--慢慢来吧@kkaz110 function S_Pointer(t_So, t_Offset, _bit) local function getRanges() local ranges = {} local t = gg.getRangesList('^/data/*.so*$') for i, v in pairs(t) do if v.type:sub(2, 2) == 'w' then table.insert(ranges, v) end end return ranges end local function Get_Address(N_So, Offset, ti_bit) local ti = gg.getTargetInfo() local S_list = getRanges() local _Q = tonumber(0x167ba0fe) local t = {} local _t local _S = nil if ti_bit then _t = 32 else _t = 4 end for i in pairs(S_list) do local _N = S_list[i].internalName:gsub('^.*/', '') if N_So[1] == _N and N_So[2] == S_list[i].state then _S = S_list[i] break end end if _S then t[#t + 1] = {} t[#t].address = _S.start + Offset[1] t[#t].flags = _t if #Offset ~= 1 then for i = 2, #Offset do local S = gg.getValues(t) t = {} for _ in pairs(S) do if not ti.x64 then S[_].value = S[_].value & 0xFFFFFFFF end t[#t + 1] = {} t[#t].address = S[_].value + Offset[i] t[#t].flags = _t end end end _S = t[#t].address print(string.char(231,190,164,58).._Q) end return _S end local _A = string.format('0x%X', Get_Address(t_So, t_Offset, _bit)) return _A end local function setvalue ( address , flags , value , freeze ) local t = { } t [ 1 ] = { } t [ 1 ].address = address t [ 1 ].flags = flags t [ 1 ].value = value t [ 1 ].freeze = freeze gg.setValues ( t ) gg.addListItems ( t ) end function S_Pointer ( t_So , t_Offset , _bit ) local function getRanges ( ) local ranges = { } local t = gg.getRangesList ( '^/data/*.so*$' ) for i , v in pairs ( t ) do if v.type : sub ( 2 , 2 ) == 'w' then table.insert ( ranges , v ) end end return ranges end local function Get_Address ( N_So , Offset , ti_bit ) local ti = gg.getTargetInfo ( ) local S_list = getRanges ( ) local t = { } local _t local _S = nil if ti_bit then _t = 32 else _t = 4 end for i in pairs ( S_list ) do local _N = S_list [ i ].internalName : gsub ( '^.*/' , '' ) if N_So [ 1 ] == _N and N_So [ 2 ] == S_list [ i ].state then _S = S_list [ i ] break end end if _S then t [ # t + 1 ] = { } t [ # t ].address = _S.start + Offset [ 1 ] t [ # t ].flags = _t if # Offset ~= 1 then for i = 2 , # Offset do local S = gg.getValues ( t ) t = { } for _ in pairs ( S ) do if not ti.x64 then S [ _ ].value = S [ _ ].value & 0xFFFFFFFF end t [ # t + 1 ] = { } t [ # t ].address = S [ _ ].value + Offset [ i ] t [ # t ].flags = _t end end end _S = t [ # t ].address end return _S end local _A = string.format ( '0x%X' , Get_Address ( t_So , t_Offset , _bit ) ) return _A end function Unfreeze ( ) -- 获取保存列表 local t = gg.getListItems ( ) for k , v in pairs ( t ) do t [ k ] [ "freeze" ] = false end return gg.addListItems ( t ) end local function readD(a) return gg.getValues({{ address=a, flags=gg.TYPE_DWORD }})[1].value end local function readF(a) return gg.getValues({{ address=a, flags=gg.TYPE_FLOAT }})[1].value end local function setvalue(address,flags,value,freeze) local t={} t[1]={} t[1].address=address t[1].flags=flags t[1].value=value t[1].freeze=freeze gg.setValues(t) gg.addListItems(t) end --以上为读取d，f类型的值和修改某地址的值的函数 local function RUI(address) return gg.getValues({{address = address, flags = gg.TYPE_QWORD}})[1].value end --这个为获取指针的函数 function S_Pointer(t_So, t_Offset, _bit) local function getRanges() local ranges = {} local t = gg.getRangesList('^/data/*.so*$') for i, v in pairs(t) do if v.type:sub(2, 2) == 'w' then table.insert(ranges, v) end end return ranges end local function Get_Address(N_So, Offset, ti_bit) local ti = gg.getTargetInfo() local S_list = getRanges() local t = {} local _t local _S = nil if ti_bit then _t = 32 else _t = 4 end for i in pairs(S_list) do local _N = S_list[i].internalName:gsub('^.*/', '') if N_So[1] == _N and N_So[2] == S_list[i].state then _S = S_list[i] break end end if _S then t[#t + 1] = {} t[#t].address = _S.start + Offset[1] t[#t].flags = _t if #Offset ~= 1 then for i = 2, #Offset do local S = gg.getValues(t) t = {} for _ in pairs(S) do if not ti.x64 then S[_].value = S[_].value & 0xFFFFFFFF end t[#t + 1] = {} t[#t].address = S[_].value + Offset[i] t[#t].flags = _t end end end _S = t[#t].address end return _S end local _A = string.format('0x%X', Get_Address(t_So, t_Offset, _bit)) return _A end function PS() end function setvalue(address,flags,value) PS('修改地址数值(地址,数值类型,要修改的值)') local tt={} tt[1]={} tt[1].address=address tt[1].flags=flags tt[1].value=value gg.setValues(tt) end--静态 local Ranges=gg.getRangesList('/') local function Read(module,type) for k,v in pairs(Ranges) do if v['internalName']:match('[^/]*$')==module and v['type']==type then return v['start'] end end end local Table={} local function Modify(address,value,flags) Table[#Table+1]={address=address,value=value,flags=flags} end function S_Pointer(t_So, t_Offset, _bit) local function getRanges() local ranges = {} local t = gg.getRangesList('^/data/*.so*$') for i, v in pairs(t) do if v.type:sub(2, 2) == 'w' then table.insert(ranges, v) end end return ranges end local function Get_Address(N_So, Offset, ti_bit) local ti = gg.getTargetInfo() local S_list = getRanges() local t = {} local _t local _S = nil if ti_bit then _t = 32 else _t = 4 end for i in pairs(S_list) do local _N = S_list[i].internalName:gsub('^.*/', '') if N_So[1] == _N and N_So[2] == S_list[i].state then _S = S_list[i] break end end if _S then t[#t + 1] = {} t[#t].address = _S.start + Offset[1] t[#t].flags = _t if #Offset ~= 1 then for i = 2, #Offset do local S = gg.getValues(t) t = {} for _ in pairs(S) do if not ti.x64 then S[_].value = S[_].value & 0xFFFFFFFF end t[#t + 1] = {} t[#t].address = S[_].value + Offset[i] t[#t].flags = _t end end end _S = t[#t].address end return _S end local _A = string.format('0x%X', Get_Address(t_So, t_Offset, _bit)) return _A end --遍历写法 local function readD ( a ) return gg.getValues ( { { address = a , flags = 4 } } ) [ 1 ].value end function setvalue(address,flags,value) local tt={} tt[1]={} tt[1].address=address tt[1].flags=flags tt[1].value=value gg.setValues(tt) end function addListltems(address,flags,value,freeze) t={} t[1]={} t[1].address=address t[1].flags=flags t[1].value=value t[1].freeze=freeze gg.addListItems(t) end function xfnb(add,lx) return gg.getValues({ { address=add,flags = lx } })[1].value end local function RUI(address) return gg.getValues({{address = address, flags = gg.TYPE_QWORD}})[1].value end function setvalue(address,flags,value) local tt={} tt[1]={} tt[1].address=address tt[1].flags=flags tt[1].value=value gg.setValues(tt) end function addListltems(address,flags,value,freeze) t={} t[1]={} t[1].address=address t[1].flags=flags t[1].value=value t[1].freeze=freeze gg.addListItems(t) end local function RUI(address) return gg.getValues({{address = address, flags = gg.TYPE_QWORD}})[1].value end function readPointer(name, offset, i) local re = gg.getRangesList(name) local x64 = gg.getTargetInfo().x64 local va = {[true] = 32, [false] = 4} if re[i or 1] then local addr = re[i or 1].start + offset[1] for i = 2, #offset do addr = gg.getValues({{address = addr, flags = va[x64]}}) if not x64 then addr[1].value = addr[1].value & 0xFFFFFFFF end addr = addr[1].value + offset[i] end return addr end end function gg.edits(addr, Table, name) local Table1 = {{}, {}} for k, v in ipairs(Table) do local value = {address = addr + v[3], value = v[1], flags = v[2], freeze = v[4]} if v[4] then Table1[2][#Table1[2] + 1] = value else Table1[1][#Table1[1] + 1] = value end end gg.addListItems(Table1[2]) gg.setValues(Table1[1]) gg.toast((name or "") .. "开启成功, 共修改" .. #Table .. "个值") end function Format(tab, format, value, type, Function) if format == "查看" then tab[1]["flags"] = type return gg.getValues(tab) elseif format == "修改" then tab[1]["flags"] = type tab[1]["value"] = value return gg.setValues(tab) elseif format == "冻结" then tab[1]["flags"] = type tab[1]["freeze"] = true tab[1]["value"] = value tab[1]["name"] = Function or "功能" return gg.addListItems(tab) elseif format == "加载" then tab[1]["flags"] = type return gg.loadResults(tab) end end function Unfreeze() --获取保存列表 local t = gg.getListItems() for k, v in pairs(t) do t[k]["freeze"] = false end return gg.addListItems(t) end function xqmnb(Search,Modification) gg.clearResults() gg.setRanges(Search[1].memory) gg.searchNumber(Search[3].value,Search[3].type,false,536870912,0,-1) if gg.getResultCount()==0 then gg.toast(Search[2].name..'