? Signature successful!
[API] Sign request: OidbSvcTcp.0x102a
Data length: 80 bytes: 08aa201000180022100a0c717a6f6e652e71712e636f6d1003320d616
e64726f696420392e322e35
Searching for all QQ processes...
Found 12 QQ processes via WMIC
All QQ processes:
, Memory: 66732032Ke: 66732032
, Memory: 26587136Ke: 26587136
, Memory: 11730944Ke: 11730944
, Memory: 61792256Ke: 61792256
, Memory: 345927680K: 345927680
, Memory: 48545792Ke: 48545792
, Memory: 24608768Ke: 24608768
, Memory: 109047808K 109047808
, Memory: 340836352K: 340836352
, Memory: 47468544Ke: 47468544
, Memory: 25006080K: 25006080
  - PID: 17020, Name: 108244992, Memory: 108244992K
Testing PID 23160 for wrapper.node...
[API] Sign request: OidbSvcTrpcTcp.0x126e_200
Data length: 300 bytes: 08ee2410c801228d010a190a05080110c801120ca80601b00603c00c
02d20c001a0208021a700a6e126645685436655859436d394a4c4c6f665256735a52326c6b354a33
46484a526a75752d34494950734b4b4e4b6b707269376f5a45444d675277636d396b554944314a46
6f51462d3478727a32743134766c4a77756651394636796e6f435248714341514a75616718012880
f524
Searching for all QQ processes...
Found 12 QQ processes via WMIC
All QQ processes:
, Memory: 66732032Ke: 66732032
, Memory: 26587136Ke: 26587136
, Memory: 11730944Ke: 11730944
, Memory: 61792256Ke: 61792256
, Memory: 345952256K: 345952256
, Memory: 48545792Ke: 48545792
, Memory: 24608768Ke: 24608768
, Memory: 108920832K 108920832
, Memory: 340836352K: 340836352
, Memory: 47468544Ke: 47468544
, Memory: 25006080K: 25006080
  - PID: 17020, Name: 108244992, Memory: 108244992K
Testing PID 23160 for wrapper.node...
? Found wrapper.node in PID 23160
Using PID: 23160 for signing
Executing command...
[API] Sign request: OidbSvcTcp.0x102a
Data length: 80 bytes: 08aa201000180022100a0c717a6f6e652e71712e636f6d1003320d616
e64726f696420392e322e35
Using cached PID: 23160
Using PID: 23160 for signing
Executing command...
? Found wrapper.node in PID 23160
Using PID: 23160 for signing
Executing command...
output: SUCCESS:{"token":"656F7232526D6C306B517479","extra":"121B56315F57494E5F4
E515F392E392E32335F34323433305F47575F421A4C4431423839433543373037443443353331463
33532353131314543414237363041454644354332443545333530453944353739323735314439454
23044433543433438434441423936374545","sign":"22A1BA3538E05F77550E64012210605482F
349AFCC2FCEDFDBA99C51"}

? Signature successful!
output: SUCCESS:{"token":"656F7232526D6C306B517479","extra":"121B56315F57494E5F4
E515F392E392E32335F34323433305F47575F421A4C4431423839433543373037443443353331463
33532353131314543414237363041454644354332443545333530453944353739323735314439454
23044433543433438434441423936374545","sign":"AC070E932B889CAD4B601C90AC09C9CA04B
1A32FBBD68F86AD47F6C1"}

