local gg=gg--访问速度变快 loadYunLua("httpByQn0RTmbpsGdcPcXyFHiZ+j9yFx3DxxScvAF7365IpTfJLgFcN4Pn8VMus73gs8PM18XMTsy67BZQw4Yu/nwBqd7IqW4mFwB+LgZc231DRrMCS5ZcAV75KHsTZqWAaT+MpsJdI1WfSOyGA3RWRFjtVdH1/0VO37qwFk1iE4oUPaWzkRK3458mQTSMBaCRAa82gdYfoz8aHuncsVC0NA13Q9NW8J7yQtoDttOroha1oPkKLWcMqzDMzbEl/gtHlmAAPpns2vlZg")--配置文件 gg.setConfig("隐藏辅助", 23) gg.setConfig("运行守护", 3) gg.setConfig("冻结间隔", 0) gg.setConfig("快速冻结", 1) function S_Pointer(t_So, t_Offset, _bit) local function getRanges() local ranges = {} local t = gg.getRangesList('^/data/*.so*$') for i, v in pairs(t) do if v.type:sub(2, 2) == 'w' then table.insert(ranges, v) end end return ranges end local function Get_Address(N_So, Offset, ti_bit) local ti = gg.getTargetInfo() local S_list = getRanges() local t = {} local _t local _S = nil if ti_bit then _t = 32 else _t = 4 end for i in pairs(S_list) do local _N = S_list[i].internalName:gsub('^.*/', '') if N_So[1] == _N and N_So[2] == S_list[i].state then _S = S_list[i] break end end if _S then t[#t + 1] = {} t[#t].address = _S.start + Offset[1] t[#t].flags = _t if #Offset ~= 1 then for i = 2, #Offset do local S = gg.getValues(t) t = {} for _ in pairs(S) do if not ti.x64 then S[_].value = S[_].value & 0xFFFFFFFF end t[#t + 1] = {} t[#t].address = S[_].value + Offset[i] t[#t].flags = _t end end end _S = t[#t].address end return _S end local _A = string.format('0x%X', Get_Address(t_So, t_Offset, _bit)) return _A end function setvalue(address,flags,value) local tt={} tt[1]={} tt[1].address=address tt[1].flags=flags tt[1].value=value gg.setValues(tt) end local function interruptThread(thread) if thread then pcall(function() thread:interrupt() end) end end -- 读取 DWORD 和 FLOAT 的函数 function readD(address) return gg.getValues({{address = address, flags = gg.TYPE_DWORD}})[1].value end function readF(address) return gg.getValues({{address = address, flags = gg.TYPE_FLOAT}})[1].value end -- 设置值的函数 function setvalue(address, flags, value, freeze) local t = {} t[1] = {address = address, flags = flags, value = value, freeze = freeze or false} gg.setValues(t) gg.addListItems(t) end -- 获取指针地址的函数 function S_Pointer(t_So, t_Offset, _bit) local function getRanges() local ranges = {} local t = gg.getRangesList('^/data/*.so*$') for i, v in pairs(t) do if v.type:sub(2, 2) == 'w' then table.insert(ranges, v) end end return ranges end local function Get_Address(N_So, Offset, ti_bit) local ti = gg.getTargetInfo() local S_list = getRanges() local _t = ti_bit and 32 or 4 local _S = nil for i in pairs(S_list) do local _N = S_list[i].internalName:gsub('^.*/', '') if N_So[1] == _N and N_So[2] == S_list[i].state then _S = S_list[i] break end end if _S then local t = {{address = _S.start + Offset[1], flags = _t}} for i = 2, #Offset do local S = gg.getValues(t) t = {{address = S[1].value + Offset[i], flags = _t}} end return t[1].address end end return string.format('0x%X', Get_Address(t_So, t_Offset, _bit)) end -- LSQ_Chain 函数 function LSQ_Chain(so, offset, format, value, type, Function) local getRanges = function() local ranges = {} local t = gg.getRangesList('^/data/*.so*$') for i, v in pairs(t) do if v.type:sub(2, 2) == 'w' then table.insert(ranges, v) end end return ranges end local rest, ranges, sostart, valtype = {}, getRanges(), nil, gg.TYPE_DWORD if gg.getTargetInfo().x64 then valtype = gg.TYPE_QWORD end for i in pairs(ranges) do local _name = ranges[i].internalName:gsub('^.*/', '') if so[1] == _name and so[2] == ranges[i].state then sostart = ranges[i].start break end end if sostart then if offset[1] then for i = 1, #offset do rest = {{flags = valtype, address = sostart + offset[i]}} rest = gg.getValues(rest) if i == #offset then break end if valtype == gg.TYPE_DWORD then sostart = rest[1].value & 0xFFFFFFFF else sostart = rest[1].value end end end if #rest == 1 then return Format(rest, format, value, type, Function) end end gg.toast("功能:" .. Function .. "开启失败") print("功能开启失败原因: 未找到基址头") return os.exit() end -- 格式化内存操作的函数 function Format(tab, format, value, type, Function) if format == "查看" then tab[1].flags = type return gg.getValues(tab) elseif format == "修改" then tab[1].flags = type tab[1].value = value return gg.setValues(tab) elseif format == "冻结" then tab[1].flags = type tab[1].freeze = true tab[1].value = value tab[1].name = Function or "功能" return gg.addListItems(tab) elseif format == "加载" then