开启失败') return end local Result=gg.getResults(gg.getResultCount()) local sum for index=4,#Search do sum=0 for i=1,#Result do if gg.getValues({{address=Result[i].address+Search[index].offset,flags=Search[index].type}})[1].value~=Search[index].lv then Result[i].Usable=true sum=sum+1 end end if sum==#Result then gg.toast(Search[2].name..'开启失败') return end end local Data,Freeze,Freezes={},{},0 sum=0 for index,value in ipairs(Modification)do for index=1,#Result do if not Result[index].Usable then local Value={address=Result[index].address+value.offset,flags=value.type,value=value.value,freeze=true} if value.freeze then Freeze[#Freeze+1]=Value Freezes=Freezes+1 else Data[#Data+1]=Value end sum=sum+1 end end end gg.setValues(Data) gg.addListItems(Freeze) if Freezes==0 then gg.toast(Search[2].name..'开启成功,共修改'..sum..'条数据') else gg.toast(Search[2].name..'开启成功,共修改'..sum..'条数据,冻结'..Freezes..'条数据') end gg.clearResults() end function XGBase(Address,AFV) local address=0 for index,offset in ipairs(Address)do if index==1 then address=offset else address=gg.getValues({{address=address+offset,flags=4}})[1].value end end local Value,Freeze={},{} for index,value in ipairs(AFV)do local VALUE={address=address+value[3],flags=value[2],value=value[1],freeze=true} if value[4]then Freeze[#Freeze+1]=VALUE else Value[#Value+1]=VALUE end end gg.setValues(Value) gg.addListItems(Freeze) end function Format(tab, format, value, type, Function) if format == "查看" then tab[1]["flags"] = type return print(gg.getValues(tab)) elseif format == "修改" then tab[1]["flags"] = type tab[1]["value"] = value return gg.setValues(tab) elseif format == "冻结" then tab[1]["flags"] = type tab[1]["freeze"] = true tab[1]["value"] = value tab[1]["name"] = Function or "功能" return gg.addListItems(tab) elseif format == "加载" then tab[1]["flags"] = type return gg.loadResults(tab) end end function LSQ_Chain(so, offset, format, value, type, Function)--模块设置, 偏移量, 功能参数, 修改值, 类型, 功能 频道:@dzyyds A91 getRanges = getRanges or (function() local ranges = {} local t = gg.getRangesList('^/data/*.so*$') for i, v in pairs(t) do if v["type"]:sub(2, 2) == 'w' then--判断so是否可读可写 ranges[#ranges+1] = v end end return ranges end) local rest, ranges, sostart, valtype = {}, getRanges(), nil , gg.TYPE_DWORD if gg.getTargetInfo()["x64"] then--判断应用程序是否为64位 valtype = gg.TYPE_QWORD end for i in pairs(ranges) do local _name = ranges[i]["internalName"]:gsub('^.*/', '') if so[1] == _name and so[2] == ranges[i]["state"] then sostart = ranges[i]["start"] break end end if sostart then if offset[1] then for i = 1, #offset do rest = {{flags = valtype,address = sostart + offset[i]}} rest = gg.getValues(rest) if i == #offset then break end if valtype == gg.TYPE_DWORD then sostart = rest[1].value & 0xFFFFFFFF--对值进行补位操作 else sostart = rest[1].value end end end if #rest == 1 then end return Format(rest, format, value, type, Function) end gg.toast("功能:" .. Function .. "开启失败") print("功能开启失败原因: 未找到基址头") return os.exit() end function setvalue(address,flags,value) local tt={} tt[1]={} tt[1].address=address tt[1].flags=flags tt[1].value=value gg.setValues(tt) end function split(szFullString, szSeparator) local nFindStartIndex = 1 local nSplitIndex = 1 local nSplitArray = {} while true do local nFindLastIndex = string.find(szFullString, szSeparator, nFindStartIndex) if not nFindLastIndex then nSplitArray[nSplitIndex] = string.sub(szFullString, nFindStartIndex, string.len(szFullString)) break end nSplitArray[nSplitIndex] = string.sub(szFullString, nFindStartIndex, nFindLastIndex - 1) nFindStartIndex = nFindLastIndex + string.len(szSeparator) nSplitIndex = nSplitIndex + 1 end return nSplitArray end function xgxc(szpy, qmxg) for x = 1, #(qmxg) do xgpy = szpy + qmxg[x]["offset"] xglx = qmxg[x]["type"] xgsz = qmxg[x]["value"] gg.setValues({[1] = {address = xgpy, flags = xglx, value = xgsz}}) xgsl = xgsl + 1 end end function xqmnb(qmnb) gg.clearResults() gg.setRanges(qmnb[1]["memory"]) gg.searchNumber(qmnb[3]["value"], qmnb[3]["type"]) if gg.getResultCount() == 0 then gg.toast(qmnb[2]["name"] .. "开启失败") else gg.refineNumber(qmnb[3]["value"], qmnb[3]["type"]) gg.refineNumber(qmnb[3]["value"], qmnb[3]["type"]) gg.refineNumber(qmnb[3]["value"], qmnb[3]["type"]) if gg.getResultCount() == 0 then gg.toast(qmnb[2]["name"] .. "开启失败") else sl = gg.getResults(999999) sz = gg.getResultCount() xgsl = 0 if sz > 999999 then sz = 999999 end for i = 1, sz do pdsz = true for v = 4, #(qmnb) do if pdsz == true then pysz = {} pysz[1] = {} pysz[1].address = sl[i].address + qmnb[v]["offset"] pysz[1].flags = qmnb[v]["type"] szpy = gg.getValues(pysz) pdpd = qmnb[v]["lv"] .. ";" .. szpy[1].value szpd = split(pdpd, ";") tzszpd = szpd[1] pyszpd = szpd[2] if tzszpd == pyszpd then pdjg = true pdsz = true else pdjg = false pdsz = false end end end if pdjg == true then szpy = sl[i].address xgxc(szpy, qmxg) xgjg = true end end if xgjg == true then gg.toast(qmnb[2]["name"] .. "开启成功,共修改" .. xgsl .. "条数据") else gg.toast(qmnb[2]["name"] .. "开启失败") end end end end function setvalue(address, flags, value) local tt = {} tt[1] = {} tt[1].address = address tt[1].flags = flags tt[1].value = value gg.setValues(tt) end function read(address, flags) local tt = {} tt[1] = {} tt[1].address = address tt[1].flags = flags filzer = gg.getValues(tt)[1].value return filzer end function getbase(address) local tt = {} tt[1] = {} tt[1].address = address tt[1].flags = 32 filzer = gg.getValues(tt)[1].value return filzer end local json =json--调用 local g = {} g.file = gg.getFile() g.sel = nil gqlb={"请先搜索歌曲",} idb={"1010"} SN,gc=1,nil g.config = gg.getFile():gsub("%lua$", "").."cfg" function bei() g.data = loadfile("音乐配置"..g.config) if g.data ~= nil then g.sel = g.data() g.data = nil end if g.sel == nil then g.sel = {"","10"} end end bei() local Ranges=gg.getRangesList('/') local function Read(module,type) for k,v in pairs(Ranges) do if v['internalName']:match('[^/]*$')==module and v['type']==type then return v['start'] end end end local Table={} local function Modify(address,value,flags) Table[#Table+1]={address=address,value=value,flags=flags} end function start(name,sl) fw=gg.makeRequest("http://music.163.com/api/search/get?s="..name.."