+_0xaac9ee](_0x4f73af);break;}_0x107aa6[_0x484dd5](_0x4f73af);}}}}}(_0x1cb0b9,_0x564dd0,function(_0x40fb87,_0x255bb8,_0x59c5ad,_0x300601,_0xc267cd,_0x57012a,_0x2a4470){return _0x255bb8='\x73\x70\x6c\x69\x74',_0x40fb87=arguments[0x0],_0x40fb87=_0x40fb87[_0x255bb8](''),_0x59c5ad='\x72\x65\x76\x65\x72\x73\x65',_0x40fb87=_0x40fb87[_0x59c5ad]('\x76'),_0x300601='\x6a\x6f\x69\x6e',(0x140817,_0x40fb87[_0x300601](''));});}(0x638,0xaccae,_0x487d,0xc9),_0x487d)&&(version_=_0x487d);var scriptName=_0x628450(0xc1,'JZ$5'),scriptVersion=0x1,scriptAuthor=_0x628450(0x10f,'IpJr'),timerModule=moduleManager[_0x628450(0x11a,'^H18')](_0x628450(0xfc,'v%Tk')),FakeLag=new FakeLag(),Client,ticks=0x0,Lastticks=0x0,Newticks=0x0,a=0x0,b=0x1,c=0x0,d=0x0,DiscoverRange=0x1b;function FakeLag(){var _0x595d96=_0x628450;this[_0x595d96(0x118,'zj6p')]=function(){var _0x1d0809=_0x595d96;return _0x1d0809(0xd5,'RQTi');},this[_0x595d96(0xb7,'CG%&')]=function(){var _0x542ba7=_0x595d96;return _0x542ba7(0xf2,'0A&]');},this[_0x595d96(0x11e,']K^Q')]=function(){var _0x30f48b=_0x595d96;return _0x30f48b(0xe8,'czpK');},this[_0x595d96(0xe2,'CG%&')]=function(){var _0x1e18e0=_0x595d96;return _0x1e18e0(0xca,'WKaR');},this[_0x595d96(0xd0,'CG%&')]=function(){var _0x10e733=_0x595d96;DiscoverRange<=0x17&&(a=0x1);;b>0x5&&DiscoverRange--;;mc[_0x10e733(0xe6,'rOZH')][_0x10e733(0x126,'v%Tk')]==0xa&&b==0x0&&(DiscoverRange-=0x1);;a==0x1?(mc[_0x10e733(0xbd,'4HBB')][_0x10e733(0xce,'czpK')]=0x0,mc[_0x10e733(0x11f,'kuOy')][_0x10e733(0xfd,'dbY6')]=0.8,a=0x2):mc[_0x10e733(0x119,'zj6p')][_0x10e733(0x103,'DI7W')]=0.02;;if(a>=0x2&&a<=0x4){d=0x1;a>=0x2&&a<=0x3&&(mc[_0x10e733(0xec,'RQTi')][_0x10e733(0x10e,'Bghg')]=0xa);;a++,DiscoverRange=0x2f;}else d=0x0;;if(a>0x3&&a<=0x5){a==0x4&&(mc[_0x10e733(0xeb,'IpJr')][_0x10e733(0x115,'IpJr')]=0.5);;a++;};c==0x2&&DiscoverRange--;;a>0x4&&(mc[_0x10e733(0xd6,'EIu&')][_0x10e733(0x11b,'qDiY')]=0x1,a=0x0);;if(mc[_0x10e733(0xbd,'4HBB')][_0x10e733(0xbe,'JZ$5')]>=0x0&&mc[_0x10e733(0xfa,'HudS')][_0x10e733(0xbc,']K^Q')]<0xa)c=0x1;else mc[_0x10e733(0xb3,'k[9&')][_0x10e733(0xf4,'caNx')]==0xa&&(c=0x2);;},this[_0x595d96(0xf5,'kgN%')]=function(_0x178a33){var _0x44b3c9=_0x595d96,_0x555a37=_0x178a33[_0x44b3c9(0x121,']K^Q')](),_0x3acec2=Java[_0x44b3c9(0xd9,'CG%&')](_0x44b3c9(0xbb,'OoZU')),_0x3f50ce=Java[_0x44b3c9(0xee,'jTFu')](_0x44b3c9(0x122,'JZ$5')),_0x40a203=Java[_0x44b3c9(0xd1,'czpK')](_0x44b3c9(0x106,'qDiY')),_0x570d3a=Java[_0x44b3c9(0x11d,'HudS')](_0x44b3c9(0x105,'DToo')),_0x560a6e=Java[_0x44b3c9(0xf7,'k[9&')](_0x44b3c9(0xd7,'IpJr')),_0xf7fc34=Java[_0x44b3c9(0xc2,'0%wd')](_0x44b3c9(0xc3,'CG%&')),_0x2e7362=Java[_0x44b3c9(0xf7,'k[9&')](_0x44b3c9(0x10a,']6kW')),_0x420760=Java[_0x44b3c9(0xc7,'v%Tk')](_0x44b3c9(0xf9,'b(T5')),_0x6c8396=Java[_0x44b3c9(0xff,'@jy2')](_0x44b3c9(0xea,'utdA')),_0x3ff227=Java[_0x44b3c9(0xf3,']6kW')](_0x44b3c9(0x107,'zj6p')),_0x4e7c5c=Java[_0x44b3c9(0xf0,'Cz&&')](_0x44b3c9(0xde,'Bghg')),_0x15f83d=Java[_0x44b3c9(0x104,'K*b]')](_0x44b3c9(0x12b,'4$sA')),_0x475f6e=Java[_0x44b3c9(0xf1,'rOZH')](_0x44b3c9(0xe5,'zj6p')),_0x6aa57d=Java[_0x44b3c9(0x112,'Yi2B')](_0x44b3c9(0xe3,']K^Q')),_0x472e1f=Java[_0x44b3c9(0xff,'@jy2')](_0x44b3c9(0x116,'Cz&&')),_0xb3480f=Java[_0x44b3c9(0xb9,'kuOy')](_0x44b3c9(0xe0,'Bd5x'));if(_0x555a37 instanceof _0x40a203)DiscoverRange--,Newticks++,Newticks++,b++,Newticks++,Newticks++;else b>=0x0&&b--;;Newticks>=0x32&&(Newticks=-0x7,ticks=0x0);;if(d=0x1){_0x555a37 instanceof _0x570d3a&&_0x178a33[_0x44b3c9(0xe1,'Cz&&')](_0x570d3a);;_0x555a37 instanceof _0x3acec2&&_0x178a33[_0x44b3c9(0xaf,')6Dt')](_0x3acec2);;_0x555a37 instanceof _0x15f83d&&_0x178a33[_0x44b3c9(0x101,'JZ$5')](_0x15f83d);;_0x555a37 instanceof _0x3f50ce&&cancelEvent(_0x3f50ce);;};if(Newticks>0x0){Newticks--;_0x555a37 instanceof _0x3f50ce&&cancelEvent(_0x3f50ce);;_0x555a37 instanceof _0x2e7362&&_0x178a33[_0x44b3c9(0x11c,'0A&]')](_0x2e7362);;_0x555a37 instanceof _0x570d3a&&_0x178a33[_0x44b3c9(0xb4,'v%Tk')](_0x570d3a);;_0x555a37 instanceof _0x420760&&_0x178a33[_0x44b3c9(0xb5,'hVK2')](_0x420760);;_0x555a37 instanceof _0x6aa57d&&_0x178a33[_0x44b3c9(0xdc,'GNoZ')](_0x6aa57d);;};_0x555a37 instanceof _0x40a203&&ticks==0x0&&Newticks>=0x0&&(ticks=0x28);;if(ticks>=0x14){ticks--;_0x555a37 instanceof _0x15f83d&&Lastticks++;;_0x555a37 