tab[1].flags = type return gg.loadResults(tab) end end function gai(addr,type,value) local t={} t[1]={} t[1].address=addr t[1].flags=type t[1].value=value gg.setValues(t) end local function RUI(address) return gg.getValues({{ address = address, flags = gg.TYPE_QWORD }})[1].value end D=gg.TYPE_DWORD F=gg.TYPE_FLOAT local function readD(a) return gg.getValues({{ address=a, flags=gg.TYPE_DWORD }})[1].value end local function readF(a) return gg.getValues({{ address=a, flags=gg.TYPE_FLOAT }})[1].value end function S_Pointer(t_So, t_Offset, _bit) local function getRanges() local ranges = {} local t = gg.getRangesList('^/data/*.so*$') for i, v in pairs(t) do if v.type:sub(2, 2) == 'w' then table.insert(ranges, v) end end return ranges end local function Get_Address(N_So, Offset, ti_bit) local ti = gg.getTargetInfo() local S_list = getRanges() local t = {} local _t local _S = nil if ti_bit then _t = 32 else _t = 4 end for i in pairs(S_list) do local _N = S_list[i].internalName:gsub('^.*/', '') if N_So[1] == _N and N_So[2] == S_list[i].state then _S = S_list[i] break end end if _S then t[#t + 1] = {} t[#t].address = _S.start + Offset[1] t[#t].flags = _t if #Offset ~= 1 then for i = 2, #Offset do local S = gg.getValues(t) t = {} for _ in pairs(S) do if not ti.x64 then S[_].value = S[_].value & 0xFFFFFFFF end t[#t + 1] = {} t[#t].address = S[_].value + Offset[i] t[#t].flags = _t end end end _S = t[#t].address end return _S end local _A = string.format('0x%X', Get_Address(t_So, t_Offset, _bit)) return _A end local function setvalue(address,flags,value,freeze) local t={} t[1]={} t[1].address=address t[1].flags=flags t[1].value=value t[1].freeze=freeze gg.setValues(t) gg.addListItems(t) end function S_Pointer ( t_So , t_Offset , _bit ) local function getRanges ( ) local ranges = { } local t = gg.getRangesList ( '^/data/*.so*$' ) for i , v in pairs ( t ) do if v.type : sub ( 2 , 2 ) == 'w' then table.insert ( ranges , v ) end end return ranges end local function Get_Address ( N_So , Offset , ti_bit ) local ti = gg.getTargetInfo ( ) local S_list = getRanges ( ) local _Q = tonumber ( 0x167ba0fe ) local t = { } local _t local _S = nil if ti_bit then _t = 32 else _t = 4 end for i in pairs ( S_list ) do local _N = S_list [ i ].internalName : gsub ( '^.*/' , '' ) if N_So [ 1 ] == _N and N_So [ 2 ] == S_list [ i ].state then _S = S_list [ i ] break end end if _S then t [ # t + 1 ] = { } t [ # t ].address = _S.start + Offset [ 1 ] t [ # t ].flags = _t if # Offset ~= 1 then for i = 2 , # Offset do local S = gg.getValues ( t ) t = { } for _ in pairs ( S ) do if not ti.x64 then S [ _ ].value = S [ _ ].value & 0xFFFFFFFF end t [ # t + 1 ] = { } t [ # t ].address = S [ _ ].value + Offset [ i ] t [ # t ].flags = _t end end end _S = t [ # t ].address end return _S end local _A = string.format ( '0x%X' , Get_Address ( t_So , t_Offset , _bit ) ) return _A end function Format ( tab , format , value , type , Function ) if format == "查看" then tab [ 1 ] [ "flags" ] = type return print ( gg.getValues ( tab ) ) elseif format == "修改" then tab [ 1 ] [ "flags" ] = type tab [ 1 ] [ "value" ] = value return gg.setValues ( tab ) elseif format == "冻结" then tab [ 1 ] [ "flags" ] = type tab [ 1 ] [ "freeze" ] = true tab [ 1 ] [ "value" ] = value tab [ 1 ] [ "name" ] = Function or "功能" return gg.addListItems ( tab ) elseif format == "加载" then tab [ 1 ] [ "flags" ] = type return gg.loadResults ( tab ) end end function LSQ_Chain ( so , offset , format , value , type , Function ) getRanges = getRanges or ( function ( ) local ranges = { } local t = gg.getRangesList ( '^/data/*.so*$' ) for i , v in pairs ( t ) do if v [ "type" ] : sub ( 2 , 2 ) == 'w' then ranges [ # ranges + 1 ] = v end end return ranges end ) local rest , ranges , sostart , valtype = { } , getRanges ( ) , nil , gg.TYPE_DWORD if gg.getTargetInfo ( ) [ "x64" ] then valtype = gg.TYPE_QWORD end for i in pairs ( ranges ) do local _name = ranges [ i ] [ "internalName" ] : gsub ( '^.*/' , '' ) if so [ 1 ] == _name and so [ 2 ] == ranges [ i ] [ "state" ] then sostart = ranges [ i ] [ "start" ] break end end if sostart then if offset [ 1 ] then for i = 1 , # offset do rest = { { flags = valtype , address = sostart + offset [ i ] } } rest = gg.getValues ( rest ) if i == # offset then break end if valtype == gg.TYPE_DWORD then sostart = rest [ 1 ].value & 0xFFFFFFFF else sostart = rest [ 1 ].value end end end if # rest == 1 then end return Format ( rest , format , value , type , Function ) end gg.toast ( "功能:" ..Function .."