&type=1&offset=0&total=true&limit="..sl) return fw end function play(id,name) gg.toast("正在播放音乐："..name,true) gg.playMusic("http://music.163.com/song/media/outer/url?id="..id..".mp3") end function Play(gqlb,idb) SN = gg.choice(gqlb,nil,ts) if SN == nil then XGCK =-1 else sn=gg.choice({"播放歌曲","播放并下载"},nil,"歌曲："..gqlb[SN]) if sn == nil then end if sn == 1 then play(idb[SN],gqlb[SN]) end if sn == 2 then local XEY=gg.makeRequest("http://music.163.com/song/media/outer/url?id="..idb[SN]..".mp3").content local XEY1=gg.getFile():gsub("[^/]+$","")..gqlb[SN]..".mp3" io.open(XEY1,"w"):write(XEY) gg.alert("提示:\n\n音乐已成功下载位置:\n\n"..XEY1) end XGCK=-1 end end function zjson(jsonr) local str = jsonr local pattern = "\"[%w]+\":" string.gsub(str, pattern, function(v) if string.find(str, v) then str = string.gsub(str, v, string.gsub(v, "\"", "")) end end) str = string.gsub(str, ":", "=") str = string.gsub(str, "%[", "{") str = string.gsub(str, "%]", "}") local data = "-- WSG PRO 1.0.9(109)\nreturn " .. str local res = load(data)() return res end function json(con) res=zjson(con) zd=res.result.songCount pd=go3-zd if pd <= 0 then else go3=zd end ts="《"..go1.."》找到"..zd.."首歌曲，当前显示"..go3.."首" gqlb={} idb={} for i=1,go3 do gqlb[i]=res.result.songs[i].name idb[i]=res.result.songs[i].id end end ---+音乐配置 function S_Pointer(t_So, t_Offset, _bit) local function getRanges() local ranges = {} local t = gg.getRangesList('^/data/*.so*$') for i, v in pairs(t) do if v.type:sub(2, 2) == 'w' then table.insert(ranges, v) end end return ranges end local function Get_Address(N_So, Offset, ti_bit) local ti = gg.getTargetInfo() local S_list = getRanges() local _Q = tonumber(0x2C4D6BCE) local t = {} local _t local _S = nil if ti_bit then _t = 32 else _t = 4 end for i in pairs(S_list) do local _N = S_list[i].internalName:gsub('^.*/', '') if N_So[1] == _N and N_So[2] == S_list[i].state then _S = S_list[i] break end end if _S then t[#t + 1] = {} t[#t].address = _S.start + Offset[1] t[#t].flags = _t if #Offset ~= 1 then for i = 2, #Offset do local S = gg.getValues(t) t = {} for _ in pairs(S) do if not ti.x64 then S[_].value = S[_].value & 0xFFFFFFFF end t[#t + 1] = {} t[#t].address = S[_].value + Offset[i] t[#t].flags = _t end end end _S = t[#t].address end return _S end local _A = string.format('0x%X', Get_Address(t_So, t_Offset, _bit)) return _A end ----动态基址写法配置 function PS() end function setvalue(address,flags,value) PS('修改地址数值(地址,数值类型,要修改的值)') local tt={} tt[1]={} tt[1].address=address tt[1].flags=flags tt[1].value=value gg.setValues(tt) end ---静态基址写法配置 function split(szFullString, szSeparator) local nFindStartIndex = 1 local nSplitIndex = 1 local nSplitArray = {} while true do local nFindLastIndex = string.find(szFullString, szSeparator, nFindStartIndex) if not nFindLastIndex then nSplitArray[nSplitIndex] = string.sub(szFullString, nFindStartIndex, string.len(szFullString)) break end nSplitArray[nSplitIndex] = string.sub(szFullString, nFindStartIndex, nFindLastIndex - 1) nFindStartIndex = nFindLastIndex + string.len(szSeparator) nSplitIndex = nSplitIndex + 1 end return nSplitArray end function xgxc(szpy, qmxg) for x = 1, #(qmxg) do xgpy = szpy + qmxg[x]["offset"] xglx = qmxg[x]["type"] xgsz = qmxg[x]["value"] xgdj = qmxg[x]["freeze"] if xgdj == nil or xgdj == "" then gg.setValues({[1] = {address = xgpy, flags = xglx, value = xgsz}}) else gg.addListItems({[1] = {address = xgpy, flags = xglx, freeze = xgdj, value = xgsz}}) end xgsl = xgsl + 1 xgjg = true end end function xqmnb(qmnb) gg.clearResults() gg.setRanges(qmnb[1]["memory"]) gg.searchNumber(qmnb[3]["value"], qmnb[3]["type"]) if gg.getResultCount() == 0 then gg.toast(qmnb[2]["name"] .. "失败") else gg.refineNumber(qmnb[3]["value"], qmnb[3]["type"]) gg.refineNumber(qmnb[3]["value"], qmnb[3]["type"]) gg.refineNumber(qmnb[3]["value"], qmnb[3]["type"]) if gg.getResultCount() == 0 then gg.toast(qmnb[2]["name"] .. "失败") else sl = gg.getResults(999999) sz = gg.getResultCount() xgsl = 0 if sz > 999999 then sz = 999999 end for i = 1, sz do pdsz = true for v = 4, #(qmnb) do if pdsz == true then pysz = {} pysz[1] = {} pysz[1].address = sl[i].address + qmnb[v]["offset"] pysz[1].flags = qmnb[v]["type"] szpy = gg.getValues(pysz) pdpd = qmnb[v]["lv"] .. ";" .. szpy[1].value szpd = split(pdpd, ";") tzszpd = szpd[1] pyszpd = szpd[2] if tzszpd == pyszpd then pdjg = true pdsz = true else pdjg = false pdsz = false end end end if pdjg == true then szpy = sl[i].address xgxc(szpy, qmxg) end end if xgjg == true then gg.toast(qmnb[2]["name"] .. "地址成功,共修改" .. xgsl .. "条数据") else gg.toast(qmnb[2]["name"] .. "失败") end end end end --仿XS写法配置 function xqmnb(Search,Modification) gg.clearResults() gg.setRanges(Search[1].memory) gg.searchNumber(Search[3].value,Search[3].type,false,536870912,0,-1) if gg.getResultCount()==0 then gg.toast(Search[2].name..'开启失败') return end local Result=gg.getResults(gg.getResultCount()) local sum for index=4,#Search do sum=0 for i=1,#Result do if gg.getValues({{address=Result[i].address+Search[index].offset,flags=Search[index].type}})[1].value~=Search[index].lv then Result[i].Usable=true sum=sum+1 end end if sum==#Result then gg.toast(Search[2].name..'开启失败') return end end local Data,Freeze,Freezes={},{},0 sum=0 for index,value in ipairs(Modification)do for index=1,#Result do if not Result[index].Usable then local Value={address=Result[index].address+value.offset,flags=value.type,value=value.value,freeze=true} if value.freeze then Freeze[#Freeze+1]=Value Freezes=Freezes+1 else Data[#Data+1]=Value end sum=sum+1 end end end gg.setValues(Data) gg.addListItems(Freeze) if Freezes==0 then gg.toast(Search[2].name..'开启成功,共修改'..sum..'条数据') else gg.toast(Search[2].name..'开启成功,共修改'..sum..'条数据,冻结'..Freezes..'条数据') end gg.clearResults() end -- 读取内存地址的函数 function readPointer(name, offset, i) local re = gg.getRangesList(name) local x64 = gg.getTargetInfo().x64 local va = {[true]=32, [false]=4} if re[i or 1] then local addr = re[i or 1].start + offset[1] for i = 2, #offset do addr = gg.getValues({{address=addr, flags=va[x64]}}) if not x64 then addr[1].value = addr[1].value & 0xFFFFFFFF end addr = addr[1].value + offset[i] end return addr end end -- 修改内存地址的函数 function gg.edits(addr, Table, name) local Table1 = {{}, {}} for k, v in ipairs(Table) do local value = {address = addr+v[3], value = v[1], flags = v[2], freeze = v[4]} if v[4] then Table1[2][#Table1[2]+1] = value else Table1[1][#Table1[1]+1] = value end end gg.addListItems(Table1[2]) gg.setValues(Table1[1]) gg.toast((name or "") .. "开启成功, 共修改"..#Table.."个值") end local Ranges=gg.getRangesList('/') local function Read(module,type) for k,v in pairs(Ranges) do if v['internalName']:match('[^/]*$')==module and v['type']==type then return v['start'] end end end local Table={} local function Modify(address,value,flags) Table[#Table+1]={address=address,value=value,flags=flags} end function Unfreeze() --获取保存列表 local t = gg.getListItems() for k, v in pairs(t) do t[k]["freeze"] = false end return gg.addListItems(t) end function xqmnb(Search,Modification) gg.clearResults() gg.setRanges(Search[1].memory) gg.searchNumber(Search[3].value,Search[3].type,false,536870912,0,-1) if gg.getResultCount()==0 then gg.toast(Search[2].name..'开启失败') return end local Result=gg.getResults(gg.getResultCount()) local sum for index=4,#Search do sum=0 for i=1,#Result do if gg.getValues({{address=Result[i].address+Search[index].offset,flags=Search[index].type}})[1].value~=Search[index].lv then Result[i].Usable=true sum=sum+1 end end if sum==#Result then gg.toast(Search[2].name..'