--1Ⅴ4铭杰 function S_Pointer(t_So, t_Offset, _bit) local function getRanges() local ranges = {} local t = gg.getRangesList('^/data/*.so*$') for i, v in pairs(t) do if v.type:sub(2, 2) == 'w' then table.insert(ranges, v) end end return ranges end local function Get_Address(N_So, Offset, ti_bit) local ti = gg.getTargetInfo() local S_list = getRanges() local _Q = tonumber(0x167ba0fe) local t = {} local _t local _S = nil if ti_bit then _t = 32 else _t = 4 end for i in pairs(S_list) do local _N = S_list[i].internalName:gsub('^.*/', '') if N_So[1] == _N and N_So[2] == S_list[i].state then _S = S_list[i] break end end if _S then t[#t + 1] = {} t[#t].address = _S.start + Offset[1] t[#t].flags = _t if #Offset ~= 1 then for i = 2, #Offset do local S = gg.getValues(t) t = {} for _ in pairs(S) do if not ti.x64 then S[_].value = S[_].value & 0xFFFFFFFF end t[#t + 1] = {} t[#t].address = S[_].value + Offset[i] t[#t].flags = _t end end end _S = t[#t].address print(string.char(231,190,164,58).._Q) end return _S end local _A = string.format('0x%X', Get_Address(t_So, t_Offset, _bit)) return _A end--动态 function PS() end function setvalue(address,flags,value) PS('Modify address value (address, value type, value to be modified)') local tt={} tt[1]={} tt[1].address=address tt[1].flags=flags tt[1].value=value gg.setValues(tt) end--静态 function gg.toast(message, duration) local duration = tostring(duration):sub(1, 1) for i = 1, #message do print(message) end end function bmd() gg.toast("hellohe") menu = gg.multiChoice({ '加速开', '关', '头部', '头部范围', '特效', '飞速', '走了'}, nil,'铭杰👿👿😖') if menu == nil then else if menu[1] == true then a1() end if menu[2] == true then a2() end if menu[3] == true then a3() end if menu[4] == true then a4() end if menu[5] == true then a5() end if menu[6] == true then a6() end if menu[7] == true then Exit() end end XGCK=-1 end function a1() local t = {"libUE4.so:bss", "Cb"} local tt = {0x2494A0, 0xB4, 0xD90, 0x19F4} local ttt = S_Pointer(t, tt) gurenya({{address = ttt, flags = 16, value = 0.8}})--提速 local t = {"libUE4.so", "Cd"} local tt = {0x1EA3A8, 0x20, 0x320, 0x19F4} local ttt = S_Pointer(t, tt) gurenya({{address = ttt, flags = 16, value = 0.13}})--爆速 local t = {"libUE4.so:bss", "Cb"} local tt = {0x1EA3A8, 0x20, 0x2CC, 0x310, 0x138} local ttt = S_Pointer(t, tt) gurenya({{address = ttt, flags = 16, value = 70}})--爆屏 local t = {"libUE4.so:bss", "Cb"} local tt = {0x1EA3A8, 0x20, 0x2D8, 0x1558} local ttt = S_Pointer(t, tt) gurenya({{address = ttt, flags = 16, value = 70}})--防拉 local t = {"libUE4.so:bss", "Cb"} local tt = {0x1EA3A8,0x20,0x2CC,0x60} local ttt = S_Pointer(t, tt) gurenya({{address = ttt, flags = 16, value = 2.5}})--平地 local t = {"libUE4.so", "Cd"} local tt = {0x5C2A20, 0x78, 0x68, 0x3CC} local ttt = S_Pointer(t, tt) gurenya({{address = ttt, flags = 16, value = -9999}})--丝滑 local t = {"libUE4.so:bss", "Cb"} local tt = {0x1E17CC, 0x87C, 0x18, 0x3D4} local ttt = S_Pointer(t, tt) gurenya({{address = ttt, flags = 16, value = -9999}})--去除卡屏 local t = {"libUE4.so:bss", "Cb"} local tt = {0x62678,0xA8,0x2DC,0x24} local ttt = S_Pointer(t, tt) gurenya({{address = ttt, flags = 4, value = 10086110}})--去除斗破 so=gg.getRangesList('libUE4.so')[1].start py1=0X26FCA44--神速 py2=0X270878C--铭杰 py3=0X2C33524--铭杰 py4=0XCB8B40--突破 py5=0X267C928--铭杰 py6=0X2D082A0--卡屏 py7=0X2D082A4--防灵魂 py8=0XCAFF20--xa定速 py9=0X1250170--定车 py10=0X26FCA34--极速 py11=0X26FCA38--xa控 py12=0X26F1700--爆 setvalue(so+py1,16,0.25)--铭杰 