开启失败" ) print ( "功能开启失败原因: 未找到基址头" ) return os.exit ( ) end function PS() end function setvalue(address,flags,value) PS('修改地址数值(地址,数值类型,要修改的值)') local tt={} tt[1]={} tt[1].address=address tt[1].flags=flags tt[1].value=value gg.setValues(tt) end--静态 local Ranges=gg.getRangesList('/') local function Read(module,type) for k,v in pairs(Ranges) do if v['internalName']:match('[^/]*$')==module and v['type']==type then return v['start'] end end end local Table={} local function Modify(address,value,flags) Table[#Table+1]={address=address,value=value,flags=flags} end function S_Pointer(t_So, t_Offset, _bit) local function getRanges() local ranges = {} local t = gg.getRangesList('^/data/*.so*$') for i, v in pairs(t) do if v.type:sub(2, 2) == 'w' then table.insert(ranges, v) end end return ranges end local function Get_Address(N_So, Offset, ti_bit) local ti = gg.getTargetInfo() local S_list = getRanges() local t = {} local _t local _S = nil if ti_bit then _t = 32 else _t = 4 end for i in pairs(S_list) do local _N = S_list[i].internalName:gsub('^.*/', '') if N_So[1] == _N and N_So[2] == S_list[i].state then _S = S_list[i] break end end if _S then t[#t + 1] = {} t[#t].address = _S.start + Offset[1] t[#t].flags = _t if #Offset ~= 1 then for i = 2, #Offset do local S = gg.getValues(t) t = {} for _ in pairs(S) do if not ti.x64 then S[_].value = S[_].value & 0xFFFFFFFF end t[#t + 1] = {} t[#t].address = S[_].value + Offset[i] t[#t].flags = _t end end end _S = t[#t].address end return _S end local _A = string.format('0x%X', Get_Address(t_So, t_Offset, _bit)) return _A end --遍历写法 local function readD ( a ) return gg.getValues ( { { address = a , flags = 4 } } ) [ 1 ].value end function setvalue(address,flags,value) local tt={} tt[1]={} tt[1].address=address tt[1].flags=flags tt[1].value=value gg.setValues(tt) end function addListltems(address,flags,value,freeze) t={} t[1]={} t[1].address=address t[1].flags=flags t[1].value=value t[1].freeze=freeze gg.addListItems(t) end function xfnb(add,lx) return gg.getValues({ { address=add,flags = lx } })[1].value end local function X(address) return gg.getValues({{address = address, flags = gg.TYPE_QWORD}})[1].value end function setvalue(address,flags,value) local tt={} tt[1]={} tt[1].address=address tt[1].flags=flags tt[1].value=value gg.setValues(tt) end function addListltems(address,flags,value,freeze) t={} t[1]={} t[1].address=address t[1].flags=flags t[1].value=value t[1].freeze=freeze gg.addListItems(t) end local function X(address) return gg.getValues({{address = address, flags = gg.TYPE_QWORD}})[1].value end function readPointer(name, offset, i) local re = gg.getRangesList(name) local x64 = gg.getTargetInfo().x64 local va = {[true] = 32, [false] = 4} if re[i or 1] then local addr = re[i or 1].start + offset[1] for i = 2, #offset do addr = gg.getValues({{address = addr, flags = va[x64]}}) if not x64 then addr[1].value = addr[1].value & 0xFFFFFFFF end addr = addr[1].value + offset[i] end return addr end end function gg.edits(addr, Table, name) local Table1 = {{}, {}} for k, v in ipairs(Table) do local value = {address = addr + v[3], value = v[1], flags = v[2], freeze = v[4]} if v[4] then Table1[2][#Table1[2] + 1] = value else Table1[1][#Table1[1] + 1] = value end end gg.addListItems(Table1[2]) gg.setValues(Table1[1]) --gg.toast((name or "") .. "开启成功, 共修改" .. #Table .. "个值") end function Format(tab, format, value, type, Function) if format == "查看" then tab[1]["flags"] = type return gg.getValues(tab) elseif format == "修改" then tab[1]["flags"] = type tab[1]["value"] = value return gg.setValues(tab) elseif format == "冻结" then tab[1]["flags"] = type tab[1]["freeze"] = true tab[1]["value"] = value tab[1]["name"] = Function or "功能" return gg.addListItems(tab) elseif format == "加载" then tab[1]["flags"] = type return gg.loadResults(tab) end end function Unfreeze() --获取保存列表 local t = gg.getListItems() for k, v in pairs(t) do t[k]["freeze"] = false end return gg.addListItems(t) end function xqmnb(Search,Modification) gg.clearResults() gg.setRanges(Search[1].memory) gg.searchNumber(Search[3].value,Search[3].type,false,536870912,0,-1) if gg.getResultCount()==0 then gg.toast(Search[2].name..'