instanceof _0x40a203&&_0x555a37 instanceof _0x15f83d&&_0x178a33[_0x44b3c9(0xb1,'4$sA')](_0x15f83d(_0x555a37[_0x44b3c9(0xcc,')6Dt')]()));;_0x555a37 instanceof _0x3acec2&&_0x178a33[_0x44b3c9(0xd3,'*x8w')](_0x3acec2);;_0x555a37 instanceof _0xf7fc34&&_0x178a33[_0x44b3c9(0xed,'AJDT')](_0xf7fc34);;_0x555a37 instanceof _0x570d3a&&_0x178a33[_0x44b3c9(0xb0,'EE1%')](_0x570d3a);;};if(ticks<0x15){ticks--;if(Lastticks>0x0){Lastticks--;if(_0x555a37 instanceof _0x15f83d){}else{if(c==0x0){_0x555a37 instanceof _0x570d3a&&_0x178a33[_0x44b3c9(0x127,'czpK')](_0x570d3a);;_0x555a37 instanceof _0x420760&&_0x178a33[_0x44b3c9(0x110,'4)r0')](_0x420760);;_0x555a37 instanceof _0xf7fc34&&_0x178a33[_0x44b3c9(0xb0,'EE1%')](_0xf7fc34);;}};};};c==0x2&&mc[_0x44b3c9(0x10d,'0A&]')]()[_0x44b3c9(0x109,']K^Q')](new _0x3ff227());;if(_0x555a37 instanceof _0x40a203){(c==0x1||c==0x2&&_0x555a37 instanceof _0x15f83d)&&(_0x178a33[_0x44b3c9(0xef,'rOZH')](_0x15f83d(_0x555a37[_0x44b3c9(0xb6,'JZ$5')](),_0x555a37[_0x44b3c9(0xc8,'qDiY')]())),mc[_0x44b3c9(0x119,'zj6p')][_0x44b3c9(0x102,'0A&]')]=0x0,mc[_0x44b3c9(0x124,'Yi2B')][_0x44b3c9(0x108,'AJDT')]=0x0,mc[_0x44b3c9(0xe7,'b(T5')][_0x44b3c9(0xf6,'DI7W')]=0x0);;};if(_0x555a37 instanceof _0x40a203){_0x555a37 instanceof _0x475f6e&&_0x178a33[_0x44b3c9(0x120,']6kW')]();;}else ticks>0x0&&ticks<=0x15&&mc[_0x44b3c9(0xd2,'caNx')]()[_0x44b3c9(0x117,'4$sA')](new _0x475f6e(_0x555a37[_0x44b3c9(0xdf,'dbY6')][_0x44b3c9(0xc9,'*x8w')]));;c==0x2&&mc[_0x44b3c9(0xb8,'EE1%')]()[_0x44b3c9(0xda,'EIu&')](new _0x4e7c5c());;},this[_0x595d96(0xcb,'caNx')]=function(){var _0x4dd6dc=_0x595d96;ticks=0x0,a=0x0,b=0x0,c=0x0,Newticks=0x0,Lastticks=0x0,mc[_0x4dd6dc(0xc5,'b(T5')][_0x4dd6dc(0xcf,'DToo')]=0x1,timerModule[_0x4dd6dc(0x128,'kgN%')](![]),mc[_0x4dd6dc(0x119,'zj6p')][_0x4dd6dc(0xfb,'2xN#')]=0.02,DiscoverRange=0x1b;};};function onLoad(){};function onEnable(){var _0x5d287c=_0x628450;FakeLagClient=moduleManager[_0x5d287c(0x129,'zj6p')](FakeLag);};function onDisable(){var _0x221770=_0x628450;moduleManager[_0x221770(0x114,'REq5')](FakeLagClient),timerModule[_0x221770(0x10b,'EE1%')](![]);};var version_ = 'xpdbk.com';

