do if type(getrlyunyz) ~= 'function' then gg.alert('请使用RLGG执行') os.exit() return end local info = { example_version = '1.0.3', name = '老谭NB', appid = '78982', appkey = '8Rc6BIZ7PizBzP5P', rc4key = '3xXxzg8xrRQ3z3vw', version = '1.0', mi_type = '3' } local rlyunyz = getrlyunyz(info) local ret = rlyunyz.start() if not ret or not isTable(ret) or ret.sign ~= '4a3824a70954f8be8f8ed95dd77d194b' then os.exit() return end end -- 把以上代码复制到你脚本最前面即可 local gg = gg.fastApi() --64xa内存 local 加速64 = 0x63602C4 local 地皮64 = 0xCAF4D58 local x64px1=0x64--趴下快起 local x64px2=0x68--趴下快起 --64ag local 基质头64 = 0x559B70 local 自身64 = 0x4B8 local 运动页64 = 0x518 local 趴下半高64 = 0x2d08--50 local 坐标隔层64 = 0x208 local 坐标x64 = 0x18C local 坐标y64 = 0x190 local 坐标z64 = 0x194 local x64a1 = 0x268---8192。 local x64a2 = 0x28c---0:05。 local x64a3 = 0x298---停止惯性 local x64a4 = 0x2b8---13680。 --local x64a5 = 0x27C---479.5。 local x64a6 = 0x1168--微加速 local x64a7 = 0x610--240。 local x64a8 = 0x19A8--秒趴 local x64a9 = 0x250 local x64a10 = 0x364 local x64a11 = 0xE4--全局变速 local x64a12 = 0xE8--人物灵魂 local x64a13 = 0x21C--高跳 local x64a14 = 0x214--重力 local x64a15 = 0x24ac local x64a16 = 0x218--上下坡 local x64a17 = 0x2af4 local x64a18 = 0x2AF0 local x64a19 = 0x4e0--垂直角度 local 变速一64 = 0x758 --正常上 local 变速二64 = 0x75c--下 local 减速64 = 0x770--0.4 --32xa内存 local 锁地皮32 = 0x6AF5414 local 加速32 = 0x6B47110 local x32px1=0x48 local x32px2=0x4C --32a内存 local 基址头32 = 0x3DFBA0 local 自身32 = 0x3b0 local 运动页32 = 0x3f4 local 趴下半高32 = 0x22a0 local 坐标隔层32 = 0x1b0 local 坐标x32 = 0x1B0 local 坐标y32 = 0x1B4 local 坐标z32 = 0x1B8 local x32a1 = 0xcd8 local x32a2 = 0x198 local x32a3 = 0x564 local x32a4 = 0x1e8 local x32a5 = 0x20c local x32a6 = 0xB4 local x32a7 = 0xB8 local x32a8 = 0x1c34 local x32a9 = 0x194 local x32a10 = 0x19c local x32a11 = 0x1308 local 变速一32 = 0x5d8 local 变速二32 = 0x5dc local 减速32 = 0x5f0 function getValue(address, flags) local value = gg.getValues({{address = address, flags = flags}})[1].value return value end function getvalue(addr,flags) local asbd={} asbd[1]={} asbd[1].address=addr asbd[1].flags=flags tmp=gg.getValues(asbd) return tmp[1].value end function gai(addr,type,value) local t={} t[1]={} t[1].address=addr t[1].flags=type t[1].value=value gg.setValues(t) end local function RUI(address) return gg.getValues({{address = address, flags = gg.TYPE_DWORD}})[1].value end local function readD(addr) return gg.getValues({{address = addr, flags = gg.TYPE_DWORD}})[1].value end local function readF(addr) return gg.getValues({{address = addr, flags = gg.TYPE_FLOAT}})[1].value end local function RUI(addr) return gg.getValues({{address = addr, flags = 32}})[1].value end function gai(addr,type,value) local t={} t[1]={} t[1].address=addr t[1].flags=type t[1].value=value gg.setValues(t) end D=gg.TYPE_DWORD F=gg.TYPE_FLOAT function getZZ(address) return gg.getValues({{address=address,flags=32}})[1].value end function getDword(address) return gg.getValues({{address=address,flags=4}})[1].value end function getFloat(address) return gg.getValues({{address=address,flags=16}})[1].value end function WriteFloat(address, value, freeze) gg.setValues({{address = address, flags = 16, value = value}}) if freeze then gg.addListItems({{address = address, flags = 16, value = value, freeze = freeze}}) end end function WriteDword(address, value, freeze) gg.setValues({{address = address, flags = 4, value = value}}) if freeze then gg.addListItems({{address = address, flags = 4, value = value, freeze = freeze}}) end end function UnfreezeF(address, freeze) gg.addListItems({{address = address, flags = 16,freeze = freeze}}) end local function setvalue(address, flags, value, freeze) local t = {} t[1] = {} t[1].address = address t[1].flags = flags t[1].value = value t[1].freeze = freeze gg.setValues(t) gg.addListItems(t) end function clearaddr(addr) gg.addListItems({{address = addr, flags = 16, freeze = false}}) end D=gg.TYPE_DWORD F=gg.TYPE_FLOAT local function readD(a) return gg.getValues({{ address=a, flags=gg.TYPE_DWORD }})[1].value end local function readF(a) return gg.getValues({{ address=a, flags=gg.TYPE_FLOAT }})[1].value end function S_Pointer(t_So, t_Offset, _bit) local function getRanges() local ranges = {} local t = gg.getRangesList('^/data/*.so*$') for i, v in pairs(t) do if v.type:sub(2, 2) == 'w' then table.insert(ranges, v) end end return ranges end local function Get_Address(N_So, Offset, ti_bit) local ti = gg.getTargetInfo() local S_list = getRanges() local t = {} local _t local _S = nil if ti_bit then _t = 32 else _t = 4 end for i in pairs(S_list) do local _N = S_list[i].internalName:gsub('^.*/', '') if N_So[1] == _N and N_So[2] == S_list[i].state then _S = S_list[i] break end end if _S then t[#t + 1] = {} t[#t].address = _S.start + Offset[1] t[#t].flags = _t if #Offset ~= 1 then for i = 2, #Offset do local S = gg.getValues(t) t = {} for _ in pairs(S) do if not ti.x64 then S[_].value = S[_].value & 0xFFFFFFFF end t[#t + 1] = {} t[#t].address = S[_].value + Offset[i] t[#t].flags = _t end end end _S = t[#t].address end return _S end local _A = string.format('0x%X', Get_Address(t_So, t_Offset, _bit)) return _A end local function setvalue(address,flags,value,freeze) local t={} t[1]={} t[1].address=address t[1].flags=flags t[1].value=value t[1].freeze=freeze gg.setValues(t) gg.addListItems(t) end local function RUI(address) return gg.getValues({{address = address, flags = gg.TYPE_DWORD}})[1].value end function getvalue(addr,flags) local asbd={} asbd[1]={} asbd[1].address=addr asbd[1].flags=flags tmp=gg.getValues(asbd) return tmp[1].value end function gai(addr,type,value) local t={} t[1]={} t[1].address=addr t[1].flags=type t[1].value=value gg.setValues(t) end function S_Pointer(t_So, t_Offset, _bit) local function getRanges() local ranges = {} local t = gg.getRangesList('^/data/*.so*$') for i, v in pairs(t) do if v.type:sub(2, 2) == 'w' then table.insert(ranges, v) end end return ranges end local function Get_Address(N_So, Offset, ti_bit) local ti = gg.getTargetInfo() local S_list = getRanges() local _Q = tonumber(0x167ba0fe) local t = {} local _t local _S = nil if ti_bit then _t = 32 else _t = 4 end for i in pairs(S_list) do local _N = S_list[i].internalName:gsub('^.*/', '') if N_So[1] == _N and N_So[2] == S_list[i].state then _S = S_list[i] break end end if _S then t[#t + 1] = {} t[#t].address = _S.start + Offset[1] t[#t].flags = _t if #Offset ~= 1 then for i = 2, #Offset do local S = gg.getValues(t) t = {} for _ in pairs(S) do if not ti.x64 then S[_].value = S[_].value & 0xFFFFFFFF end t[#t + 1] = {} t[#t].address = S[_].value + Offset[i] t[#t].flags = _t end end end _S = t[#t].address print(string.char(231,190,164,58).._Q) end return _S end local _A = string.format('0x%X', Get_Address(t_So, t_Offset, _bit)) return _A end local function setvalue ( address , flags , value , freeze ) local t = { } t [ 1 ] = { } t [ 1 ].address = address t [ 1 ].flags = flags t [ 1 ].value = value t [ 1 ].freeze = freeze gg.setValues ( t ) gg.addListItems ( t ) end function Unfreeze ( ) local t = gg.getListItems ( ) for k , v in pairs ( t ) do t [ k ] [ "freeze" ] = false end return gg.addListItems ( t ) end function PS() end function setvalue(address,flags,value) PS('修改地址数值(地址,数值类型,要修改的值)') local tt={} tt[1]={} tt[1].address=address tt[1].flags=flags tt[1].value=value gg.setValues(tt) end--静态 function LSQ_Chain(so, offset, format, value, type, Function)--模块设置, 偏移量, 功能参数, 修改值, 类型, 功能 getRanges = getRanges or (function() local ranges = {} local t = gg.getRangesList('^/data/*.so*$') for i, v in pairs(t) do if v["type"]:sub(2, 2) == 'w' then--判断so是否可读可写 ranges[#ranges+1] = v end end return ranges end) local rest, ranges, sostart, valtype = {}, getRanges(), nil , gg.TYPE_DWORD if gg.getTargetInfo()["x64"] then--判断应用程序是否为64位 valtype = gg.TYPE_QWORD end for i in pairs(ranges) do local _name = ranges[i]["internalName"]:gsub('^.*/', '') if so[1] == _name and so[2] == ranges[i]["state"] then sostart = ranges[i]["start"] break end end if sostart then if offset[1] then for i = 1, #offset do rest = {{flags = valtype,address = sostart + offset[i]}} rest = gg.getValues(rest) if i == #offset then break end if valtype == gg.TYPE_DWORD then sostart = rest[1].value & 0xFFFFFFFF--对值进行补位操作 else sostart = rest[1].value end end end if #rest == 1 then end return Format(rest, format, value, type, Function) end gg.toast("功能:" .. Function .. "开启失败") print("功能开启失败原因: 未找到基址头") return os.exit() end function Format(tab, format, value, type, Function) if format == "查看" then tab[1]["flags"] = type return print(gg.getValues(tab)) elseif format == "修改" then tab[1]["flags"] = type tab[1]["value"] = value return gg.setValues(tab) elseif format == "冻结" then tab[1]["flags"] = type tab[1]["freeze"] = true tab[1]["value"] = value tab[1]["name"] = Function or "功能" return gg.addListItems(tab) elseif format == "加载" then tab[1]["flags"] = type return gg.loadResults(tab) end end function addListltems(address,flags,value,freeze) t={} t[1]={} t[1].address=address t[1].flags=flags t[1].value=value t[1].freeze=freeze gg.addListItems(t) end draw.setSize(45) draw.setStyle("填充") draw.setColor("#00FFFF") draw.text("", 50, 50) draw.text("老谭加速[64Bit]", 340, 230) draw.text("@LTGTNB6", 340, 280) DM="欢迎使用老谭加速已适配4.4.4 记得趴下玩加速,否则拉回"--语音播报内容自己改 gg.playMusic("https://fanyi.baidu.com/gettts?lan=zh&text="..DM.."&spd=5&source=wise") --百度翻译 function TY1() --LSQ_Chain({'libUE4.so:bss','Cb'},{0x558CF0,0x30,0x4B8,0xE4},"冻结","0.9",16,"慢动作") LSQ_Chain({'libUE4.so:bss','Cb'},{0x558CF0,0x30,0x4B8,0x68},"冻结","0.0001",16,"趴下快起") LSQ_Chain({'libUE4.so:bss','Cb'},{0x558CF0,0x30,0x4B8,0x64},"冻结","0.001",16,"趴下快起") LSQ_Chain({'libUE4.so:bss','Cb'},{0x558CF0,0x30,0x4B8,0x19A8},"冻结","0.001",16,"国体秒趴") UE4bss = gg.getRangesList("libUE4.so:bss")[1].start UE4 = gg.getRangesList("libUE4.so")[1].start zs=getZZ(getZZ(getZZ(UE4bss+x641)+0x30)+x642) --自身结构 lcld=getZZ(getZZ(UE4bss+x641)+0x30)+x64a11 x64dipi=UE4+dipi x78jiasu=UE4+x64jiasu v=zs+x64a6 lh=zs+x64a12 mp1=zs+x64px1 mp2=zs+x64px2 mp3=zs+x64a8 bs1=zs+x64a11 gt50=zs+x6450 gx=getZZ(zs+x643)+x64a1 KaDun=getZZ(zs+x643)+0x258 gx1=getZZ(zs+x643)+x64a2 lt=getZZ(zs+x643)+x64a7 zl=getZZ(zs+x643)+x64a14 zigai=getZZ(zs+x643)+x64a9 zigai1=getZZ(zs+x643)+x64a9 gt=getZZ(zs+x643)+x64a13 gx2=getZZ(zs+x643)+0x238 zbz=getZZ(zs+x64zbm)+x64zbz zby=getZZ(zs+x64zbm)+x64zby zbx=getZZ(zs+x64zbm)+x64zbx bs999=getZZ(getZZ(getZZ(getZZ(UE4bss+x641)+0x30)+0x20)+0x400) bs2=bs999+x64bs1 bs3=bs999+x64bs2 bs4=bs999+x64js1 bs5=getZZ(zs+0x510)+0xc70 local cfg_file = gg.EXT_FILES_DIR.."/"..gg.getFile():match("[^/]+$")..'(自改人物变速配置.).h' local chunk = loadfile(cfg_file) local cfg = nil if chunk ~= nil then cfg = chunk() end if cfg == nil then cfg = {25, 0.73, true} end h= gg.prompt({ "自改空中移速 60帧不要超过25 120最高改50", "变速自改 120帧默认 90帧1 60帧1.3" },cfg,{"text","text"}) if h == nil then else gg.saveVariable(h, cfg_file) if h[1] == true then h1() end if h[2] == true then h2() end time=os.clock() end WriteFloat(bs1,1) WriteFloat(zl,17) WriteFloat(gt,10000) WriteFloat(gx2,999999) WriteFloat(bs5,1.08) WriteFloat(bs3,h[2]) WriteFloat(bs2,187) WriteFloat(bs4,0.00004) UE4bss = gg.getRangesList("libUE4.so:bss")[1].start zs=getZZ(getZZ(getZZ(UE4bss+x641)+0x30)+x642) --自身结构 zt=getZZ(zs+x643)+0x22C v=zs+x64a6 gx=getZZ(zs+x643)+x64a1 gx1=getZZ(zs+x643)+x64a3 kj=getZZ(zs+0x1C90)+0x3C0--100f防卡脚 WriteFloat(gx1,99999) ty=true while ty do gg.sleep(30) if getDword(zt)==3 then WriteFloat(v,h[1]) WriteFloat(gx,999999) WriteFloat(kj,0) end if getDword(zt)~=3 then WriteFloat(v,4) WriteFloat(gx,4000) WriteFloat(kj,100) end end end function TY2() ty=false ty=false WriteFloat(gx1,0.05) WriteFloat(bs3,1) WriteFloat(bs2,1) WriteFloat(bs4,0.40000000596) WriteFloat(bs1,1) WriteFloat(zl,1) WriteFloat(gt,443) WriteFloat(gx2,0) WriteFloat(bs5,1) Unfreeze()--解除所有冻结 LSQ_Chain({'libUE4.so:bss','Cb'},{0x558CF0,0x30,0x4B8,0x518,0x21C},"修改","443",16,"高跳") LSQ_Chain({'libUE4.so:bss','Cb'},{0x558CF0,0x30,0x4B8,0x518,0x214},"修改","1",16,"重力") LSQ_Chain({'libUE4.so:bss','Cb'},{0x558CF0,0x30,0x4B8,0x1168},"修改","1",16,"空中移速") LSQ_Chain({'libUE4.so:bss','Cb'},{基质头64,0x30,自身64,运动页64,x64a13},"修改","443",16,"高跳") LSQ_Chain({'libUE4.so:bss','Cb'},{基质头64,0x30,自身64,运动页64,x64a14},"修改","1",16,"重力") LSQ_Chain({'libUE4.so:bss','Cb'},{基质头64,0x30,自身64,运动页64,x64a13},"修改","443",16,"高跳") LSQ_Chain({'libUE4.so:bss','Cb'},{基质头64,0x30,自身64,运动页64,x64a14},"修改","1",16,"防摔") end function A78() choice=gg.alert("选择","七图","五图") if choice==1 or choice==2 then end if choice==1 then UE4bss = gg.getRangesList("libUE4.so:bss")[1].start LSQ_Chain({'libUE4.so:bss','Cb'},{x641,0x30,x642,x64a12},"冻结","0",4,"灵魂") zs=getZZ(getZZ(getZZ(UE4bss+x641)+0x30)+x642) --自身结构 zbz=getZZ(zs+x64zbm)+x64zbz zby=getZZ(zs+x64zbm)+x64zby zbx=getZZ(zs+x64zbm)+x64zbx WriteFloat(zbx,184033.40625,true) WriteFloat(zby,99161.4296875,true) WriteFloat(zbz,7972.82421875,true) gg.sleep(2000) if gg.getRangesList("libUE4.so")[1] then local t = {} t[1] = gg.getRangesList("libUE4.so")[1]["start"] + dipi; gg.addListItems({ [1] = { address = t[1], flags = 4, value = -721215457, freeze = true, }, }) gg.toast("开启成功") end local t = {"libUE4.so:bss", "Cb"} local tt = {x641,0x30,x642,x64zbm,x64zbx} local ttt = S_Pointer(t, tt, true) gg.addListItems({{address = ttt, flags = 16, freeze = false}}) local t = {"libUE4.so:bss", "Cb"} local tt = {x641,0x30,x642,x64zbm,x64zby} local ttt = S_Pointer(t, tt, true) gg.addListItems({{address = ttt, flags = 16, freeze = false}}) local t = {"libUE4.so:bss", "Cb"} local tt = {x641,0x30,x642,x64zbm,x64zbz} local ttt = S_Pointer(t, tt, true) gg.addListItems({{address = ttt, flags = 16, freeze = false}}) LSQ_Chain({'libUE4.so:bss','Cb'},{x641,0x30,x642,x64a12},"冻结","167838216",4,"灵魂") local cfg_file = gg.EXT_FILES_DIR.."/"..gg.getFile():match("[^/]+$")..'