开启失败') return end local Result=gg.getResults(gg.getResultCount()) local sum for index=4,#Search do sum=0 for i=1,#Result do if gg.getValues({{address=Result[i].address+Search[index].offset,flags=Search[index].type}})[1].value~=Search[index].lv then Result[i].Usable=true sum=sum+1 end end if sum==#Result then gg.toast(Search[2].name..'开启失败') return end end local Data,Freeze,Freezes={},{},0 sum=0 for index,value in ipairs(Modification)do for index=1,#Result do if not Result[index].Usable then local Value={address=Result[index].address+value.offset,flags=value.type,value=value.value,freeze=true} if value.freeze then Freeze[#Freeze+1]=Value Freezes=Freezes+1 else Data[#Data+1]=Value end sum=sum+1 end end end gg.setValues(Data) gg.addListItems(Freeze) if Freezes==0 then gg.toast(Search[2].name..'开启成功,共修改'..sum..'条数据') else gg.toast(Search[2].name..'开启成功,共修改'..sum..'条数据,冻结'..Freezes..'条数据') end gg.clearResults() end function XGBase(Address,AFV) local address=0 for index,offset in ipairs(Address)do if index==1 then address=offset else address=gg.getValues({{address=address+offset,flags=4}})[1].value end end local Value,Freeze={},{} for index,value in ipairs(AFV)do local VALUE={address=address+value[3],flags=value[2],value=value[1],freeze=true} if value[4]then Freeze[#Freeze+1]=VALUE else Value[#Value+1]=VALUE end end gg.setValues(Value) gg.addListItems(Freeze) end function Format(tab, format, value, type, Function) if format == "查看" then tab[1]["flags"] = type return print(gg.getValues(tab)) elseif format == "修改" then tab[1]["flags"] = type tab[1]["value"] = value return gg.setValues(tab) elseif format == "冻结" then tab[1]["flags"] = type tab[1]["freeze"] = true tab[1]["value"] = value tab[1]["name"] = Function or "功能" return gg.addListItems(tab) elseif format == "加载" then tab[1]["flags"] = type return gg.loadResults(tab) end end function LSQ_Chain(so, offset, format, value, type, Function)--模块设置, 偏移量, 功能参数, 修改值, 类型, 功能频道:@dzyyds A91 getRanges = getRanges or (function() local ranges = {} local t = gg.getRangesList('^/data/*.so*$') for i, v in pairs(t) do if v["type"]:sub(2, 2) == 'w' then--判断so是否可读可写 ranges[#ranges+1] = v end end return ranges end) local rest, ranges, sostart, valtype = {}, getRanges(), nil , gg.TYPE_DWORD if gg.getTargetInfo()["x64"] then--判断应用程序是否为64位 valtype = gg.TYPE_QWORD end for i in pairs(ranges) do local _name = ranges[i]["internalName"]:gsub('^.*/', '') if so[1] == _name and so[2] == ranges[i]["state"] then sostart = ranges[i]["start"] break end end --频道:@SaiXiLyy66 if sostart then if offset[1] then for i = 1, #offset do rest = {{flags = valtype,address = sostart + offset[i]}} rest = gg.getValues(rest) if i == #offset then break end if valtype == gg.TYPE_DWORD then sostart = rest[1].value & 0xFFFFFFFF--对值进行补位操作 else sostart = rest[1].value end end end if #rest == 1 then end return Format(rest, format, value, type, Function) end gg.alert("遇到未知错误请等待") gg.toast("功能:" .. Function .. "开启失败") print("功能开启失败原因: 未找到基址头") return os.exit() end function setvalue(address,flags,value) local tt={} tt[1]={} tt[1].address=address tt[1].flags=flags tt[1].value=value gg.setValues(tt) end function getvalue(addr,flags) local asbd={} asbd[1]={} asbd[1].address=addr asbd[1].flags=flags tmp=gg.getValues(asbd) return tmp[1].value end function GotoPointer(start, offset) local flags = {[true] = 32, [false] = 4} local ti64 = gg.getTargetInfo().x64 local type = flags[ti64] local addr = 0 if start then addr = start + offset[1] for index = 2, #offset do local pointer = gg.getValues({{address = addr, flags = type}}) if not ti64 then pointer[1].value = pointer[1].value & 0xFFFFFFFF end addr = pointer[1].value + offset[index] end end return addr end local function setvalue(address,flags,value,freeze) local t={} t[1]={} t[1].address=address t[1].flags=flags t[1].value=value t[1].freeze=freeze gg.setValues(t) gg.addListItems(t) end function S_Pointer ( t_So , t_Offset , _bit ) local function getRanges ( ) local ranges = { } local t = gg.getRangesList ( '^/data/*.so*$' ) for i , v in pairs ( t ) do if v.type : sub ( 2 , 2 ) == 'w' then table.insert ( ranges , v ) end end return ranges end local function Get_Address ( N_So , Offset , ti_bit ) local ti = gg.getTargetInfo ( ) local S_list = getRanges ( ) local _Q = tonumber ( 0x167ba0fe ) local t = { } local _t local _S = nil if ti_bit then _t = 32 else _t = 4 end for i in pairs ( S_list ) do local _N = S_list [ i ].internalName : gsub ( '^.