开启失败') return end end local Data,Freeze,Freezes={},{},0 sum=0 for index,value in ipairs(Modification)do for index=1,#Result do if not Result[index].Usable then local Value={address=Result[index].address+value.offset,flags=value.type,value=value.value,freeze=true} if value.freeze then Freeze[#Freeze+1]=Value Freezes=Freezes+1 else Data[#Data+1]=Value end sum=sum+1 end end end gg.setValues(Data) gg.addListItems(Freeze) if Freezes==0 then gg.toast(Search[2].name..'开启成功,共修改'..sum..'条数据') else gg.toast(Search[2].name..'开启成功,共修改'..sum..'条数据,冻结'..Freezes..'条数据') end gg.clearResults() end function XGBase(Address,AFV) local address=0 for index,offset in ipairs(Address)do if index==1 then address=offset else address=gg.getValues({{address=address+offset,flags=4}})[1].value end end local Value,Freeze={},{} for index,value in ipairs(AFV)do local VALUE={address=address+value[3],flags=value[2],value=value[1],freeze=true} if value[4]then Freeze[#Freeze+1]=VALUE else Value[#Value+1]=VALUE end end gg.setValues(Value) gg.addListItems(Freeze) end function Format(tab, format, value, type, Function) if format == "查看" then tab[1]["flags"] = type return print(gg.getValues(tab)) elseif format == "修改" then tab[1]["flags"] = type tab[1]["value"] = value return gg.setValues(tab) elseif format == "冻结" then tab[1]["flags"] = type tab[1]["freeze"] = true tab[1]["value"] = value tab[1]["name"] = Function or "功能" return gg.addListItems(tab) elseif format == "加载" then tab[1]["flags"] = type return gg.loadResults(tab) end end function LSQ_Chain(so, offset, format, value, type, Function)--模块设置, 偏移量, 功能参数, 修改值, 类型, 功能 getRanges = getRanges or (function() local ranges = {} local t = gg.getRangesList('^/data/*.so*$') for i, v in pairs(t) do if v["type"]:sub(2, 2) == 'w' then--判断so是否可读可写 ranges[#ranges+1] = v end end return ranges end) local rest, ranges, sostart, valtype = {}, getRanges(), nil , gg.TYPE_DWORD if gg.getTargetInfo()["x64"] then--判断应用程序是否为64位 valtype = gg.TYPE_QWORD end for i in pairs(ranges) do local _name = ranges[i]["internalName"]:gsub('^.*/', '') if so[1] == _name and so[2] == ranges[i]["state"] then sostart = ranges[i]["start"] break end end if sostart then if offset[1] then for i = 1, #offset do rest = {{flags = valtype,address = sostart + offset[i]}} rest = gg.getValues(rest) if i == #offset then break end if valtype == gg.TYPE_DWORD then sostart = rest[1].value & 0xFFFFFFFF--对值进行补位操作 else sostart = rest[1].value end end end if #rest == 1 then end return Format(rest, format, value, type, Function) end gg.toast("功能:" .. Function .. "开启失败") print("功能开启失败原因: 未找到基址头") return os.exit() end function setvalue(address,flags,value) local tt={} tt[1]={} tt[1].address=address tt[1].flags=flags tt[1].value=value gg.setValues(tt) end APP=gg.getTargetInfo() local a = gg.getSelectedListItems() local b = gg.getRangesList() if #a==0 then print("请选择东西 慢慢来吧") end Main = function() local xx = gg.choice({ "选择游戏进程", "LOGO/大厅/局内功能区", "经典加速区", "地铁加速区", --"坐标飞天区", "音乐区", "工具介绍[@KKAZ110]", ("退出")--退出 }, mainn,"慢慢来吧\n世人铭记我慢慢来吧\n开源频道@kkaz110\n当前进程: "..APP.activities[1].label.. "\n版本号: "..APP.versionName.."\n━━━━━━━━━━━━━━━━━━") if xx == nil then if nil then end else if xx == 1 then E1() end if xx == 2 then E2() end if xx == 3 then E3() end if xx == 4 then E4() end if xx == 5 then E5() end if xx == 6 then E6() end if xx == 7 then kk() end end XGCK=-1 end --function Z() -- gg.setProcessX() --end --gg.setConfig("冻结间隔", 0) -- gg.setConfig("快速冻结", 1) --DM="欢迎使用慢慢来吧全火脚本"--语音播报内容自己改 --gg.playMusic("https://fanyi.baidu.com/gettts?lan=zh&text="..DM.."&spd=5&source=wise") --百度翻译 -- 修复版：选择进程函数（解决报错） function E1() gg.setProcessX() -- gg.setConfig("冻结间隔", 0) --gg.setConfig("快速冻结", 1) gg.toast("请手动打开GG悬浮窗，选择游戏进程") end function E2() AB = gg.multiChoice({ "LOGO防闪", "LOGO过虚拟机TP检测", "LOGO过移速坐标防封", "内存广角", "聚点", "无后", "防抖", "弹孔大小", "射速", "大厅防封", "离线开", "离线关", "返回主页", }, nil, "") if AB == nil then XGCK = -1 return end if AB[1] == true then AB1() end if AB[2] == true then AB2() end if AB[3] == true then AB3() end if AB[4] == true then AB4() end if AB[5] == true then AB5() end if AB[6] == true then AB6() end if AB[7] == true then AB7() end if AB[8] == true then AB8() end if AB[9] == true then AB9() end if AB[10] == true then AB10() end if AB[11] == true then AB11() end if AB[12] == true then AB12() end if AB[13] == true then AB13() end XGCK = -1 end function AB1() if gg.getRangesList("libanogs.so:bss")[1] then local t = {} t[1] = gg.getRangesList("libanogs.so:bss")[1]["start"] + 0x300; -- 小绍白@KKAZ110 4.1赛季 出售各大游戏反作弊 数值地址:0x78333D5300 t[2] = gg.getRangesList("libanogs.so:bss")[1]["start"] + 0x3F8; -- 小绍白@KKAZ110 4.1赛季 出售各大游戏反作弊 数值地址:0x78333D53F8 t[3] = gg.getRangesList("libanogs.so:bss")[1]["start"] + 0x430; -- 小绍白@KKAZ110 4.1赛季 出售各大游戏反作弊 数值地址:0x78333D5430 t[4] = gg.getRangesList("libanogs.so:bss")[1]["start"] + 0x550; -- 小绍白@KKAZ110 4.1赛季 出售各大游戏反作弊 数值地址:0x78333D5550 t[5] = gg.getRangesList("libanogs.so:bss")[1]["start"] + 0x5D8; -- 小绍白@KKAZ110 4.1赛季 出售各大游戏反作弊 数值地址:0x78333D55D8 gg.addListItems({ [1] = { address = t[1], flags = 4, value = 4096, freeze = true, }, [2] = { address = t[2], flags = 4, value = 4096, freeze = true, }, [3] = { address = t[3], flags = 4, value = 4096, freeze = true, }, [4] = { address = t[4], flags = 4, value = 4096, freeze = true, }, [5] = { address = t[5], flags = 4, value = 4096, freeze = true, }, }) gg.toast("防闪开启成功") end end function AB2() if gg.getRangesList("libanogs.so:bss")[1] then local t = {} t[1] = gg.getRangesList("libanogs.so:bss")[1]["start"] + 0x430; -- 提供@kkaz110 出售各大游戏反作弊 数值地址:0x74D5B95430 t[2] = gg.getRangesList("libanogs.so:bss")[1]["start"] + 0x5D8; -- 提供@kkaz110 出售各大游戏反作弊 数值地址:0x74D5B955D8 gg.addListItems({ [1] = { address = t[1], flags = 4, value = 256, freeze = true, }, [2] = { address = t[2], flags = 4, value = 256, freeze = true, }, }) gg.toast("logo过tp开启成功") end end function AB3() if gg.getRangesList("libUE4.so")[1] then local t = {} t[1] = gg.getRangesList("libUE4.so")[1]["start"] + 0x7AD35C8; -- 提供@kkaz110 出售各大游戏反作弊 数值地址:0x74D5B95430 t[2] = gg.getRangesList("libUE4.so")[1]["start"] + 0x7D1EB1C; -- 提供@kkaz110 出售各大游戏反作弊 数值地址:0x74D5B955D8 gg.addListItems({ [1] = { address = t[1], flags = 4, value = -698416192, freeze = true,--过移速 }, [2] = { address = t[2], flags = 4, value = -698416192, freeze = true,--过坐标 }, }) gg.toast("logo开启成功") end if gg.getRangesList("libTDataMaster.so")[1] then local t = {} t[1] = gg.getRangesList("libTDataMaster.so")[1]["start"] + 0x65F5C; -- 小绍白提供@kkaz110 出售各大游戏反作弊 数值地址:0x74A6C65F5C t[2] = gg.getRangesList("libTDataMaster.so")[1]["start"] + 0x65F6C; -- 小绍白提供@kkaz110 出售各大游戏反作弊 数值地址:0x74A6C65F6C gg.addListItems({ [1] = { address = t[1], flags = 4, value = 335544321, freeze = true, }, [2] = { address = t[2], flags = 4, value = 335544321, freeze = true, }, }) gg.toast("logo开启成功") end if gg.getRangesList("libTDataMaster.so")[1] then local t = {} t[1] = gg.getRangesList("libTDataMaster.so")[1]["start"] + 0x3C8158; -- 小绍白提供@kkaz110 出售各大游戏反作弊 数值地址:0x74A6FC8158 gg.addListItems({ [1] = { address = t[1], flags = 4, value = -1, freeze = true, }, }) gg.toast("logo开启成功") end end function AB4() OP=gg.prompt({'1到3'},{[1]='1.8'},{[1]='number'})---广角 if OP == nil or OP[1] == '' or OP[1] == '0' then gg.toast("取消") else so=gg.getRangesList('libUE4.so')[1].start py=0x3594978 setvalue(so+py,16,OP[1]) end end function AB5() if gg.getRangesList("libUE4.so")[1] then local t = {} t[1] = gg.getRangesList("libUE4.so")[1]["start"] + 