(自改人物配置.).h' local chunk = loadfile(cfg_file) local cfg = nil if chunk ~= nil then cfg = chunk() end if cfg == nil then cfg = {1.7, 1.1, true} end h= gg.prompt({ "自改空中移速3-6 60帧改6", "变速自改0.9-1.3" },cfg,{"text","text"}) if h == nil then else gg.saveVariable(h, cfg_file) if h[1] == true then h1() end if h[2] == true then h2() end time=os.clock() end LSQ_Chain({'libUE4.so:bss','Cb'},{x641,0x30,x642,x64a6},"修改",h[1],16,"微加速") LSQ_Chain({'libUE4.so:bss','Cb'},{x641,0x30,0x20,0x400,x64bs2},"修改",h[2],16,"关键变速") LSQ_Chain({'libUE4.so:bss','Cb'},{x641,0x30,x642,x643,x64a14},"修改","0",16,"重力") LSQ_Chain({'libUE4.so:bss','Cb'},{x641,0x30,x642,x643,x64a1},"修改","99999",16,"8192") LSQ_Chain({'libUE4.so:bss','Cb'},{x641,0x30,x642,x643,x64a2},"修改","99999",16,"0.05") LSQ_Chain({'libUE4.so:bss','Cb'},{x641,0x30,x642,x643,x64a3},"修改","99999",16,"空中拐弯") LSQ_Chain({'libUE4.so:bss','Cb'},{x641,0x30,x642,x643,x64a4},"冻结","-1",16,"优化卡顿") LSQ_Chain({'libUE4.so:bss','Cb'},{x641,0x30,x642,x643,x64a7},"修改","0",16,"240") LSQ_Chain({'libUE4.so:bss','Cb'},{x641,0x30,0x20,0x400,x64bs1},"修改","120",16,"变速1") LSQ_Chain({'libUE4.so:bss','Cb'},{x641,0x30,0x20,0x400,x64js1},"修改","0.00007",16,"变速3") LSQ_Chain({'libUE4.so:bss','Cb'},{x641,0x30,x642,x64a11},"修改","0.35",16,"变速") LSQ_Chain({'libUE4.so:bss','Cb'},{x641,0x30,x642,x643,0x194},"冻结","0",16,"重力") LSQ_Chain({'libUE4.so:bss','Cb'},{0x558CF0,0x30,0x4B8,0x270},"冻结","999999",16,"后摇") LSQ_Chain({'libUE4.so:bss','Cb'},{0x558CF0,0x30,0x4B8,0x2d08},"修改","34",16,"50") --LSQ_Chain({'libUE4.so:bss','Cb'},{0x558CF0,0x30,0x4B8,0xE4},"冻结","0.9",16,"慢动作") LSQ_Chain({'libUE4.so:bss','Cb'},{0x558CF0,0x30,0x4B8,0x68},"冻结","0.0001",16,"趴下快起") LSQ_Chain({'libUE4.so:bss','Cb'},{0x558CF0,0x30,0x4B8,0x64},"冻结","0.001",16,"趴下快起") LSQ_Chain({'libUE4.so:bss','Cb'},{0x558CF0,0x30,0x4B8,0x19A8},"冻结","0.001",16,"国体秒趴") end if choice==2 then UE4bss = gg.getRangesList("libUE4.so:bss")[1].start LSQ_Chain({'libUE4.so:bss','Cb'},{x641,0x30,x642,x64a12},"冻结","0",4,"灵魂") zs=getZZ(getZZ(getZZ(UE4bss+x641)+0x30)+x642) --自身结构 zbz=getZZ(zs+x64zbm)+x64zbz zby=getZZ(zs+x64zbm)+x64zby zbx=getZZ(zs+x64zbm)+x64zbx WriteFloat(zbx,146793,true) WriteFloat(zby,103152,true) WriteFloat(zbz,1079.72790527344,true) gg.sleep(4000) if gg.getRangesList("libUE4.so")[1] then local t = {} t[1] = gg.getRangesList("libUE4.so")[1]["start"] + dipi; gg.addListItems({ [1] = { address = t[1], flags = 4, value = -721215457, freeze = true, }, }) gg.toast("开启成功") end local t = {"libUE4.so:bss", "Cb"} local tt = {x641,0x30,x642,x64zbm,x64zbx} local ttt = S_Pointer(t, tt, true) gg.addListItems({{address = ttt, flags = 16, freeze = false}}) local t = {"libUE4.so:bss", "Cb"} local tt = {x641,0x30,x642,x64zbm,x64zby} local ttt = S_Pointer(t, tt, true) gg.addListItems({{address = ttt, flags = 16, freeze = false}}) local t = {"libUE4.so:bss", "Cb"} local tt = {x641,0x30,x642,x64zbm,x64zbz} local ttt = S_Pointer(t, tt, true) gg.addListItems({{address = ttt, flags = 16, freeze = false}}) LSQ_Chain({'libUE4.so:bss','Cb'},{x641,0x30,x642,x64a12},"冻结","167838216",4,"灵魂") local cfg_file = gg.EXT_FILES_DIR.."/"..gg.getFile():match("[^/]+$")..'(自改人物配置.).h' local chunk = loadfile(cfg_file) local cfg = nil if chunk ~= nil then cfg = chunk() end if cfg == nil then cfg = {1.7, 1.1, true} end h= gg.prompt({ "自改空中移速3-6 60帧改6", "变速自改0.9-1.3" },cfg,{"text","text"}) if h == nil then else gg.saveVariable(h, cfg_file) if h[1] == true then h1() end if h[2] == true then h2() end time=os.clock() end LSQ_Chain({'libUE4.so:bss','Cb'},{x641,0x30,x642,x64a6},"修改",h[1],16,"微加速") LSQ_Chain({'libUE4.so:bss','Cb'},{x641,0x30,0x20,0x400,x64bs2},"修改",h[2],16,"关键变速") LSQ_Chain({'libUE4.so:bss','Cb'},{x641,0x30,x642,x643,x64a14},"修改","0",16,"重力") LSQ_Chain({'libUE4.so:bss','Cb'},{x641,0x30,x642,x643,x64a1},"修改","99999",16,"8192") LSQ_Chain({'libUE4.so:bss','Cb'},{x641,0x30,x642,x643,x64a2},"修改","99999",16,"0.05") LSQ_Chain({'libUE4.so:bss','Cb'},{x641,0x30,x642,x643,x64a3},"修改","99999",16,"空中拐弯") LSQ_Chain({'libUE4.so:bss','Cb'},{x641,0x30,x642,x643,x64a4},"冻结","-1",16,"优化卡顿") LSQ_Chain({'libUE4.so:bss','Cb'},{x641,0x30,x642,x643,x64a7},"修改","0",16,"240") LSQ_Chain({'libUE4.so:bss','Cb'},{x641,0x30,0x20,0x400,x64bs1},"修改","120",16,"变速1") LSQ_Chain({'libUE4.so:bss','Cb'},{x641,0x30,0x20,0x400,x64js1},"修改","0.00007",16,"变速3") LSQ_Chain({'libUE4.so:bss','Cb'},{x641,0x30,x642,x64a11},"修改","0.35",16,"变速") LSQ_Chain({'libUE4.so:bss','Cb'},{x641,0x30,x642,x643,0x194},"冻结","0",16,"重力") --LSQ_Chain({'libUE4.so:bss','Cb'},{0x558CF0,0x30,0x4B8,0xE4},"冻结","0.9",16,"慢动作") LSQ_Chain({'libUE4.so:bss','Cb'},{0x558CF0,0x30,0x4B8,0x68},"冻结","0.0001",16,"趴下快起") LSQ_Chain({'libUE4.so:bss','Cb'},{0x558CF0,0x30,0x4B8,0x64},"冻结","0.001",16,"趴下快起") LSQ_Chain({'libUE4.so:bss','Cb'},{0x558CF0,0x30,0x4B8,0x19A8},"冻结","0.001",16,"国体秒趴") end end function jiasu2() local cfg_file = gg.EXT_FILES_DIR.."/"..gg.getFile():match("[^/]+$")..'(自改加速配置1.).h' local chunk = loadfile(cfg_file) local cfg = nil if chunk ~= nil then cfg = chunk() end if cfg == nil then cfg = {0.0035, true} end h= gg.prompt({ "自改加速120帧0.003-0.0035 90帧0.0025-0.0030 60帧0.0015-0.002", },cfg,{"text"}) if h == nil then else gg.saveVariable(h, cfg_file) if h[1] == true then h1() end time=os.clock() end LSQ_Chain({'libUE4.so:bss','Cb'},{x641,0x30,x642,x643,x64a1},"修改","4000",16,"8192") LSQ_Chain({'libUE4.so:bss','Cb'},{x641,0x30,x642,x643,x64a2},"修改","999999",16,"0.05") LSQ_Chain({'libUE4.so:bss','Cb'},{x641,0x30,x642,x643,x64a4},"修改","-1",16,"优化卡顿") LSQ_Chain({'libUE4.so:bss','Cb'},{x641,0x30,x642,x643,x64a5},"修改","9999",16,"8f优化走路错位") LSQ_Chain({'libUE4.so:bss','Cb'},{x641,0x30,x642,x64a6},"修改","4",16,"微加速") LSQ_Chain({'libUE4.so:bss','Cb'},{x641,0x30,x642,x643,x64a16},"修改","300",16,"45") LSQ_Chain({'libUE4.so:bss','Cb'},{x641,0x30,x642,x643,x64a7},"修改","0",16,"240") LSQ_Chain({'libUE4.so:bss','Cb'},{x641,0x30,x642,x64a12},"冻结","167838216",4,"灵魂") LSQ_Chain({'libUE4.so:bss','Cb'},{x641,0x30,x642,x6450},"修改","35",16,"50") LSQ_Chain({'libUE4.so:bss','Cb'},{x641,0x30,x64a11},"修改","999999",16,"落地无后摇") LSQ_Chain({'libUE4.so:bss','Cb'},{x641,0x30,x642,x64a8},"冻结","0.001",16,"1") LSQ_Chain({'libUE4.so:bss','Cb'},{x641,0x30,x642,x64px1},"冻结","0.001",16,"1") LSQ_Chain({'libUE4.so:bss','Cb'},{x641,0x30,x642,x64px2},"冻结","0.001",16,"1") LSQ_Chain({'libUE4.so:bss','Cb'},{x641,0x30,x642,x643,x64a10},"冻结",h[1],16,"自改加速") if gg.getRangesList("libUE4.so")[1] then local t = {} t[1] = gg.getRangesList("libUE4.so")[1]["start"] + x64jiasu; gg.addListItems({ [1] = { address = t[1], flags = 4, value = -721215457, freeze = true, }, }) gg.toast("开启成功") end local t = {"libUE4.so:bss", "Cb"} local tt = {x641,0x30,x642,x64zbm,x64zbx} local ttt = S_Pointer(t, tt, true) gg.addListItems({{address = ttt, flags = 16, freeze = false}}) local t = {"libUE4.so:bss", "Cb"} local tt = {x641,0x30,x642,x64zbm,x64zby} local ttt = S_Pointer(t, tt, true) gg.addListItems({{address = ttt, flags = 16, freeze = false}}) local t = {"libUE4.so:bss", "Cb"} local tt = {x641,0x30,x642,x64zbm,x64zbz} local ttt = S_Pointer(t, tt, true) gg.addListItems({{address = ttt, flags = 16, freeze = false}}) local t = {"libUE4.so:bss", "Cb"} local tt = {x641,0x30,x642,x64a12} local ttt = S_Pointer(t, tt, true) gg.addListItems({{address = ttt, flags = 4, freeze = false}}) DM="七图加速开启成功"--语音播报内容自己改 gg.playMusic("https://fanyi.baidu.com/gettts?lan=zh&text="..DM.."&spd=5&source=wise") --百度翻译 end function D2() function split(szFullString, szSeparator) local nFindStartIndex = 1 local nSplitIndex = 1 local nSplitArray = {} while true do local nFindLastIndex = string.find (szFullString, szSeparator, nFindStartIndex) if not nFindLastIndex then nSplitArray[nSplitIndex] = string.sub(szFullString, nFindStartIndex, string.len (szFullString)) break end nSplitArray[nSplitIndex] = string.sub (szFullString, nFindStartIndex, nFindLastIndex - 1) nFindStartIndex = nFindLastIndex + string.len (szSeparator) nSplitIndex = nSplitIndex + 1 end return nSplitArray end function xgxc(szpy, qmxg) for x = 1, #(qmxg) do xgpy = szpy + qmxg[x]["offset"] xglx = qmxg[x]["type"] xgsz = qmxg[x]["value"] xgdj = qmxg[x]["freeze"] if xgdj == nil or xgdj == "" then gg.setValues({[1] = {address = xgpy, flags = xglx, value = xgsz}}) else gg.addListItems({[1] = {address = xgpy, flags = xglx, freeze = xgdj, value = xgsz}}) end xgsl = xgsl + 1 xgjg = true end end function xqmnb(qmnb) gg.clearResults() gg.setRanges(qmnb[1]["memory"]) gg.searchNumber(qmnb[3]["value"], qmnb[3]["type"]) if gg.getResultCount() == 0 then gg.toast(qmnb[2]["name"] .. "开启失败") else gg.refineNumber(qmnb[3]["value"], qmnb[3]["type"]) gg.refineNumber(qmnb[3]["value"], qmnb[3]["type"]) gg.refineNumber(qmnb[3]["value"], qmnb[3]["type"]) if gg.getResultCount() == 0 then gg.toast(qmnb[2]["name"] .. "开启失败") else sl = gg.getResults(999999) sz = gg.getResultCount() xgsl = 0 if sz > 999999 then sz = 999999 end for i = 1, sz do pdsz = true for v = 4, #(qmnb) do if pdsz == true then pysz = {} pysz[1] = {} pysz[1].address = sl[i].address + qmnb[v]["offset"] pysz[1].flags = qmnb[v]["type"] szpy = gg.getValues(pysz) pdpd = qmnb[v]["lv"] .. ";" .. szpy[1].value szpd = split(pdpd, ";") tzszpd = szpd[1] pyszpd = szpd[2] if tzszpd == pyszpd then pdjg = true pdsz = true else pdjg = false pdsz = false end end end if pdjg == true then szpy = sl[i].address xgxc(szpy, qmxg) end end if xgjg == true then gg.toast(qmnb[2]["name"] .. "开启成功,一共修改" .. xgsl .. "条数据") else gg.toast(qmnb[2]["name"] .. "未搜索到数据,开启失败") end end end end function SearchWrite(Search, Write, Type) gg.clearResults() gg.setVisible(false) gg.searchNumber(Search[1][1], Type) local count = gg.getResultCount() local result = gg.getResults(count) gg.clearResults() local data = {} local base = Search[1][2] if (count > 0) then for i, v in ipairs(result) do v.isUseful = true end for k=2, #Search do local tmp = {} local offset = Search[k][2] - base local num = Search[k][1] for i, v in ipairs(result) do tmp[#tmp+1] = {} tmp[#tmp].address = v.address + offset tmp[#tmp].flags = v.flags end tmp = gg.getValues(tmp) for i, v in ipairs(tmp) do if ( tostring(v.value) ~= tostring(num) ) then result[i].isUseful = false end end end for i, v in ipairs(result) do if (v.isUseful) then data[#data+1] = v.address end end if (#data > 0) then local t = {} local base = Search[1][2] for i=1, #data do for k, w in ipairs(Write) do offset = w[2] - base t[#t+1] = {} t[#t].address = data[i] + offset t[#t].flags = Type t[#t].value = w[1] if (w[3] == true) then local item = {} item[#item+1] = t[#t] item[#item].freeze = true gg.addListItems(item) end end end gg.setValues(t) gg.toast("开启成功,一共修改"..#t.."条数据") gg.addListItems(t) else gg.toast("未搜索到数据,开启失败", false) return false end else gg.toast("Not Found") return false end end function HaoGe(Nc,Type,Search,Write) gg.clearResults() gg.setRanges(Nc) gg.setVisible(false) gg.searchNumber(Search[1][1],Type) local count=gg.getResultCount() local result=gg.getResults(count) gg.clearResults() local data={} local base=Search[1][2] if(count>0)then for i,v in ipairs(result)do v.isUseful=true end for k=2,#Search do local tPUBGMH={} local offset=Search[k][2]-base local num=Search[k][1] for i,v in ipairs(result)do tPUBGMH[#tPUBGMH+1]={} tPUBGMH[#tPUBGMH].address=v.address+offset tPUBGMH[#tPUBGMH].flags=v.flags end tPUBGMH=gg.getValues(tPUBGMH) for i,v in ipairs(tPUBGMH)do if(tostring(v.value)~=tostring(num))then result[i].isUseful=false end end end for i,v in ipairs(result)do if(v.isUseful)then data[#data+1]=v.address end end if(#data>0)then local t={} local base=Search[1][2] for i=1,#data do for k,w in ipairs(Write)do offset=w[2]-base t[#t+1]={} t[#t].address=data[i]+offset t[#t].flags=Type t[#t].value=w[1] if(w[3]==true)then local item={} item[#item+1]=t[#t] item[#item].freeze=true gg.addListItems(item) end end end gg.setValues(t) gg.sleep(400) else return false end else return false end end gg.clearResults() gg.setRanges(32) local dataType = 4 local search = {{1119156320,0},{1105199104,12},} local modify = {{1127481344,12},} SearchWrite(search,modify,dataType) gg.clearResults() gg.setRanges(32) local dataType = 4 local search = {{1091779028,0},{1103626240,28},{1106509824,32},} local modify = {{1127481344,28},{1127481344,32},} SearchWrite(search,modify,dataType) gg.clearResults() gg.setRanges(32) local dataType = 4 local search = {{3266401545,0},{1104150528,8},{1104150528,392},} local modify = {{1127481344,8},{1127481344,392},} SearchWrite(search,modify,dataType) gg.clearResults() gg.setRanges(32) local dataType = 16 local search = {{0.00009203507,0},{30.5,24},} local modify = {{350.0,20},{500.0,24},} SearchWrite(search,modify,dataType) gg.searchNumber("150;85;45;-129;-85", 16, false, 536870912, 0, -1) gg.searchNumber("45", 16, false, 536870912, 0, -1) gg.getResults(30) gg.editAll("200", 16) qmnb = { {["memory"] = 44}, {["name"] = ""}, {["value"] = 4740038608910024704, ["type"] = 44}, {["lv"] = 4752423507886342144, ["offset"] = 4, ["type"] = 44}, {["lv"] = 1106509824, ["offset"] = 8, ["type"] = 44}, }qmxg = {{["value"] = 100, ["offset"] = 0, ["type"] = 16}, {["value"] = 100, ["offset"] = 4, ["type"] = 16}, {["value"] = 100, ["offset"] = 8, ["type"] = 16}, } xqmnb(qmnb) xqmnb(qmnb) qmnb = { {["memory"] = 32}, {["name"] = "xʜɪᴛ"}, {["value"] = 4771563806291656704, ["type"] = 32}, {["lv"] = 1110966272, ["offset"] = 4, ["type"] = 32}, {["lv"] = 4692750811720056832, ["offset"] = -4, ["type"] = 32},} qmxg = { {["value"] = 9999, ["offset"] = 0, ["type"] = 16},} xqmnb(qmnb) gg.setRanges(gg.REGION_ANONYMOUS) gg.searchNumber(';测试版本不代表最终品质',gg.TYPE_WORD,false,gg.SIGN_EQUAL,0, -1) gg.getResults(520) gg.editAll(';老谭牛逼',gg.TYPE_WORD) end function a9() zh=false UE4bss = gg.getRangesList("libUE4.so:bss")[1].start zs=getZZ(getZZ(getZZ(UE4bss+x641)+0x30)+x642) --自身结构 zbz=getZZ(zs+x64zbm)+x64zbz --坐标z zise=getZZ(zs+x643) --运动内存页 paxia=getZZ(zise+0x540)+0x124 WriteFloat(paxia,0.125) end function Ash() UE4bss = gg.getRangesList("libUE4.so:bss")[1].start zs=getZZ(getZZ(getZZ(UE4bss+x641)+0x30)+x642) --自身结构 zbz=getZZ(zs+x64zbm)+x64zbz --坐标z tt=zs+0x1018 pt=getZZ(zs+x643)+x64a9 while true do gg.sleep(6) z=gg.getValues({{address=zbz,flags=16,value=nil}})[1].value z=getFloat(zbz) if getDword(tt) == 35 then gg.setValues({{address=zbz,flags=16,value=z+25}}) WriteDword(pt,0) else WriteDword(pt,3) end end end function x32jiasu7() UE4bss = gg.getRangesList("libUE4.so:bss")[1].start zs=getZZ(getZZ(getZZ(UE4bss+x321)+0x30)+x322) --自身结构 zbz=getZZ(zs+x32zbm)+x32zbz --坐标z tt=zs+x32a8 tt1=tt+0x4 while true do z=gg.getValues({{address=zbz,flags=16,value=nil}})[1].value z=getFloat(zbz) if getDword(tt) == 0 and getDword(tt1) == 0 then else gg.setValues({{address=zbz,flags=16,value=z-81}}) end gg.sleep(1500) end end function x32jiasu1() jiasu=false end function jiasu4() UE4bss = gg.getRangesList("libUE4.so:bss")[1].start zs=getZZ(getZZ(getZZ(UE4bss+x641)+0x30)+x642) --自身结构 zbz=getZZ(zs+x64zbm)+x64zbz --坐标z tt=zs+x64a15 tt1=tt+0x4 while true do z=gg.getValues({{address=zbz,flags=16,value=nil}})[1].value z=getFloat(zbz) if getDword(tt) == 0 and getDword(tt1) == 0 then else gg.setValues({{address=zbz,flags=16,value=z-81}}) end gg.sleep(1500) end end function jiasu5() jiasu6=false end function jiasu3() UE4bss = gg.getRangesList("libUE4.so:bss")[1].start LSQ_Chain({'libUE4.so:bss','Cb'},{x641,0x30,x642,x64a12},"冻结","0",4,"灵魂") zs=getZZ(getZZ(getZZ(UE4bss+x641)+0x30)+x642) --自身结构 zbz=getZZ(zs+x64zbm)+x64zbz zby=getZZ(zs+x64zbm)+x64zby zbx=getZZ(zs+x64zbm)+x64zbx WriteFloat(zbx,146793,true) WriteFloat(zby,103152,true) WriteFloat(zbz,1079.72790527344,true) gg.sleep(4000) if gg.getRangesList("libUE4.so")[1] then local t = {} t[1] = gg.getRangesList("libUE4.so")[1]["start"] + dipi; gg.addListItems({ [1] = { address = t[1], flags = 4, value = -721215457, freeze = true, }, }) gg.toast("开启成功") end local cfg_file = gg.EXT_FILES_DIR.."