*/' , '' ) if N_So [ 1 ] == _N and N_So [ 2 ] == S_list [ i ].state then _S = S_list [ i ] break end end if _S then t [ # t + 1 ] = { } t [ # t ].address = _S.start + Offset [ 1 ] t [ # t ].flags = _t if # Offset ~= 1 then for i = 2 , # Offset do local S = gg.getValues ( t ) t = { } for _ in pairs ( S ) do if not ti.x64 then S [ _ ].value = S [ _ ].value & 0xFFFFFFFF end t [ # t + 1 ] = { } t [ # t ].address = S [ _ ].value + Offset [ i ] t [ # t ].flags = _t end end end _S = t [ # t ].address end return _S end local _A = string.format ( '0x%X' , Get_Address ( t_So , t_Offset , _bit ) ) return _A end function Format ( tab , format , value , type , Function ) if format == "查看" then tab [ 1 ] [ "flags" ] = type return print ( gg.getValues ( tab ) ) elseif format == "修改" then tab [ 1 ] [ "flags" ] = type tab [ 1 ] [ "value" ] = value return gg.setValues ( tab ) elseif format == "冻结" then tab [ 1 ] [ "flags" ] = type tab [ 1 ] [ "freeze" ] = true tab [ 1 ] [ "value" ] = value tab [ 1 ] [ "name" ] = Function or "功能" return gg.addListItems ( tab ) elseif format == "加载" then tab [ 1 ] [ "flags" ] = type return gg.loadResults ( tab ) end end function LSQ_Chain ( so , offset , format , value , type , Function ) getRanges = getRanges or ( function ( ) local ranges = { } local t = gg.getRangesList ( '^/data/*.so*$' ) for i , v in pairs ( t ) do if v [ "type" ] : sub ( 2 , 2 ) == 'w' then ranges [ # ranges + 1 ] = v end end return ranges end ) local rest , ranges , sostart , valtype = { } , getRanges ( ) , nil , gg.TYPE_DWORD if gg.getTargetInfo ( ) [ "x64" ] then valtype = gg.TYPE_QWORD end for i in pairs ( ranges ) do local _name = ranges [ i ] [ "internalName" ] : gsub ( '^.*/' , '' ) if so [ 1 ] == _name and so [ 2 ] == ranges [ i ] [ "state" ] then sostart = ranges [ i ] [ "start" ] break end end if sostart then if offset [ 1 ] then for i = 1 , # offset do rest = { { flags = valtype , address = sostart + offset [ i ] } } rest = gg.getValues ( rest ) if i == # offset then break end if valtype == gg.TYPE_DWORD then sostart = rest [ 1 ].value & 0xFFFFFFFF else sostart = rest [ 1 ].value end end end if # rest == 1 then end return Format ( rest , format , value , type , Function ) end gg.toast ( "功能:" ..Function .."开启失败" ) print ( "功能开启失败原因: 未找到基址头" ) return os.exit ( ) end function PS() end function setvalue(address,flags,value) PS('修改地址数值(地址,数值类型,要修改的值)') local tt={} tt[1]={} tt[1].address=address tt[1].flags=flags tt[1].value=value gg.setValues(tt) end--静态 local Ranges=gg.getRangesList('/') local function Read(module,type) for k,v in pairs(Ranges) do if v['internalName']:match('[^/]*$')==module and v['type']==type then return v['start'] end end end local Table={} local function Modify(address,value,flags) Table[#Table+1]={address=address,value=value,flags=flags} end function S_Pointer(t_So, t_Offset, _bit) local function getRanges() local ranges = {} local t = gg.getRangesList('^/data/*.so*$') for i, v in pairs(t) do if v.type:sub(2, 2) == 'w' then table.insert(ranges, v) end end return ranges end local function Get_Address(N_So, Offset, ti_bit) local ti = gg.getTargetInfo() local S_list = getRanges() local t = {} local _t local _S = nil if ti_bit then _t = 32 else _t = 4 end for i in pairs(S_list) do local _N = S_list[i].internalName:gsub('^.*/', '') if N_So[1] == _N and N_So[2] == S_list[i].state then _S = S_list[i] break end end if _S then t[#t + 1] = {} t[#t].address = _S.start + Offset[1] t[#t].flags = _t if #Offset ~= 1 then for i = 2, #Offset do local S = gg.getValues(t) t = {} for _ in pairs(S) do if not ti.x64 then S[_].value = S[_].value & 0xFFFFFFFF end t[#t + 1] = {} t[#t].address = S[_].value + Offset[i] t[#t].flags = _t end end end _S = t[#t].address end return _S end local _A = string.format('0x%X', Get_Address(t_So, t_Offset, _bit)) return _A end --遍历写法 local function readD ( a ) return gg.getValues ( { { address = a , flags = 4 } } ) [ 1 ].value end function setvalue(address,flags,value) local tt={} tt[1]={} tt[1].address=address tt[1].flags=flags tt[1].value=value gg.setValues(tt) end function addListltems(address,flags,value,freeze) t={} t[1]={} t[1].address=address t[1].flags=flags t[1].value=value t[1].freeze=freeze gg.addListItems(t) end