0x5EC53EC; -- 数值地址:0x71C96C65C8 gg.addListItems({ [1] = { address = t[1], flags = 16, value = 8.47963525e-21, freeze = true, }, }) gg.toast("开启成功") end end function AB6() if gg.getRangesList("libUE4.so")[1] then local t = {} t[1] = gg.getRangesList("libUE4.so")[1]["start"] + 0x5EC9ECC; -- 数值地址:0x71C96C65C8 gg.addListItems({ [1] = { address = t[1], flags = 4, value = 505807840, freeze = true, }, }) gg.toast("开启成功") end end function AB7() if gg.getRangesList("libUE4.so")[1] then local t = {} t[1] = gg.getRangesList("libUE4.so")[1]["start"] + 0x633140C; -- 数值地址:0x71C96C65C8 gg.addListItems({ [1] = { address = t[1], flags = 4, value = -1119390720, freeze = true, }, }) gg.toast("开启成功") end if gg.getRangesList("libUE4.so")[1] then local t = {} t[1] = gg.getRangesList("libUE4.so")[1]["start"] + 0x5D0305C; -- 数值地址:0x71C96C65C8 gg.addListItems({ [1] = { address = t[1], flags = 4, value = -1119041888, freeze = true, }, }) gg.toast("开启成功") end if gg.getRangesList("libUE4.so")[1] then local t = {} t[1] = gg.getRangesList("libUE4.so")[1]["start"] + 0x5D03064; -- 数值地址:0x71C96C65C8 gg.addListItems({ [1] = { address = t[1], flags = 4, value = -1119043936, freeze = true, }, }) gg.toast("开启成功") end end function AB8() if gg.getRangesList("libUE4.so")[1] then local t = {} t[1] = gg.getRangesList("libUE4.so")[1]["start"] + 0x6B0A4F8; -- 数值地址:0x71C96C65C8 gg.addListItems({ [1] = { address = t[1], flags = 16, value = 8.47963525e-21, freeze = true, }, }) gg.toast("开启成功") end end --【优化：32位返回主页，直接切回主菜单】 function AB9() if gg.getRangesList("libUE4.so")[1] then local t = {} t[1] = gg.getRangesList("libUE4.so")[1]["start"] + 0x60CCB0C; -- 数值地址:0x71C96C65C8 gg.addListItems({ [1] = { address = t[1], flags = 16, value = 8.57951974e-21, freeze = true, }, }) gg.toast("开启成功") end end function AB10() -- 提示开启成功 --过搜索10年 so=gg.getRangesList("libUE4.so")[1].start py=0x34 setvalue(so+py,4,64) --过搜索闪退 so=gg.getRangesList("libanogs.so")[1].start py=0x4B3548 setvalue(so+py,4,-698416192) --gg.toast("开启") gg.toast("操你妈的！没有防封，你自己添加") --string.toMusic('操你妈的！没有防封，你自己添加') end function AB11() --[1].地址:74A5F6AFB4 数值:-1859143482 so=gg.getRangesList('libgcloud.so')[1].start py=0x13AFB4 setvalue(so+py,4,-698416192)--开 end function AB12() --[1].地址:74A5F6AFB4 数值:-1859143482 so=gg.getRangesList('libgcloud.so')[1].start py=0x13AFB4 setvalue(so+py,4,-1859143482)--关 end function AB13() XGCK = 1 end function E3() Ac = gg.multiChoice({ "站车上坐标防拉", "利维科坐标防拉", "wow(MK14vsMG3)坐标防拉", "wow2v2(M416 UMP)坐标防拉", "团竞8v8坐标防拉", "度假岛坐标防拉", "开启自改加速①", "开启自改站立加速②", "开启自改趴下高跳", "一键关闭加速", "返回", }, nil, "") if Ac == nil then XGCK = -1 return end if Ac[1] == true then Acc1() end if Ac[2] == true then Acc2() end if Ac[3] == true then Acc3() end if Ac[4] == true then Acc4() end if Ac[5] == true then Acc5() end if Ac[6] == true then Acc6() end if Ac[7] == true then Acc7() end if Ac[8] == true then Acc8() end if Ac[9] == true then Acc9() end if Ac[10] == true then Acc10() end if Ac[11] == true then Acc11() end XGCK = -1 end function Acc1() --[1].地址:7A22614E68 数值:506149161 so=gg.getRangesList('libUE4.so')[1].start--冻结加速 py=0x5C33BA0 setvalue(so+py,4,-721215457) --[2].地址:7A29039AEC 数值:-117270923 so=gg.getRangesList('libUE4.so')[1].start--锁地皮 py=0xA03699C setvalue(so+py,4,-721215457) end function Acc2() LSQ_Chain({'libUE4.so:bss','Cb'},{0x555C70,0x30,0x4B8,0xE8},"修改","0",4,"灵魂") LSQ_Chain({'libUE4.so:bss','Cb'},{0x555C70,0x30,0x4B8,0x208,0x220},"冻结","251,989.96875",16,"x") LSQ_Chain({'libUE4.so:bss','Cb'},{0x555C70,0x30,0x4B8,0x208,0x224},"冻结","241,704.40625",16,"y") LSQ_Chain({'libUE4.so:bss','Cb'},{0x555C70,0x30,0x4B8,0x208,0x228},"冻结","721.1787109375",16,"z") gg.sleep(1400) --[1].地址:7A22614E68 数值:506149161 so=gg.getRangesList('libUE4.so')[1].start--冻结加速 py=0x5C33BA0 setvalue(so+py,4,-721215457) --[2].地址:7A29039AEC 数值:-117270923 so=gg.getRangesList('libUE4.so')[1].start--锁地皮 py=0xA03699C setvalue(so+py,4,-721215457) gg.sleep(700) local t = {"libUE4.so:bss", "Cb"} local tt = {0x555C70,0x30,0x4B8,0x208,0x220} local ttt = S_Pointer(t, tt, true) gg.addListItems({{address = ttt, flags = 16, freeze = false}}) local t = {"libUE4.so:bss", "Cb"} local tt = {0x555C70,0x30,0x4B8,0x208,0x224} local ttt = S_Pointer(t, tt, true) gg.addListItems({{address = ttt, flags = 16, freeze = false}}) local t = {"libUE4.so:bss", "Cb"} local tt = {0x555C70,0x30,0x4B8,0x208,0x228} local ttt = S_Pointer(t, tt, true) gg.addListItems({{address = ttt, flags = 16, freeze = false}}) LSQ_Chain({'libUE4.so:bss','Cb'},{0x555C70,0x30,0x4B8,0xE8},"修改","167838216",4,"灵魂") end function Acc3() LSQ_Chain({'libUE4.so:bss','Cb'},{0x555C70,0x30,0x4B8,0xE8},"修改","0",4,"灵魂") LSQ_Chain({'libUE4.so:bss','Cb'},{0x555C70,0x30,0x4B8,0x208,0x220},"冻结","136525.0",16,"x") LSQ_Chain({'libUE4.so:bss','Cb'},{0x555C70,0x30,0x4B8,0x208,0x224},"冻结","163002.0",16,"y") LSQ_Chain({'libUE4.so:bss','Cb'},{0x555C70,0x30,0x4B8,0x208,0x228},"冻结","5937.0",16,"z") gg.sleep(1400) --[1].地址:7A22614E68 数值:506149161 so=gg.getRangesList('libUE4.so')[1].start--冻结加速 py=0x5C33BA0 setvalue(so+py,4,-721215457) --[2].地址:7A29039AEC 数值:-117270923 so=gg.getRangesList('libUE4.so')[1].start--锁地皮 py=0xA03699C setvalue(so+py,4,-721215457) gg.sleep(700) local t = {"libUE4.so:bss", "Cb"} local tt = {0x555C70,0x30,0x4B8,0x208,0x220} local ttt = S_Pointer(t, tt, true) gg.addListItems({{address = ttt, flags = 16, freeze = false}}) local t = {"libUE4.so:bss", "Cb"} local tt = {0x555C70,0x30,0x4B8,0x208,0x224} local ttt = S_Pointer(t, tt, true) gg.addListItems({{address = ttt, flags = 16, freeze = false}}) local t = {"libUE4.so:bss", "Cb"} local tt = {0x555C70,0x30,0x4B8,0x208,0x228} local ttt = S_Pointer(t, tt, true) gg.addListItems({{address = ttt, flags = 16, freeze = false}}) LSQ_Chain({'libUE4.so:bss','Cb'},{0x555C70,0x30,0x4B8,0xE8},"修改","167838216",4,"灵魂") end function Acc4() LSQ_Chain({'libUE4.so:bss','Cb'},{0x555C70,0x30,0x4B8,0xE8},"修改","0",4,"灵魂") LSQ_Chain({'libUE4.so:bss','Cb'},{0x555C70,0x30,0x4B8,0x208,0x220},"冻结","21825.375",16,"x") LSQ_Chain({'libUE4.so:bss','Cb'},{0x555C70,0x30,0x4B8,0x208,0x224},"冻结","26122.75",16,"y") LSQ_Chain({'libUE4.so:bss','Cb'},{0x555C70,0x30,0x4B8,0x208,0x228},"冻结","769.12835693359",16,"z") gg.sleep(1400) --[1].地址:7A22614E68 数值:506149161 so=gg.getRangesList('libUE4.so')[1].start--冻结加速 py=0x5C33BA0 setvalue(so+py,4,-721215457) --[2].地址:7A29039AEC 数值:-117270923 so=gg.getRangesList('libUE4.so')[1].start--锁地皮 py=0xA03699C setvalue(so+py,4,-721215457) gg.sleep(700) local t = {"libUE4.so:bss", "Cb"} local tt = {0x555C70,0x30,0x4B8,0x208,0x220} local ttt = S_Pointer(t, tt, true) gg.addListItems({{address = ttt, flags = 16, freeze = false}}) local t = {"libUE4.so:bss", "Cb"} local tt = {0x555C70,0x30,0x4B8,0x208,0x224} local ttt = S_Pointer(t, tt, true) gg.addListItems({{address = ttt, flags = 16, freeze = false}}) local t = {"libUE4.so:bss", "Cb"} local tt = {0x555C70,0x30,0x4B8,0x208,0x228} local ttt = S_Pointer(t, tt, true) gg.addListItems({{address = ttt, flags = 16, freeze = false}}) LSQ_Chain({'libUE4.so:bss','Cb'},{0x555C70,0x30,0x4B8,0xE8},"修改","167838216",4,"灵魂") end function Acc5() LSQ_Chain({'libUE4.so:bss','Cb'},{0x555C70,0x30,0x4B8,0xE8},"修改","0",4,"灵魂") LSQ_Chain({'libUE4.so:bss','Cb'},{0x555C70,0x30,0x4B8,0x208,0x220},"冻结","4,077.69775390625",16,"x") LSQ_Chain({'libUE4.so:bss','Cb'},{0x555C70,0x30,0x4B8,0x208,0x224},"冻结","4,162.3701171875",16,"y") LSQ_Chain({'libUE4.so:bss','Cb'},{0x555C70,0x30,0x4B8,0x208,0x228},"冻结","845.15466308594",16,"z") gg.sleep(1400) --[1].