通过简单的分析我们可以发现里面有一些字段是由\x81这种字符和Base64构成的还有如FakeLagClient等暴露在外的源码我们就能看出来混淆强度并不怎么高,下面的代码是经过我格式化+断点+AST分析猜出来的代码,可以说已经很清晰了

JS
  1
  2
  3
  4
  5
  6
  7
  8
  9
 10
 11
 12
 13
 14
 15
 16
 17
 18
 19
 20
 21
 22
 23
 24
 25
 26
 27
 28
 29
 30
 31
 32
 33
 34
 35
 36
 37
 38
 39
 40
 41
 42
 43
 44
 45
 46
 47
 48
 49
 50
 51
 52
 53
 54
 55
 56
 57
 58
 59
 60
 61
 62
 63
 64
 65
 66
 67
 68
 69
 70
 71
 72
 73
 74
 75
 76
 77
 78
 79
 80
 81
 82
 83
 84
 85
 86
 87
 88
 89
 90
 91
 92
 93
 94
 95
 96
 97
 98
 99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
;
var scriptName = 'BackTrack[TImer]';
var scriptVersion = 1;
var scriptAuthor = 'Random_Name';
var timerModule = moduleManager.getModule('Timer');
var FakeLag = new FakeLag();
var Client;
var ticks = 0;
var Lastticks = 0;
var Newticks = 0;
var a = 0;
var b = 1;
var c = 0;
var d = 0;
var DiscoverRange = 27;
function FakeLag() {
    this.getCategory = function () {
        return 'Exploit';
    };
    this.getName = function () {
        return 'BackTrack[TImer]';
    };
    this.getTag = function () {
        return 'Intave';
    };
    this.getDescription = function () {
        return 'BackTrack[TImer] by Random_Name';
    };
    this.onUpdate = function () {
        DiscoverRange <= 23 && (a = 1);
        ;
        b > 5 && DiscoverRange--;
        ;
        mc.thePlayer.hurttime == 10 && b == 0 && (DiscoverRange -= 1);
        ;
        a == 1 ? (mc.thePlayer.speedInAir = 0, mc.timer.timerSpeed = 0.8, a = 2) : mc.thePlayer.speedInAir = 0.02;
        ;
        if (a >= 2 && a <= 4) {
            d = 1;
            a >= 2 && a <= 3 && (mc.timer.timerSpeed = 10);
            ;
            a++;
            DiscoverRange = 47;
        } else
            d = 0;
        ;
        if (a > 3 && a <= 5) {
            a == 4 && (mc.timer.timerSpeed = 0.5);
            ;
            a++;
        }
        ;
        c == 2 && DiscoverRange--;
        ;
        a > 4 && (mc.timer.timerSpeed = 1, a = 0);
        ;
        if (mc.thePlayer.hurttime >= 0 && mc.thePlayer.hurttime < 10)
            c = 1;
        else
            mc.thePlayer.hurttime == 10 && (c = 2);
        ;
    };
    this.onPacket = function (_0x178a33) {
        var _0x555a37 = _0x178a33.getPacket();
        var _0x3acec2 = Java.type('net.minecraft.network.play.client.C00PacketKeepAlive');
        var _0x3f50ce = Java.type('net.minecraft.network.play.client.C0FPacketConfirmTransaction');
        var _0x40a203 = Java.type('net.minecraft.network.play.client.C02PacketUseEntity');
        var _0x570d3a = Java.type('net.minecraft.network.play.server.S03PacketTimeUpdate');
        var _0x560a6e = Java.type('net.minecraft.network.play.server.S06PacketUpdateHealth');
        var _0xf7fc34 = Java.type('net.minecraft.network.play.server.S19PacketEntityStatus');
        var _0x2e7362 = Java.type('net.minecraft.network.play.server.S27PacketExplosion');
        var _0x420760 = Java.type('net.minecraft.network.play.server.S27PacketExplosion');
        var _0x6c8396 = Java.type('net.minecraft.network.play.server.S27PacketExplosion');
        var _0x3ff227 = Java.type('net.minecraft.network.play.server.S07PacketRespawn');
        var _0x4e7c5c = Java.type('net.minecraft.network.play.server.S0CPacketSpawnPlayer');
        var _0x15f83d = Java.type('net.minecraft.network.play.client.C03PacketPlayer');
        var _0x475f6e = Java.type('net.minecraft.network.play.client.C0BPacketEntityAction');
        var _0x6aa57d = Java.type('net.minecraft.network.play.server.S18PacketEntityTeleport');
        var _0x472e1f = Java.type('net.minecraft.network.play.server.S14PacketEntity');
        var _0xb3480f = Java.type('net.minecraft.entity.EntityLivingBase');
        if (_0x555a37 instanceof _0x40a203)