function xfnb(add,lx) return gg.getValues({ { address=add,flags = lx } })[1].value end local function X(address) return gg.getValues({{address = address, flags = gg.TYPE_QWORD}})[1].value end function setvalue(address,flags,value) local tt={} tt[1]={} tt[1].address=address tt[1].flags=flags tt[1].value=value gg.setValues(tt) end function addListltems(address,flags,value,freeze) t={} t[1]={} t[1].address=address t[1].flags=flags t[1].value=value t[1].freeze=freeze gg.addListItems(t) end local function X(address) return gg.getValues({{address = address, flags = gg.TYPE_QWORD}})[1].value end function readPointer(name, offset, i) local re = gg.getRangesList(name) local x64 = gg.getTargetInfo().x64 local va = {[true] = 32, [false] = 4} if re[i or 1] then local addr = re[i or 1].start + offset[1] for i = 2, #offset do addr = gg.getValues({{address = addr, flags = va[x64]}}) if not x64 then addr[1].value = addr[1].value & 0xFFFFFFFF end addr = addr[1].value + offset[i] end return addr end end function gg.edits(addr, Table, name) local Table1 = {{}, {}} for k, v in ipairs(Table) do local value = {address = addr + v[3], value = v[1], flags = v[2], freeze = v[4]} if v[4] then Table1[2][#Table1[2] + 1] = value else Table1[1][#Table1[1] + 1] = value end end gg.addListItems(Table1[2]) gg.setValues(Table1[1]) --gg.toast((name or "") .. "开启成功, 共修改" .. #Table .. "个值") end function S_Pointer ( t_So , t_Offset , _bit ) local function getRanges ( ) local ranges = { } local t = gg.getRangesList ( '^/data/*.so*$' ) for i , v in pairs ( t ) do if v.type : sub ( 2 , 2 ) == 'w' then table.insert ( ranges , v ) end end return ranges end local function Get_Address ( N_So , Offset , ti_bit ) local ti = gg.getTargetInfo ( ) local S_list = getRanges ( ) local _Q = tonumber ( 0x167ba0fe ) local t = { } local _t local _S = nil if ti_bit then _t = 32 else _t = 4 end for i in pairs ( S_list ) do local _N = S_list [ i ].internalName : gsub ( '^.*/' , '' ) if N_So [ 1 ] == _N and N_So [ 2 ] == S_list [ i ].state then _S = S_list [ i ] break end end if _S then t [ # t + 1 ] = { } t [ # t ].address = _S.start + Offset [ 1 ] t [ # t ].flags = _t if # Offset ~= 1 then for i = 2 , # Offset do local S = gg.getValues ( t ) t = { } for _ in pairs ( S ) do if not ti.x64 then S [ _ ].value = S [ _ ].value & 0xFFFFFFFF end t [ # t + 1 ] = { } t [ # t ].address = S [ _ ].value + Offset [ i ] t [ # t ].flags = _t end end end _S = t [ # t ].address end return _S end local _A = string.format ( '0x%X' , Get_Address ( t_So , t_Offset , _bit ) ) return _A end function Format ( tab , format , value , type , Function ) if format == "查看" then tab [ 1 ] [ "flags" ] = type return print ( gg.getValues ( tab ) ) elseif format == "修改" then tab [ 1 ] [ "flags" ] = type tab [ 1 ] [ "value" ] = value return gg.setValues ( tab ) elseif format == "冻结" then tab [ 1 ] [ "flags" ] = type tab [ 1 ] [ "freeze" ] = true tab [ 1 ] [ "value" ] = value tab [ 1 ] [ "name" ] = Function or "功能" return gg.addListItems ( tab ) elseif format == "加载" then tab [ 1 ] [ "flags" ] = type return gg.loadResults ( tab ) end end function LSQ_Chain ( so , offset , format , value , type , Function ) getRanges = getRanges or ( function ( ) local ranges = { } local t = gg.getRangesList ( '^/data/*.so*$' ) for i , v in pairs ( t ) do if v [ "type" ] : sub ( 2 , 2 ) == 'w' then ranges [ # ranges + 1 ] = v end end return ranges end ) local rest , ranges , sostart , valtype = { } , getRanges ( ) , nil , gg.TYPE_DWORD if gg.getTargetInfo ( ) [ "x64" ] then valtype = gg.TYPE_QWORD end for i in pairs ( ranges ) do local _name = ranges [ i ] [ "internalName" ] : gsub ( '^.*/' , '' ) if so [ 1 ] == _name and so [ 2 ] == ranges [ i ] [ "state" ] then sostart = ranges [ i ] [ "start" ] break end end if sostart then if offset [ 1 ] then for i = 1 , # offset do rest = { { flags = valtype , address = sostart + offset [ i ] } } rest = gg.getValues ( rest ) if i == # offset then break end if valtype == gg.TYPE_DWORD then sostart = rest [ 1 ].value & 0xFFFFFFFF else sostart = rest [ 1 ].value end end end if # rest == 1 then end return Format ( rest , format , value , type , Function ) end gg.toast ( "功能:" ..Function .."