? Signature successful!
Frida execution error: Command failed: frida -p 23160 -q --runtime=v8 -e "try{va
r w=Process.findModuleByName('wrapper.node');var f=w.base.add(ptr('0x9AB750'));v
ar s=new NativeFunction(f,'int',['pointer','pointer','int','uint32','pointer']);
var d=[];var h='08aa201000180022100a0c717a6f6e652e71712e636f6d1003320d616e64726f
696420392e322e35';for(var i=0;i<h.length;i+=2)d.push(parseInt(h.substr(i,2),16))
;var b=Memory.alloc(0x300);Memory.protect(b,0x300,'rwx');for(var i=0;i<0x300;i++
)b.add(i).writeU8(0);var p=Memory.alloc(d.length);p.writeByteArray(d);var c=Memo
ry.allocUtf8String('OidbSvcTcp.0x102a');var r=s(c,p,d.length,40468,b);if(r!==0)t
hrow new Error('Failed:'+r);var t=b.add(0x0FF).readU8();var e=b.add(0x1FF).readU
8();var n=b.add(0x2FF).readU8();var l='',a='',o='';if(t>0){var x=b.add(0x000).re
adByteArray(t);if(x)l=Array.from(new Uint8Array(x)).map(function(b){return b.toS
tring(16).padStart(2,'0')}).join('').toUpperCase();}if(e>0){var x=b.add(0x100).r
eadByteArray(e);if(x)a=Array.from(new Uint8Array(x)).map(function(b){return b.to
String(16).padStart(2,'0')}).join('').toUpperCase();}if(n>0){var x=b.add(0x200).
readByteArray(n);if(x)o=Array.from(new Uint8Array(x)).map(function(b){return b.t
oString(16).padStart(2,'0')}).join('').toUpperCase();}console.log('SUCCESS:'+JSO
N.stringify({token:l,extra:a,sign:o}));}catch(e){console.log('ERROR:'+e.toString
());}"

? Signature attempt 1 failed: Frida failed: Command failed: frida -p 23160 -q --
runtime=v8 -e "try{var w=Process.findModuleByName('wrapper.node');var f=w.base.a
dd(ptr('0x9AB750'));var s=new NativeFunction(f,'int',['pointer','pointer','int',
'uint32','pointer']);var d=[];var h='08aa201000180022100a0c717a6f6e652e71712e636
f6d1003320d616e64726f696420392e322e35';for(var i=0;i<h.length;i+=2)d.push(parseI
nt(h.substr(i,2),16));var b=Memory.alloc(0x300);Memory.protect(b,0x300,'rwx');fo
r(var i=0;i<0x300;i++)b.add(i).writeU8(0);var p=Memory.alloc(d.length);p.writeBy
teArray(d);var c=Memory.allocUtf8String('OidbSvcTcp.0x102a');var r=s(c,p,d.lengt
h,40468,b);if(r!==0)throw new Error('Failed:'+r);var t=b.add(0x0FF).readU8();var
 e=b.add(0x1FF).readU8();var n=b.add(0x2FF).readU8();var l='',a='',o='';if(t>0){
var x=b.add(0x000).readByteArray(t);if(x)l=Array.from(new Uint8Array(x)).map(fun
ction(b){return b.toString(16).padStart(2,'0')}).join('').toUpperCase();}if(e>0)
{var x=b.add(0x100).readByteArray(e);if(x)a=Array.from(new Uint8Array(x)).map(fu
nction(b){return b.toString(16).padStart(2,'0')}).join('').toUpperCase();}if(n>0
){var x=b.add(0x200).readByteArray(n);if(x)o=Array.from(new Uint8Array(x)).map(f
unction(b){return b.toString(16).padStart(2,'0')}).join('').toUpperCase();}conso
le.log('SUCCESS:'+JSON.stringify({token:l,extra:a,sign:o}));}catch(e){console.lo
g('ERROR:'+e.toString());}"

Retrying... (1/2)
Searching for all QQ processes...
Found 13 QQ processes via WMIC
All QQ processes:
, Memory: 66752512Ke: 66752512
, Memory: 26583040Ke: 26583040
, Memory: 11730944Ke: 11730944
, Memory: 61784064Ke: 61784064
, Memory: 347037696K: 347037696
, Memory: 48545792Ke: 48545792
, Memory: 24608768Ke: 24608768
, Memory: 108863488K 108863488
, Memory: 340836352K: 340836352
, Memory: 47468544Ke: 47468544
, Memory: 24997888K: 24997888
, Memory: 108244992K: 108244992
  - PID: 30264, Name: 868352, Memory: 868352K
Testing PID 23160 for wrapper.node...
? Found wrapper.node in PID 23160
Using PID: 23160 for signing
Executing command...
output: SUCCESS:{"token":"656F7232526D6C306B517479","extra":"121B56315F57494E5F4
E515F392E392E32335F34323433305F47575F421A4C4431423839433543373037443443353331463
33532353131314543414237363041454644354332443545333530453944353739323735314439454
23044433543433438434441423936374545","sign":"F63F7444119A9B2021ECD814F691B8467D2
9B1002F5AC85854504960"}

