小猫源码分享

# 风控线程正则
RISK_THREAD_REGEX="traced|mtio|vanguard|CrashSight|CrashSightThrea|CrashSight_Rout|beacon|report|upload|log|trace|XLog|XLogThread|mgpa|mgpa-pre-downlo|mgpa-report|mna|mna-bg|mna-kartin|mna-ping-upload|tbs|XgStat|ent\.File\.Tracer|File\.Tracer|estPlugin|turing|bugreport|debuggerd|tombstoned|crash_dump|StuckMonitor|LOG-FLUSH|ace_rp_queue|ace_cs2|ace_worker|ace_schedule|ace_schedule3|ScoutStat|PerfettoTrace|perfetto_hprof|perfetto_hprof_|enableArtReport|TbsLogReportThr|APDatabaseThread|APDatabase|ace_rpc|ace_detect|vanguard_heartbeat|ScoutWorker|TMQTT_INIT|MQTT Rec:|MQTT Snd:|MQTT Call:|UIMonitorThread|tgpa_|APM-|httpdns-|specialhttpdns-|TcmReceiver|gem-|gem-scheduled|TracingMuxer|pandora|asd\.pandora\.srp|qm-thread|Writer|sdk_sub|SDK_SUB|salmon-looper|Th_CfgFromOif|MSDKV5|GCloud|t\.handlerthread|gmain|gum-js|gdbus|frida|\.baseapi\.thread|TbsHandlerThrea"
# 安全业务线程白名单
SAFE_THREAD_REGEX="main|RenderThread|UnityMain|AudioThread|PhysXThread|NetworkThread|MainThread|UIThread|GLES|InputEvent|Animation|Binder|HeapTaskDaemon|FinalizerDaemon|SignalCatcher|binder:|QQ|oauth|auth|GameThread|NativeThread|ShaderCompile|hwuiTask|VsyncReceiver|SurfaceSyncGroup|CodecLooper|AudioTrack|AudioRecord|GVoice|ff_|MediaCodec|mediacodec_|TaskGraph|PoolThread|Chrome_|Profile Saver|mali-|ged-swd|HWC release|GPU completion|VideoCaptureTh|OkHttp|ConnectivityTh|CodecWatchdog|Midas|glide-|pixui|flutter-worker|path-provider|WM\.task|Thread-[0-9]"
# 线程冻结开关