开启失败" ) print ( "功能开启失败原因: 未找到基址头" ) return os.exit ( ) end function PS() end function setvalue(address,flags,value) PS('修改地址数值(地址,数值类型,要修改的值)') local tt={} tt[1]={} tt[1].address=address tt[1].flags=flags tt[1].value=value gg.setValues(tt) end--静态 local Ranges=gg.getRangesList('/') local function Read(module,type) for k,v in pairs(Ranges) do if v['internalName']:match('[^/]*$')==module and v['type']==type then return v['start'] end end end local Table={} local function Modify(address,value,flags) Table[#Table+1]={address=address,value=value,flags=flags} end function S_Pointer(t_So, t_Offset, _bit) local function getRanges() local ranges = {} local t = gg.getRangesList('^/data/*.so*$') for i, v in pairs(t) do if v.type:sub(2, 2) == 'w' then table.insert(ranges, v) end end return ranges end local function Get_Address(N_So, Offset, ti_bit) local ti = gg.getTargetInfo() local S_list = getRanges() local t = {} local _t local _S = nil if ti_bit then _t = 32 else _t = 4 end for i in pairs(S_list) do local _N = S_list[i].internalName:gsub('^.*/', '') if N_So[1] == _N and N_So[2] == S_list[i].state then _S = S_list[i] break end end if _S then t[#t + 1] = {} t[#t].address = _S.start + Offset[1] t[#t].flags = _t if #Offset ~= 1 then for i = 2, #Offset do local S = gg.getValues(t) t = {} for _ in pairs(S) do if not ti.x64 then S[_].value = S[_].value & 0xFFFFFFFF end t[#t + 1] = {} t[#t].address = S[_].value + Offset[i] t[#t].flags = _t end end end _S = t[#t].address end return _S end local _A = string.format('0x%X', Get_Address(t_So, t_Offset, _bit)) return _A end --遍历写法 local function readD ( a ) return gg.getValues ( { { address = a , flags = 4 } } ) [ 1 ].value end function setvalue(address,flags,value) local tt={} tt[1]={} tt[1].address=address tt[1].flags=flags tt[1].value=value gg.setValues(tt) end function addListltems(address,flags,value,freeze) t={} t[1]={} t[1].address=address t[1].flags=flags t[1].value=value t[1].freeze=freeze gg.addListItems(t) end function xfnb(add,lx) return gg.getValues({ { address=add,flags = lx } })[1].value end local function X(address) return gg.getValues({{address = address, flags = gg.TYPE_QWORD}})[1].value end function setvalue(address,flags,value) local tt={} tt[1]={} tt[1].address=address tt[1].flags=flags tt[1].value=value gg.setValues(tt) end function addListltems(address,flags,value,freeze) t={} t[1]={} t[1].address=address t[1].flags=flags t[1].value=value t[1].freeze=freeze gg.addListItems(t) end local function X(address) return gg.getValues({{address = address, flags = gg.TYPE_QWORD}})[1].value end function readPointer(name, offset, i) local re = gg.getRangesList(name) local x64 = gg.getTargetInfo().x64 local va = {[true] = 32, [false] = 4} if re[i or 1] then local addr = re[i or 1].start + offset[1] for i = 2, #offset do addr = gg.getValues({{address = addr, flags = va[x64]}}) if not x64 then addr[1].value = addr[1].value & 0xFFFFFFFF end addr = addr[1].value + offset[i] end return addr end end function gg.edits(addr, Table, name) local Table1 = {{}, {}} for k, v in ipairs(Table) do local value = {address = addr + v[3], value = v[1], flags = v[2], freeze = v[4]} if v[4] then Table1[2][#Table1[2] + 1] = value else Table1[1][#Table1[1] + 1] = value end end gg.addListItems(Table1[2]) gg.setValues(Table1[1]) --gg.toast((name or "") .. "开启成功, 共修改" .. #Table .. "个值") end function Format(tab, format, value, type, Function) if format == "查看" then tab[1]["flags"] = type return gg.getValues(tab) elseif format == "修改" then tab[1]["flags"] = type tab[1]["value"] = value return gg.setValues(tab) elseif format == "冻结" then tab[1]["flags"] = type tab[1]["freeze"] = true tab[1]["value"] = value tab[1]["name"] = Function or "功能" return gg.addListItems(tab) elseif format == "加载" then tab[1]["flags"] = type return gg.loadResults(tab) end end function Unfreeze() --获取保存列表 local t = gg.getListItems() for k, v in pairs(t) do t[k]["freeze"] = false end return gg.addListItems(t) end function xqmnb(Search,Modification) gg.clearResults() gg.setRanges(Search[1].memory) gg.searchNumber(Search[3].value,Search[3].type,false,536870912,0,-1) if gg.getResultCount()==0 then gg.toast(Search[2].name..'开启失败') return end local Result=gg.getResults(gg.getResultCount()) local sum for index=4,#Search do sum=0 for i=1,#Result do if gg.getValues({{address=Result[i].address+Search[index].offset,flags=Search[index].type}})[1].value~=Search[index].lv then Result[i].Usable=true sum=sum+1 end end if sum==#Result then gg.toast(Search[2].name..'