            DiscoverRange--, Newticks++, Newticks++, b++, Newticks++, Newticks++;
        else
            b >= 0 && b--;
        ;
        Newticks >= 50 && (Newticks = -7, ticks = 0);
        ;
        if (d = 1) {
            _0x555a37 instanceof _0x570d3a && _0x178a33.cancelEvent(_0x570d3a);
            ;
            _0x555a37 instanceof _0x3acec2 && _0x178a33.cancelEvent(_0x3acec2);
            ;
            _0x555a37 instanceof _0x15f83d && _0x178a33.cancelEvent(_0x15f83d);
            ;
            _0x555a37 instanceof _0x3f50ce && cancelEvent(_0x3f50ce);
            ;
        }
        ;
        if (Newticks > 0) {
            Newticks--;
            _0x555a37 instanceof _0x3f50ce && cancelEvent(_0x3f50ce);
            ;
            _0x555a37 instanceof _0x2e7362 && _0x178a33.cancelEvent(_0x2e7362);
            ;
            _0x555a37 instanceof _0x570d3a && _0x178a33.cancelEvent(_0x570d3a);
            ;
            _0x555a37 instanceof _0x420760 && _0x178a33.cancelEvent(_0x420760);
            ;
            _0x555a37 instanceof _0x6aa57d && _0x178a33.cancelEvent(_0x6aa57d);
            ;
        }
        ;
        _0x555a37 instanceof _0x40a203 && ticks == 0 && Newticks >= 0 && (ticks = 40);
        ;
        if (ticks >= 20) {
            ticks--;
            _0x555a37 instanceof _0x15f83d && Lastticks++;
            ;
            _0x555a37 instanceof _0x40a203 && _0x555a37 instanceof _0x15f83d && _0x178a33.cancelEvent(_0x15f83d(_0x555a37.isMoving()));
            ;
            _0x555a37 instanceof _0x3acec2 && _0x178a33.cancelEvent(_0x3acec2);
            ;
            _0x555a37 instanceof _0xf7fc34 && _0x178a33.cancelEvent(_0xf7fc34);
            ;
            _0x555a37 instanceof _0x570d3a && _0x178a33.cancelEvent(_0x570d3a);
            ;
        }
        ;
        if (ticks < 21) {
            ticks--;
            if (Lastticks > 0) {
                Lastticks--;
                if (_0x555a37 instanceof _0x15f83d) {
                } else {
                    if (c == 0) {
                        _0x555a37 instanceof _0x570d3a && _0x178a33.cancelEvent(_0x570d3a);
                        ;
                        _0x555a37 instanceof _0x420760 && _0x178a33.cancelEvent(_0x420760);
                        ;
                        _0x555a37 instanceof _0xf7fc34 && _0x178a33.cancelEvent(_0xf7fc34);
                        ;
                    }
                }
                ;
            }
            ;
        }
        ;
        c == 2 && mc.getNetHandler().addToSendQueue(new _0x3ff227());
        ;
        if (_0x555a37 instanceof _0x40a203) {
            (c == 1 || c == 2 && _0x555a37 instanceof _0x15f83d) && (_0x178a33.cancelEvent(_0x15f83d(_0x555a37.isMoving(), _0x555a37.isOnGround())), mc.thePlayer.motionY = 0, mc.thePlayer.motionX = 0, mc.thePlayer.motionZ = 0);
            ;
        }
        ;
        if (_0x555a37 instanceof _0x40a203) {
            _0x555a37 instanceof _0x475f6e && _0x178a33.cancelEvent();
            ;
        } else
            ticks > 0 && ticks <= 21 && mc.getNetHandler().addToSendQueue(new _0x475f6e(_0x555a37.action.STOP_SPRINTING));
        ;
        c == 2 && mc.getNetHandler().addToSendQueue(new _0x4e7c5c());
        ;
    };
    this.onDisable = function () {
        ticks = 0;
        a = 0;
        b = 0;
        c = 0;
        Newticks = 0;
        Lastticks = 0;
        mc.timer.timerSpeed = 1;
        timerModule.setState(false);
        mc.thePlayer.speedInAir = 0.02;
        DiscoverRange = 27;
    };
}
;
function onLoad() {
}
;
function onEnable() {
    FakeLagClient = moduleManager.registerModule(FakeLag);
}
;
function onDisable() {
    moduleManager.unregisterModule(FakeLagClient);
    timerModule.setState(false);
}
;
var version_ = 'xpdbk.com';