# ========== 端口分级拦截 ==========
HIGH_RISK_TCP_PORTS="504 853 1883 8883 8083 1884 3000 3002 3003 8002 6670 7201 9987 9000:9010 8000:8010 10001 10072 10075 10088 10187 10161 10238 10343 10368 10384 10442 30589 43301 10086 10087 10200 10000:10500"
HIGH_RISK_UDP_PORTS="22000 22001 5260 5460 10000:10500"
HIGH_RISK_PORTS="$HIGH_RISK_TCP_PORTS $HIGH_RISK_UDP_PORTS"
# ========== 静态风控网段 ==========
BLOCK_IPV4_STATIC="157.255.246.0/24 203.205.151.0/24 221.181.198.0/24 111.206.122.0/24 123.125.0.0/24 153.35.121.0/24 218.98.13.24/32 61.155.196.133/32 183.194.232.0/21 160.202.237.0/24"
# ========== 腾讯业务CDN白名单 ==========
QQ_WHITELIST_CIDR="36.152.0.0/14 42.186.0.0/15 49.51.0.0/16 58.250.0.0/15 101.91.0.0/16 111.161.0.0/16 113.96.0.0/12 119.147.0.0/16 121.51.0.0/16 123.151.0.0/16 139.199.0.0/16 140.143.0.0/16 180.163.0.0/16 183.192.0.0/16 183.194.0.0/16 203.205.128.0/17 223.166.0.0/15"
# ========== 腾讯IPv6业务白名单 ==========
QQ_WHITELIST_IPV6="2402:4e00::/32 2408:8700::/32 2409:8c00::/28"
HTTPDNS_IPV4="119.29.29.29 182.254.116.116 119.28.28.28 203.205.151.151 1.1.1.1 8.8.8.8 8.8.4.4 101.226.4.6 218.30.118.6"
# ========== IPv6风控网段 ==========
BLOCK_IPV6_LIST="2409:8c00::/32 2409:8c01::/32 2409:8c1e::/32 2409:8c20::/32 2409:8c54::/32 2408:8800::/32 2408:8700::/32 2a09:8c00::/32 fdbd:dc02::/32 240e:e1::/32 240e:f7::/32 2409:8c00:0030::/48 2408:8700:0119::/48 2408:8207::/32 2408:8222::/32 2409:8a00::/32 2409:8a10::/32 240e:440::/32 240e:448::/32 240e:0840::/32 2606:4700::/32"
# 系统级风控进程
SYS_RISK_PROCESS="traced traced_probes traced_probes64 mtio mtio64 mtio_daemon bugreport crash_dump debuggerd debuggerd64 tombstoned tombstoned64 vanguard_core vanguard_service ksud ksud_daemon magiskd magisk_init magiskpolicy su_daemon supolicy anr_daemon logd logdr"
# 游戏内风控子进程
GAME_RISK_PROCESS="${GAME_PKG}:vanguard ${GAME_PKG}:estPlugin ${GAME_PKG}:xg_vip_service ${GAME_PKG}:plugin CrashSight beacon"
ALLOW_PORTS="80 443 8080 8443 17500 14000"
# 防火墙链随机化
RAND_CHAIN=$(head -c 4 /dev/urandom | xxd -p 2>/dev/null)
IPV4_CHAIN="nf_${RAND_CHAIN}"
IPV6_CHAIN="nf6_${RAND_CHAIN}"
# QQ登录白名单域名
QQ_LOGIN_DOMAINS="openmobile.qq.com connect.qq.com auth.qq.com oauth.qq.com graph.qq.com openapi.qq.com qun.qq.com imgcache.qq.com gdt.qq.com pingtas.qq.com qzonestyle.gtimg.cn qq.gtimg.cn qpic.cn qlogo.cn thirdqq.qlogo.cn s.url.cn sharewy.com gtimg.cn mqq.qq.com ti.qq.com w.qq.com omi.qq.com qidian.qq.com cgi.connect.qq.com ptlogin2.qq.com ssl.ptlogin2.qq.com login.qq.com game.qq.com qpic.gtimg.cn img.qq.com qrcode.qq.com uni.qq.com qzs.qq.com"
# 风控拦截域名
DOMAIN_LIST="ace.report.qq.com vanguard.qq.com vanguard.ace.qq.com crashsight.qq.com crashsight-ws.qq.com crashsight.yun.tencent.com security.ace.qq.com beacon.qq.com mtasp.qq.com bugly.qq.com bugly.tds.qq.com log.tencent.com log.tbs.qq.com stat.qq.com monitor.qq.com report.qq.com data.report.qq.com omgmta.qq.com sngmta.qq.com turing.captcha.qq.com hisec.qq.com uup.qq.com hisec.tencent.com e.qq.com mna.qq.com mgpa.qq.com anticheatexpert.com nj.cschannel.anticheatexpert.com log.anticheatexpert.com stat.anticheatexpert.com down.anticheatexpert.com gamesafe.qq.com log.gamesafe.qq.com report.gamesafe.qq.com ctrl.gamesafe.qq.com rms.gamesafe.qq.com tgpa.qq.com cloud.tgpa.qq.com tdm.qq.com receiver.tdm.qq.com receiver.qq.com log.tds.tencent.com data.tds.qq.com btrace.qq.com tux.qq.com qapm.qq.com android.perfsight.qq.com android.crashsight.qq.com h5.ace.qq.com gem.qq.com pandora.qq.com tcm.qq.com uim.qq.com httpdns.qq.com est.qq.com srp.qq.com msdk.qq.com cloudflare-dns.com dns.google dns.quad9.net api.anticheatexpert.com us.anticheatexpert.com sgp.anticheatexpert.com eu.anticheatexpert.com ace-cn.tencentgamesafe.com ace-sgp.tencentgamesafe.com ace-us.tencentgamesafe.com datacollect.qq.com datareport.qq.com securityreport.qq.com tga.tencent.com tpns.qq.com"

// Fix Fully [1 Day Ban] PUBG ========================================================

int fastcall (*osub_33B8A0)(int64 a1, __int64 a2, int a3);

int fastcall hsub_33B8A0(int64 a1, __int64 a2, int a3)
{
       return 0;
}

HOOK_LIB("libanogs.so", "0x33B8A0", hsub_33B8A0, osub_33B8A0);