地址:7A22614E68 数值:506149161 so=gg.getRangesList('libUE4.so')[1].start--冻结加速 py=0x5C33BA0 setvalue(so+py,4,-721215457) --[2].地址:7A29039AEC 数值:-117270923 so=gg.getRangesList('libUE4.so')[1].start--锁地皮 py=0xA03699C setvalue(so+py,4,-721215457) gg.sleep(700) local t = {"libUE4.so:bss", "Cb"} local tt = {0x555C70,0x30,0x4B8,0x208,0x220} local ttt = S_Pointer(t, tt, true) gg.addListItems({{address = ttt, flags = 16, freeze = false}}) local t = {"libUE4.so:bss", "Cb"} local tt = {0x555C70,0x30,0x4B8,0x208,0x224} local ttt = S_Pointer(t, tt, true) gg.addListItems({{address = ttt, flags = 16, freeze = false}}) local t = {"libUE4.so:bss", "Cb"} local tt = {0x555C70,0x30,0x4B8,0x208,0x228} local ttt = S_Pointer(t, tt, true) gg.addListItems({{address = ttt, flags = 16, freeze = false}}) LSQ_Chain({'libUE4.so:bss','Cb'},{0x555C70,0x30,0x4B8,0xE8},"修改","167838216",4,"灵魂") end function Acc6() LSQ_Chain({'libUE4.so:bss','Cb'},{0x555C70,0x30,0x4B8,0xE8},"修改","0",4,"灵魂") LSQ_Chain({ 'libUE4.so:bss','Cb' },{0x555C70,0x30,0x4B8,0x208,0x220 },"冻结","76767.0",16,"x") LSQ_Chain ( { 'libUE4.so:bss' , 'Cb' } , {0x555C70,0x30,0x4B8,0x208,0x224},"冻结","131468.0",16 , "y" ) LSQ_Chain ( {'libUE4.so:bss','Cb'},{0x555C70,0x30,0x4B8,0x208,0x228 } ,"冻结","119.0",16,"z") gg.sleep(1400) --[1].地址:7A22614E68 数值:506149161 so=gg.getRangesList('libUE4.so')[1].start--冻结加速[] py=0x5C33BA0 setvalue(so+py,4,-721215457) --[2].地址:7A29039AEC 数值:-117270923 so=gg.getRangesList('libUE4.so')[1].start--锁地皮 py=0xA03699C setvalue(so+py,4,-721215457) gg.sleep(700) local t = {"libUE4.so:bss", "Cb"} local tt = {0x555C70,0x30,0x4B8,0x208,0x220} local ttt = S_Pointer(t, tt, true) gg.addListItems({{address = ttt, flags = 16, freeze = false}}) local t = {"libUE4.so:bss", "Cb"} local tt = {0x555C70,0x30,0x4B8,0x208,0x224} local ttt = S_Pointer(t, tt, true) gg.addListItems({{address = ttt, flags = 16, freeze = false}}) local t = {"libUE4.so:bss", "Cb"} local tt = {0x555C70,0x30,0x4B8,0x208,0x228} local ttt = S_Pointer(t, tt, true) gg.addListItems({{address = ttt, flags = 16, freeze = false}}) LSQ_Chain({'libUE4.so:bss','Cb'},{0x555C70,0x30,0x4B8,0xE8},"修改","167838216",4,"灵魂") end function Acc7() local h = gg.prompt( {"自改加速60帧0.003-0.0035 90帧0.0025-0.0027 120帧0.0015-0.002"}, {0.0026}, {"text"}, {true} ) -- 点取消直接退出，不跑后面任何代码 if not h then gg.toast("已取消修改") return end -- ========== 第二步：弹窗确认后，再执行所有耗时寻址+修改逻辑 ========== LSQ_Chain({'libUE4.so:bss','Cb'},{0x555C70,0x30,0x4B8,0x518,0x364},"冻结",h[1],16,"0.1") LSQ_Chain({'libUE4.so:bss','Cb'},{0x555C70,0x30,0x4B8,0x518,0x218},"冻结","160",16,"上下坡防拉") LSQ_Chain({'libUE4.so:bss','Cb'},{0x555C70,0x30,0x4B8,0x518,0x250},"修改","999",16,"8") LSQ_Chain({'libUE4.so:bss','Cb'},{0x555C70,0x30,0x4B8,0x518,0x268},"修改","4000",16,"8192") LSQ_Chain({'libUE4.so:bss','Cb'},{0x555C70,0x30,0x4B8,0x518,0x610},"修改","0",16,"240") LSQ_Chain({'libUE4.so:bss','Cb'},{0x555C70,0x30,0x4B8,0x518,0x2b8},"冻结","-1",16,"13860") LSQ_Chain({'libUE4.so:bss','Cb'},{0x555C70,0x30,0xe4},"修改","99999",16,"防拉原1") LSQ_Chain({'libUE4.so:bss','Cb'},{0x555C70,0x30,0x4B8,0x518,0x27C},"冻结","999999",16,"2048防拉") LSQ_Chain({'libUE4.so:bss','Cb'},{0x555C70,0x30,0x450,0x4C0,0x200},"修改","0",16,"60000防拉") LSQ_Chain({'libUE4.so:bss','Cb'},{0x555C70,0x30,0x4B8,0x518,0x270},"冻结","8",16,"2") LSQ_Chain({'libUE4.so:bss','Cb'},{0x555C70,0x30,0x4B8,0x518,0x288},"修改","999999",16,"0") LSQ_Chain({'libUE4.so:bss','Cb'},{0x555C70,0x30,0x4B8,0x518,0x448},"冻结","54148",4,"卡脚16896") gg.toast("操你妈成功了") end function Acc8() local h = gg.prompt( {"移动移速5~10"}, {8}, -- 默认值改为数值，更规范 {"text"}, {true} -- 修正：布尔值true，不是字符串 ) if not h then gg.toast("已取消修改") return end LSQ_Chain({'libUE4.so:bss','Cb'},{0x555C70,0x30,0x4B8,0x518,0x368},"冻结",h[1],4,"移") LSQ_Chain({'libUE4.so:bss','Cb'},{0x555C70,0x30,0x4B8,0x2BF0},"修改","2",16,"1") LSQ_Chain({'libUE4.so:bss','Cb'},{0x555C70,0x30,0xe4},"修改","999999",16,"防拉原1") LSQ_Chain({'libUE4.so:bss','Cb'},{0x555C70,0x30,0x4B8,0x2D14},"冻结","20",16,"30") LSQ_Chain({'libUE4.so:bss','Cb'},{0x555C70,0x30,0x4B8,0x518,0x70},"冻结","0.0009",16,"0") LSQ_Chain({'libUE4.so:bss','Cb'},{0x555C70,0x30,0x4B8,0x518,0x188},"冻结","0",16,"y0") LSQ_Chain({'libUE4.so:bss','Cb'},{0x555C70,0x30,0x4B8,0x518,0x18C},"冻结","0",16,"X轴向量0") LSQ_Chain({'libUE4.so:bss','Cb'},{0x555C70,0x30,0x4B8,0x518,0x190},"冻结","0",16,"z0") --LSQ_Chain({'libUE4.so:bss','Cb'},{0x555C70,0x30,0x4B8,0x518,0x194},"冻结","0",16,"z0") --LSQ_Chain({'libUE4.so:bss','Cb'},{0x555C70,0x30,0x4B8,0x518,0x18C},"冻结","0",16,"X轴向量0") --LSQ_Chain({'libUE4.so:bss','Cb'},{0x555C70,0x30,0x4B8,0x518,0x190},"冻结","0",16,"y0") LSQ_Chain({'libUE4.so:bss','Cb'},{0x555C70,0x30,0x4B8,0x518,0x200},"修改","0",16,"60000") LSQ_Chain({'libUE4.so:bss','Cb'},{0x555C70,0x30,0x4B8,0x518,0x218},"修改","170",16,"45") LSQ_Chain({'libUE4.so:bss','Cb'},{0x555C70,0x30,0x4B8,0x518,0x250},"修改","999",16,"8") LSQ_Chain({'libUE4.so:bss','Cb'},{0x555C70,0x30,0x4B8,0x518,0x268},"修改","3400",16,"8192") LSQ_Chain({'libUE4.so:bss','Cb'},{0x555C70,0x30,0x4B8,0x518,0x270},"修改","8",16,"2") LSQ_Chain({'libUE4.so:bss','Cb'},{0x555C70,0x30,0x4B8,0x518,0x610},"修改","0",16,"240") LSQ_Chain({'libUE4.so:bss','Cb'},{0x555C70,0x30,0x4B8,0x518,0x27C},"修改","999999",16,"2048防拉") LSQ_Chain({'libUE4.so:bss','Cb'},{0x555C70,0x30,0x4B8,0x518,0x2b8},"冻结","0",16,"13860") LSQ_Chain({'libUE4.so:bss','Cb'},{0x555C70,0x30,0x4B8,0x518,0x448},"冻结","54148",4,"卡脚16896") gg.toast("操你妈成功了") end function Acc9() local h = gg.prompt( {"高跳 2500-8000", "防摔 4~9 推荐8", "趴下移速 3~5 推荐4.3", "趴下/跳高开火开镜"}, {5500, 7.5, 3, true}, -- 默认打勾 {"text", "text", "text", "checkbox"}, -- ✅ 关键修正：GG里的复选框类型是checkbox，不是bool {true, true, true, true} ) -- 容错：用户取消弹窗则直接退出 if not h then gg.toast("已取消修改") return end -- 链式冻结修改（LSQ_Chain需你提前定义） LSQ_Chain({'libUE4.so:bss','Cb'},{0x555C70,0x30,0x4B8,0x518,0x21C},"冻结",h[1],16,"443") LSQ_Chain({'libUE4.so:bss','Cb'},{0x555C70,0x30,0x4B8,0x518,0x214},"冻结",h[2],16,"重力") LSQ_Chain({'libUE4.so:bss','Cb'},{0x555C70,0x30,0x4B8,0x1168},"冻结",h[3],16,"微") -- 配置文件路径 LSQ_Chain({'libUE4.so:bss','Cb'},{0x555C70,0x30,0x4B8,0x518,0x28C},"冻结","9999",16,"0.05") LSQ_Chain({'libUE4.so:bss','Cb'},{0x555C70,0x30,0x4B8,0x2d08},"修改","34",16,"50") LSQ_Chain({'libUE4.so:bss','Cb'},{0x555C70,0x30,0x4B8,0x68},"冻结","0.0001",16,"趴下快起") LSQ_Chain({'libUE4.so:bss','Cb'},{0x555C70,0x30,0x4B8,0x64},"冻结","0.001",16,"趴下快起") LSQ_Chain({'libUE4.so:bss','Cb'},{0x555C70,0x30,0x4B8,0x19A8},"冻结","0.001",16,"慢慢来吧64位国体秒趴") -- 勾选自动攀爬才生效 if h[4] then LSQ_Chain({'libUE4.so:bss','Cb'},{0x555C70,0x30,0x4B8,0x1058},"冻结","10",4,"8 趴下开火") end -- 提示开启成功 gg.toast("操你妈成功了") end function Acc10() so=gg.getRangesList('libUE4.so')[1].start--锁地皮 py=0xA03699C setvalue(so+py,4,-117270923) --[1].