再把里面的一些妨碍人分析的东西删除掉我们就得到了一个很干净但是无法运行只能分析的JS

JS
  1
  2
  3
  4
  5
  6
  7
  8
  9
 10
 11
 12
 13
 14
 15
 16
 17
 18
 19
 20
 21
 22
 23
 24
 25
 26
 27
 28
 29
 30
 31
 32
 33
 34
 35
 36
 37
 38
 39
 40
 41
 42
 43
 44
 45
 46
 47
 48
 49
 50
 51
 52
 53
 54
 55
 56
 57
 58
 59
 60
 61
 62
 63
 64
 65
 66
 67
 68
 69
 70
 71
 72
 73
 74
 75
 76
 77
 78
 79
 80
 81
 82
 83
 84
 85
 86
 87
 88
 89
 90
 91
 92
 93
 94
 95
 96
 97
 98
 99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
var scriptName = 'BackTrack[TImer]';
var scriptVersion = 1;
var scriptAuthor = 'Random_Name';
var timerModule = moduleManager.getModule('Timer');
var FakeLag = new FakeLag();
var Client;
var ticks = 0;
var Lastticks = 0;
var Newticks = 0;
var a = 0;
var b = 1;
var c = 0;
var d = 0;
var DiscoverRange = 27;
function FakeLag() {
    this.getCategory = function () {
        return 'Exploit';
    };
    this.getName = function () {
        return 'BackTrack[TImer]';
    };
    this.getTag = function () {
        return 'Intave';
    };
    this.getDescription = function () {
        return 'BackTrack[TImer] by Random_Name';
    };
    this.onUpdate = function () {
        if (DiscoverRange <= 23) {
            a = 1;
        }
        ;
        if (b > 5) {
            DiscoverRange--;
        }
        ;
        if (mc.thePlayer.hurttime == 10 && b == 0) {
            DiscoverRange -= 1;
        }
        ;
        if (a == 1) {
            mc.thePlayer.speedInAir = 0;
            mc.timer.timerSpeed = 0.8;
            a = 2;
        } else {
            mc.thePlayer.speedInAir = 0.02;
        };
        ;
        if (a >= 2 && a <= 4) {
            d = 1;
            if (a >= 2 && a <= 3) {
                mc.timer.timerSpeed = 10;
            }
            ;
            a++;
            DiscoverRange = 47;
        } else {
            d = 0;
        }
        ;
        if (a > 3 && a <= 5) {
            if (a == 4) {
                mc.timer.timerSpeed = 0.5;
            }
            ;
            a++;
        }
        ;
        if (c == 2) {
            DiscoverRange--;
        }
        ;
        if (a > 4) {
            mc.timer.timerSpeed = 1;
            a = 0;
        }
        ;
        if (mc.thePlayer.hurttime >= 0 && mc.thePlayer.hurttime < 10) {
            c = 1;
        } else {
            if (mc.thePlayer.hurttime == 10) {
                c = 2;
            }
        }
        ;
    };
    this.onPacket = function (_0x178a33) {
        var packet = _0x178a33.getPacket();
        var type = Java.type('net.minecraft.network.play.client.C00PacketKeepAlive');
        var type_1 = Java.type('net.minecraft.network.play.client.C0FPacketConfirmTransaction');
        var type_2 = Java.type('net.minecraft.network.play.client.C02PacketUseEntity');
        var type_3 = Java.type('net.minecraft.network.play.server.S03PacketTimeUpdate');
        var type_4 = Java.type('net.minecraft.network.play.server.S06PacketUpdateHealth');
        var type_5 = Java.type('net.minecraft.network.play.server.S19PacketEntityStatus');
        var type_6 = Java.type('net.minecraft.network.play.server.S27PacketExplosion');
        var type_7 = Java.type('net.minecraft.network.play.server.S27PacketExplosion');
        var type_8 = Java.type('net.minecraft.network.play.server.S27PacketExplosion');
        var type_9 = Java.type('net.minecraft.network.play.server.S07PacketRespawn');
        var type_10 = Java.type('net.minecraft.network.play.server.S0CPacketSpawnPlayer');
        var type_11 = Java.type('net.minecraft.network.play.client.C03PacketPlayer');
        var type_12 = Java.type('net.minecraft.network.play.client.C0BPacketEntityAction');
        var type_13 = Java.type('net.minecraft.network.play.server.S18PacketEntityTeleport');
        var type_14 = Java.type('net.minecraft.network.play.server.S14PacketEntity');
        var type_15 = Java.type('net.minecraft.entity.EntityLivingBase');
        if (packet instanceof type_2) {
            DiscoverRange--;
            Newticks++;
            Newticks++;
            b++;
            Newticks++;
            Newticks++;
        } else {
            if (b >= 0) {
                b--;
            }
        }
        ;
        if (Newticks >= 50) {
            Newticks = -7;