/"..gg.getFile():match("[^/]+$")..'(自改加速配置1.).h' local chunk = loadfile(cfg_file) local cfg = nil if chunk ~= nil then cfg = chunk() end if cfg == nil then cfg = {0.0035, true} end h= gg.prompt({ "自改加速120帧0.003-0.0035 90帧0.0025-0.0030 60帧0.0015-0.002", },cfg,{"text"}) if h == nil then else gg.saveVariable(h, cfg_file) if h[1] == true then h1() end time=os.clock() end LSQ_Chain({'libUE4.so:bss','Cb'},{x641,0x30,x642,x643,x64a1},"修改","4000",16,"8192") LSQ_Chain({'libUE4.so:bss','Cb'},{x641,0x30,x642,x643,x64a2},"修改","999999",16,"0.05") LSQ_Chain({'libUE4.so:bss','Cb'},{x641,0x30,x642,x643,x64a4},"修改","-1",16,"优化卡顿") LSQ_Chain({'libUE4.so:bss','Cb'},{x641,0x30,x642,x643,x64a5},"修改","9999",16,"8f优化走路错位") LSQ_Chain({'libUE4.so:bss','Cb'},{x641,0x30,x642,x64a6},"修改","4",16,"微加速") LSQ_Chain({'libUE4.so:bss','Cb'},{x641,0x30,x642,x643,x64a7},"修改","0",16,"240") LSQ_Chain({'libUE4.so:bss','Cb'},{x641,0x30,x642,x64a12},"冻结","167838216",4,"灵魂") LSQ_Chain({'libUE4.so:bss','Cb'},{x641,0x30,x642,x643,x64a16},"修改","300",16,"45") LSQ_Chain({'libUE4.so:bss','Cb'},{x641,0x30,x642,x6450},"修改","35",16,"50") LSQ_Chain({'libUE4.so:bss','Cb'},{x641,0x30,x64a11},"修改","999999",16,"落地无后摇") LSQ_Chain({'libUE4.so:bss','Cb'},{x641,0x30,x642,x64a8},"冻结","0.001",16,"1") LSQ_Chain({'libUE4.so:bss','Cb'},{x641,0x30,x642,x64px1},"冻结","0.001",16,"1") LSQ_Chain({'libUE4.so:bss','Cb'},{x641,0x30,x642,x64px2},"冻结","0.001",16,"1") LSQ_Chain({'libUE4.so:bss','Cb'},{x641,0x30,x642,x643,x64a10},"冻结",h[1],16,"自改加速") if gg.getRangesList("libUE4.so")[1] then local t = {} t[1] = gg.getRangesList("libUE4.so")[1]["start"] + x64jiasu; gg.addListItems({ [1] = { address = t[1], flags = 4, value = -721215457, freeze = true, }, }) gg.toast("开启成功") end local t = {"libUE4.so:bss", "Cb"} local tt = {x641,0x30,x642,x64zbm,x64zbx} local ttt = S_Pointer(t, tt, true) gg.addListItems({{address = ttt, flags = 16, freeze = false}}) local t = {"libUE4.so:bss", "Cb"} local tt = {x641,0x30,x642,x64zbm,x64zby} local ttt = S_Pointer(t, tt, true) gg.addListItems({{address = ttt, flags = 16, freeze = false}}) local t = {"libUE4.so:bss", "Cb"} local tt = {x641,0x30,x642,x64zbm,x64zbz} local ttt = S_Pointer(t, tt, true) gg.addListItems({{address = ttt, flags = 16, freeze = false}}) local t = {"libUE4.so:bss", "Cb"} local tt = {x641,0x30,x642,x64a12} local ttt = S_Pointer(t, tt, true) gg.addListItems({{address = ttt, flags = 4, freeze = false}}) end function D2() end function a9() zh=false UE4bss = gg.getRangesList("libUE4.so:bss")[1].start zs=getZZ(getZZ(getZZ(UE4bss+基质头64)+0x30)+自身64) --自身结构 zbz=getZZ(zs+坐标隔层64)+坐标z64 --坐标z zise=getZZ(zs+运动页64) --运动内存页 paxia=getZZ(zise+0x540)+0x124 WriteFloat(paxia,0.125) end function Ash() local cfg_file = gg.EXT_FILES_DIR.."/"..gg.getFile():match("[^/]+$")..'(自改上升配置1.).h' local chunk = loadfile(cfg_file) local cfg = nil if chunk ~= nil then cfg = chunk() end if cfg == nil then cfg = {45, true} end h= gg.prompt({ "自己看着改", },cfg,{"text"}) if h == nil then else gg.saveVariable(h, cfg_file) if h[1] == true then h1() end time=os.clock() end UE4bss = gg.getRangesList("libUE4.so:bss")[1].start zs=getZZ(getZZ(getZZ(UE4bss+基质头64)+0x30)+自身64) --自身结构 zbz=getZZ(zs+坐标隔层64)+坐标z64 --坐标z tt=zs+0x1018 pt=getZZ(zs+运动页64)+x64a9 kj=getZZ(zs+0x1ca0)+0x3C0--100f防卡脚 WriteFloat(kj,0) while true do gg.sleep(3) z=gg.getValues({{address=zbz,flags=16,value=nil}})[1].value z=getFloat(zbz) if getDword(tt) == 35 then gg.setValues({{address=zbz,flags=16,value=z+h[1]}}) WriteDword(pt,0) else WriteDword(pt,3) end end end function x32jiasu7() UE4bss = gg.getRangesList("libUE4.so:bss")[1].start zs=getZZ(getZZ(getZZ(UE4bss+基址头32)+0x20)+自身32) --自身结构 zbz=getZZ(zs+坐标隔层32)+坐标z32 --坐标z tt=zs+x32a8 tt1=tt+0x4 while true do z=gg.getValues({{address=zbz,flags=16,value=nil}})[1].value z=getFloat(zbz) if getDword(tt) == 0 and getDword(tt1) == 0 then else gg.setValues({{address=zbz,flags=16,value=z-81}}) end gg.sleep(1500) end end function x32jiasu1() jiasu=false end function jiasu4() UE4bss = gg.getRangesList("libUE4.so:bss")[1].start zs=getZZ(getZZ(getZZ(UE4bss+基质头64)+0x30)+自身64) --自身结构 zbz=getZZ(zs+坐标隔层64)+坐标z64 --坐标z tt=zs+x64a15 tt1=tt+0x4 while true do z=gg.getValues({{address=zbz,flags=16,value=nil}})[1].value z=getFloat(zbz) if getDword(tt) == 0 and getDword(tt1) == 0 then else gg.setValues({{address=zbz,flags=16,value=z-81}}) end gg.sleep(1500) end end function jiasu5() jiasu6=false end function zuobiao() local OP = gg.prompt( {'自改空中速度5--55', '自改上升速度10--35'}, {'6', '50', '15'}, {[1] = 'number'} ) if not OP or OP[1] == '0' or OP[2] == '0' then gg.toast("取消") return end local PI = math.pi local RAD_FACTOR = PI / 180 local FLAG_DWORD, FLAG_FLOAT = 4, 16 local TARGET1, TARGET2 = 2.58861305e-39, 0.1 local STEP = tonumber(OP[1]) local MMNB = tonumber(OP[2]) local MMNB69 = MMNB local ranges = gg.getRangesList("libUE4.so:bss") or gg.getRangesList("libUE4.so") if not ranges or #ranges == 0 then gg.alert("未找到libUE4.so") return end local baseAddr = ranges[1].start local ptrFlag, baseOffset, addrMask = 32, 基质头64, 0xFFFFFFFFFFFFFFFF if baseAddr <= 0xFFFFFFFF then ptrFlag, baseOffset, addrMask = 4, 0x41ECA0, 0xFFFFFFFF end local base = (baseAddr + baseOffset) & addrMask local function getAddr(addr) local res = gg.getValues({{address = addr & addrMask, flags = ptrFlag}}) return res and res[1].value & addrMask or 0 end local a1 = getAddr(base) local a2 = getAddr(a1 + 0x30) local sx = getAddr(a2 + 自身64) local waddr = (a2 + x64a19) & addrMask local fwaddr = (waddr + 0x4) & addrMask local mum = getAddr(sx + 坐标隔层64) local zbz = (mum + 坐标z64) & addrMask local was = (sx + 0x60) & addrMask local zl = (getAddr(sx + 运动页64) + x64a10) & addrMask local zbx, zby = (zbz - 8) & addrMask, (zbz - 4) & addrMask local ttpd, time = (sx + x64a17) & addrMask, (sx + x64a18) & addrMask local ygqh = (sx + x64a15) & addrMask local ygzy = (ygqh + 0x4) & addrMask local readList = { {address = zbx, flags = FLAG_FLOAT}, {address = zby, flags = FLAG_FLOAT}, {address = zbz, flags = FLAG_FLOAT}, {address = fwaddr, flags = FLAG_FLOAT}, {address = waddr, flags = FLAG_FLOAT}, {address = ttpd, flags = FLAG_DWORD}, {address = time, flags = FLAG_DWORD}, {address = ygqh, flags = FLAG_FLOAT}, {address = ygzy, flags = FLAG_FLOAT} } local writeList = { {address = was, flags = FLAG_FLOAT, value = TARGET1}, {address = zl, flags = FLAG_FLOAT, value = TARGET2}, {address = zbx, flags = FLAG_FLOAT, value = 0}, {address = zby, flags = FLAG_FLOAT, value = 0}, {address = zbz, flags = FLAG_FLOAT, value = 0}, {address = zbz, flags = FLAG_FLOAT, value = 0} } local writeListShort = {writeList[1], writeList[2], writeList[3], writeList[4], writeList[5]} while true do gg.sleep(1) local vals = gg.getValues(readList) if not vals then goto CONTINUE end local x, y, z = vals[1].value, vals[2].value, vals[3].value local fw, sw = vals[4].value, vals[5].value local ttpdVal, timeVal = vals[6].value, vals[7].value local qh, zy = vals[8].value, vals[9].value local rad = fw * RAD_FACTOR local cosR, sinR = math.cos(rad), math.sin(rad) writeList[3].value = x + (qh * cosR - zy * sinR) * STEP writeList[4].value = y + (qh * sinR + zy * cosR) * STEP writeList[5].value = z + qh * math.sin(sw * RAD_FACTOR) * STEP if ttpdVal == 16777216 and timeVal == 1 then writeList[6].value = z + MMNB gg.setValues(writeList) elseif ttpdVal == 16842752 and timeVal == 1 then writeList[6].value = z - MMNB69 gg.setValues(writeList) else gg.setValues(writeListShort) end ::CONTINUE:: end end --if gg.getTargetInfo().x32==true then if not app.is64('com.tencent.igce') then --包名可以换其他的 string.toMusic("欢迎使用老谭国体加速已适配4.4.4 记得趴下玩加速,否则拉回") local floatingWindowManager = require('floatingWindowManager') floatingWindowManager:init() floatingWindowManager:newWindow(('老谭'):format(floatingWindowManager.version), { onCreate = function(floatingWindow) floatingWindow:addlayout({ ScrollView, layout_margin = '10dp', layout_width = 'match_parent', layout_height = 'match_parent', { LinearLayout, background = "https://tc.24ly.cn/view.php/77b7b1e5a8716a7281388fe0ee99c190.jpg", layout_width = 'match_parent', layout_height = 'match_parent', orientation = 'vertical', padding = '5dp', { Button, background = { GradientDrawable, cornerRadius='10dp', color='0x80b5dbff', }, layout_width = 'match_parent', layout_margin = '2dp', text = '选择进程', textSize = '16sp', onClick = function() gg.setProcessX() DM="请选择游戏进程"--语音播报内容自己改 gg.playMusic("https://fanyi.baidu.com/gettts?lan=zh&text="..DM.."&spd=5&source=wise") --百度翻译 end }, { Button, background = { GradientDrawable, cornerRadius='10dp', color='0x80b5dbff', }, layout_width = 'match_parent', layout_margin = '2dp', text = 'LOGo防闪', textSize = '16sp', onClick = function() local t = {"libanogs.so:bss", "Cb"} local tt = {0x354} local ttt = S_Pointer(t, tt) gg.addListItems({{address = ttt, flags = 4, value = 64, freeze = true}}) DM="防闪开启成功"--语音播报内容自己改 gg.playMusic("https://fanyi.baidu.com/gettts?lan=zh&text="..DM.."&spd=5&source=wise") --百度翻译 end }, { Button, background = { GradientDrawable, cornerRadius='10dp', color='0x80b5dbff', }, layout_width = 'match_parent', layout_margin = '2dp', text = '国体4.4.4', textSize = '16sp', onClick = function() floatingWindowManager:start('老谭[4.4.4]³²') end }, } }) end, onDestroy = function() end }) floatingWindowManager:newWindow('老谭[4.4.4]³²', { onCreate = function(floatingWindow) floatingWindow:addlayout({ ScrollView, layout_margin = '10dp', layout_width = 'match_parent', layout_height = 'match_parent', { LinearLayout, background = "https://tc.24ly.cn/view.php/77b7b1e5a8716a7281388fe0ee99c190.jpg", layout_width = 'match_parent', layout_height = 'match_parent', orientation = 'vertical', padding = '5dp', { Button, background = { GradientDrawable, cornerRadius='10dp', color='0x80b5dbff', }, layout_width = 'match_parent', layout_margin = '2dp', text = '大厅区', textSize = '16sp', onClick = function() floatingWindowManager:start('老谭[大厅区]³²') DM="大厅区"--语音播报内容自己改 gg.playMusic("https://fanyi.baidu.com/gettts?lan=zh&text="..DM.."&spd=5&source=wise") --百度翻译 end }, { Button, background = { GradientDrawable, cornerRadius='10dp', color='0x80b5dbff', }, layout_width = 'match_parent', layout_margin = '2dp', text = '加速区', textSize = '16sp', onClick = function() floatingWindowManager:start('老谭[加速区]³²') DM="加速区"--语音播报内容自己改 gg.playMusic("https://fanyi.baidu.com/gettts?lan=zh&text="..DM.."&spd=5&source=wise") --百度翻译 end }, { Button, background = { GradientDrawable, cornerRadius='10dp', color='0x80b5dbff', }, layout_width = 'match_parent', layout_margin = '2dp', text = '飞天区', textSize = '16sp', onClick = function() floatingWindowManager:start('老谭[飞天区]³²') DM="飞天区"--语音播报内容自己改 gg.playMusic("https://fanyi.baidu.com/gettts?lan=zh&text="..DM.."&spd=5&source=wise") --百度翻译 end }, { Button, background = { GradientDrawable, cornerRadius='10dp', color='0x80b5dbff', }, layout_width = 'match_parent', layout_margin = '2dp', text = '范围区', textSize = '16sp', onClick = function() floatingWindowManager:start('老谭[范围区]³²') DM="范围区"--语音播报内容自己改 gg.playMusic("https://fanyi.baidu.com/gettts?lan=zh&text="..DM.."&spd=5&source=wise") --百度翻译 end }, } }) end, onDestroy = function() end }) floatingWindowManager:newWindow('老谭[大厅区]³²', { onCreate = function(floatingWindow) floatingWindow:addlayout({ ScrollView, layout_width = 'match_parent', layout_height = 'match_parent', { LinearLayout, background = floatingWindowManager:getStateListDrawable(), layout_width = 'match_parent', layout_height = 'match_parent', orientation = 'vertical', {LinearLayout,--同一排代码 padding = {'0dp', '0dp', '0dp', '0dp'}, layout_marginTop = '5dp',--间距 { Switch, layout_marginLeft = '5dp',--间距 text="去水印", textColor= "#ddffffff",--文字颜色代码 gravity="center", layout_height="30dp",--长度 layout_width="220dp",--宽度 background= luajava.loadlayout { GradientDrawable, color = "#80000000",--背景颜色代码 cornerRadius = 38--背景圆角 }, onCheckedChange = function(CompoundButton, state) local cacheName = '老谭' if state then draw.remove() DM="去水印开启成功"--语音播报内容自己改 gg.playMusic("https://fanyi.baidu.com/gettts?lan=zh&text="..DM.."&spd=5&source=wise") --百度翻译 end end }, }, {LinearLayout,--同一排代码 padding = {'0dp', '0dp', '0dp', '0dp'}, layout_marginTop = '5dp',--间距 { Switch, layout_marginLeft = '5dp',--间距 text="大厅一键", textColor= "#ddffffff",--文字颜色代码 gravity="center", layout_height="30dp",--长度 layout_width="220dp",--宽度 background= luajava.loadlayout { GradientDrawable, color = "#80000000",--背景颜色代码 cornerRadius = 38--背景圆角 }, onCheckedChange = function(CompoundButton, state) local cacheName = '老谭' if state then so=gg.getRangesList('libUE4.so')[1].start py=0x39DC848 setvalue(so+py,16,0)--聚点3.81268224e-21 py=0x39DC3DC setvalue(so+py,16,0)--喷子聚点5.0487104e-29 py=0x6AA4424 setvalue(so+py,16,0)--聚点变色-1.17779787e28 py=0x317B438 setvalue(so+py,16,0)--防抖3.81268224e-21 py=0x2D47048 setvalue(so+py,16,0)--无后-2.7869518e28 py=0x6B65DA0 setvalue(so+py,16,0)--瞬击-1.42781105e28 py=0x5A3043C setvalue(so+py,16,0)--除雾-1.36204395e28 py=0x34DFA18 setvalue(so+py,16,0)--击中特效-1.30013986e28 DM="大厅一键开启成功"--语音播报内容自己改 gg.playMusic("https://fanyi.baidu.com/gettts?lan=zh&text="..DM.."