? Signature successful!
[API] Sign request: OidbSvcTrpcTcp.0x126e_200
Data length: 296 bytes: 08ee2410c801228b010a190a05080110c801120ca80601b00603c00c
02d20c001a0208021a6e0a6c1264456854436e7554596b704668794b784b384d5843727448754477
306671686a76326763672d776f6f72375466307279686b514d7942484279623252516750556b5768
444a6e6d5631736a4861715649434a7165576b45496f65674a572d594942416d643618012880f524

Using cached PID: 23160
Using PID: 23160 for signing
Executing command...
[API] Sign request: MessageSvc.PbSendMsg
Data length: 1244 bytes: 0a08120608b889c6c90112060801100018001acd040aca04123f0a3
d0a0440e5a0801a0d000100000002006403efe000006226180220e0df8fa00628004a18755f46466
432636c334132644250324b6c654b6d58325277580012230a210a1fe88081e585acefbc8ce5bfabe
58ebbe78ea9e58e9fe7a59ee5958ae596827e12cc0342c9031224326138653639633166353831383
93433616332323630366561666139393661662e6a706738c2d2c59e0840004800504260016a102a8
e69c1f5818943ac22606eafa996af72642f67636861747069635f6e65772f3135313436363430383
52f3432323637353634302d756e646566696e65642d3241384536394331463538313839343341433
2323630364541464139393641462f3139383f7465726d3d322669735f6f726967696e3d317a642f6
7636861747069635f6e65772f313531343636343038352f3432323637353634302d756e646566696
e65642d32413845363943314635383138393433414332323630364541464139393641462f3732303
f7465726d3d322669735f6f726967696e3d318201622f67636861747069635f6e65772f313531343
636343038352f3432323637353634302d756e646566696e65642d324138453639433146353831383
93433414332323630364541464139393641462f303f7465726d3d322669735f6f726967696e3d31a
001e807b0018019b801f00bc001c801c801b88f10d00101e80100f0010092023108004a2de8bf90e
4bc9fe5a4a7e4b98be6809de88085efbc8ce5bf85e8a18ce4bc9fe5a4a7e4b98be8bfb7e98094e38
0821213aa02108801009a010a78deab0af80100c802002081edf5df052881edf5df05
Using cached PID: 23160
Using PID: 23160 for signing
Executing command...
output: SUCCESS:{"token":"656F7232526D6C306B517479","extra":"121B56315F57494E5F4
E515F392E392E32335F34323433305F47575F421A4C4431423839433543373037443443353331463
33532353131314543414237363041454644354332443545333530453944353739323735314439454
23044433543433438434441423936374545","sign":"8E2C8DB9181E265E996032B38E4AFB99D04
DF1830655DABD0FA17227"}

? Signature successful!
output: SUCCESS:{"token":"656F7232526D6C306B517479","extra":"121B56315F57494E5F4
E515F392E392E32335F34323433305F47575F421A4C4431423839433543373037443443353331463
33532353131314543414237363041454644354332443545333530453944353739323735314439454
23044433543433438434441423936374545","sign":"C4F109859C882B731180237A2513E23A818
D2E7BC5C1351568C480210081EAC167399292A87A25ACBFFEA69140D8EEE4770694064527EE8ECF8
262290F383893C597CCAF21DBCC4D69255F870F6D9474DF8FD6744B1DE29147FFA440"}