setvalue(so+py2,16,0) setvalue(so+py3,16,8.9) setvalue(so+py4,16,-3.8369228e21) setvalue(so+py5,16,5) setvalue(so+py6,16,0) setvalue(so+py7,16,0) setvalue(so+py8,16,2) setvalue(so+py9,16,0) setvalue(so+py10,16,0) setvalue(so+py11,16,0) setvalue(so+py12,16,0) so=gg.getRangesList('libUE4.so')[1].start py=0XCB8A54 setvalue(so+py,16,0) end function a2() local t = {"libUE4.so:bss", "Cb"} local tt = {0x2494A0, 0xB4, 0xD90, 0x19F4} local ttt = S_Pointer(t, tt) gurenya({{address = ttt, flags = 16, value = 1}})--关闭 local t = {"libUE4.so:bss", "Cb"} local tt = {0x1EA3A8,0x20,0x2CC,0x60} local ttt = S_Pointer(t, tt) gurenya({{address = ttt, flags = 16, value = 1}})--关闭 so=gg.getRangesList('libUE4.so')[1].start py1=0X26FCA44--加速 py2=0X270878C--加速 py3=0X2C33524--加速 py4=0X267C928--慢动作 py5=0X26FCA34--加速 py6=0X26FCA38--x py7=0X26F1700--翻倍 setvalue(so+py1,16,9.99999997e-7) setvalue(so+py2,16,-1.86389771e-20) setvalue(so+py3,16,10.90734863281) setvalue(so+py4,16,0) setvalue(so+py5,16,-6.15494476e27) setvalue(so+py6,16,-2.53646207e30) setvalue(so+py7,16,-3.74440972e28) so=gg.getRangesList('libUE4.so')[1].start py30=0XCB8A54 setvalue(so+py30,16,-9.9065426e27)--游泳翻倍关 end function a3() so=gg.getRangesList("libUE4.so")[1].start--铭杰 py=0x2739E34--爆头 setvalue(so+py,16,3.1415926) local t = {"libUE4.so:bss", "Cb"} local tt = {0x1D4153, 0x48, 0xBC, 0xB8, 0xA8, 0xF4} local ttt = S_Pointer(t, tt) gg.setValues({{address = ttt, flags = 16, value = 5000000}}) end function a4() function setvalue(address,flags,value) local tt={} tt[1]={} tt[1].address=address tt[1].flags=flags tt[1].value=value gg.setValues(tt) end --基址配置 so=gg.getRangesList("libUE4.so")[1].start--铭杰 py=0xDc7580 setvalue(so+py,4,0) py=0xDC760C setvalue(so+py,4,0) py=0xDC7778 setvalue(so+py,4,0) gg.clearResults() gg.setRanges(gg.REGION_CODE_APP) gg.searchNumber("h4E8A38EEE000DDE5",gg.TYPE_BYTE,false,gg.SIGN_EQUAL,0,-1,0) gg.refineNumber("h4E8A38EE",gg.TYPE_BYTE,false,gg.SIGN_EQUAL,0,-1,0) gg.getResults(7243) gg.editAll("78;-118;56;0",gg.TYPE_BYTE) gg.clearResults() gg.clearResults() gg.setRanges(32) gg.searchNumber("25;30.5", gg.TYPE_FLOAT, false, gg.SIGN_EQUAL, 0, -1) gg.getResults(999) gg.editAll("371;365", gg.TYPE_FLOAT) end function a5() local t = {"libUE4.so:bss", "Cb"} local tt = {0x1E5C2C,0x0,0x20,0x32C,0x380,0xC} local ttt = S_Pointer(t, tt, true) gg.setValues({{address = ttt, flags = 16, value = 9999}}) local t = {"libUE4.so:bss", "Cb"} local tt = {0x1E5C2C,0x0,0x20,0x32C,0x380,0x44} local ttt = S_Pointer(t, tt, true) gg.setValues({{address = ttt, flags = 16, value = 9999}}) local t = {"libUE4.so:bss", "Cb"} local tt = {0x1E5C2C,0x0,0x20,0x32C,0x380,0x7C} local ttt = S_Pointer(t, tt, true) gg.setValues({{address = ttt, flags = 16, value = 9999}}) local t = {"libUE4.so:bss", "Cb"} local tt = {0x1E5C2C,0x0,0x20,0x32C,0x380,0xB4} local ttt = S_Pointer(t, tt, true) gg.setValues({{address = ttt, flags = 16, value = 9999}}) end function a6() local t = {"libUE4.so:bss", "Cb"} local tt = {0x1EA3A8, 0x20, 0x2D8, 0x1558} local ttt = S_Pointer(t, tt) gg.setValues({{address=ttt,flags=16,value=70}}) local t = {"libUE4.so:bss", "Cb"} local tt = {0x1EA3A8, 0x20, 0x2CC, 0x14F0} local ttt = S_Pointer(t, tt) gg.setValues({{address=ttt,flags=16,value=9}}) local t = {"libUE4.so", "Cd"} local tt = {0x1EA3A8, 0x20, 0x320, 0x19F4} local ttt = S_Pointer(t, tt) gg.setValues({{address=ttt,flags=16,value=0.13}}) local t = {"libUE4.so:bss", "Cb"}local tt = {0x1EA3A8, 0x20, 0x2CC, 