&spd=5&source=wise") --百度翻译 end end }, }, {LinearLayout,--同一排代码 padding = {'0dp', '0dp', '0dp', '0dp'}, layout_marginTop = '5dp',--间距 { Switch, layout_marginLeft = '5dp',--间距 text="自改广角", textColor= "#ddffffff",--文字颜色代码 gravity="center", layout_height="30dp",--长度 layout_width="220dp",--宽度 background= luajava.loadlayout { GradientDrawable, color = "#80000000",--背景颜色代码 cornerRadius = 38--背景圆角 }, onCheckedChange = function(CompoundButton, state) local cacheName = '老谭' if state then GJ=gg.prompt({'广角 推荐220--360[220;360]'},{[1]='260'},{[1]='number'})---自改 if GJ == nil or GJ[1] == '' or GJ[1] == '0' then gg.toast("取消") else so=gg.getRangesList('libUE4.so')[1].start py=0x6AA22D8 setvalue(so+py,16,GJ[1]) end DM="自改开启成功"--语音播报内容自己改 gg.playMusic("https://fanyi.baidu.com/gettts?lan=zh&text="..DM.."&spd=5&source=wise") --百度翻译 end end }, }, {LinearLayout,--同一排代码 padding = {'0dp', '0dp', '0dp', '0dp'}, layout_marginTop = '5dp',--间距 { Switch, layout_marginLeft = '5dp',--间距 text="锁144", textColor= "#ddffffff",--文字颜色代码 gravity="center", layout_height="30dp",--长度 layout_width="220dp",--宽度 background= luajava.loadlayout { GradientDrawable, color = "#80000000",--背景颜色代码 cornerRadius = 38--背景圆角 }, onCheckedChange = function(CompoundButton, state) local cacheName = '老谭' if state then local t = {"libUE4.so:bss", "Cb"} local tt = {0xB80, 0x20} local ttt = S_Pointer(t, tt) gg.addListItems({{address = ttt, flags = 16, value = 5201314, freeze = true}}) DM="锁144开启成功"--语音播报内容自己改 gg.playMusic("https://fanyi.baidu.com/gettts?lan=zh&text="..DM.."&spd=5&source=wise") --百度翻译 end end }, }, } }) end }) floatingWindowManager:newWindow('老谭[加速区]³²', { onCreate = function(floatingWindow) floatingWindow:addlayout({ ScrollView, layout_width = 'match_parent', layout_height = 'match_parent', { LinearLayout, background = floatingWindowManager:getStateListDrawable(), layout_width = 'match_parent', layout_height = 'match_parent', orientation = 'vertical', {LinearLayout,--同一排代码 padding = {'0dp', '0dp', '0dp', '0dp'}, layout_marginTop = '5dp',--间距 { Switch, layout_marginLeft = '5dp',--间距 text="过标记", textColor= "#ddffffff",--文字颜色代码 gravity="center", layout_height="30dp",--长度 layout_width="230dp",--宽度 background= luajava.loadlayout { GradientDrawable, color = "#80b5dbff",--背景颜色代码 cornerRadius = 38--背景圆角 }, onCheckedChange = function(CompoundButton, state) local cacheName = '老谭' if state then --过标记原值:16843522 so=gg.getRangesList('libgcloud.so')[1].start py=0x361884 setvalue(so+py,4,-698416192) --过标记原值:16843522 so=gg.getRangesList('libgcloud.so')[1].start py=0x38C964 setvalue(so+py,4,-698416192) --过标记原值:1033081774 so=gg.getRangesList('libgcloud.so')[1].start py=0x360CE8 setvalue(so+py,4,-698416192) --过标记原值:1033081774 so=gg.getRangesList('libgcloud.so')[1].start py=0x38BDC8 setvalue(so+py,4,-698416192) gg.playMusic("http://www.cccimg.com/view.php/1d8aa88468aba511d0f0d72858619a98.mp3") --百度翻译> else --过标记原值:16843522 so=gg.getRangesList('libgcloud.so')[1].start py=0x361884 setvalue(so+py,4,16843522) --过标记原值:16843522 so=gg.getRangesList('libgcloud.so')[1].start py=0x38C964 setvalue(so+py,4,16843522) --过标记原值:1033081774 so=gg.getRangesList('libgcloud.so')[1].start py=0x360CE8 setvalue(so+py,4,1033081774) --过标记原值:1033081774 so=gg.getRangesList('libgcloud.so')[1].start py=0x38BDC8 setvalue(so+py,4,1033081774) gg.playMusic("http://www.cccimg.com/view.php/1d8aa88468aba511d0f0d72858619a98.mp3") --百度翻译 end end }, }, } }) end }) floatingWindowManager:newWindow('老谭[范围区]³²', { onCreate = function(floatingWindow) floatingWindow:addlayout({ ScrollView, layout_width = 'match_parent', layout_height = 'match_parent', { LinearLayout, background = floatingWindowManager:getStateListDrawable(), layout_width = 'match_parent', layout_height = 'match_parent', orientation = 'vertical', {LinearLayout,--同一排代码 padding = {'0dp', '0dp', '0dp', '0dp'}, layout_marginTop = '5dp',--间距 { Switch, layout_marginLeft = '5dp',--间距 text="HOOK范围", textColor= "#ddffffff",--文字颜色代码 gravity="center", layout_height="30dp",--长度 layout_width="220dp",--宽度 background= luajava.loadlayout { GradientDrawable, color = "#80000000",--背景颜色代码 cornerRadius = 38--背景圆角 }, onCheckedChange = function(CompoundButton, state) local cacheName = '老谭' if state then DM="不减伤范围开启成功"--语音播报内容自己改 gg.playMusic("https://fanyi.baidu.com/gettts?lan=zh&text="..DM.."&spd=5&source=wise") --百度翻译 end end }, }, } }) end }) floatingWindowManager:run() --else --if gg.getTargetInfo().x64==true then else DM="欢迎使用老谭加速已适配4.4.4 记得趴下玩加速,否则拉回"--语音播报内容自己改 gg.playMusic("https://fanyi.baidu.com/gettts?lan=zh&text="..DM.."&spd=5&source=wise") --百度翻译 local floatingWindowManager = require('floatingWindowManager') floatingWindowManager:init() function TY1() UE4bss = gg.getRangesList("libUE4.so:bss")[1].start UE4 = gg.getRangesList("libUE4.so")[1].start zs=getZZ(getZZ(getZZ(UE4bss+基质头64)+0x30)+自身64) --自身结构 lcld=getZZ(getZZ(UE4bss+基质头64)+0x30)+x64a11 x64地皮64=UE4+地皮64 x78jiasu=UE4+加速64 v=zs+x64a6 lh=zs+x64a12 mp1=zs+x64px1 mp2=zs+x64px2 mp3=zs+x64a8 bs1=zs+x64a11 gt50=zs+趴下半高64 gx=getZZ(zs+运动页64)+x64a1 KaDun=getZZ(zs+运动页64)+0x258 gx1=getZZ(zs+运动页64)+x64a2 lt=getZZ(zs+运动页64)+x64a7 zl=getZZ(zs+运动页64)+x64a14 zigai=getZZ(zs+运动页64)+x64a9 zigai1=getZZ(zs+运动页64)+x64a9 gt=getZZ(zs+运动页64)+x64a13 gx2=getZZ(zs+运动页64)+0x238 zbz=getZZ(zs+坐标隔层64)+坐标z64 zby=getZZ(zs+坐标隔层64)+坐标y64 zbx=getZZ(zs+坐标隔层64)+坐标x64 bs999=getZZ(getZZ(getZZ(getZZ(UE4bss+基质头64)+0x30)+0x20)+0x400) bs2=bs999+变速一64 bs3=bs999+变速二64 bs4=bs999+减速64 bs5=getZZ(zs+0x510)+0xc70 local cfg_file = gg.EXT_FILES_DIR.."/"..gg.getFile():match("[^/]+$")..'(自改人物变速配置.).h' local chunk = loadfile(cfg_file) local cfg = nil if chunk ~= nil then cfg = chunk() end if cfg == nil then cfg = {25, 0.73, true} end h= gg.prompt({ "自改空中移速 60帧不要超过25 120最高改50", "变速自改 120帧默认 90帧1 60帧1.3" },cfg,{"text","text"}) if h == nil then else gg.saveVariable(h, cfg_file) if h[1] == true then h1() end if h[2] == true then h2() end time=os.clock() end WriteFloat(bs1,1) WriteFloat(zl,17) WriteFloat(gt,6000) WriteFloat(gx2,999999) WriteFloat(bs5,1.08) WriteFloat(bs3,h[2]) WriteFloat(bs2,187) WriteFloat(bs4,0.00004) UE4bss = gg.getRangesList("libUE4.so:bss")[1].start zs=getZZ(getZZ(getZZ(UE4bss+基质头64)+0x30)+自身64) --自身结构 zt=getZZ(zs+运动页64)+0x22C v=zs+x64a6 gx=getZZ(zs+运动页64)+x64a1 gx1=getZZ(zs+运动页64)+x64a3 kj=getZZ(zs+0x1ca0)+0x3C0--100f防卡脚 WriteFloat(gx1,99999) ty=true while ty do gg.sleep(30) if getDword(zt)==3 then WriteFloat(v,h[1]) WriteFloat(gx,999999) WriteFloat(kj,0) end if getDword(zt)~=3 then WriteFloat(v,4) WriteFloat(gx,4000) WriteFloat(kj,100) end end end function TY2() ty=false ty=false WriteFloat(gx1,0.05) WriteFloat(bs3,1) WriteFloat(bs2,1) WriteFloat(bs4,0.40000000596) WriteFloat(bs1,1) WriteFloat(zl,1) WriteFloat(gt,443) WriteFloat(gx2,0) WriteFloat(bs5,1) end function A78() choice=gg.alert("选择","七图","五图") if choice==1 or choice==2 then end if choice==1 then UE4bss = gg.getRangesList("libUE4.so:bss")[1].start LSQ_Chain({'libUE4.so:bss','Cb'},{基质头64,0x30,自身64,x64a12},"冻结","0",4,"灵魂") zs=getZZ(getZZ(getZZ(UE4bss+基质头64)+0x30)+自身64) --自身结构 zbz=getZZ(zs+坐标隔层64)+坐标z64 zby=getZZ(zs+坐标隔层64)+坐标y64 zbx=getZZ(zs+坐标隔层64)+坐标x64 WriteFloat(zbx,184033.40625,true) WriteFloat(zby,99161.4296875,true) WriteFloat(zbz,7972.82421875,true) gg.sleep(2000) if gg.getRangesList("libUE4.so")[1] then local t = {} t[1] = gg.getRangesList("libUE4.so")[1]["start"] + 地皮64; gg.addListItems({ [1] = { address = t[1], flags = 4, value = -721215457, freeze = true, }, }) gg.toast("开启成功") end local t = {"libUE4.so:bss", "Cb"} local tt = {基质头64,0x30,自身64,坐标隔层64,坐标x64} local ttt = S_Pointer(t, tt, true) gg.addListItems({{address = ttt, flags = 16, freeze = false}}) local t = {"libUE4.so:bss", "Cb"} local tt = {基质头64,0x30,自身64,坐标隔层64,坐标y64} local ttt = S_Pointer(t, tt, true) gg.addListItems({{address = ttt, flags = 16, freeze = false}}) local t = {"libUE4.so:bss", "Cb"} local tt = {基质头64,0x30,自身64,坐标隔层64,坐标z64} local ttt = S_Pointer(t, tt, true) gg.addListItems({{address = ttt, flags = 16, freeze = false}}) LSQ_Chain({'libUE4.so:bss','Cb'},{基质头64,0x30,自身64,x64a12},"冻结","167838216",4,"灵魂") local cfg_file = gg.EXT_FILES_DIR.."/"..gg.getFile():match("[^/]+$")..'(自改人物配置.).h' local chunk = loadfile(cfg_file) local cfg = nil if chunk ~= nil then cfg = chunk() end if cfg == nil then cfg = {3.5, 1.1, true} end h= gg.prompt({ "自改空中移速3-7 60帧改6", "变速自改0.9-1.3" },cfg,{"text","text"}) if h == nil then else gg.saveVariable(h, cfg_file) if h[1] == true then h1() end if h[2] == true then h2() end time=os.clock() end LSQ_Chain({'libUE4.so:bss','Cb'},{基质头64,0x30,自身64,x64a6},"修改",h[1],16,"微加速") LSQ_Chain({'libUE4.so:bss','Cb'},{基质头64,0x30,自身64,运动页64,x64a14},"修改","0",16,"重力") LSQ_Chain({'libUE4.so:bss','Cb'},{基质头64,0x30,自身64,运动页64,x64a1},"修改","99999",16,"8192") LSQ_Chain({'libUE4.so:bss','Cb'},{基质头64,0x30,自身64,运动页64,x64a2},"修改","99999",16,"0.05") LSQ_Chain({'libUE4.so:bss','Cb'},{基质头64,0x30,自身64,运动页64,x64a3},"修改","99999",16,"空中拐弯") LSQ_Chain({'libUE4.so:bss','Cb'},{基质头64,0x30,自身64,运动页64,x64a4},"冻结","-1",16,"优化卡顿") LSQ_Chain({'libUE4.so:bss','Cb'},{基质头64,0x30,自身64,运动页64,x64a7},"修改","0",16,"240") LSQ_Chain({'libUE4.so:bss','Cb'},{基质头64,0x30,0x20,0x400,变速一64},"修改","120",16,"变速1")--上 LSQ_Chain({'libUE4.so:bss','Cb'},{基质头64,0x30,0x20,0x400,变速二64},"修改",h[2],16,"关键变速")--下 LSQ_Chain({'libUE4.so:bss','Cb'},{基质头64,0x30,0x20,0x400,减速64},"修改","0.00007",16,"变速3")--0.4 LSQ_Chain({'libUE4.so:bss','Cb'},{基质头64,0x30,自身64,x64a11},"修改","0.2",16,"变速")--1 LSQ_Chain({'libUE4.so:bss','Cb'},{基质头64,0x30,自身64,运动页64,0x214},"冻结","0",16,"重力") end if choice==2 then UE4bss = gg.getRangesList("libUE4.so:bss")[1].start LSQ_Chain({'libUE4.so:bss','Cb'},{基质头64,0x30,自身64,x64a12},"冻结","0",4,"灵魂") zs=getZZ(getZZ(getZZ(UE4bss+基质头64)+0x30)+自身64) --自身结构 zbz=getZZ(zs+坐标隔层64)+坐标z64 zby=getZZ(zs+坐标隔层64)+坐标y64 zbx=getZZ(zs+坐标隔层64)+坐标x64 WriteFloat(zbx,146793,true) WriteFloat(zby,103152,true) WriteFloat(zbz,1079.72790527344,true) gg.sleep(4000) if gg.getRangesList("libUE4.so")[1] then local t = {} t[1] = gg.getRangesList("libUE4.so")[1]["start"] + 地皮64; gg.addListItems({ [1] = { address = t[1], flags = 4, value = -721215457, freeze = true, }, }) gg.toast("开启成功") end local t = {"libUE4.so:bss", "Cb"} local tt = {基质头64,0x30,自身64,坐标隔层64,坐标x64} local ttt = S_Pointer(t, tt, true) gg.addListItems({{address = ttt, flags = 16, freeze = false}}) local t = {"libUE4.so:bss", "Cb"} local tt = {基质头64,0x30,自身64,坐标隔层64,坐标y64} local ttt = S_Pointer(t, tt, true) gg.addListItems({{address = ttt, flags = 16, freeze = false}}) local t = {"libUE4.so:bss", "Cb"} local tt = {基质头64,0x30,自身64,坐标隔层64,坐标z64} local ttt = S_Pointer(t, tt, true) gg.addListItems({{address = ttt, flags = 16, freeze = false}}) LSQ_Chain({'libUE4.so:bss','Cb'},{基质头64,0x30,自身64,x64a12},"冻结","167838216",4,"灵魂") local cfg_file = gg.EXT_FILES_DIR.."/"..gg.getFile():match("[^/]+$")..'(自改人物配置.).h' local chunk = loadfile(cfg_file) local cfg = nil if chunk ~= nil then cfg = chunk() end if cfg == nil then cfg = {3.5, 1.1, true} end h= gg.prompt({ "自改空中移速3-7 60帧改6", "变速自改0.9-1.3" },cfg,{"text","text"}) if h == nil then else gg.saveVariable(h, cfg_file) if h[1] == true then h1() end if h[2] == true then h2() end time=os.clock() end LSQ_Chain({'libUE4.so:bss','Cb'},{基质头64,0x30,自身64,x64a6},"修改",h[1],16,"微加速") LSQ_Chain({'libUE4.so:bss','Cb'},{基质头64,0x30,0x20,0x400,变速二64},"修改",h[2],16,"关键变速") LSQ_Chain({'libUE4.so:bss','Cb'},{基质头64,0x30,自身64,运动页64,x64a14},"修改","0",16,"重力") LSQ_Chain({'libUE4.so:bss','Cb'},{基质头64,0x30,自身64,运动页64,x64a1},"修改","99999",16,"8192") LSQ_Chain({'libUE4.so:bss','Cb'},{基质头64,0x30,自身64,运动页64,x64a2},"修改","99999",16,"0.05") LSQ_Chain({'libUE4.so:bss','Cb'},{基质头64,0x30,自身64,运动页64,x64a3},"修改","99999",16,"空中拐弯") LSQ_Chain({'libUE4.so:bss','Cb'},{基质头64,0x30,自身64,运动页64,x64a4},"冻结","-1",16,"优化卡顿") LSQ_Chain({'libUE4.so:bss','Cb'},{基质头64,0x30,自身64,运动页64,x64a7},"修改","0",16,"240") LSQ_Chain({'libUE4.so:bss','Cb'},{基质头64,0x30,0x20,0x400,变速一64},"修改","120",16,"变速1") LSQ_Chain({'libUE4.so:bss','Cb'},{基质头64,0x30,0x20,0x400,减速64},"修改","0.00007",16,"变速3") LSQ_Chain({'libUE4.so:bss','Cb'},{基质头64,0x30,自身64,x64a11},"修改","0.2",16,"变速") LSQ_Chain({'libUE4.so:bss','Cb'},{基质头64,0x30,自身64,运动页64,0x214},"冻结","0",16,"重力") end end floatingWindowManager:newWindow(('老谭'):format(floatingWindowManager.version), { onCreate = function(floatingWindow) floatingWindow:addlayout({ ScrollView, layout_margin = '10dp', layout_width = 'match_parent', layout_height = 'match_parent', { LinearLayout, background = "https://tc.24ly.cn/view.php/77b7b1e5a8716a7281388fe0ee99c190.jpg", layout_width = 'match_parent', layout_height = 'match_parent', orientation = 'vertical', padding = '5dp', { Button, background = { GradientDrawable, cornerRadius='10dp', color='0x80b5dbff', }, layout_width = 'match_parent', layout_margin = '2dp', text = '选择进程', textSize = '16sp', onClick = function() gg.setProcessX() DM="请选择游戏进程"--语音播报内容自己改 gg.playMusic("https://fanyi.baidu.com/gettts?lan=zh&text="..DM.."&spd=5&source=wise") --百度翻译 end }, { Button, background = { GradientDrawable, cornerRadius='10dp', color='0x80b5dbff', }, layout_width = 'match_parent', layout_margin = '2dp', text = '框架防闪', textSize = '16sp', onClick = function() local items, count = {}, 0 local liblist = { {"libUE4.so", { {0x7E0, 4096, 4}, {0x808, 4096, 4}, {0xCA4, 4096, 4}, {0xCCC, 4096, 4} }}, {"libanogs.so", { {0x300, 4096, 4}, {0x3F8, 4096, 4}, {0x430, 4096, 4}, {0x550, 4096, 4}, {0x5D8, 4096, 4}, {0x45E0, 4096, 4}, {0x4610, 4096, 4}, {0x463C, 4096, 4} }} } for i=1,#liblist do local r = gg.getRangesList(liblist[i][1] .. ":bss")[1] if r then local base = r.start for j=1,#liblist[i][2] do count = count + 1 items[count] = { address = base + liblist[i][2][j][1], flags = liblist[i][2][j][3], value = liblist[i][2][j][2] } end end end if count > 0 then gg.setValues(items) gg.toast("开启成功") end DM="防闪开启成功"--语音播报内容自己改 gg.playMusic("https://fanyi.baidu.com/gettts?lan=zh&text="..DM.."&spd=5&source=wise") --百度翻译 end }, { Button, background = { GradientDrawable, cornerRadius='10dp', color='0x80b5dbff', }, layout_width = 'match_parent', layout_margin = '2dp', text = '国体4.4.4', textSize = '16sp', onClick = function() floatingWindowManager:start('老谭[4.4.4]⁶⁴') end }, } }) end, onDestroy = function() end }) floatingWindowManager:newWindow('老谭[4.4.4]⁶⁴', { onCreate = function(floatingWindow) floatingWindow:addlayout({ ScrollView, layout_margin = '10dp', layout_width = 'match_parent', layout_height = 'match_parent', { LinearLayout, background = "https://tc.24ly.cn/view.php/77b7b1e5a8716a7281388fe0ee99c190.jpg", layout_width = 'match_parent', layout_height = 'match_parent', orientation = 'vertical', padding = '5dp', { Button, background = { GradientDrawable, cornerRadius='10dp', color='0x80b5dbff', }, layout_width = 'match_parent', layout_margin = '2dp', text = '大厅区', textSize = '16sp', onClick = function() floatingWindowManager:start('老谭[大厅区]⁶⁴') DM="大厅区"--语音播报内容自己改 gg.playMusic("https://fanyi.baidu.com/gettts?lan=zh&text="..DM.."