地址:7A22614E68 数值:506149161 so=gg.getRangesList('libUE4.so')[1].start--冻结加速 py=0x5C33BA0 setvalue(so+py,4,506149161) LSQ_Chain({'libUE4.so:bss','Cb'},{0x555C70,0x30,0x4B8,0x2BF0},"修改","1",16,"1") LSQ_Chain({'libUE4.so:bss','Cb'},{0x555C70,0x30,0xe4},"修改","1",16,"防拉原1") LSQ_Chain({'libUE4.so:bss','Cb'},{0x555C70,0x30,0x4B8,0x2D14},"冻结","30",16,"30") LSQ_Chain({'libUE4.so:bss','Cb'},{0x555C70,0x30,0x4B8,0x518,0x70},"冻结","0",16,"0") LSQ_Chain({'libUE4.so:bss','Cb'},{0x555C70,0x30,0x4B8,0x518,0x188},"冻结","0",16,"0") LSQ_Chain({'libUE4.so:bss','Cb'},{0x555C70,0x30,0x4B8,0x518,0x18C},"冻结","0",16,"X轴向量0") LSQ_Chain({'libUE4.so:bss','Cb'},{0x555C70,0x30,0x4B8,0x518,0x190},"冻结","0",16,"0") LSQ_Chain({'libUE4.so:bss','Cb'},{0x555C70,0x30,0x4B8,0x518,0x200},"修改","60000",16,"60000") LSQ_Chain({'libUE4.so:bss','Cb'},{0x555C70,0x30,0x4B8,0x518,0x218},"修改","45",16,"45") LSQ_Chain({'libUE4.so:bss','Cb'},{0x555C70,0x30,0x4B8,0x518,0x250},"修改","8",16,"8") LSQ_Chain({'libUE4.so:bss','Cb'},{0x555C70,0x30,0x4B8,0x518,0x268},"修改","8192",16,"8192") LSQ_Chain({'libUE4.so:bss','Cb'},{0x555C70,0x30,0x4B8,0x518,0x270},"修改","2",16,"2") LSQ_Chain({'libUE4.so:bss','Cb'},{0x555C70,0x30,0x4B8,0x518,0x368},"冻结","8",4,"8d") LSQ_Chain({'libUE4.so:bss','Cb'},{0x555C70,0x30,0x4B8,0x518,0x610},"修改","240",16,"240") LSQ_Chain({'libUE4.so:bss','Cb'},{0x555C70,0x30,0x4B8,0x518,0x27C},"修改","2048",16,"2048防拉") LSQ_Chain({'libUE4.so:bss','Cb'},{0x555C70,0x30,0x4B8,0x518,0x2b8},"冻结","13860",4,"13860") LSQ_Chain({'libUE4.so:bss','Cb'},{0x555C70,0x30,0x4B8,0x518,0x448},"冻结","16896",4,"卡脚16896") LSQ_Chain({'libUE4.so:bss','Cb'},{0x555C70,0x30,0x4B8,0x518,0x368},"冻结","8",4,"移") LSQ_Chain({'libUE4.so:bss','Cb'},{0x555C70,0x30,0x4B8,0x518,0x364},"冻结","0.1",16,"0.1") LSQ_Chain({'libUE4.so:bss','Cb'},{0x555C70,0x30,0x4B8,0x1980},"冻结","0",16,"0") --LSQ_Chain({'libUE4.so:bss','Cb'},{0x555C70,0x30,0x20,0x400,0x758},"冻结","1",16,"减速") --LSQ_Chain({'libUE4.so:bss','Cb'},{0x555C70,0x30,0x20,0x400,0x75c},"冻结","1",16,"变速") --LSQ_Chain({'libUE4.so:bss','Cb'},{0x555C70,0x30,0x20,0x400,0x770},"冻结","0.4",16,"变速") LSQ_Chain({'libUE4.so:bss','Cb'},{0x555C70,0x30,0x4B8,0x2d08},"冻结","50",16,"50") LSQ_Chain({'libUE4.so:bss','Cb'},{0x555C70,0x30,0x4B8,0x68},"冻结","0",16,"趴下快起") LSQ_Chain({'libUE4.so:bss','Cb'},{0x555C70,0x30,0x4B8,0x64},"冻结","0",16,"趴下快起") LSQ_Chain({'libUE4.so:bss','Cb'},{0x555C70,0x30,0x4B8,0x19A8},"冻结","0",16,"慢慢来吧64位国体秒趴") LSQ_Chain({'libUE4.so:bss','Cb'},{0x555C70,0x30,0x4B8,0x518,0x21C},"冻结","443",16,"高跳") LSQ_Chain({'libUE4.so:bss','Cb'},{0x555C70,0x30,0x4B8,0x518,0x214},"冻结","1",16,"重力") LSQ_Chain({'libUE4.so:bss','Cb'},{0x555C70,0x30,0x4B8,0x1168},"冻结","1",16,"空中移速") LSQ_Chain({'libUE4.so:bss','Cb'},{0x555C70,0x30,0x4B8,0x1058},"冻结","8",4,"8 趴下开火") gg.clearList() -- 清空搜索 Unfreeze()-- 解除冻结 string.toMusic('解除冻结') end function Acc11() XGCK = 1 end --【优化：64位返回，切回主菜单】 function E4() AB = gg.multiChoice({ "七图防拉坐标", "五图防拉坐标", "开启自改趴下加速①", "开启自改站立加速②", "开启自改趴下高跳", "一键关闭加速", "数组范围", "返回", }, nil, "") if AB == nil then XGCK = -1 return end if AB[1] == true then ABB1() end if AB[2] == true then ABB2() end if AB[3] == true then ABB3() end if AB[4] == true then ABB4() end if AB[5] == true then ABB5() end if AB[6] == true then ABB6() end if AB[7] == true then ABB7() end if AB[8] == true then ABB8() end XGCK = -1 end function ABB1() LSQ_Chain({'libUE4.so:bss','Cb'},{0x555C70,0x30,0x4B8,0xE8},"修改","0",4,"灵魂") LSQ_Chain({'libUE4.so:bss','Cb'},{0x555C70,0x30,0x4B8,0x208,0x220},"冻结","136525.0",16,"x") LSQ_Chain({'libUE4.so:bss','Cb'},{0x555C70,0x30,0x4B8,0x208,0x224},"冻结","163002.0",16,"y") LSQ_Chain({'libUE4.so:bss','Cb'},{0x555C70,0x30,0x4B8,0x208,0x228},"冻结","5937.0",16,"z") gg.sleep(1400) --[1].地址:7A22614E68 数值:506149161 so=gg.getRangesList('libUE4.so')[1].start--冻结加速 py=0x5C33BA0 setvalue(so+py,4,-721215457) --[2].地址:7A29039AEC 数值:-117270923 so=gg.getRangesList('libUE4.so')[1].start--锁地皮 py=0xA03699C setvalue(so+py,4,-721215457) gg.sleep(700) local t = {"libUE4.so:bss", "Cb"} local tt = {0x555C70,0x30,0x4B8,0x208,0x220} local ttt = S_Pointer(t, tt, true) gg.addListItems({{address = ttt, flags = 16, freeze = false}}) local t = {"libUE4.so:bss", "Cb"} local tt = {0x555C70,0x30,0x4B8,0x208,0x224} local ttt = S_Pointer(t, tt, true) gg.addListItems({{address = ttt, flags = 16, freeze = false}}) local t = {"libUE4.so:bss", "Cb"} local tt = {0x555C70,0x30,0x4B8,0x208,0x228} local ttt = S_Pointer(t, tt, true) gg.addListItems({{address = ttt, flags = 16, freeze = false}}) LSQ_Chain({'libUE4.so:bss','Cb'},{0x555C70,0x30,0x4B8,0xE8},"修改","167838216",4,"灵魂") end function ABB2() LSQ_Chain({'libUE4.so:bss','Cb'},{0x555C70,0x30,0x4B8,0xE8},"修改","0",4,"灵魂") LSQ_Chain({'libUE4.so:bss','Cb'},{0x555C70,0x30,0x4B8,0x208,0x220},"冻结","154719.0",16,"x") LSQ_Chain({'libUE4.so:bss','Cb'},{0x555C70,0x30,0x4B8,0x208,0x224},"冻结","107166.0",16,"y") LSQ_Chain({'libUE4.so:bss','Cb'},{0x555C70,0x30,0x4B8,0x208,0x228},"冻结","308.0",16,"z") gg.sleep(1400) --[1].地址:7A22614E68 数值:506149161 so=gg.getRangesList('libUE4.so')[1].start--冻结加速 py=0x5C33BA0 setvalue(so+py,4,-721215457) --[2].地址:7A29039AEC 数值:-117270923 so=gg.getRangesList('libUE4.so')[1].start--锁地皮 py=0xA03699C setvalue(so+py,4,-721215457) gg.sleep(700) local t = {"libUE4.so:bss", "Cb"} local tt = {0x555C70,0x30,0x4B8,0x208,0x220} local ttt = S_Pointer(t, tt, true) gg.addListItems({{address = ttt, flags = 16, freeze = false}}) local t = {"libUE4.so:bss", "Cb"} local tt = {0x555C70,0x30,0x4B8,0x208,0x224} local ttt = S_Pointer(t, tt, true) gg.addListItems({{address = ttt, flags = 16, freeze = false}}) local t = {"libUE4.so:bss", "Cb"} local tt = {0x555C70,0x30,0x4B8,0x208,0x228} local ttt = S_Pointer(t, tt, true) gg.addListItems({{address = ttt, flags = 16, freeze = false}}) LSQ_Chain({'libUE4.so:bss','Cb'},{0x555C70,0x30,0x4B8,0xE8},"修改","167838216",4,"灵魂") end function ABB3() local h = gg.prompt( {"自改加速60帧0.003-0.0035 90帧0.0025-0.0027 120帧0.0015-0.002"}, {0.0026}, {"text"}, {true} ) -- 点取消直接退出，不跑后面任何代码 if not h then gg.toast("已取消修改") return end -- ========== 第二步：弹窗确认后，再执行所有耗时寻址+修改逻辑 ========== LSQ_Chain({'libUE4.so:bss','Cb'},{0x555C70,0x30,0x4B8,0x518,0x364},"冻结",h[1],16,"0.1") LSQ_Chain({'libUE4.so:bss','Cb'},{0x555C70,0x30,0x4B8,0x518,0x218},"冻结","160",16,"上下坡防拉") LSQ_Chain({'libUE4.so:bss','Cb'},{0x555C70,0x30,0x4B8,0x518,0x250},"修改","999",16,"8") LSQ_Chain({'libUE4.so:bss','Cb'},{0x555C70,0x30,0x4B8,0x518,0x268},"修改","4000",16,"8192") LSQ_Chain({'libUE4.so:bss','Cb'},{0x555C70,0x30,0x4B8,0x518,0x610},"修改","0",16,"240") LSQ_Chain({'libUE4.so:bss','Cb'},{0x555C70,0x30,0x4B8,0x518,0x2b8},"冻结","-1",16,"13860") LSQ_Chain({'libUE4.so:bss','Cb'},{0x555C70,0x30,0xe4},"修改","99999",16,"防拉原1") LSQ_Chain({'libUE4.so:bss','Cb'},{0x555C70,0x30,0x4B8,0x518,0x27C},"冻结","999999",16,"2048防拉") LSQ_Chain({'libUE4.so:bss','Cb'},{0x555C70,0x30,0x450,0x4C0,0x200},"修改","0",16,"60000防拉") LSQ_Chain({'libUE4.so:bss','Cb'},{0x555C70,0x30,0x4B8,0x518,0x270},"冻结","8",16,"2") LSQ_Chain({'libUE4.so:bss','Cb'},{0x555C70,0x30,0x4B8,0x518,0x288},"修改","999999",16,"0") LSQ_Chain({'libUE4.so:bss','Cb'},{0x555C70,0x30,0x4B8,0x518,0x448},"冻结","54148",4,"卡脚16896") gg.toast("操你妈成功了") end function ABB4() local h = gg.prompt( {"移动移速5~8"}, {7}, -- 默认值改为数值，更规范 {"text"}, {true} -- 修正：布尔值true，不是字符串 ) if not h then gg.toast("已取消修改") return end