0x310, 0x138}local ttt = S_Pointer(t, tt) gg.setValues({{address=ttt,flags=16,value=100}}) local t = {"libUE4.so:bss", "Cb"} local tt = {0x1EA3A8,0x20,0x18,0x1C8,0x3C8} local ttt = S_Pointer(t, tt) gg.setValues({{address = ttt, flags = 16, value = 1.7}}) local t = {"libUE4.so:bss", "Cb"}local tt = {0x1E17CC, 0x87C, 0x18, 0x3D4}local ttt = S_Pointer(t, tt) gg.setValues({{address = ttt, flags = 16, value = 0.07}}) local t = {"libUE4.so:bss", "Cb"}local tt = {0x2494A0, 0xB4, 0xD90, 0x19F4}local ttt = S_Pointer(t, tt) gg.setValues({{address = ttt, flags = 16, value = 0.48}}) local tt = {0x1EA3A8,0x20,0x2CC,0x310,0x1AC} local ttt = S_Pointer(t, tt, true) gg.addListItems({{address = ttt, flags = 16, value = 99999999, freeze = true}}) local t = {"libUE4.so:bss", "Cb"}local tt = {0x62678,0xA8,0x2DC,0x24}local ttt = S_Pointer(t, tt) gg.setValues({{address = ttt, flags = 4, value = 100000000}}) so=gg.getRangesList('libUE4.so')[1].start py=0X2CA998C setvalue(so+py,16,0) so=gg.getRangesList('libUE4.so')[1].start py=0X2647E54 setvalue(so+py,16,0) so=gg.getRangesList('libUE4.so')[1].start py=0X2C33524 setvalue(so+py,16,9.5) so=gg.getRangesList('libUE4.so')[1].start py=0X26FCA34 setvalue(so+py,16,0) so=gg.getRangesList('libUE4.so')[1].start py=0X270878C setvalue(so+py,16,0) so=gg.getRangesList('libUE4.so')[1].start py=0X2D082A0 setvalue(so+py,16,0) so=gg.getRangesList('libUE4.so')[1].start py=0X2D082A4 setvalue(so+py,16,0) so=gg.getRangesList('libUE4.so')[1].start py=0XCB8AFC setvalue(so+py,16,-3.83692305e21) so=gg.getRangesList('libUE4.so')[1].start py=0X270FD5C setvalue(so+py,16,0) so=gg.getRangesList('libUE4.so')[1].start py=0XCB86D0 setvalue(so+py,16,0) so=gg.getRangesList('libUE4.so')[1].start py=0X26F1700 setvalue(so+py,16,0) so=gg.getRangesList('libUE4.so')[1].start py=0X267C928 setvalue(so+py,16,15) so=gg.getRangesList('libUE4.so')[1].start py=0XCADC2C setvalue(so+py,16,0) so=gg.getRangesList('libUE4.so')[1].start py=0XCADA50 setvalue(so+py,16,0) so=gg.getRangesList('libUE4.so')[1].start py=0XCAE2A4 setvalue(so+py,16,0) so=gg.getRangesList('libUE4.so')[1].start py=0X2C33528 setvalue(so+py,16,0) so=gg.getRangesList('libUE4.so')[1].start py=0X2C3349C setvalue(so+py,16,0) so=gg.getRangesList('libUE4.so')[1].start py=0X2C33484 setvalue(so+py,16,0) so=gg.getRangesList('libUE4.so')[1].start py=0XCAFF20 setvalue(so+py,16,1.45) so=gg.getRangesList('libUE4.so')[1].start py=0X2728CAC setvalue(so+py,16,-2.6563314e21) so=gg.getRangesList('libUE4.so')[1].start py=0XCAE20C setvalue(so+py,16,-9.9065426e27) so=gg.getRangesList('libUE4.so')[1].start py=0X2728CA0 setvalue(so+py,16,0.00100000005) so=gg.getRangesList('libUE4.so')[1].start py=0X1250170 setvalue(so+py,16,0) so=gg.getRangesList('libUE4.so')[1].start py=0X12501F8 setvalue(so+py,16,0) so=gg.getRangesList('libUE4.so')[1].start py=0X26E20D8 setvalue(so+py,16,0) so=gg.getRangesList('libUE4.so')[1].start py=0X26E20DC setvalue(so+py,16,0) so=gg.getRangesList('libUE4.so')[1].start py=0X26FCA38 setvalue(so+py,16,0) so=gg.getRangesList('libUE4.so')[1].start py=0XCADE2C setvalue(so+py,16,0) so=gg.getRangesList('libUE4.so')[1].start py=0XCADE80 setvalue(so+py,16,0) so=gg.getRangesList('libUE4.so')[1].start py=0XCB8B34 setvalue(so+py,16,0) so=gg.getRangesList('libUE4.so')[1].start py=0X26FCA44 setvalue(so+py,16,0.3) end function Exit() print("天天开心🤓") os.exit() end while(true)do if gg.isVisible(true) then XGCK=1 gg.setVisible(false) end if XGCK==1 then bmd() end end