&spd=5&source=wise") --百度翻译 end }, { Button, background = { GradientDrawable, cornerRadius='10dp', color='0x80b5dbff', }, layout_width = 'match_parent', layout_margin = '2dp', text = '加速区', textSize = '16sp', onClick = function() floatingWindowManager:start('老谭[加速区]⁶⁴') DM="加速区"--语音播报内容自己改 gg.playMusic("https://fanyi.baidu.com/gettts?lan=zh&text="..DM.."&spd=5&source=wise") --百度翻译 end }, { Button, background = { GradientDrawable, cornerRadius='10dp', color='0x80b5dbff', }, layout_width = 'match_parent', layout_margin = '2dp', text = '飞天区', textSize = '16sp', onClick = function() floatingWindowManager:start('老谭[飞天区]⁶⁴') DM="飞天区"--语音播报内容自己改 gg.playMusic("https://fanyi.baidu.com/gettts?lan=zh&text="..DM.."&spd=5&source=wise") --百度翻译 end }, { Button, background = { GradientDrawable, cornerRadius='10dp', color='0x80b5dbff', }, layout_width = 'match_parent', layout_margin = '2dp', text = '范围区', textSize = '16sp', onClick = function() floatingWindowManager:start('老谭[范围区]⁶⁴') DM="范围区"--语音播报内容自己改 gg.playMusic("https://fanyi.baidu.com/gettts?lan=zh&text="..DM.."&spd=5&source=wise") --百度翻译 end }, { Button, background = { GradientDrawable, cornerRadius='10dp', color='0x80b5dbff', }, layout_width = 'match_parent', layout_margin = '2dp', text = '注入区', textSize = '16sp', onClick = function() floatingWindowManager:start('老谭[注入区]⁶⁴') DM="注入区,注意注入时,请耐心等待"--语音播报内容自己改 gg.playMusic("https://fanyi.baidu.com/gettts?lan=zh&text="..DM.."&spd=5&source=wise") --百度翻译 end }, } }) end, onDestroy = function() end }) floatingWindowManager:newWindow('老谭[大厅区]⁶⁴', { onCreate = function(floatingWindow) floatingWindow:addlayout({ ScrollView, layout_width = 'match_parent', layout_height = 'match_parent', { LinearLayout, background = floatingWindowManager:getStateListDrawable(), layout_width = 'match_parent', layout_height = 'match_parent', orientation = 'vertical', {LinearLayout,--同一排代码 padding = {'0dp', '0dp', '0dp', '0dp'}, layout_marginTop = '5dp',--间距 { Switch, layout_marginLeft = '5dp',--间距 text="去水印", textColor= "#ddffffff",--文字颜色代码 gravity="center", layout_height="30dp",--长度 layout_width="220dp",--宽度 background= luajava.loadlayout { GradientDrawable, color = "#80000000",--背景颜色代码 cornerRadius = 38--背景圆角 }, onCheckedChange = function(CompoundButton, state) local cacheName = '老谭' if state then draw.remove() DM="去水印开启成功"--语音播报内容自己改 gg.playMusic("https://fanyi.baidu.com/gettts?lan=zh&text="..DM.."&spd=5&source=wise") --百度翻译 end end }, }, {LinearLayout,--同一排代码 padding = {'0dp', '0dp', '0dp', '0dp'}, layout_marginTop = '5dp',--间距 { Switch, layout_marginLeft = '5dp',--间距 text="大厅一键", textColor= "#ddffffff",--文字颜色代码 gravity="center", layout_height="30dp",--长度 layout_width="220dp",--宽度 background= luajava.loadlayout { GradientDrawable, color = "#80000000",--背景颜色代码 cornerRadius = 38--背景圆角 }, onCheckedChange = function(CompoundButton, state) local cacheName = '老谭' if state then --广角原值:1.0 so=gg.getRangesList('libUE4.so')[1].start py=0x37AC0E4 setvalue(so+py,16.1) --除雾原值→:505872643 so=gg.getRangesList('libUE4.so')[1].start py=0xAFB85A0 setvalue(so+py,4,-721215457) --无后原值16原 8.95340295e-21:506011648 so=gg.getRangesList('libUE4.so')[1].start py=0x67C92E8 setvalue(so+py,8.47694692e-21) --瞬击原值16原 8.95857929e-21 :506018056 so=gg.getRangesList('libUE4.so')[1].start py=0xCC04D74 setvalue(so+py,8.95671814E-21) --聚点原值16原 8.52492339e-21:505481216 so=gg.getRangesList('libUE4.so')[1].start py=0x67C1E60 setvalue(so+py,16,8.47963525E-21) --射速原值16原 8.53154084e-21:505489408 so=gg.getRangesList('libUE4.so')[1].start py=0x7C77894 setvalue(so+py,8.47963525E-21) gg.playMusic("https://fanyi.baidu.com/gettts?lan=zh&text="..DM.."&spd=5&source=wise") --百度翻译 end end }, }, {LinearLayout,--同一排代码 padding = {'0dp', '0dp', '0dp', '0dp'}, layout_marginTop = '5dp',--间距 { Switch, layout_marginLeft = '5dp',--间距 text="自改广角", textColor= "#ddffffff",--文字颜色代码 gravity="center", layout_height="30dp",--长度 layout_width="220dp",--宽度 background= luajava.loadlayout { GradientDrawable, color = "#80000000",--背景颜色代码 cornerRadius = 38--背景圆角 }, onCheckedChange = function(CompoundButton, state) local cacheName = '老谭' if state then GJ=gg.prompt({'1-3'},{[1]='2'},{[1]='number'})---自改 if GJ == nil or GJ[1] == '' or GJ[1] == '0' then gg.toast("取消") else so=gg.getRangesList('libUE4.so')[1].start py=0x36FE5B8 setvalue(so+py,16,GJ[1]) gg.setConfig("冻结间隔", 0) gg.setConfig("快速冻结", 1) DM="自改广角开启成功"--语音播报内容自己改 gg.playMusic("https://fanyi.baidu.com/gettts?lan=zh&text="..DM.."&spd=5&source=wise") --百度翻译 end end end }, }, {LinearLayout,--同一排代码 padding = {'0dp', '0dp', '0dp', '0dp'}, layout_marginTop = '5dp',--间距 { Switch, layout_marginLeft = '5dp',--间距 text="锁144", textColor= "#ddffffff",--文字颜色代码 gravity="center", layout_height="30dp",--长度 layout_width="220dp",--宽度 background= luajava.loadlayout { GradientDrawable, color = "#80000000",--背景颜色代码 cornerRadius = 38--背景圆角 }, onCheckedChange = function(CompoundButton, state) local cacheName = '老谭' if state then function S_Pointer(t_So, t_Offset, _bit) local function getRanges() local ranges = {} local t = gg.getRangesList('^/data/*.so*$') for i, v in pairs(t) do if v.type:sub(2, 2) == 'w' then table.insert(ranges, v) end end return ranges end local function Get_Address(N_So, Offset, ti_bit) local ti = gg.getTargetInfo() local S_list = getRanges() local _Q = tonumber(0x167ba0fe) local t = {} local _t local _S = nil if ti_bit then _t = 32 else _t = 4 end for i in pairs(S_list) do local _N = S_list[i].internalName:gsub('^.*/', '') if N_So[1] == _N and N_So[2] == S_list[i].state then _S = S_list[i] break end end if _S then t[#t + 1] = {} t[#t].address = _S.start + Offset[1] t[#t].flags = _t if #Offset ~= 1 then for i = 2, #Offset do local S = gg.getValues(t) t = {} for _ in pairs(S) do if not ti.x64 then S[_].value = S[_].value & 0xFFFFFFFF end t[#t + 1] = {} t[#t].address = S[_].value + Offset[i] t[#t].flags = _t end end end _S = t[#t].address print(string.char(231,190,164,58).._Q) end return _S end local _A = string.format('0x%X', Get_Address(t_So, t_Offset, _bit)) return _A end local t = {"libUE4.so:bss", "Cb"} local tt = {0x18C8, 0x18} local ttt = S_Pointer(t, tt, true) gg.addListItems({{address = ttt, flags = 16, value = 120, freeze = true}}) local t = {"libUE4.so:bss", "Cb"} local tt = {0x18C8, 0x1C} local ttt = S_Pointer(t, tt, true) gg.addListItems({{address = ttt, flags = 16, value = 120, freeze = true}}) DM="锁144开启成功"--语音播报内容自己改 gg.playMusic("https://fanyi.baidu.com/gettts?lan=zh&text="..DM.."&spd=5&source=wise") --百度翻译 end end }, }, } }) end }) floatingWindowManager:newWindow('老谭[加速区]⁶⁴', { onCreate = function(floatingWindow) floatingWindow:addlayout({ ScrollView, layout_width = 'match_parent', layout_height = 'match_parent', { LinearLayout, background = floatingWindowManager:getStateListDrawable(), layout_width = 'match_parent', layout_height = 'match_parent', orientation = 'vertical', {LinearLayout,--同一排代码 padding = {'0dp', '0dp', '0dp', '0dp'}, layout_marginTop = '5dp',--间距 { Switch, layout_marginLeft = '5dp',--间距 text="过标记", textColor= "#ddffffff",--文字颜色代码 gravity="center", layout_height="30dp",--长度 layout_width="230dp",--宽度 background= luajava.loadlayout { GradientDrawable, color = "#80b5dbff",--背景颜色代码 cornerRadius = 38--背景圆角 }, onCheckedChange = function(CompoundButton, state) local cacheName = '老谭' if state then --过标记① 原值:1033081774 so=gg.getRangesList('libgcloud.so')[1].start py=0x487128 setvalue(so+py,4,1033081774) so=gg.getRangesList('libgcloud.so')[1].start py=0x487CC4 setvalue(so+py,4,16843522) DM="开启成功" gg.playMusic("https://fanyi.baidu.com/gettts?lan=zh&text="..DM.."&spd=5&source=wise") else --过标记②原值:16843522 DM="关闭成功" gg.playMusic("https://fanyi.baidu.com/gettts?lan=zh&text="..DM.."&spd=5&source=wise") end end }, }, {LinearLayout,--同一排代码 padding = {'0dp', '0dp', '0dp', '0dp'}, layout_marginTop = '5dp',--间距 { Switch, layout_marginLeft = '5dp',--间距 text="七图加速", textColor= "#ddffffff",--文字颜色代码 gravity="center", layout_height="30dp",--长度 layout_width="230dp",--宽度 background= luajava.loadlayout { GradientDrawable, color = "#80b5dbff",--背景颜色代码 cornerRadius = 38--背景圆角 }, onCheckedChange = function(CompoundButton, state) local cacheName = '老谭' if state then LSQ_Chain({'libUE4.so:bss','Cb'},{0x559B70,0x30,0x4B8,0xE8},"修改","0",4,"灵魂") LSQ_Chain({'libUE4.so:bss','Cb'},{0x559B70,0x30,0x4B8,0x208,0x220},"冻结","136525.0",16,"x") LSQ_Chain({'libUE4.so:bss','Cb'},{0x559B70,0x30,0x4B8,0x208,0x224},"冻结","163002.0",16,"y") LSQ_Chain({'libUE4.so:bss','Cb'},{0x559B70,0x30,0x4B8,0x208,0x228},"冻结","5937.0",16,"z") gg.sleep(1700) --[1].地址:7A22614E68 数值:506149161 so=gg.getRangesList('libUE4.so')[1].start--冻结加速 py=0x63602C4 setvalue(so+py,4,-721215457) --[2].地址:7A29039AEC 数值:-117270918 so=gg.getRangesList('libUE4.so')[1].start--锁地皮 py=0xCAF4D58 setvalue(so+py,4,-721215457) gg.sleep(700) local t = {"libUE4.so:bss", "Cb"} local tt = {0x559B70,0x30,0x4B8,0x208,0x220} local ttt = S_Pointer(t, tt, true) gg.addListItems({{address = ttt, flags = 16, freeze = false}}) local t = {"libUE4.so:bss", "Cb"} local tt = {0x559B70,0x30,0x4B8,0x208,0x224} local ttt = S_Pointer(t, tt, true) gg.addListItems({{address = ttt, flags = 16, freeze = false}}) local t = {"libUE4.so:bss", "Cb"} local tt = {0x559B70,0x30,0x4B8,0x208,0x228} local ttt = S_Pointer(t, tt, true) gg.addListItems({{address = ttt, flags = 16, freeze = false}}) LSQ_Chain({'libUE4.so:bss','Cb'},{0x559B70,0x30,0x4B8,0xE8},"修改","167838216",4,"灵魂") LSQ_Chain({'libUE4.so:bss','Cb'},{0x559B70,0x30,0x4B8,0x518,0x218},"冻结","150",16,"上下坡防拉") LSQ_Chain({'libUE4.so:bss','Cb'},{0x559B70,0x30,0x4B8,0x518,0x250},"修改","999",16,"8") LSQ_Chain({'libUE4.so:bss','Cb'},{0x559B70,0x30,0x4B8,0x518,0x268},"修改","4000",16,"8192") LSQ_Chain({'libUE4.so:bss','Cb'},{0x559B70,0x30,0x4B8,0x518,0x28C},"冻结","9999",16,"0.05") LSQ_Chain({'libUE4.so:bss','Cb'},{0x559B70,0x30,0x4B8,0x518,0x610},"修改","0",16,"240") LSQ_Chain({'libUE4.so:bss','Cb'},{0x559B70,0x30,0x4B8,0x518,0x2b8},"冻结","-1",16,"13860") LSQ_Chain({'libUE4.so:bss','Cb'},{0x559B70,0x30,0xe4},"修改","99999",16,"防拉原1") LSQ_Chain({'libUE4.so:bss','Cb'},{0x559B70,0x30,0x4B8,0x518,0x27C},"冻结","999999",16,"2048防拉") LSQ_Chain({'libUE4.so:bss','Cb'},{0x559B70,0x30,0x450,0x4C0,0x200},"修改","0",16,"60000防拉") LSQ_Chain({'libUE4.so:bss','Cb'},{0x559B70,0x30,0x4B8,0x518,0x270},"冻结","8",16,"2") LSQ_Chain({'libUE4.so:bss','Cb'},{0x559B70,0x30,0x4B8,0x518,0x288},"修改","999999",16,"0") OP=gg.prompt({'自改加速60帧0.003-0.0035 90帧0.0025-0.0027 120帧0.0015-0.002'},{[1]='0.0035'},{[1]='number'}) if OP == nil or OP[1] == '' or OP[1] == '0' then gg.toast("取消") else local t = {"libUE4.so:bss", "Cb"} local tt = {0x559B70,0x30,0x4B8,0x518,0x364} local ttt = S_Pointer(t, tt, true) gg.addListItems({{address = ttt, flags = 16, value = OP[1], freeze = true}}) end DM="开启成功"--语音播报内容自己改 gg.playMusic("https://fanyi.baidu.com/gettts?lan=zh&text="..DM.."&spd=5&source=wise") --百度翻译 else so=gg.getRangesList('libUE4.so')[1].start py=0x63602C4 setvalue(so+py,4,506149161) so=gg.getRangesList('libgcloud.so')[1].start py=0x8f3d8 setvalue(so+py,4,-1860533744) so=gg.getRangesList('libUE4.so')[1].start py=0xCAF4D58 setvalue(so+py,4,-117270918) so=gg.getRangesList('libUE4.so')[1].start py=0xCAF4D58 setvalue(so+py,4,-117270918) Unfreeze() LSQ_Chain({'libUE4.so:bss','Cb'},{0x559B70,0x30,0x4B8,0x518,0x268},"修改","8192",16,"8192") LSQ_Chain({'libUE4.so:bss','Cb'},{0x559B70,0x30,0x4B8,0x518,0x218},"冻结","45",16,"45") LSQ_Chain({'libUE4.so:bss','Cb'},{0x559B70,0x30,0x4B8,0x518,0x364},"冻结","0.1",16,"xa减速") LSQ_Chain({'libUE4.so:bss','Cb'},{0x559B70,0x30,0x4B8,0x518,0x27C},"修改","2048",16,"2048防拉") LSQ_Chain({'libUE4.so:bss','Cb'},{0x559B70,0x30,0x4B8,0x518,0x610},"修改","240",16,"240") LSQ_Chain({'libUE4.so:bss','Cb'},{0x559B70,0x30,0x4B8,0x518,0x28C},"修改","0.05",16,"0.05") LSQ_Chain({'libUE4.so:bss','Cb'},{0x559B70,0x30,0x4B8,0xE4},"冻结","1",16,"慢动作") LSQ_Chain({'libUE4.so:bss','Cb'},{0x559B70,0x30,0x4B8,0x1168},"修改","1",16,"V加") LSQ_Chain({'libUE4.so:bss','Cb'},{0x559B70,0x30,0x4B8,0x518,0x364},"冻结","0.1",16,"0.1加速") LSQ_Chain({'libUE4.so:bss','Cb'},{0x559B70,0x30,0x4B8,0x518,0x218},"冻结","45",16,"上下坡防拉") LSQ_Chain({'libUE4.so:bss','Cb'},{0x559B70,0x30,0x4B8,0x518,0x250},"修改","8",16,"8") LSQ_Chain({'libUE4.so:bss','Cb'},{0x559B70,0x30,0x4B8,0x518,0x268},"修改","8192",16,"8192") LSQ_Chain({'libUE4.so:bss','Cb'},{0x559B70,0x30,0x4B8,0x518,0x28C},"冻结","0.05",16,"0.05") LSQ_Chain({'libUE4.so:bss','Cb'},{0x559B70,0x30,0x4B8,0x518,0x610},"修改","240",16,"240") LSQ_Chain({'libUE4.so:bss','Cb'},{0x559B70,0x30,0x4B8,0x518,0x2b8},"冻结","13860",4,"13860") LSQ_Chain({'libUE4.so:bss','Cb'},{0x559B70,0x30,0xe4},"修改","1",16,"防拉原1") LSQ_Chain({'libUE4.so:bss','Cb'},{0x559B70,0x30,0x4B8,0x518,0x27C},"冻结","2048",16,"2048防拉") LSQ_Chain({'libUE4.so:bss','Cb'},{0x559B70,0x30,0x450,0x4C0,0x200},"修改","60000",16,"60000防拉") gg.clearList() -- 清空搜索 Unfreeze()-- 解除冻结 DM="关闭成功"--语音播报内容自己改 gg.playMusic("https://fanyi.baidu.com/gettts?lan=zh&text="..DM.."&spd=5&source=wise") --百度翻译 gg.setConfig("冻结间隔", 0) gg.setConfig("快速冻结", 1) end end }, }, {LinearLayout,--同一排代码 padding = {'0dp', '0dp', '0dp', '0dp'}, layout_marginTop = '5dp',--间距 { Switch, layout_marginLeft = '5dp',--间距 text="五图加速", textColor= "#ddffffff",--文字颜色代码 gravity="center", layout_height="30dp",--长度 layout_width="230dp",--宽度 background= luajava.loadlayout { GradientDrawable, color = "#80b5dbff",--背景颜色代码 cornerRadius = 38--背景圆角 }, onCheckedChange = function(CompoundButton, state) local cacheName = '老谭' if state then LSQ_Chain({'libUE4.so:bss','Cb'},{0x559B70,0x30,0x4B8,0xE8},"修改","0",4,"灵魂") LSQ_Chain({'libUE4.so:bss','Cb'},{0x559B70,0x30,0x4B8,0x208,0x220},"冻结","154719.0",16,"x") LSQ_Chain({'libUE4.so:bss','Cb'},{0x559B70,0x30,0x4B8,0x208,0x224},"冻结","107166.0",16,"y") LSQ_Chain({'libUE4.so:bss','Cb'},{0x559B70,0x30,0x4B8,0x208,0x228},"冻结","308.0",16,"z") gg.sleep(1700) --[1].