? Signature successful!
[API] Sign request: OidbSvcTrpcTcp.0x11ea_200
Data length: 300 bytes: 08ea2310c801228d010a190a05080110c801120ca80602b00602c00c
02d20c001a0208021a700a6e12664568532d5f46614e4e4745612d33726566784937727a476e796c
66716b52693274506b484949634c4b4c7a65737675386f5a45444d675277636d396b554944314a46
6f5176704f6a6a724a6257446767765a38356a2d3334496e6f43357a4f4341514a75616718012880
f524
Using cached PID: 23160
Using PID: 23160 for signing
Executing command...
Frida execution error: Command failed: frida -p 23160 -q --runtime=v8 -e "try{va
r w=Process.findModuleByName('wrapper.node');var f=w.base.add(ptr('0x9AB750'));v
ar s=new NativeFunction(f,'int',['pointer','pointer','int','uint32','pointer']);
var d=[];var h='08ea2310c801228d010a190a05080110c801120ca80602b00602c00c02d20c00
1a0208021a700a6e12664568532d5f46614e4e4745612d33726566784937727a476e796c66716b52
693274506b484949634c4b4c7a65737675386f5a45444d675277636d396b554944314a466f517670
4f6a6a724a6257446767765a38356a2d3334496e6f43357a4f4341514a75616718012880f524';fo
r(var i=0;i<h.length;i+=2)d.push(parseInt(h.substr(i,2),16));var b=Memory.alloc(
0x300);Memory.protect(b,0x300,'rwx');for(var i=0;i<0x300;i++)b.add(i).writeU8(0)
;var p=Memory.alloc(d.length);p.writeByteArray(d);var c=Memory.allocUtf8String('
OidbSvcTrpcTcp.0x11ea_200');var r=s(c,p,d.length,4913,b);if(r!==0)throw new Erro
r('Failed:'+r);var t=b.add(0x0FF).readU8();var e=b.add(0x1FF).readU8();var n=b.a
dd(0x2FF).readU8();var l='',a='',o='';if(t>0){var x=b.add(0x000).readByteArray(t
);if(x)l=Array.from(new Uint8Array(x)).map(function(b){return b.toString(16).pad
Start(2,'0')}).join('').toUpperCase();}if(e>0){var x=b.add(0x100).readByteArray(
e);if(x)a=Array.from(new Uint8Array(x)).map(function(b){return b.toString(16).pa
dStart(2,'0')}).join('').toUpperCase();}if(n>0){var x=b.add(0x200).readByteArray
(n);if(x)o=Array.from(new Uint8Array(x)).map(function(b){return b.toString(16).p
adStart(2,'0')}).join('').toUpperCase();}console.log('SUCCESS:'+JSON.stringify({
token:l,extra:a,sign:o}));}catch(e){console.log('ERROR:'+e.toString());}"

? Signature attempt 1 failed: Frida failed: Command failed: frida -p 23160 -q --
runtime=v8 -e "try{var w=Process.findModuleByName('wrapper.node');var f=w.base.a
dd(ptr('0x9AB750'));var s=new NativeFunction(f,'int',['pointer','pointer','int',
'uint32','pointer']);var d=[];var h='08ea2310c801228d010a190a05080110c801120ca80
602b00602c00c02d20c001a0208021a700a6e12664568532d5f46614e4e4745612d3372656678493
7727a476e796c66716b52693274506b484949634c4b4c7a65737675386f5a45444d675277636d396
b554944314a466f5176704f6a6a724a6257446767765a38356a2d3334496e6f43357a4f4341514a7
5616718012880f524';for(var i=0;i<h.length;i+=2)d.push(parseInt(h.substr(i,2),16)
);var b=Memory.alloc(0x300);Memory.protect(b,0x300,'rwx');for(var i=0;i<0x300;i+
+)b.add(i).writeU8(0);var p=Memory.alloc(d.length);p.writeByteArray(d);var c=Mem
ory.allocUtf8String('OidbSvcTrpcTcp.0x11ea_200');var r=s(c,p,d.length,4913,b);if
(r!==0)throw new Error('Failed:'+r);var t=b.add(0x0FF).readU8();var e=b.add(0x1F
F).readU8();var n=b.add(0x2FF).readU8();var l='',a='',o='';if(t>0){var x=b.add(0
x000).readByteArray(t);if(x)l=Array.from(new Uint8Array(x)).map(function(b){retu
rn b.toString(16).padStart(2,'0')}).join('').toUpperCase();}if(e>0){var x=b.add(
0x100).readByteArray(e);if(x)a=Array.from(new Uint8Array(x)).map(function(b){ret
urn b.toString(16).padStart(2,'0')}).join('').toUpperCase();}if(n>0){var x=b.add
(0x200).readByteArray(n);if(x)o=Array.from(new Uint8Array(x)).map(function(b){re
turn b.toString(16).padStart(2,'0')}).join('').toUpperCase();}console.log('SUCCE
SS:'+JSON.stringify({token:l,extra:a,sign:o}));}catch(e){console.log('ERROR:'+e.
toString());}"