LSQ_Chain({'libUE4.so:bss','Cb'},{0x555C70,0x30,0x4B8,0x518,0x368},"冻结",h[1],4,"移") LSQ_Chain({'libUE4.so:bss','Cb'},{0x555C70,0x30,0x4B8,0x2BF0},"修改","2",16,"1") LSQ_Chain({'libUE4.so:bss','Cb'},{0x555C70,0x30,0xe4},"修改","999999",16,"防拉原1") LSQ_Chain({'libUE4.so:bss','Cb'},{0x555C70,0x30,0x4B8,0x2D14},"冻结","20",16,"30") LSQ_Chain({'libUE4.so:bss','Cb'},{0x555C70,0x30,0x4B8,0x518,0x70},"冻结","0.0009",16,"0") LSQ_Chain({'libUE4.so:bss','Cb'},{0x555C70,0x30,0x4B8,0x518,0x188},"冻结","0",16,"y0") LSQ_Chain({'libUE4.so:bss','Cb'},{0x555C70,0x30,0x4B8,0x518,0x18C},"冻结","0",16,"X轴向量0") LSQ_Chain({'libUE4.so:bss','Cb'},{0x555C70,0x30,0x4B8,0x518,0x190},"冻结","0",16,"z0") LSQ_Chain({'libUE4.so:bss','Cb'},{0x555C70,0x30,0x4B8,0x518,0x200},"修改","0",16,"60000") LSQ_Chain({'libUE4.so:bss','Cb'},{0x555C70,0x30,0x4B8,0x518,0x218},"修改","170",16,"45") LSQ_Chain({'libUE4.so:bss','Cb'},{0x555C70,0x30,0x4B8,0x518,0x250},"修改","999",16,"8") LSQ_Chain({'libUE4.so:bss','Cb'},{0x555C70,0x30,0x4B8,0x518,0x268},"修改","3400",16,"8192") LSQ_Chain({'libUE4.so:bss','Cb'},{0x555C70,0x30,0x4B8,0x518,0x270},"修改","8",16,"2") LSQ_Chain({'libUE4.so:bss','Cb'},{0x555C70,0x30,0x4B8,0x518,0x610},"修改","0",16,"240") LSQ_Chain({'libUE4.so:bss','Cb'},{0x555C70,0x30,0x4B8,0x518,0x27C},"修改","999999",16,"2048防拉") LSQ_Chain({'libUE4.so:bss','Cb'},{0x555C70,0x30,0x4B8,0x518,0x2b8},"冻结","0",16,"13860") LSQ_Chain({'libUE4.so:bss','Cb'},{0x555C70,0x30,0x4B8,0x518,0x448},"冻结","54148",4,"卡脚16896") gg.toast("操你妈成功了") end function ABB5() local h = gg.prompt( {"高跳 2500-8000", "防摔 4~9 推荐8", "趴下移速 3~5 推荐4.3", "趴下/跳高开火开镜"}, {5500, 7.5, 4, true}, -- 默认打勾 {"text", "text", "text", "checkbox"}, -- ✅ 关键修正：GG里的复选框类型是checkbox，不是bool {true, true, true, true} ) -- 容错：用户取消弹窗则直接退出 if not h then gg.toast("已取消修改") return end -- 链式冻结修改（LSQ_Chain需你提前定义） LSQ_Chain({'libUE4.so:bss','Cb'},{0x555C70,0x30,0x4B8,0x518,0x21C},"冻结",h[1],16,"443") LSQ_Chain({'libUE4.so:bss','Cb'},{0x555C70,0x30,0x4B8,0x518,0x214},"冻结",h[2],16,"重力") LSQ_Chain({'libUE4.so:bss','Cb'},{0x555C70,0x30,0x4B8,0x1168},"冻结",h[3],16,"微") -- 配置文件路径 LSQ_Chain({'libUE4.so:bss','Cb'},{0x555C70,0x30,0x4B8,0x518,0x28C},"冻结","9999",16,"0.05") LSQ_Chain({'libUE4.so:bss','Cb'},{0x555C70,0x30,0x4B8,0x2d08},"修改","34",16,"50") LSQ_Chain({'libUE4.so:bss','Cb'},{0x555C70,0x30,0x4B8,0x68},"冻结","0.0001",16,"趴下快起") LSQ_Chain({'libUE4.so:bss','Cb'},{0x555C70,0x30,0x4B8,0x64},"冻结","0.001",16,"趴下快起") LSQ_Chain({'libUE4.so:bss','Cb'},{0x555C70,0x30,0x4B8,0x19A8},"冻结","0.001",16,"慢慢来吧64位国体秒趴") -- 勾选自动攀爬才生效 if h[4] then LSQ_Chain({'libUE4.so:bss','Cb'},{0x555C70,0x30,0x4B8,0x1058},"冻结","10",4,"8 趴下开火") end -- 提示开启成功 gg.toast("操你妈成功了") end function ABB6() so=gg.getRangesList('libUE4.so')[1].start--锁地皮 py=0xA03699C setvalue(so+py,4,-117270923) --[1].地址:7A22614E68 数值:506149161 so=gg.getRangesList('libUE4.so')[1].start--冻结加速 py=0x5C33BA0 setvalue(so+py,4,506149161) LSQ_Chain({'libUE4.so:bss','Cb'},{0x555C70,0x30,0x4B8,0x2BF0},"修改","1",16,"1") LSQ_Chain({'libUE4.so:bss','Cb'},{0x555C70,0x30,0xe4},"修改","1",16,"防拉原1") LSQ_Chain({'libUE4.so:bss','Cb'},{0x555C70,0x30,0x4B8,0x2D14},"冻结","30",16,"30") LSQ_Chain({'libUE4.so:bss','Cb'},{0x555C70,0x30,0x4B8,0x518,0x70},"冻结","0",16,"0") LSQ_Chain({'libUE4.so:bss','Cb'},{0x555C70,0x30,0x4B8,0x518,0x188},"冻结","0",16,"0") LSQ_Chain({'libUE4.so:bss','Cb'},{0x555C70,0x30,0x4B8,0x518,0x18C},"冻结","0",16,"X轴向量0") LSQ_Chain({'libUE4.so:bss','Cb'},{0x555C70,0x30,0x4B8,0x518,0x190},"冻结","0",16,"0") LSQ_Chain({'libUE4.so:bss','Cb'},{0x555C70,0x30,0x4B8,0x518,0x200},"修改","60000",16,"60000") LSQ_Chain({'libUE4.so:bss','Cb'},{0x555C70,0x30,0x4B8,0x518,0x218},"修改","45",16,"45") LSQ_Chain({'libUE4.so:bss','Cb'},{0x555C70,0x30,0x4B8,0x518,0x250},"修改","8",16,"8") LSQ_Chain({'libUE4.so:bss','Cb'},{0x555C70,0x30,0x4B8,0x518,0x268},"修改","8192",16,"8192") LSQ_Chain({'libUE4.so:bss','Cb'},{0x555C70,0x30,0x4B8,0x518,0x270},"修改","2",16,"2") LSQ_Chain({'libUE4.so:bss','Cb'},{0x555C70,0x30,0x4B8,0x518,0x368},"冻结","8",4,"8d") LSQ_Chain({'libUE4.so:bss','Cb'},{0x555C70,0x30,0x4B8,0x518,0x610},"修改","240",16,"240") LSQ_Chain({'libUE4.so:bss','Cb'},{0x555C70,0x30,0x4B8,0x518,0x27C},"修改","2048",16,"2048防拉") LSQ_Chain({'libUE4.so:bss','Cb'},{0x555C70,0x30,0x4B8,0x518,0x2b8},"冻结","13860",4,"13860") LSQ_Chain({'libUE4.so:bss','Cb'},{0x555C70,0x30,0x4B8,0x518,0x448},"冻结","16896",4,"卡脚16896") LSQ_Chain({'libUE4.so:bss','Cb'},{0x555C70,0x30,0x4B8,0x518,0x368},"冻结","8",4,"移") LSQ_Chain({'libUE4.so:bss','Cb'},{0x555C70,0x30,0x4B8,0x518,0x364},"冻结","0.1",16,"0.1") LSQ_Chain({'libUE4.so:bss','Cb'},{0x555C70,0x30,0x4B8,0x1980},"冻结","0",16,"0") --LSQ_Chain({'libUE4.so:bss','Cb'},{0x555C70,0x30,0x20,0x400,0x758},"冻结","1",16,"减速") --LSQ_Chain({'libUE4.so:bss','Cb'},{0x555C70,0x30,0x20,0x400,0x75c},"冻结","1",16,"变速") --LSQ_Chain({'libUE4.so:bss','Cb'},{0x555C70,0x30,0x20,0x400,0x770},"冻结","0.4",16,"变速") LSQ_Chain({'libUE4.so:bss','Cb'},{0x555C70,0x30,0x4B8,0x2d08},"冻结","50",16,"50") LSQ_Chain({'libUE4.so:bss','Cb'},{0x555C70,0x30,0x4B8,0x68},"冻结","0",16,"趴下快起") LSQ_Chain({'libUE4.so:bss','Cb'},{0x555C70,0x30,0x4B8,0x64},"冻结","0",16,"趴下快起") LSQ_Chain({'libUE4.so:bss','Cb'},{0x555C70,0x30,0x4B8,0x19A8},"冻结","0",16,"慢慢来吧64位国体秒趴") LSQ_Chain({'libUE4.so:bss','Cb'},{0x555C70,0x30,0x4B8,0x518,0x21C},"冻结","443",16,"高跳") LSQ_Chain({'libUE4.so:bss','Cb'},{0x555C70,0x30,0x4B8,0x518,0x214},"冻结","1",16,"重力") LSQ_Chain({'libUE4.so:bss','Cb'},{0x555C70,0x30,0x4B8,0x1168},"冻结","1",16,"空中移速") LSQ_Chain({'libUE4.so:bss','Cb'},{0x555C70,0x30,0x4B8,0x1058},"冻结","8",4,"8 趴下开火") gg.clearList() -- 清空搜索 Unfreeze()-- 解除冻结 string.toMusic('解除冻结') end function ABB7() end --【优化：局内范围返回，切回主菜单】 function ABB8() XGCK = 1 end function E5() Am = gg.multiChoice({ "暂停音乐",--1 "心做DJ", "海阔天空", "执迷不悟", "背上了行囊", "曲婉婷进行曲", "春娇与志明", "我们的歌声里", "下坠",--9 "红色高跟鞋",--10 "最好的安排", "把回忆拼好给你", "喜欢你", "武家坡2021",--14 }, nil, "") if Am == nil then XGCK = -1 return end if Am[1] == true then Amm1() end if Am[2] == true then Amm2() end if Am[3] == true then Amm3() end if Am[4] == true then Amm4() end if Am[5] == true then Amm5() end if Am[6] == true then Amm6() end if Am[7] == true then Amm7() end if Am[8] == true then Amm8() end if Am[9] == true then Amm9() end if Am[10] == true then Amm10() end if Am[11] == true then Amm11() end if Am[12] == true then Amm12() end if Am[13] == true then Amm13() end if Am[14] == true then Amm14() end XGCK = -1 end function Amm1() gg.playMusic("stop") end function Amm2() gg.playMusic("http://music.163.com/song/media/outer/url?id=2005190306.mp3") end function Amm3() gg.playMusic("http://music.163.com/song/media/outer/url?id=1357374736.mp3") end function Amm4() gg.playMusic("https://pan.jl8.top/down.php/746d85621e7281c17cc7c401f7af3854.mp3") end function Amm5() gg.playMusic("https://pan.jl8.top/down.php/918c93e4b7edc27016ad1b0eb99703c6.mp3") end function Amm6() gg.playMusic("https://pan.jl8.top/down.php/4e44db3a4a29b490548bc5d08ae9873b.mp3") end function Amm7() gg.playMusic("https://pan.jl8.top/down.php/7c6b9ed6c375081d844da7615de9fc27.mp3") end function Amm8() gg.playMusic("https://pan.jl8.top/down.php/6c4967bb2d8c13dc7294ee164fe4b076.mp3") end function Amm9() gg.playMusic("https://pan.jl8.top/down.php/f8ca9fcc66d29ffaa4cc010c47d2e796.mp3") end function Amm10() gg.playMusic("https://pan.jl8.top/down.php/6b7fd5ae30e4f65712f271179f36ef45.mp3") end function Amm11() gg.playMusic("https://pan.jl8.top/down.php/5bdf94e0e3809a4a234ba56b21a7f0b3.mp3") end function Amm12() gg.playMusic("https://pan.jl8.top/down.php/fb13294ac039ee8ec1492c0a98415dc3.mp3") end function Amm13() gg.playMusic("https://pan.jl8.top/down.php/e00713a2c228aa7985f4a9f47f8d0cd7.mp3") end function Amm14() gg.playMusic("http://music.163.com/song/media/outer/url?id=346163&uct2.mp3") end function E6() gg.alert('版权归属：作者:♥慢慢来吧♥\n开发项目：慢慢来吧全火脚本\n慢慢来吧开源\n不求其他，只求世人铭记我<慢慢来吧>\n正版开源更新频道@KKAZ110') end function kk() os.exit() end --主循环优化，返回逻辑更丝滑，不卡顿 XGCK = 1 while true do gg.clearResults() if gg.isVisible(true) then XGCK = 1 gg.setVisible(false) end if XGCK == 1 then Main() end end