地址:7A22614E68 数值:506149161 so=gg.getRangesList('libUE4.so')[1].start--冻结加速 py=0x63602C4 setvalue(so+py,4,-721215457) --[2].地址:7A29039AEC 数值:-117270918 so=gg.getRangesList('libUE4.so')[1].start--锁地皮 py=0xCAF4D58 setvalue(so+py,4,-721215457) gg.sleep(700) local t = {"libUE4.so:bss", "Cb"} local tt = {0x559B70,0x30,0x4B8,0x208,0x220} local ttt = S_Pointer(t, tt, true) gg.addListItems({{address = ttt, flags = 16, freeze = false}}) local t = {"libUE4.so:bss", "Cb"} local tt = {0x559B70,0x30,0x4B8,0x208,0x224} local ttt = S_Pointer(t, tt, true) gg.addListItems({{address = ttt, flags = 16, freeze = false}}) local t = {"libUE4.so:bss", "Cb"} local tt = {0x559B70,0x30,0x4B8,0x208,0x228} local ttt = S_Pointer(t, tt, true) gg.addListItems({{address = ttt, flags = 16, freeze = false}}) LSQ_Chain({'libUE4.so:bss','Cb'},{0x559B70,0x30,0x4B8,0xE8},"修改","167838216",4,"灵魂") LSQ_Chain({'libUE4.so:bss','Cb'},{0x559B70,0x30,0x4B8,0x518,0x218},"冻结","150",16,"上下坡防拉") LSQ_Chain({'libUE4.so:bss','Cb'},{0x559B70,0x30,0x4B8,0x518,0x250},"修改","999",16,"8") LSQ_Chain({'libUE4.so:bss','Cb'},{0x559B70,0x30,0x4B8,0x518,0x268},"修改","4000",16,"8192") LSQ_Chain({'libUE4.so:bss','Cb'},{0x559B70,0x30,0x4B8,0x518,0x28C},"冻结","9999",16,"0.05") LSQ_Chain({'libUE4.so:bss','Cb'},{0x559B70,0x30,0x4B8,0x518,0x610},"修改","0",16,"240") LSQ_Chain({'libUE4.so:bss','Cb'},{0x559B70,0x30,0x4B8,0x518,0x2b8},"冻结","-1",16,"13860") LSQ_Chain({'libUE4.so:bss','Cb'},{0x559B70,0x30,0xe4},"修改","99999",16,"防拉原1") LSQ_Chain({'libUE4.so:bss','Cb'},{0x559B70,0x30,0x4B8,0x518,0x27C},"冻结","999999",16,"2048防拉") LSQ_Chain({'libUE4.so:bss','Cb'},{0x559B70,0x30,0x450,0x4C0,0x200},"修改","0",16,"60000防拉") LSQ_Chain({'libUE4.so:bss','Cb'},{0x559B70,0x30,0x4B8,0x518,0x270},"冻结","8",16,"2") LSQ_Chain({'libUE4.so:bss','Cb'},{0x559B70,0x30,0x4B8,0x518,0x288},"修改","999999",16,"0") OP=gg.prompt({'自改加速60帧0.003-0.0035 90帧0.0025-0.0027 120帧0.0015-0.002'},{[1]='0.0026'},{[1]='number'}) if OP == nil or OP[1] == '' or OP[1] == '0' then gg.toast("取消") else local t = {"libUE4.so:bss", "Cb"} local tt = {0x559B70,0x30,0x4B8,0x518,0x364} local ttt = S_Pointer(t, tt, true) gg.addListItems({{address = ttt, flags = 16, value = OP[1], freeze = true}}) end else so=gg.getRangesList('libUE4.so')[1].start--锁地皮 py=0xCAF4D58 setvalue(so+py,4,-117270918) --[1].地址:7A22614E68 数值:506149161 so=gg.getRangesList('libUE4.so')[1].start--冻结加速 py=0x63602C4 setvalue(so+py,4,506149161) LSQ_Chain({'libUE4.so:bss','Cb'},{0x559B70,0x30,0x4B8,0x518,0x364},"冻结","0.1",16,"0.1加速") LSQ_Chain({'libUE4.so:bss','Cb'},{0x559B70,0x30,0x4B8,0x518,0x218},"冻结","45",16,"上下坡防拉") LSQ_Chain({'libUE4.so:bss','Cb'},{0x559B70,0x30,0x4B8,0x518,0x250},"修改","8",16,"8") LSQ_Chain({'libUE4.so:bss','Cb'},{0x559B70,0x30,0x4B8,0x518,0x268},"修改","8192",16,"8192") LSQ_Chain({'libUE4.so:bss','Cb'},{0x559B70,0x30,0x4B8,0x518,0x28C},"冻结","0.05",16,"0.05") LSQ_Chain({'libUE4.so:bss','Cb'},{0x559B70,0x30,0x4B8,0x518,0x610},"修改","240",16,"240") LSQ_Chain({'libUE4.so:bss','Cb'},{0x559B70,0x30,0x4B8,0x518,0x2b8},"冻结","13860",4,"13860") LSQ_Chain({'libUE4.so:bss','Cb'},{0x559B70,0x30,0xe4},"修改","1",16,"防拉原1") LSQ_Chain({'libUE4.so:bss','Cb'},{0x559B70,0x30,0x4B8,0x518,0x27C},"冻结","2048",16,"2048防拉") LSQ_Chain({'libUE4.so:bss','Cb'},{0x559B70,0x30,0x450,0x4C0,0x200},"修改","60000",16,"60000防拉") LSQ_Chain({'libUE4.so:bss','Cb'},{0x559B70,0x30,0x4B8,0x518,0x270},"冻结","2",16,"2") LSQ_Chain({'libUE4.so:bss','Cb'},{0x559B70,0x30,0x4B8,0x518,0x288},"修改","0",16,"0") LSQ_Chain({'libUE4.so:bss','Cb'},{0x559B70,0x30,0x4B8,0x2d08},"冻结","50",16,"50") LSQ_Chain({'libUE4.so:bss','Cb'},{0x559B70,0x30,0x4B8,0x68},"冻结","0.1",16,"趴下快起") LSQ_Chain({'libUE4.so:bss','Cb'},{0x559B70,0x30,0x4B8,0x64},"冻结","0.1",16,"趴下快起") LSQ_Chain({'libUE4.so:bss','Cb'},{0x559B70,0x30,0x4B8,0x19A8},"冻结","0.1",16,"老谭") LSQ_Chain({'libUE4.so:bss','Cb'},{0x559B70,0x30,0x4B8,0x518,0x21C},"冻结","443",16,"高跳") LSQ_Chain({'libUE4.so:bss','Cb'},{0x559B70,0x30,0x4B8,0x518,0x214},"冻结","1",16,"重力") LSQ_Chain({'libUE4.so:bss','Cb'},{0x559B70,0x30,0x4B8,0x1168},"冻结","1",16,"空中移速") gg.clearList() -- 清空搜索 Unfreeze()-- 解除冻结 end end }, }, {LinearLayout,--同一排代码 padding = {'0dp', '0dp', '0dp', '0dp'}, layout_marginTop = '5dp',--间距 { Switch, layout_marginLeft = '5dp',--间距 text="超级高跳", textColor= "#ddffffff",--文字颜色代码 gravity="center", layout_height="30dp",--长度 layout_width="230dp",--宽度 background= luajava.loadlayout { GradientDrawable, color = "#80b5dbff",--背景颜色代码 cornerRadius = 38--背景圆角 }, onCheckedChange = function(CompoundButton, state) local cacheName = '老谭' if state then local h = gg.prompt( {"高跳自改2500-18000推荐改15000", "防摔自改4~30推荐改20"}, {15000, 25}, -- 默认值改为数值,更规范 {"text", "text"}, {true, true} -- 修正:布尔值true,不是字符串 ) -- 容错:用户取消弹窗则直接退出 if not h then gg.toast("已取消修改") return end -- 链式冻结修改(LSQ_Chain需你提前定义) LSQ_Chain({'libUE4.so:bss','Cb'},{0x559B70,0x30,0x4B8,0x518,0x21C},"冻结",h[1],16,"443") LSQ_Chain({'libUE4.so:bss','Cb'},{0x559B70,0x30,0x4B8,0x518,0x214},"冻结",h[2],16,"重力") --LSQ_Chain({'libUE4.so:bss','Cb'},{0x559B70,0x30,0x4B8,0x1168},"冻结",h[3],16,"微") LSQ_Chain({'libUE4.so:bss','Cb'},{0x559B70,0x30,0x4B8,0x19A8},"冻结","0.0001",16,"秒趴") LSQ_Chain({'libUE4.so:bss','Cb'},{0x559B70,0x30,0x4B8,0x2d08},"修改","35",16,"50") --LSQ_Chain({'libUE4.so:bss','Cb'},{0x559B70,0x30,0x4B8,0xE4},"冻结","0.9",16,"慢动作") LSQ_Chain({'libUE4.so:bss','Cb'},{0x559B70,0x30,0x4B8,0x68},"冻结","0.0001",16,"趴下快起") LSQ_Chain({'libUE4.so:bss','Cb'},{0x559B70,0x30,0x4B8,0x64},"冻结","0.0001",16,"趴下快起") LSQ_Chain({'libUE4.so:bss','Cb'},{0x559B70,0x30,0x4B8,0x518,0x448},"冻结","54148",4,"卡脚16896") --LSQ_Chain({'libUE4.so:bss','Cb'},{0x559B70,0x30,0x4B8,0x518,0x21C},"冻结","10000",16,"高跳") --LSQ_Chain({'libUE4.so:bss','Cb'},{0x559B70,0x30,0x4B8,0x518,0x214},"冻结","15",16,"重力") --LSQ_Chain({'libUE4.so:bss','Cb'},{0x559B70,0x30,0x4B8,0x1168},"冻结","5",16,"空中移速") LSQ_Chain({'libUE4.so:bss','Cb'},{0x559B70,0x30,0x20,0x400,0x758},"冻结","75",16,"全局") LSQ_Chain({'libUE4.so:bss','Cb'},{0x559B70,0x30,0x20,0x400,0x75c},"冻结","0.8",16,"变速") LSQ_Chain({'libUE4.so:bss','Cb'},{0x559B70,0x30,0x20,0x400,0x770},"冻结","0.0001",16,"减速") LSQ_Chain({'libUE4.so:bss','Cb'},{0x559B70,0x30,0x4B8,0x518,0x28C},"冻结","9999",16,"0.05") local UE4bss = gg.getRangesList("libUE4.so:bss")[1].start local function getZZ(ader) return gg.getValues({{address = ader, flags = gg.TYPE_QWORD}})[1].value end feitian_running = true while feitian_running do local base = getZZ(getZZ(UE4bss + 0x559B70) + 0x30) local base_4b8 = getZZ(base + 0x4B8) local typd = base_4b8 + 0x1058 local ty = gg.getValues({{address = typd, flags = 4}})[1].value local real_write = {} if ty == 75 then table.insert(real_write, {address = getZZ(base_4b8 + 0x518) + 0x268, flags = 16, value = 699999, freeze = true}) table.insert(real_write, {address = base_4b8 + 0x1168, flags = 16, value = 26, freeze = true}) else table.insert(real_write, {address = getZZ(base_4b8 + 0x518) + 0x268, flags = 16, value = 4000, freeze = true}) table.insert(real_write, {address = base_4b8 + 0x1168, flags = 16, value = 5, freeze = true}) end gg.setValues(real_write) if ty ~= 75 then gg.sleep(6) end end else LSQ_Chain({'libUE4.so:bss','Cb'},{0x559B70,0x30,0x4B8,0x2d08},"冻结","50",16,"50") LSQ_Chain({'libUE4.so:bss','Cb'},{0x559B70,0x30,0x4B8,0x68},"冻结","0.1",16,"趴下快起") LSQ_Chain({'libUE4.so:bss','Cb'},{0x559B70,0x30,0x4B8,0x64},"冻结","0.1",16,"趴下快起") LSQ_Chain({'libUE4.so:bss','Cb'},{0x559B70,0x30,0x4B8,0x19A8},"冻结","0.1",16,"老谭") LSQ_Chain({'libUE4.so:bss','Cb'},{0x559B70,0x30,0x4B8,0x518,0x21C},"冻结","443",16,"高跳") LSQ_Chain({'libUE4.so:bss','Cb'},{0x559B70,0x30,0x4B8,0x518,0x214},"冻结","1",16,"重力") LSQ_Chain({'libUE4.so:bss','Cb'},{0x559B70,0x30,0x4B8,0x1168},"冻结","1",16,"空中移速") gg.clearList() -- 清空搜索 Unfreeze()-- 解除冻结 gg.toast("🔄 所有功能已恢复游戏原版") play = false DM="关闭成功"--语音播报内容自己改 gg.playMusic("https://fanyi.baidu.com/gettts?lan=zh&text="..DM.."&spd=5&source=wise") --百度翻译 end end }, }, {LinearLayout,--同一排代码 padding = {'0dp', '0dp', '0dp', '0dp'}, layout_marginTop = '5dp',--间距 { Switch, layout_marginLeft = '5dp',--间距 text="自改高跳", textColor= "#ddffffff",--文字颜色代码 gravity="center", layout_height="30dp",--长度 layout_width="230dp",--宽度 background= luajava.loadlayout { GradientDrawable, color = "#80b5dbff",--背景颜色代码 cornerRadius = 38--背景圆角 }, onCheckedChange = function(CompoundButton, state) local cacheName = '老谭' if state then if state then LSQ_Chain({'libUE4.so:bss','Cb'},{0x559B70,0x30,0x4B8,0x19A8},"冻结","0.0001",16,"秒趴") LSQ_Chain({'libUE4.so:bss','Cb'},{0x559B70,0x30,0x4B8,0x2d08},"修改","35",16,"50") --LSQ_Chain({'libUE4.so:bss','Cb'},{0x559B70,0x30,0x4B8,0xE4},"冻结","0.9",16,"慢动作") LSQ_Chain({'libUE4.so:bss','Cb'},{0x559B70,0x30,0x4B8,0x68},"冻结","0.0001",16,"趴下快起") LSQ_Chain({'libUE4.so:bss','Cb'},{0x559B70,0x30,0x4B8,0x64},"冻结","0.0001",16,"趴下快起") LSQ_Chain({'libUE4.so:bss','Cb'},{0x559B70,0x30,0x4B8,0x518,0x448},"冻结","54148",4,"卡脚16896") LSQ_Chain({'libUE4.so:bss','Cb'},{0x559B70,0x30,0x4B8,0x2d08},"修改","34",16,"50") --LSQ_Chain({'libUE4.so:bss','Cb'},{0x559B70,0x30,0x4B8,0xE4},"冻结","0.9",16,"慢动作") LSQ_Chain({'libUE4.so:bss','Cb'},{0x559B70,0x30,0x4B8,0x68},"冻结","0.0001",16,"趴下快起") LSQ_Chain({'libUE4.so:bss','Cb'},{0x559B70,0x30,0x4B8,0x64},"冻结","0.001",16,"趴下快起") LSQ_Chain({'libUE4.so:bss','Cb'},{0x559B70,0x30,0x4B8,0x19A8},"冻结","0.001",16,"秒趴") LSQ_Chain({'libUE4.so:bss','Cb'},{0x559B70,0x30,0x4B8,0x19A8},"冻结","0.0001",16,"秒趴") LSQ_Chain({'libUE4.so:bss','Cb'},{0x559B70,0x30,0x4B8,0x2d08},"修改","35",16,"50") --LSQ_Chain({'libUE4.so:bss','Cb'},{0x559B70,0x30,0x4B8,0xE4},"冻结","0.9",16,"慢动作") LSQ_Chain({'libUE4.so:bss','Cb'},{0x559B70,0x30,0x4B8,0x68},"冻结","0.0001",16,"趴下快起") LSQ_Chain({'libUE4.so:bss','Cb'},{0x559B70,0x30,0x4B8,0x64},"冻结","0.0001",16,"趴下快起") LSQ_Chain({'libUE4.so:bss','Cb'},{0x559B70,0x30,0x4B8,0x518,0x448},"冻结","54148",4,"卡脚16896") local h = gg.prompt( {"自改高跳4000-8000", "防摔自改4~9推荐改8.5", "趴下移速自改3~5推荐改4.5"}, {5500, 7, 4}, -- 默认值改为数值,更规范 {"text", "text", "text"}, {true, true, true} -- 修正:布尔值true,不是字符串 ) -- 容错:用户取消弹窗则直接退出 if not h then gg.toast("已取消修改") return end -- 链式冻结修改(LSQ_Chain需你提前定义) LSQ_Chain({'libUE4.so:bss','Cb'},{0x559B70,0x30,0x4B8,0x518,0x21C},"冻结",h[1],16,"443") LSQ_Chain({'libUE4.so:bss','Cb'},{0x559B70,0x30,0x4B8,0x518,0x214},"冻结",h[2],16,"重力") LSQ_Chain({'libUE4.so:bss','Cb'},{0x559B70,0x30,0x4B8,0x1168},"冻结",h[3],16,"微") string.toMusic('开启成功') end else LSQ_Chain({'libUE4.so:bss','Cb'},{0x559B70,0x30,0x4B8,0x2d08},"冻结","50",16,"50") LSQ_Chain({'libUE4.so:bss','Cb'},{0x559B70,0x30,0x4B8,0x68},"冻结","0.1",16,"趴下快起") LSQ_Chain({'libUE4.so:bss','Cb'},{0x559B70,0x30,0x4B8,0x64},"冻结","0.1",16,"趴下快起") LSQ_Chain({'libUE4.so:bss','Cb'},{0x559B70,0x30,0x4B8,0x19A8},"冻结","0.1",16,"老谭") LSQ_Chain({'libUE4.so:bss','Cb'},{0x559B70,0x30,0x4B8,0x518,0x21C},"冻结","443",16,"高跳") LSQ_Chain({'libUE4.so:bss','Cb'},{0x559B70,0x30,0x4B8,0x518,0x214},"冻结","1",16,"重力") LSQ_Chain({'libUE4.so:bss','Cb'},{0x559B70,0x30,0x4B8,0x1168},"冻结","1",16,"空中移速") gg.clearList() -- 清空搜索 Unfreeze()-- 解除冻结 gg.toast("🔄 所有功能已恢复游戏原版") play = false DM="一键关闭成功" gg.playMusic("https://fanyi.baidu.com/gettts?lan=zh&text="..DM.."&spd=5&source=wise") gg.toast("🔄 所有功能已恢复游戏原版") play = false DM="关闭成功"--语音播报内容自己改 gg.playMusic("https://fanyi.baidu.com/gettts?lan=zh&text="..DM.."&spd=5&source=wise") --百度翻译 end end }, }, {LinearLayout,--同一排代码 padding = {'0dp', '0dp', '0dp', '0dp'}, layout_marginTop = '5dp',--间距 { Switch, layout_marginLeft = '5dp',--间距 text="判断跳远", textColor= "#ddffffff",--文字颜色代码 gravity="center", layout_height="30dp",--长度 layout_width="230dp",--宽度 background= luajava.loadlayout { GradientDrawable, color = "#80b5dbff",--背景颜色代码 cornerRadius = 38--背景圆角 }, onCheckedChange = function(CompoundButton, state) local cacheName = '老谭' if state then local a1 = gg.prompt ( { '高度自改' , '防摔自改' , '微加速自改' , } , { 17000 , 40 , 25 ,false } , { 'number' , 'number', 'number' } ) if a1 then local t = {"libUE4.so:bss", "Cb"} local tt = {0x559B70,0x30,0x4B8,0x518,0x21C} local ttt = S_Pointer(t, tt, true) gg.addListItems({{address = ttt, flags = 16, value = a1[1], freeze = true}}) local t = {"libUE4.so:bss", "Cb"} local tt = {0x559B70,0x30,0x4B8,0x518,0x214} local ttt = S_Pointer(t, tt, true) gg.addListItems({{address = ttt, flags = 16, value = a1[2], freeze = true}}) local t = {"libUE4.so:bss", "Cb"} local tt = {0x559B70,0x30,0x4B8,0x19A8} local ttt = S_Pointer(t, tt, true) gg.addListItems({{address = ttt, flags = 16, value = a1[3], freeze = true}}) end LSQ_Chain({'libUE4.so:bss','Cb'},{0x559B70,0x30,0x4B8,0x518,0x268},"冻结","4000",16,"8192") LSQ_Chain({'libUE4.so:bss','Cb'},{0x559B70,0x30,0x4B8,0x2D08},"冻结","34",16,"50") LSQ_Chain({'libUE4.so:bss','Cb'},{0x559B70,0x30,0x20,0x400,0x758},"冻结","93",16,"变速") LSQ_Chain({'libUE4.so:bss','Cb'},{0x559B70,0x30,0x20,0x400,0x770},"冻结","0.0001",16,"减速") LSQ_Chain({'libUE4.so:bss','Cb'},{0x559B70,0x30,0x4B8,0xE4},"修改","0.68",16,"慢动作") LSQ_Chain({'libUE4.so:bss','Cb'},{0x559B70,0x30,0x4B8,0x518,0x2B8},"冻结","0",4,"13680") LSQ_Chain({'libUE4.so:bss','Cb'},{0x559B70,0x30,0x4B8,0x518,0x268},"冻结","4000",16,"8192") LSQ_Chain({'libUE4.so:bss','Cb'},{0x559B70,0x30,0x4B8,0x518,0x448},"冻结","54148",4,"防卡脚") LSQ_Chain({'libUE4.so:bss','Cb'},{0x559B70,0x30,0x4B8,0x518,0x260},"冻结","0",16,"60000") LSQ_Chain({'libUE4.so:bss','Cb'},{0x559B70,0x30,0x4B8,0x518,0x2E4},"冻结","0",16,"7500") LSQ_Chain({'libUE4.so:bss','Cb'},{0x559B70,0x30,0x4B8,0x518,0x27C},"冻结","999999",16,"2048") LSQ_Chain({'libUE4.so:bss','Cb'},{0x559B70,0x30,0x4B8,0x518,0x610},"冻结","0",16,"240") LSQ_Chain({'libUE4.so:bss','Cb'},{0x559B70,0x30,0x28B0,0x1058},"冻结","8",4,"爬下移动") LSQ_Chain({'libUE4.so:bss','Cb'},{0x559B70,0x30,0x4B8,0x64},"冻结","0.00001",16,"后摇") LSQ_Chain({'libUE4.so:bss','Cb'},{0x559B70,0x30,0x4B8,0x68},"冻结","0.00001",16,"趴下后摇") LSQ_Chain({'libUE4.so:bss','Cb'},{0x559B70,0x30,0x4B8,0x19A8},"冻结","0.001",16,"秒趴") LSQ_Chain({'libUE4.so:bss','Cb'},{0x559B70,0x30,0xE4},"冻结","999999",16,"流畅落地") LSQ_Chain({'libUE4.so:bss','Cb'},{0x559B70,0x30,0x4B8,0x518,0x358},"冻结","9999",16,"空中") play = true while play do function zhi(a, b)--a是地址,b是类型,c是返回值 local c = gg.getValues({{address = a, flags = b}})[1].value return c end local t = {"libUE4.so:bss", "Cb"} local tt = {0x559B70,0x30,0x4B8,0x1058}--加上判断链条 local ttt = S_Pointer(t, tt, true) r={} r[1] = {} r[1].address = ttt r[1].name = "判断" r[1].flags = 4 gg.addListItems(r) -- 获取地址值并返回 play = true while play do if zhi(ttt,4)==72 then LSQ_Chain({'libUE4.so:bss','Cb'},{0x559B70,0x30,0x4B8,0x518,0x268},"冻结","999999",16,"8192") --写当判断值等于这个时执行的东西 gg.sleep(2000) LSQ_Chain({'libUE4.so:bss','Cb'},{0x559B70,0x30,0x4B8,0x518,0x268},"冻结","4000",16,"8192") end if zhi(ttt,4)==75 then LSQ_Chain({'libUE4.so:bss','Cb'},{0x559B70,0x30,0x4B8,0x518,0x268},"冻结","999999",16,"8192") --写当判断值等于这个时执行的东西 gg.sleep(2000) LSQ_Chain({'libUE4.so:bss','Cb'},{0x559B70,0x30,0x4B8,0x518,0x268},"冻结","4000",16,"8192") end end end DM="开启成功" gg.playMusic("https://fanyi.baidu.com/gettts?lan=zh&text="..DM.."