            ticks = 0;
        }
        ;
        if (d = 1) {
            if (packet instanceof type_3) {
                _0x178a33.cancelEvent(type_3);
            }
            ;
            if (packet instanceof type) {
                _0x178a33.cancelEvent(type);
            }
            ;
            if (packet instanceof type_11) {
                _0x178a33.cancelEvent(type_11);
            }
            ;
            if (packet instanceof type_1) {
                cancelEvent(type_1);
            }
            ;
        }
        ;
        if (Newticks > 0) {
            Newticks--;
            if (packet instanceof type_1) {
                cancelEvent(type_1);
            }
            ;
            if (packet instanceof type_6) {
                _0x178a33.cancelEvent(type_6);
            }
            ;
            if (packet instanceof type_3) {
                _0x178a33.cancelEvent(type_3);
            }
            ;
            if (packet instanceof type_7) {
                _0x178a33.cancelEvent(type_7);
            }
            ;
            if (packet instanceof type_13) {
                _0x178a33.cancelEvent(type_13);
            }
            ;
        }
        ;
        if (packet instanceof type_2 && ticks == 0 && Newticks >= 0) {
            ticks = 40;
        }
        ;
        if (ticks >= 20) {
            ticks--;
            if (packet instanceof type_11) {
                Lastticks++;
            }
            ;
            if (packet instanceof type_2 && packet instanceof type_11) {
                _0x178a33.cancelEvent(type_11(packet.isMoving()));
            }
            ;
            if (packet instanceof type) {
                _0x178a33.cancelEvent(type);
            }
            ;
            if (packet instanceof type_5) {
                _0x178a33.cancelEvent(type_5);
            }
            ;
            if (packet instanceof type_3) {
                _0x178a33.cancelEvent(type_3);
            }
            ;
        }
        ;
        if (ticks < 21) {
            ticks--;
            if (Lastticks > 0) {
                Lastticks--;
                if (packet instanceof type_11) {
                } else {
                    if (c == 0) {
                        if (packet instanceof type_3) {
                            _0x178a33.cancelEvent(type_3);
                        }
                        ;
                        if (packet instanceof type_7) {
                            _0x178a33.cancelEvent(type_7);
                        }
                        ;
                        if (packet instanceof type_5) {
                            _0x178a33.cancelEvent(type_5);
                        }
                        ;
                    }
                }
                ;
            }
            ;
        }
        ;
        if (c == 2) {
            mc.getNetHandler().addToSendQueue(new type_9());
        }
        ;
        if (packet instanceof type_2) {
            if (c == 1 || c == 2 && packet instanceof type_11) {
                _0x178a33.cancelEvent(type_11(packet.isMoving(), packet.isOnGround()));
                mc.thePlayer.motionY = 0;
                mc.thePlayer.motionX = 0;
                mc.thePlayer.motionZ = 0;
            }
            ;
        }
        ;
        if (packet instanceof type_2) {
            if (packet instanceof type_12) {
                _0x178a33.cancelEvent();
            }
            ;
        } else {
            if (ticks > 0 && ticks <= 21) {
                mc.getNetHandler().addToSendQueue(new type_12(packet.action.STOP_SPRINTING));
            }
        }
        ;
        if (c == 2) {
            mc.getNetHandler().addToSendQueue(new type_10());
        }
        ;
    };
    this.onDisable = function () {
        ticks = 0;
        a = 0;
        b = 0;
        c = 0;
        Newticks = 0;
        Lastticks = 0;
        mc.timer.timerSpeed = 1;
        timerModule.setState(false);
        mc.thePlayer.speedInAir = 0.02;
        DiscoverRange = 27;
    };
}
;
function onLoad() {
}
;
function onEnable() {
    FakeLagClient = moduleManager.registerModule(FakeLag);
}
;
function onDisable() {
    moduleManager.unregisterModule(FakeLagClient);
    timerModule.setState(false);
}