Retrying... (1/2)
Searching for all QQ processes...
Found 12 QQ processes via WMIC
All QQ processes:
, Memory: 36765696Ke: 36765696
, Memory: 22880256Ke: 22880256
, Memory: 2179072Kme: 2179072
, Memory: 61685760Ke: 61685760
, Memory: 40935424Ke: 40935424
, Memory: 22835200Ke: 22835200
, Memory: 11214848K: 11214848
, Memory: 64761856Ke: 64761856
, Memory: 190877696K: 190877696
, Memory: 43941888K: 43941888
, Memory: 25235456Ke: 25235456
  - PID: 17868, Name: 129114112, Memory: 129114112K
Testing PID 20764 for wrapper.node...
? Found wrapper.node in PID 20764
Using PID: 20764 for signing
Executing command...
output: SUCCESS:{"token":"35546B325A69714569453565","extra":"121B56315F57494E5F4
E515F392E392E32335F34323433305F47575F421A4C4431314246334631304336334633313639453
14333443139334337333034304130313430454144303446434335313733393745364645354246364
63932433639333335413441313434454135","sign":"25A4BB4DE7E9ED6E6981502125E5A785E24
7EECDE675AD889CC12F80"}

? Signature successful!
[API] Sign request: OidbSvcTrpcTcp.0x11ea_200
Data length: 300 bytes: 08ea2310c801228d010a190a05080110c801120ca80602b00602c00c
02d20c001a0208021a700a6e126645685270534779306855416a31756b30462d44636977674e4470
6256335269772d7473534949634c4b4c4c7a384d71396f5a45444d675277636d396b554944314a46
6f514134434e2d7765414a6a5378564274416451484c64586f436557694341514a6e656718012880
f524
Using cached PID: 20764
Using PID: 20764 for signing
Executing command...
output: SUCCESS:{"token":"35546B325A69714569453565","extra":"121B56315F57494E5F4
E515F392E392E32335F34323433305F47575F421A4C4431314246334631304336334633313639453
14333443139334337333034304130313430454144303446434335313733393745364645354246364
63932433639333335413441313434454135","sign":"F85200F388A311A2F8BE8037F81EB93CAA7
FBE4855128571FB8FD77D"}

? Signature successful!
[API] Sign request: MessageSvc.PbSendMsg
Data length: 1040 bytes: 0a081206088de9fbae0112060801100018001ae7030ae40312e1039
a03dd030ada0301789c8d524d6fd34010fd2bd11cb8b049ed3ab69b9538848a88142848455428c96
1636fcaa2ecdaacd7a4696489a83d9450bea910a5502115a9080a1c2a505502bfc61ffd17c889843
87060e6f2467af346f36606407c1f30381e2f292a1c2a5489875dc578b002081c4f74d80ae001905
079015ba38075041d4ff6887427587aa19822d5f72960109ee4a40b087acc55b7001b9a16217069e
0008646361cc5fb1fb2cf5fe3f1760b10d05525493ea0c3ba54109e2be846b96d98c42852a2b58b1
5c3b28ab6396b145d67562beb659d9a6e0510a820e480f50801a76aa2e1524558374782f602c08d0
128baaa0043bcf52b7ef230f9b6990cbfe042e37cfaf155fafa28797678faf228fe711c1f6f9f494
f0ed3fb5bf1682f5b1f278f0e4eef0d5b4d91be384836bf1774cbb62b76c5d2ad42bab3316d9832d
393e7c9dbdda6688a737f02a216024903e60286ebb25621e29a5dbb74e3e64c872fc8b3757dfe76f
54aedc2f252755e5b36e7aa419db039119635e6afe98bce62bf7d79a1769559a2b354bf0808022f9
44e6e4cfa733f1b8ed29d8dbf5dcc0921e744f60143b2f73edd7da0276fde65e34ff1e3a7d38d014
1285840effcafb95184c0971ef7d5bf6e76974ac0a095f234f39ad1dee48784228e82e8375fdcecc
c20b79eedfc0b28e0b59efb0f
Using cached PID: 20764
Using PID: 20764 for signing
Executing command...
output: SUCCESS:{"token":"35546B325A69714569453565","extra":"121B56315F57494E5F4
E515F392E392E32335F34323433305F47575F421A4C4431314246334631304336334633313639453
14333443139334337333034304130313430454144303446434335313733393745364645354246364
63932433639333335413441313434454135","sign":"565ACAF385B342516BB73EBE3232964F49B
AB73838B33953786F506192A617F9C72F245A9B2672571B1BF5449B473FF6CFEB23DCC5A6D3B0BAC
1F394E1CFF2DC1610582CCE56D15FB6C45A830308E82466E29F527DF1C6AC8A94A2C4"}

? Signature successful!