import frida, time, subprocess, sys
sys.path.insert(0,"/root/ants"); import emu
JS=r"""
function ins(){var m=Process.findModuleByName("libil2cpp.so");if(!m)return false;var b=m.base;
 // NetworkingPeer.OnStatusChanged(this, StatusCode): esp+8 = statusCode
 try{Interceptor.attach(b.add(0x1012c1b),{onEnter:function(){var sp=this.context.esp;send({g:"StatusChanged code="+sp.add(8).readS32()});}});}catch(e){send({g:"e1 "+e});}
 function BT(ctx){return Thread.backtrace(ctx,Backtracer.ACCURATE).slice(0,6).map(function(a){var mm=Process.findModuleByAddress(a);return mm&&mm.name=="libil2cpp.so"?"il+0x"+a.sub(mm.base).toString(16):(mm?mm.name:""+a);}).join(" ");}
 try{Interceptor.attach(b.add(0x100a06b),{onEnter:function(){send({g:"NetworkingPeer.Disconnect  bt="+BT(this.context)});}});}catch(e){}
 try{Interceptor.attach(b.add(0x5eeb98),{onEnter:function(){send({g:"EnetPeer.Disconnect"});}});}catch(e){}
 send({g:"__ready"});return true;}
if(!ins()){var iv=setInterval(function(){if(ins())clearInterval(iv);},100);}
"""
t=emu.launch_to_menu(); print(f"menu {t:.0f}s",flush=True)
dev=frida.get_usb_device(timeout=10)
pid=int(subprocess.run([emu.ADB,"shell","pidof","se.foglo.svt"],capture_output=True,text=True).stdout.split()[0])
s=dev.attach(pid); sc=s.create_script(JS)
sc.on("message",lambda m,d: print(m.get("payload",{}).get("g",m) if isinstance(m.get("payload"),dict) else m,flush=True))
sc.load(); time.sleep(0.5)
emu.tap(700,730); time.sleep(5)
print("[GO]",flush=True); emu.tap(1355,960); time.sleep(30)
print("done",flush=True)