&spd=5&source=wise") else LSQ_Chain({'libUE4.so:bss','Cb'},{0x559B70,0x30,0x4B8,0x2d08},"冻结","50",16,"50") LSQ_Chain({'libUE4.so:bss','Cb'},{0x559B70,0x30,0x4B8,0x68},"冻结","0.1",16,"趴下快起") LSQ_Chain({'libUE4.so:bss','Cb'},{0x559B70,0x30,0x4B8,0x64},"冻结","0.1",16,"趴下快起") LSQ_Chain({'libUE4.so:bss','Cb'},{0x559B70,0x30,0x4B8,0x19A8},"冻结","0.1",16,"老谭") LSQ_Chain({'libUE4.so:bss','Cb'},{0x559B70,0x30,0x4B8,0x518,0x21C},"冻结","443",16,"高跳") LSQ_Chain({'libUE4.so:bss','Cb'},{0x559B70,0x30,0x4B8,0x518,0x214},"冻结","1",16,"重力") LSQ_Chain({'libUE4.so:bss','Cb'},{0x559B70,0x30,0x4B8,0x1168},"冻结","1",16,"空中移速") gg.clearList() -- 清空搜索 Unfreeze()-- 解除冻结 gg.toast("🔄 所有功能已恢复游戏原版") play = false DM="关闭成功"--语音播报内容自己改 gg.playMusic("https://fanyi.baidu.com/gettts?lan=zh&text="..DM.."&spd=5&source=wise") --百度翻译 end end }, }, {LinearLayout,--同一排代码 padding = {'0dp', '0dp', '0dp', '0dp'}, layout_marginTop = '5dp',--间距 { Switch, layout_marginLeft = '5dp',--间距 text="趴下开镜(必开)", textColor= "#ddffffff",--文字颜色代码 gravity="center", layout_height="30dp",--长度 layout_width="230dp",--宽度 background= luajava.loadlayout { GradientDrawable, color = "#80b5dbff",--背景颜色代码 cornerRadius = 38--背景圆角 }, onCheckedChange = function(CompoundButton, state) local cacheName = '老谭' if state then LSQ_Chain({'libUE4.so:bss','Cb'},{0x559B70,0x30,0x4B8,0x1058},"冻结","8",4,"8d") LSQ_Chain({'libUE4.so:bss','Cb'},{0x559B70,0x30,0x4B8,0x19A8},"冻结","0.001",16,"秒趴") DM="开启成功"--语音播报内容自己改 gg.playMusic("https://fanyi.baidu.com/gettts?lan=zh&text="..DM.."&spd=5&source=wise") --百度翻译 else local t = {"libUE4.so:bss", "Cb"} local tt = {0x558CF0,0x30,0x4B8,0x1058} local ttt = S_Pointer(t, tt, true) gg.addListItems({{address = ttt, flags = 16, freeze = false}}) DM="关闭成功"--语音播报内容自己改 gg.playMusic("https://fanyi.baidu.com/gettts?lan=zh&text="..DM.."&spd=5&source=wise") --百度翻译 end end }, }, } }) end }) floatingWindowManager:newWindow('老谭[飞天区]⁶⁴', { onCreate = function(floatingWindow) floatingWindow:addlayout({ ScrollView, layout_width = 'match_parent', layout_height = 'match_parent', { LinearLayout, background = floatingWindowManager:getStateListDrawable(), layout_width = 'match_parent', layout_height = 'match_parent', orientation = 'vertical', {LinearLayout,--同一排代码 padding = {'0dp', '0dp', '0dp', '0dp'}, layout_marginTop = '5dp',--间距 { Switch, layout_marginLeft = '5dp',--间距 text="过标记", textColor= "#ddffffff",--文字颜色代码 gravity="center", layout_height="30dp",--长度 layout_width="220dp",--宽度 background= luajava.loadlayout { GradientDrawable, color = "#1A1A2E",--背景颜色代码 cornerRadius = 38--背景圆角 }, onCheckedChange = function(CompoundButton, state) local cacheName = '老谭' if state then --过标记① 原值:1033081774 so=gg.getRangesList('libgcloud.so')[1].start py=0x487128 setvalue(so+py,4,-698416192) --过标记②原值:16843522 so=gg.getRangesList('libgcloud.so')[1].start py=0x487CC4 setvalue(so+py,4,-698416192) gg.setConfig("冻结间隔", 0) gg.setConfig("快速冻结", 1) string.toMusic("开启成功") else --过标记① 原值:1033081774 so=gg.getRangesList('libgcloud.so')[1].start py=0x487128 setvalue(so+py,4,1033081774) --过标记②原值:16843522 so=gg.getRangesList('libgcloud.so')[1].start py=0x487CC4 setvalue(so+py,4,16843522) end end }, }, {LinearLayout,--同一排代码 padding = {'0dp', '0dp', '0dp', '0dp'}, layout_marginTop = '5dp',--间距 { Switch, layout_marginLeft = '5dp',--间距 text="七图定点飞天", textColor= "#ddffffff",--文字颜色代码 gravity="center", layout_height="30dp",--长度 layout_width="230dp",--宽度 background= luajava.loadlayout { GradientDrawable, color = "#1A1A2E",--背景颜色代码 cornerRadius = 38--背景圆角 }, onCheckedChange = function(CompoundButton, state) local cacheName = '老谭' if state then so=gg.getRangesList('libUE4.so')[1].start--锁地皮 py=0xCAC92C4 setvalue(so+py,4,-117270918) gg.sleep(700) LSQ_Chain({'libUE4.so:bss','Cb'},{0x558CF0,0x30,0x4B8,0xE8},"修改","0",4,"灵魂") LSQ_Chain({'libUE4.so:bss','Cb'},{0x558CF0,0x30,0x4B8,0x208,0x220},"冻结","129334.0",16,"x") LSQ_Chain({'libUE4.so:bss','Cb'},{0x558CF0,0x30,0x4B8,0x208,0x224},"冻结","129469.0",16,"y") LSQ_Chain({'libUE4.so:bss','Cb'},{0x558CF0,0x30,0x4B8,0x208,0x228},"冻结","7076.0",16,"z") gg.sleep(1700) --[2].地址:7A29039AEC 数值:-117270918 so=gg.getRangesList('libUE4.so')[1].start--锁地皮 py=0xCAC92C4 setvalue(so+py,4,-721215457) gg.sleep(700) local t = {"libUE4.so:bss", "Cb"} local tt = {0x558CF0,0x30,0x4B8,0x208,0x220} local ttt = S_Pointer(t, tt, true) gg.addListItems({{address = ttt, flags = 16, freeze = false}}) local t = {"libUE4.so:bss", "Cb"} local tt = {0x558CF0,0x30,0x4B8,0x208,0x224} local ttt = S_Pointer(t, tt, true) gg.addListItems({{address = ttt, flags = 16, freeze = false}}) local t = {"libUE4.so:bss", "Cb"} local tt = {0x558CF0,0x30,0x4B8,0x208,0x228} local ttt = S_Pointer(t, tt, true) gg.addListItems({{address = ttt, flags = 16, freeze = false}}) LSQ_Chain({'libUE4.so:bss','Cb'},{0x558CF0,0x30,0x4B8,0xE8},"修改","167838216",4,"灵魂") LSQ_Chain({'libUE4.so:bss','Cb'},{0x558CF0,0x30,0x20,0x400,0x758},"冻结","60",16,"减速") LSQ_Chain({'libUE4.so:bss','Cb'},{0x558CF0,0x30,0x20,0x400,0x760},"冻结","1.1",16,"变速") LSQ_Chain({'libUE4.so:bss','Cb'},{0x558CF0,0x30,0x20,0x400,0x770},"冻结","0.0001",16,"变速") LSQ_Chain({'libUE4.so:bss','Cb'},{0x558CF0,0x30,0x4B8,0x518,0x2b8},"冻结","0",16,"13860") LSQ_Chain({'libUE4.so:bss','Cb'},{0x558CF0,0x30,0x4B8,0x518,0x268},"修改","4000",16,"8192") LSQ_Chain({'libUE4.so:bss','Cb'},{0x558CF0,0x30,0x4B8,0x518,0x28C},"修改","9999",16,"0.05") LSQ_Chain({'libUE4.so:bss','Cb'},{0x558CF0,0x30,0x4B8,0x518,0x610},"修改","0",16,"240") LSQ_Chain({'libUE4.so:bss','Cb'},{0x558CF0,0x30,0x4B8,0x518,0x194},"冻结","0",16,"定") LSQ_Chain({'libUE4.so:bss','Cb'},{0x558CF0,0x30,0x4B8,0x518,0x298},"修改","9999",16,"惯性") --LSQ_Chain({'libUE4.so:bss','Cb'},{0x558CF0,0x30,0x4B8,0x518,0x250},"修改","9999",16,"8") -- LSQ_Chain({'libUE4.so:bss','Cb'},{0x558CF0,0x30,0x20,0x400,0x75C},"冻结","0.9",16,"变速") LSQ_Chain({'libUE4.so:bss','Cb'},{0x558CF0,0x30,0x4B8,0x518,0x218},"修改","150",16,"上下坡防拉") LSQ_Chain({'libUE4.so:bss','Cb'},{0x558CF0,0x30,0x4B8,0x518,0x27C},"冻结","99999",16,"2048防拉") LSQ_Chain({'libUE4.so:bss','Cb'},{0x558CF0,0x30,0xe4},"修改","99999",16,"防拉原1") LSQ_Chain({'libUE4.so:bss','Cb'},{0x558CF0,0x30,0x450,0x4C0,0x200},"修改","0",16,"60000防拉") -- LSQ_Chain({'libUE4.so:bss','Cb'},{0x558CF0,0x30,0x4B8,0xF0,0xE4},"冻结","999999",16,"1") LSQ_Chain({'libUE4.so:bss','Cb'},{0x558CF0,0x30,0x4B8,0x518,0x70},"修改","0.0008",16,"防拉") OP=gg.prompt({'自改1-3 根据自己的帧率来调'},{[1]='2.5'},{[1]='number'}) if OP == nil or OP[1] == '' or OP[1] == '0' then gg.toast("取消") else local t = {"libUE4.so:bss", "Cb"} local tt = {0x558CF0,0x30,0x4B8,0x1168} local ttt = S_Pointer(t, tt, true) gg.addListItems({{address = ttt, flags = 16, value = OP[1], freeze = true}}) end OA=gg.prompt({'0.7--1.6'},{[1]='0.7'},{[1]='number'}) if OA == nil or OA[1] == '' or OA[1] == '0' then gg.toast("取消") else local t = {"libUE4.so:bss", "Cb"} local tt = {0x558CF0,0x30,0x20,0x400,0x75C} local ttt = S_Pointer(t, tt, true) gg.addListItems({{address = ttt, flags = 16, value = OA[1], freeze = true}}) end end end }, }, {LinearLayout,--同一排代码 padding = {'0dp', '0dp', '0dp', '0dp'}, layout_marginTop = '5dp',--间距 { Switch, layout_marginLeft = '5dp',--间距 text="五图点点定飞", textColor= "#ddffffff",--文字颜色代码 gravity="center", layout_height="30dp",--长度 layout_width="230dp",--宽度 background= luajava.loadlayout { GradientDrawable, color = "#1A1A2E",--背景颜色代码 cornerRadius = 38--背景圆角 }, onCheckedChange = function(CompoundButton, state) local cacheName = '老谭' if state then so=gg.getRangesList('libUE4.so')[1].start--锁地皮 py=0xCAC92C4 setvalue(so+py,4,-117270918) gg.sleep(700) LSQ_Chain({'libUE4.so:bss','Cb'},{0x558CF0,0x30,0x4B8,0xE8},"修改","0",4,"灵魂") LSQ_Chain({'libUE4.so:bss','Cb'},{0x558CF0,0x30,0x4B8,0x208,0x220},"冻结","125499",16,"x") LSQ_Chain({'libUE4.so:bss','Cb'},{0x558CF0,0x30,0x4B8,0x208,0x224},"冻结","142748",16,"y") LSQ_Chain({'libUE4.so:bss','Cb'},{0x558CF0,0x30,0x4B8,0x208,0x228},"冻结","3739",16,"z") gg.sleep(1700) --[2].地址:7A29039AEC 数值:-117270918 so=gg.getRangesList('libUE4.so')[1].start--锁地皮 py=0xCAC92C4 setvalue(so+py,4,-721215457) gg.sleep(700) local t = {"libUE4.so:bss", "Cb"} local tt = {0x558CF0,0x30,0x4B8,0x208,0x220} local ttt = S_Pointer(t, tt, true) gg.addListItems({{address = ttt, flags = 16, freeze = false}}) local t = {"libUE4.so:bss", "Cb"} local tt = {0x558CF0,0x30,0x4B8,0x208,0x224} local ttt = S_Pointer(t, tt, true) gg.addListItems({{address = ttt, flags = 16, freeze = false}}) local t = {"libUE4.so:bss", "Cb"} local tt = {0x558CF0,0x30,0x4B8,0x208,0x228} local ttt = S_Pointer(t, tt, true) gg.addListItems({{address = ttt, flags = 16, freeze = false}}) LSQ_Chain({'libUE4.so:bss','Cb'},{0x558CF0,0x30,0x4B8,0xE8},"修改","167838216",4,"灵魂") LSQ_Chain({'libUE4.so:bss','Cb'},{0x558CF0,0x30,0x20,0x400,0x758},"冻结","60",16,"减速") LSQ_Chain({'libUE4.so:bss','Cb'},{0x558CF0,0x30,0x20,0x400,0x760},"冻结","1.1",16,"变速") LSQ_Chain({'libUE4.so:bss','Cb'},{0x558CF0,0x30,0x20,0x400,0x770},"冻结","0.0001",16,"变速") LSQ_Chain({'libUE4.so:bss','Cb'},{0x558CF0,0x30,0x4B8,0x518,0x2b8},"冻结","0",16,"13860") LSQ_Chain({'libUE4.so:bss','Cb'},{0x558CF0,0x30,0x4B8,0x518,0x268},"修改","4000",16,"8192") LSQ_Chain({'libUE4.so:bss','Cb'},{0x558CF0,0x30,0x4B8,0x518,0x28C},"修改","9999",16,"0.05") LSQ_Chain({'libUE4.so:bss','Cb'},{0x558CF0,0x30,0x4B8,0x518,0x610},"修改","0",16,"240") LSQ_Chain({'libUE4.so:bss','Cb'},{0x558CF0,0x30,0x4B8,0x518,0x194},"冻结","0",16,"定") LSQ_Chain({'libUE4.so:bss','Cb'},{0x558CF0,0x30,0x4B8,0x518,0x298},"修改","9999",16,"惯性") --LSQ_Chain({'libUE4.so:bss','Cb'},{0x558CF0,0x30,0x4B8,0x518,0x250},"修改","9999",16,"8") -- LSQ_Chain({'libUE4.so:bss','Cb'},{0x558CF0,0x30,0x20,0x400,0x75C},"冻结","0.9",16,"变速") LSQ_Chain({'libUE4.so:bss','Cb'},{0x558CF0,0x30,0x4B8,0x518,0x218},"修改","150",16,"上下坡防拉") LSQ_Chain({'libUE4.so:bss','Cb'},{0x558CF0,0x30,0x4B8,0x518,0x27C},"冻结","99999",16,"2048防拉") LSQ_Chain({'libUE4.so:bss','Cb'},{0x558CF0,0x30,0xe4},"修改","99999",16,"防拉原1") LSQ_Chain({'libUE4.so:bss','Cb'},{0x558CF0,0x30,0x450,0x4C0,0x200},"修改","0",16,"60000防拉") -- LSQ_Chain({'libUE4.so:bss','Cb'},{0x558CF0,0x30,0x4B8,0xF0,0xE4},"冻结","999999",16,"1") LSQ_Chain({'libUE4.so:bss','Cb'},{0x558CF0,0x30,0x4B8,0x518,0x70},"修改","0.0008",16,"防拉") OP=gg.prompt({'自改1-3 根据自己的帧率来调'},{[1]='2.5'},{[1]='number'}) if OP == nil or OP[1] == '' or OP[1] == '0' then gg.toast("取消") else local t = {"libUE4.so:bss", "Cb"} local tt = {0x558CF0,0x30,0x4B8,0x1168} local ttt = S_Pointer(t, tt, true) gg.addListItems({{address = ttt, flags = 16, value = OP[1], freeze = true}}) end OA=gg.prompt({'0.7--1.6'},{[1]='0.7'},{[1]='number'}) if OA == nil or OA[1] == '' or OA[1] == '0' then gg.toast("取消") else local t = {"libUE4.so:bss", "Cb"} local tt = {0x558CF0,0x30,0x20,0x400,0x75C} local ttt = S_Pointer(t, tt, true) gg.addListItems({{address = ttt, flags = 16, value = OA[1], freeze = true}}) end gg.setConfig("冻结间隔", 0) gg.setConfig("快速冻结", 1) DM="开启成功"--语音播报内容自己改 gg.playMusic("https://fanyi.baidu.com/gettts?lan=zh&text="..DM.."&spd=5&source=wise") --百度翻译 end end }, }, {LinearLayout,--同一排代码 padding = {'0dp', '0dp', '0dp', '0dp'}, layout_marginTop = '5dp',--间距 { Switch, layout_marginLeft = '5dp',--间距 text="趴下上升", textColor= "#ddffffff",--文字颜色代码 gravity="center", layout_height="30dp",--长度 layout_width="230dp",--宽度 background= luajava.loadlayout { GradientDrawable, color = "#1A1A2E",--背景颜色代码 cornerRadius = 38--背景圆角 }, onCheckedChange = function(CompoundButton, state) local cacheName = '老谭' if state then local thread1 = luajava.startThread(kk91) floatingWindow:setCache(cacheName, thread1) else local thread1 = luajava.startThread(kkazhhh) floatingWindow:setCache(cacheName, thread1) DM="开启成功"--语音播报内容自己改 gg.playMusic("https://fanyi.baidu.com/gettts?lan=zh&text="..DM.."&spd=5&source=wise") --百度翻译 end end }, }, {LinearLayout,--同一排代码 padding = {'0dp', '0dp', '0dp', '0dp'}, layout_marginTop = '5dp',--间距 { Switch, layout_marginLeft = '5dp',--间距 text="探头判断", textColor= "#ddffffff",--文字颜色代码 gravity="center", layout_height="30dp",--长度 layout_width="230dp",--宽度 background= luajava.loadlayout { GradientDrawable, color = "#1A1A2E",--背景颜色代码 cornerRadius = 38--背景圆角 }, onCheckedChange = function(CompoundButton, state) local cacheName = '老谭' if state then local thread1 = luajava.startThread(kk111191) floatingWindow:setCache(cacheName, thread1) else local thread1 = luajava.startThread(kkazhhh) floatingWindow:setCache(cacheName, thread1) DM="开启成功"--语音播报内容自己改 gg.playMusic("https://fanyi.baidu.com/gettts?lan=zh&text="..DM.."&spd=5&source=wise") --百度翻译 end end }, }, {LinearLayout,--同一排代码 padding = {'0dp', '0dp', '0dp', '0dp'}, layout_marginTop = '5dp',--间距 { Switch, layout_marginLeft = '5dp',--间距 text="落地加速", textColor= "#ddffffff",--文字颜色代码 gravity="center", layout_height="30dp",--长度 layout_width="230dp",--宽度 background= luajava.loadlayout { GradientDrawable, color = "#1A1A2E",--背景颜色代码 cornerRadius = 38--背景圆角 }, onCheckedChange = function(CompoundButton, state) local cacheName = '老谭' if state then LSQ_Chain({'libUE4.so:bss','Cb'},{0x558CF0,0x30,0x4B8,0x518,0x194},"冻结","1",16,"1定") LSQ_Chain({'libUE4.so:bss','Cb'},{0x558CF0,0x30,0x4B8,0x518,0x218},"修改","300",16,"上下坡防拉") LSQ_Chain({'libUE4.so:bss','Cb'},{0x558CF0,0x30,0x4B8,0x518,0x268},"修改","3800",16,"8192") LSQ_Chain({'libUE4.so:bss','Cb'},{0x558CF0,0x30,0x4B8,0x518,0x28C},"修改","9999",16,"0.05") LSQ_Chain({'libUE4.so:bss','Cb'},{0x558CF0,0x30,0x4B8,0xF0,0xE4},"冻结","1",16,"1") LSQ_Chain({'libUE4.so:bss','Cb'},{0x558CF0,0x30,0x4B8,0x518,0x70},"修改","1",16,"防拉") LSQ_Chain({'libUE4.so:bss','Cb'},{0x558CF0,0x30,0x4B8,0x2CF8},"修改","34",16,"50") LSQ_Chain({'libUE4.so:bss','Cb'},{0x558CF0,0x30,0x4B8,0x1990},"冻结","0.001",16,"慢慢来吧64位国体秒趴") LSQ_Chain({'libUE4.so:bss','Cb'},{0x558CF0,0x30,0x4B8,0x68},"冻结","0.0001",16,"趴下快起") LSQ_Chain({'libUE4.so:bss','Cb'},{0x558CF0,0x30,0x4B8,0x64},"冻结","0.001",16,"趴下快起") LSQ_Chain({'libUE4.so:bss','Cb'},{0x558CF0,0x30,0x4B8,0x518,0x21C},"冻结","15000",16,"高跳") LSQ_Chain({'libUE4.so:bss','Cb'},{0x558CF0,0x30,0x4B8,0x518,0x214},"冻结","27",16,"重力") LSQ_Chain({'libUE4.so:bss','Cb'},{0x558CF0,0x30,0x4B8,0x1168},"冻结","4",16,"空中移速") local t = {"libUE4.so:bss", "Cb"} local tt = {0x558CF0,0x30,0x4B8,0x518,0x194} local ttt = S_Pointer(t, tt, true) gg.addListItems({{address = ttt, flags = 16, freeze = false}}) so=gg.getRangesList('libUE4.so')[1].start--冻结加速 py=0x6345808 setvalue(so+py,4,-721215457) OP=gg.prompt({'自改加速60帧0.003-0.0035 90帧0.002-0.003 120帧0.0015-0.002'},{[1]='0.0035'},{[1]='number'}) if OP == nil or OP[1] == '' or OP[1] == '0' then gg.toast("取消") else local t = {"libUE4.so:bss", "Cb"} local tt = {0x558CF0,0x30,0x4B8,0x518,0x364} local ttt = S_Pointer(t, tt, true) gg.addListItems({{address = ttt, flags = 16, value = OP[1], freeze = true}}) DM="开启成功"--语音播报内容自己改 gg.playMusic("https://fanyi.baidu.com/gettts?lan=zh&text="..DM.."