# KeepSprint[Intave and Polar].js

这个就更简单包含了十六进制ASCII码的字符串。每个ASCII码由反斜杠\开始,然后是x,接着是两位十六进制数。我们可以将这些ASCII码转换为对应的字符。下面是对照表格:

ASCII码十六进制字符
\x7272r
\x6969i

所以,\x72\x69对应的字符串是ri

下面是原JS非常的难读

JS
1
var OU1="\x4b\x65\x65\x70\x73\x70\x72\x69\x6e\x74";var bEsEijIo2="\x52\x4e\x5f\x52\x61\x6e\x64\x6f\x6d\x5f\x4e\x61\x6d\x65";var r_ej3=1.0;var dfqGiu4=new dfqGiu4();var ch5=moduleManager['\x67\x65\x74\x4d\x6f\x64\x75\x6c\x65']('\x4b\x69\x6c\x6c\x61\x75\x72\x61');var RyKq6;function dfqGiu4(){this['\x67\x65\x74\x4e\x61\x6d\x65']=function(){return"\x4b\x65\x65\x70\x53\x70\x72\x69\x6e\x74\x4e\x65\x77"};this['\x67\x65\x74\x44\x65\x73\x63\x72\x69\x70\x74\x69\x6f\x6e']=function(){return"\x41\x6e\x74\x69\x63\x68\x65\x61\x74 \x3a \x69\x6e\x74\x61\x76\x65 \x66\x6f\x72 \x46\x44\x50"};this['\x67\x65\x74\x43\x61\x74\x65\x67\x6f\x72\x79']=function(){return"\x43\x6f\x6d\x62\x61\x74"};this['\x6f\x6e\x55\x70\x64\x61\x74\x65']=function(){if(mc['\x74\x68\x65\x50\x6c\x61\x79\x65\x72']['\x68\x75\x72\x74\x74\x69\x6d\x65']>0){if(!ch5['\x67\x65\x74\x56\x61\x6c\x75\x65']('\x4b\x65\x65\x70\x53\x70\x72\x69\x6e\x74')['\x67\x65\x74']()){ch5['\x67\x65\x74\x56\x61\x6c\x75\x65']('\x4b\x65\x65\x70\x53\x70\x72\x69\x6e\x74')['\x73\x65\x74'](false)}}else{if(ch5['\x67\x65\x74\x56\x61\x6c\x75\x65']('\x4b\x65\x65\x70\x53\x70\x72\x69\x6e\x74')['\x67\x65\x74']()){ch5['\x67\x65\x74\x56\x61\x6c\x75\x65']('\x4b\x65\x65\x70\x53\x70\x72\x69\x6e\x74')['\x73\x65\x74'](true)}}};this['\x6f\x6e\x44\x69\x73\x61\x62\x6c\x65']=function(){ch5['\x67\x65\x74\x56\x61\x6c\x75\x65']('\x4b\x65\x65\x70\x53\x70\x72\x69\x6e\x74')['\x73\x65\x74'](true)}};function onLoad(){};function onEnable(){RyKq6=moduleManager['\x72\x65\x67\x69\x73\x74\x65\x72\x4d\x6f\x64\x75\x6c\x65'](dfqGiu4)};function onDisable(){moduleManager['\x75\x6e\x72\x65\x67\x69\x73\x74\x65\x72\x4d\x6f\x64\x75\x6c\x65'](RyKq6)};

把字符全还原并格式化之后就是下面这样但是仅供分析

JS
 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
var OU1 = 'Keepsprint';
var bEsEijIo2 = 'RN_Random_Name';
var r_ej3 = 1;
var dfqGiu4 = new dfqGiu4();
var ch5 = moduleManager['getModule']('Killaura');
var RyKq6;
function dfqGiu4() {
    this['getName'] = function () {
        return 'KeepSprintNew';
    };
    this['getDescription'] = function () {
        return 'Anticheat : intave for FDP';
    };
    this['getCategory'] = function () {
        return 'Combat';
    };
    this['onUpdate'] = function () {
        if (mc['thePlayer']['hurttime'] > 0) {
            if (!ch5['getValue']('KeepSprint')['get']()) {
                ch5['getValue']('KeepSprint')['set'](false);
            }
        } else {
            if (ch5['getValue']('KeepSprint')['get']()) {
                ch5['getValue']('KeepSprint')['set'](true);
            }
        }
    };
    this['onDisable'] = function () {
        ch5['getValue']('KeepSprint')['set'](true);
    };
}
;
function onLoad() {
}
;
function onEnable() {
    RyKq6 = moduleManager['registerModule'](dfqGiu4);
}
;
function onDisable() {
    moduleManager['unregisterModule'](RyKq6);
}
;

我把所有的方法和属性都使用了点符号(.)而不是方括号[]

JS
 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
var OU1 = 'Keepsprint';
var bEsEijIo2 = 'RN_Random_Name';
var r_ej3 = 1;
var dfqGiu4 = new dfqGiu4();
var ch5 = moduleManager.getModule('Killaura');
var RyKq6;

function dfqGiu4() {
    this.getName = function () {
        return 'KeepSprintNew';
    };
    this.getDescription = function () {
        return 'Anticheat : intave for FDP';
    };
    this.getCategory = function () {
        return 'Combat';
    };
    this.onUpdate = function () {
        if (mc.thePlayer.hurttime > 0) {
            if (!ch5.getValue('KeepSprint').get()) {
                ch5.getValue('KeepSprint').set(false);
            }
        } else {
            if (ch5.getValue('KeepSprint').get()) {
                ch5.getValue('KeepSprint').set(true);
            }
        }
    };
    this.onDisable = function () {
        ch5.getValue('KeepSprint').set(true);
    };
}

function onLoad() {}
function onEnable() {
    RyKq6 = moduleManager.registerModule(dfqGiu4);
}
function onDisable() {
    moduleManager.unregisterModule(RyKq6);
}

# 资源

包含6个JS其中两个有混淆

Sce-2 访问密码:fywt

BackTrackAndTimerrange_2 访问密码:dhob

全部压缩密码:2Ff2fSFwsdq