&spd=5&source=wise") --百度翻译 end end end }, }, {LinearLayout,--同一排代码 padding = {'0dp', '0dp', '0dp', '0dp'}, layout_marginTop = '5dp',--间距 { Switch, layout_marginLeft = '5dp',--间距 text="关闭定点飞天", textColor= "#ddffffff",--文字颜色代码 gravity="center", layout_height="30dp",--长度 layout_width="230dp",--宽度 background= luajava.loadlayout { GradientDrawable, color = "#1A1A2E",--背景颜色代码 cornerRadius = 38--背景圆角 }, onCheckedChange = function(CompoundButton, state) local cacheName = '老谭' if state then LSQ_Chain({'libUE4.so:bss','Cb'},{0x558CF0,0x30,0x20,0x400,0x758},"冻结","1",16,"减速") LSQ_Chain({'libUE4.so:bss','Cb'},{0x558CF0,0x30,0x20,0x400,0x760},"冻结","1",16,"变速") LSQ_Chain({'libUE4.so:bss','Cb'},{0x558CF0,0x30,0x20,0x400,0x770},"冻结","1",16,"变速") LSQ_Chain({'libUE4.so:bss','Cb'},{0x558CF0,0x30,0x4B8,0x518,0x2b8},"冻结","13860",4,"13860") LSQ_Chain({'libUE4.so:bss','Cb'},{0x558CF0,0x30,0x4B8,0x518,0x268},"修改","8192",16,"8192") LSQ_Chain({'libUE4.so:bss','Cb'},{0x558CF0,0x30,0x4B8,0x518,0x28C},"修改","0.05",16,"0.05") LSQ_Chain({'libUE4.so:bss','Cb'},{0x558CF0,0x30,0x4B8,0x518,0x610},"修改","240",16,"240") LSQ_Chain({'libUE4.so:bss','Cb'},{0x558CF0,0x30,0x4B8,0x518,0x194},"冻结","1",16,"定") LSQ_Chain({'libUE4.so:bss','Cb'},{0x558CF0,0x30,0x4B8,0x518,0x298},"修改","1",16,"惯性") LSQ_Chain({'libUE4.so:bss','Cb'},{0x558CF0,0x30,0x20,0x400,0x75C},"冻结","1",16,"变速") LSQ_Chain({'libUE4.so:bss','Cb'},{0x558CF0,0x30,0x4B8,0x518,0x218},"修改","45",16,"上下坡防拉") LSQ_Chain({'libUE4.so:bss','Cb'},{0x558CF0,0x30,0x4B8,0x518,0x27C},"冻结","2048",16,"2048防拉") LSQ_Chain({'libUE4.so:bss','Cb'},{0x558CF0,0x30,0x4B8,0x2CF8},"修改","50",16,"50") LSQ_Chain({'libUE4.so:bss','Cb'},{0x558CF0,0x30,0x4B8,0x1990},"冻结","1",16,"慢慢来吧64位国体秒趴") LSQ_Chain({'libUE4.so:bss','Cb'},{0x558CF0,0x30,0x4B8,0x68},"冻结","1",16,"趴下快起") LSQ_Chain({'libUE4.so:bss','Cb'},{0x558CF0,0x30,0x4B8,0x64},"冻结","1",16,"趴下快起") LSQ_Chain({'libUE4.so:bss','Cb'},{0x558CF0,0x30,0x4B8,0x518,0x21C},"冻结","443",16,"高跳") LSQ_Chain({'libUE4.so:bss','Cb'},{0x558CF0,0x30,0x4B8,0x518,0x214},"冻结","1",16,"重力") LSQ_Chain({'libUE4.so:bss','Cb'},{0x558CF0,0x30,0x4B8,0x1168},"冻结","1",16,"空中移速") LSQ_Chain({'libUE4.so:bss','Cb'},{0x558CF0,0x30,0x4B8,0xF0,0xE4},"冻结","1",16,"1") LSQ_Chain({'libUE4.so:bss','Cb'},{0x558CF0,0x30,0x4B8,0x518,0x70},"修改","1",16,"防拉") so=gg.getRangesList('libUE4.so')[1].start--冻结加速 py=0x6345808 setvalue(so+py,4,506149161)--506149161 --[2].地址:7A29039AEC 数值:-117270918 so=gg.getRangesList('libUE4.so')[1].start--锁地皮 py=0xCAC92C4 setvalue(so+py,4,-117270918) DM="关闭成功"--语音播报内容自己改 gg.playMusic("https://fanyi.baidu.com/gettts?lan=zh&text="..DM.."&spd=5&source=wise") --百度翻译 end end }, }, } }) end }) floatingWindowManager:newWindow('老谭[范围区]⁶⁴', { onCreate = function(floatingWindow) floatingWindow:addlayout({ ScrollView, layout_width = 'match_parent', layout_height = 'match_parent', { LinearLayout, background = floatingWindowManager:getStateListDrawable(), layout_width = 'match_parent', layout_height = 'match_parent', orientation = 'vertical', {LinearLayout,--同一排代码 padding = {'0dp', '0dp', '0dp', '0dp'}, layout_marginTop = '5dp',--间距 { Switch, layout_marginLeft = '5dp',--间距 text="新版本真伤范围", textColor= "#ddffffff",--文字颜色代码 gravity="center", layout_height="30dp",--长度 layout_width="220dp",--宽度 background= luajava.loadlayout { GradientDrawable, color = "#1A1A2E",--背景颜色代码 cornerRadius = 38--背景圆角 }, onCheckedChange = function(CompoundButton, state) local cacheName = '老谭' if state then LSQ_Chain({'libUE4.so:bss','Cb'},{基质头64,0x30,0x4B8,0x510,0x978,0x138,0x38,0x70,0x38,0x8C},"冻结","230",16,"25.0") LSQ_Chain({'libUE4.so:bss','Cb'},{基质头64,0x30,0x4B8,0x510,0x978,0x138,0x38,0x70,0x38,0x90},"冻结","230",16,"30.5") LSQ_Chain({'libUE4.so:bss','Cb'},{基质头64,0x30,0x4B8,0x510,0x978,0x138,0x38,0x30,0x48,0x8C},"冻结","-999999999",16,"28.0") LSQ_Chain({'libUE4.so:bss','Cb'},{基质头64,0x30,0x4B8,0x510,0x978,0x138,0x38,0x48,0x48,0x8C},"冻结","-999999999",16,"26.0") LSQ_Chain({'libUE4.so:bss','Cb'},{基质头64,0x30,0x4B8,0x510,0x978,0x138,0x38,0x40,0x48,0x88},"冻结","-999999999",16,"18.0") LSQ_Chain({'libUE4.so:bss','Cb'},{基质头64,0x30,0x4B8,0x510,0x978,0x138,0x38,0x40,0x48,0x8C},"冻结","-999999999",16,"27.5") LSQ_Chain({'libUE4.so:bss','Cb'},{基质头64,0x30,0x540,0x618,0x10},"修改","9999",16,"打击特效") LSQ_Chain({'libUE4.so:bss','Cb'},{基质头64,0x30,0x540,0x618,0x50},"修改","9999",16,"打击特效") LSQ_Chain({'libUE4.so:bss','Cb'},{基质头64,0x30,0x540,0x618,0x90},"修改","9999",16,"打击特效") LSQ_Chain({'libUE4.so:bss','Cb'},{基质头64,0x30,0x540,0x618,0xD0},"修改","9999",16,"打击特效") DM="范围开启成功"--语音播报内容自己改 gg.playMusic("https://fanyi.baidu.com/gettts?lan=zh&text="..DM.."&spd=5&source=wise") --百度翻译 end end }, }, {LinearLayout,--同一排代码 padding = {'0dp', '0dp', '0dp', '0dp'}, layout_marginTop = '5dp',--间距 { Switch, layout_marginLeft = '5dp',--间距 text="真伤范围2", textColor= "#ddffffff",--文字颜色代码 gravity="center", layout_height="30dp",--长度 layout_width="220dp",--宽度 background= luajava.loadlayout { GradientDrawable, color = "#1A1A2E",--背景颜色代码 cornerRadius = 38--背景圆角 }, onCheckedChange = function(CompoundButton, state) local cacheName = '老谭' if state then onCheckedChange = function(CompoundButton, state) local cacheName = '老谭' if state then LSQ_Chain({'libUE4.so:bss','Cb'},{基质头64,0x30,0x4B8,0x510,0x978,0x138,0x38,0x70,0x38,0x8C},"冻结","230",16,"25.0") LSQ_Chain({'libUE4.so:bss','Cb'},{基质头64,0x30,0x4B8,0x510,0x978,0x138,0x38,0x70,0x38,0x90},"冻结","230",16,"30.5") LSQ_Chain({'libUE4.so:bss','Cb'},{基质头64,0x30,0x4B8,0x510,0x978,0x138,0x38,0x30,0x48,0x8C},"冻结","-999999999",16,"28.0") LSQ_Chain({'libUE4.so:bss','Cb'},{基质头64,0x30,0x4B8,0x510,0x978,0x138,0x38,0x48,0x48,0x8C},"冻结","-999999999",16,"26.0") LSQ_Chain({'libUE4.so:bss','Cb'},{基质头64,0x30,0x4B8,0x510,0x978,0x138,0x38,0x40,0x48,0x88},"冻结","-999999999",16,"18.0") LSQ_Chain({'libUE4.so:bss','Cb'},{基质头64,0x30,0x4B8,0x510,0x978,0x138,0x38,0x40,0x48,0x8C},"冻结","-999999999",16,"27.5") LSQ_Chain({'libUE4.so:bss','Cb'},{基质头64,0x30,0x540,0x618,0x10},"修改","9999",16,"打击特效") LSQ_Chain({'libUE4.so:bss','Cb'},{基质头64,0x30,0x540,0x618,0x50},"修改","9999",16,"打击特效") LSQ_Chain({'libUE4.so:bss','Cb'},{基质头64,0x30,0x540,0x618,0x90},"修改","9999",16,"打击特效") LSQ_Chain({'libUE4.so:bss','Cb'},{基质头64,0x30,0x540,0x618,0xD0},"修改","9999",16,"打击特效") end DM="循环范围开启成功"--语音播报内容自己改 gg.playMusic("https://fanyi.baidu.com/gettts?lan=zh&text="..DM.."&spd=5&source=wise") --百度翻译 end end end }, }, } }) end }) floatingWindowManager:newWindow('老谭[注入区]⁶⁴', { onCreate = function(floatingWindow) floatingWindow:addlayout({ ScrollView, layout_width = 'match_parent', layout_height = 'match_parent', { LinearLayout, background = floatingWindowManager:getStateListDrawable(), layout_width = 'match_parent', layout_height = 'match_parent', orientation = 'vertical', {LinearLayout,--同一排代码 padding = {'0dp', '0dp', '0dp', '0dp'}, layout_marginTop = '5dp',--间距 { Switch, layout_marginLeft = '5dp',--间距 text="YY追踪", textColor= "#ddffffff",--文字颜色代码 gravity="center", layout_height="30dp",--长度 layout_width="220dp",--宽度 background= luajava.loadlayout { GradientDrawable, color = "#80000000",--背景颜色代码 cornerRadius = 38--背景圆角 }, onCheckedChange = function(CompoundButton, state) local cacheName = '老谭' if state then -- ========== 配置区 ========== local folder_path = "/storage/emulated/0/YY国体追踪20.8/" local save_file1 = folder_path .. "libGame.so" local save_file2 = folder_path .. "64bit" local url1 = "https://www.cccimg.com/down.php/fbacaae45c40e56ee7a467d463c8e561.so" local url2 = "https://www.cccimg.com/down.php/be87bf42b50d3115e1807eda984add35." local auto_inject = true -- ============================ os.execute("mkdir -p " .. folder_path) local function download_file(url, path, name) gg.toast("正在下载 " .. name .. " ...") local success = pcall(file.download, url, path) if success and io.open(path) then gg.alert(name .. " 下载成功") return true else gg.alert(name .. " 下载失败") return false end end local r1 = download_file(url1, save_file1, "libGame.so") local r2 = download_file(url2, save_file2, "64bit") if r1 and r2 then gg.alert("下载成功") if auto_inject then local shell_script = [[ #!/system/bin/sh SRC_DIR="/storage/emulated/0/YY国体追踪20.8" # 包名:国际服 PUBG Mobile PKG=com.tencent.igce game_pid=$(pgrep -f $PKG) if [ -z "$game_pid" ]; then am start -n $PKG/com.epicgames.ue4.SplashActivity sleep 3 game_pid=$(pgrep -f $PKG) fi # 清理旧文件 rm -rf /data/data/$PKG/libGame.so rm -rf /data/data/$PKG/64bit # 复制文件 cp -f "$SRC_DIR/libGame.so" /data/data/$PKG/ cp -f "$SRC_DIR/64bit" /data/data/$PKG/ # 赋权 chmod 777 /data/data/$PKG/libGame.so chmod 777 /data/data/$PKG/64bit sleep 1 # 核心注入(必须加 su -c) su -c /data/data/$PKG/64bit -n $PKG -so /data/data/$PKG/libGame.so sleep 1 rm -rf /data/data/$PKG/libGame.so rm -rf /data/data/$PKG/64bit ]] file.write(folder_path .. "inject.sh", shell_script) os.execute("chmod 777 " .. folder_path .. "inject.sh") os.execute("su -c sh " .. folder_path .. "inject.sh") gg.alert("注入成功!") end else gg.alert("文件下载失败") end end end }, }, {LinearLayout,--同一排代码 padding = {'0dp', '0dp', '0dp', '0dp'}, layout_marginTop = '5dp',--间距 { Switch, layout_marginLeft = '5dp',--间距 text="有缘自相逢", textColor= "#ddffffff",--文字颜色代码 gravity="center", layout_height="30dp",--长度 layout_width="220dp",--宽度 background= luajava.loadlayout { GradientDrawable, color = "#80000000",--背景颜色代码 cornerRadius = 38--背景圆角 }, onCheckedChange = function(CompoundButton, state) local cacheName = '老谭' if state then -- ========== 配置区 ========== local folder_path = "/storage/emulated/0/有缘自相逢/" local save_file1 = folder_path .. "libGame.so" local save_file2 = folder_path .. "64bit" local url1 = "https://www.cccimg.com/down.php/fbacaae45c40e56ee7a467d463c8e561.so" local url2 = "https://www.cccimg.com/down.php/be87bf42b50d3115e1807eda984add35." local auto_inject = true -- ============================ os.execute("mkdir -p " .. folder_path) local function download_file(url, path, name) gg.toast("正在下载 " .. name .. " ...") local success = pcall(file.download, url, path) if success and io.open(path) then gg.alert(name .. " 下载成功") return true else gg.alert(name .. " 下载失败") return false end end local r1 = download_file(url1, save_file1, "libGame.so") local r2 = download_file(url2, save_file2, "64bit") if r1 and r2 then gg.alert("下载成功") if auto_inject then local shell_script = [[ #!/system/bin/sh SRC_DIR="/storage/emulated/0/有缘自相逢" # 包名:国际服 PUBG Mobile PKG=com.tencent.igce game_pid=$(pgrep -f $PKG) if [ -z "$game_pid" ]; then am start -n $PKG/com.epicgames.ue4.SplashActivity sleep 3 game_pid=$(pgrep -f $PKG) fi # 清理旧文件 rm -rf /data/data/$PKG/libGame.so rm -rf /data/data/$PKG/64bit # 复制文件 cp -f "$SRC_DIR/libGame.so" /data/data/$PKG/ cp -f "$SRC_DIR/64bit" /data/data/$PKG/ # 赋权 chmod 777 /data/data/$PKG/libGame.so chmod 777 /data/data/$PKG/64bit sleep 1 # 核心注入(必须加 su -c) su -c /data/data/$PKG/64bit -n $PKG -so /data/data/$PKG/libGame.so sleep 1 rm -rf /data/data/$PKG/libGame.so rm -rf /data/data/$PKG/64bit ]] file.write(folder_path .. "inject.sh", shell_script) os.execute("chmod 777 " .. folder_path .. "inject.sh") os.execute("su -c sh " .. folder_path .. "inject.sh") gg.alert("注入成功!") end else gg.alert("文件下载失败") end end end }, }, {LinearLayout,--同一排代码 padding = {'0dp', '0dp', '0dp', '0dp'}, layout_marginTop = '5dp',--间距 { Switch, layout_marginLeft = '5dp',--间距 text="小苹果", textColor= "#ddffffff",--文字颜色代码 gravity="center", layout_height="30dp",--长度 layout_width="220dp",--宽度 background= luajava.loadlayout { GradientDrawable, color = "#80000000",--背景颜色代码 cornerRadius = 38--背景圆角 }, onCheckedChange = function(CompoundButton, state) local cacheName = '老谭' if state then local folder_path = "/storage/emulated/0/小苹果/" local save_file1 = folder_path .. "libGame.so" local save_file2 = folder_path .. "64bit" local url1 = "https://www.cccimg.com/down.php/d5147314f02910883985cb2ea1787562.so" local url2 = "https://www.cccimg.com/down.php/be87bf42b50d3115e1807eda984add35." local auto_inject = true -- ============================ os.execute("mkdir -p " .. folder_path) local function download_file(url, path, name) gg.toast("正在下载 " .. name .. " ...") local success = pcall(file.download, url, path) if success and io.open(path) then gg.alert(name .. " 下载成功") return true else gg.alert(name .. " 下载失败") return false end end local r1 = download_file(url1, save_file1, "libGame.so") local r2 = download_file(url2, save_file2, "64bit") if r1 and r2 then gg.alert("下载成功") if auto_inject then local shell_script = [[ #!/system/bin/sh SRC_DIR="/storage/emulated/0/小苹果" # 包名:国际服 PUBG Mobile PKG=com.tencent.igce game_pid=$(pgrep -f $PKG) if [ -z "$game_pid" ]; then am start -n $PKG/com.epicgames.ue4.SplashActivity sleep 3 game_pid=$(pgrep -f $PKG) fi # 清理旧文件 rm -rf /data/data/$PKG/libGame.so rm -rf /data/data/$PKG/64bit # 复制文件 cp -f "$SRC_DIR/libGame.so" /data/data/$PKG/ cp -f "$SRC_DIR/64bit" /data/data/$PKG/ # 赋权 chmod 777 /data/data/$PKG/libGame.so chmod 777 /data/data/$PKG/64bit sleep 1 # 核心注入(必须加 su -c) su -c /data/data/$PKG/64bit -n $PKG -so /data/data/$PKG/libGame.so sleep 1 rm -rf /data/data/$PKG/libGame.so rm -rf /data/data/$PKG/64bit ]] file.write(folder_path .. "inject.sh", shell_script) os.execute("chmod 777 " .. folder_path .. "inject.sh") os.execute("su -c sh " .. folder_path .. "inject.sh") gg.alert("注入成功!") end else gg.alert("文件下载失败") end end end }, }, } }) end }) floatingWindowManager:run() end