开启失败') return end end local Data,Freeze,Freezes={},{},0 sum=0 for index,value in ipairs(Modification)do for index=1,#Result do if not Result[index].Usable then local Value={address=Result[index].address+value.offset,flags=value.type,value=value.value,freeze=true} if value.freeze then Freeze[#Freeze+1]=Value Freezes=Freezes+1 else Data[#Data+1]=Value end sum=sum+1 end end end gg.setValues(Data) gg.addListItems(Freeze) if Freezes==0 then gg.toast(Search[2].name..'开启成功,共修改'..sum..'条数据') else gg.toast(Search[2].name..'开启成功,共修改'..sum..'条数据,冻结'..Freezes..'条数据') end gg.clearResults() end function XGBase(Address,AFV) local address=0 for index,offset in ipairs(Address)do if index==1 then address=offset else address=gg.getValues({{address=address+offset,flags=4}})[1].value end end local Value,Freeze={},{} for index,value in ipairs(AFV)do local VALUE={address=address+value[3],flags=value[2],value=value[1],freeze=true} if value[4]then Freeze[#Freeze+1]=VALUE else Value[#Value+1]=VALUE end end gg.setValues(Value) gg.addListItems(Freeze) end function Format(tab, format, value, type, Function) if format == "查看" then tab[1]["flags"] = type return print(gg.getValues(tab)) elseif format == "修改" then tab[1]["flags"] = type tab[1]["value"] = value return gg.setValues(tab) elseif format == "冻结" then tab[1]["flags"] = type tab[1]["freeze"] = true tab[1]["value"] = value tab[1]["name"] = Function or "功能" return gg.addListItems(tab) elseif format == "加载" then tab[1]["flags"] = type return gg.loadResults(tab) end end function LSQ_Chain(so, offset, format, value, type, Function)--模块设置, 偏移量, 功能参数, 修改值, 类型, 功能频道:@dzyyds A91 getRanges = getRanges or (function() local ranges = {} local t = gg.getRangesList('^/data/*.so*$') for i, v in pairs(t) do if v["type"]:sub(2, 2) == 'w' then--判断so是否可读可写 ranges[#ranges+1] = v end end return ranges end) local rest, ranges, sostart, valtype = {}, getRanges(), nil , gg.TYPE_DWORD if gg.getTargetInfo()["x64"] then--判断应用程序是否为64位 valtype = gg.TYPE_QWORD end for i in pairs(ranges) do local _name = ranges[i]["internalName"]:gsub('^.*/', '') if so[1] == _name and so[2] == ranges[i]["state"] then sostart = ranges[i]["start"] break end end --频道:@SaiXiLyy66 if sostart then if offset[1] then for i = 1, #offset do rest = {{flags = valtype,address = sostart + offset[i]}} rest = gg.getValues(rest) if i == #offset then break end if valtype == gg.TYPE_DWORD then sostart = rest[1].value & 0xFFFFFFFF--对值进行补位操作 else sostart = rest[1].value end end end if #rest == 1 then end return Format(rest, format, value, type, Function) end gg.alert("遇到未知错误请等待") gg.toast("功能:" .. Function .. "开启失败") print("功能开启失败原因: 未找到基址头") return os.exit() end local material3 = require 'material3' import('android.content.res.ColorStateList') local context=material3:getContext() vibra = context:getSystemService(Context.VIBRATOR_SERVICE) changan = {} local changan = changan local android = import('android.*') function write(fileName, content) file.write(fileName, content) end function panduan(rec) fille,err = io.open(rec) if fille == nil then return false else return true end end function read(fileName) f = assert(io.open(fileName, 'r')) content = f:read("*all") f:close() return content end function wtcf(lujing,neirong) write("/sdcard/祈绪/配置文件/"..lujing,neirong) end function rdcf(lujing) return read("/sdcard/祈绪/配置文件/"..lujing) end local function getBG(DrawableColor,Radius,StrokeWidth,StrokeColor) if type(DrawableColor)~='table' then DrawableColor={DrawableColor,DrawableColor} end local jianbians = luajava.loadlayout({ GradientDrawable, color = 0xff000000, gradientType = GradientDrawable.LINEAR_GRADIENT, orientation = GradientDrawable.Orientation.TOP_BOTTOM , }) jianbians:setColors(DrawableColor) jianbians:setStroke(StrokeWidth or 0,StrokeColor or 0xffffffff) if type(Radius)=='table' then jianbians:setCornerRadii({Radius[1],Radius[1],Radius[2],Radius[2],Radius[3],Radius[3],Radius[4],Radius[4]}) else jianbians:setCornerRadius(Radius or 0) end return jianbians end 开 = "开" 关 = "关" function checkimg(tmp) if panduan("/sdcard/祈绪/图片/"..tmp) ~= true then gg.toast("正在下载资源"..tmp.."\n请耐心等待") download("http://wss.wigwy.xyz/api/get/yjb/"..tmp,"/sdcard/祈绪/图片/"..tmp) end end ckimg = { '845', '844' } for i = 1,#ckimg do jindu = i checkimg(ckimg[i]) end function 获取图片(txt) txt = string.url(txt,"de") ntxt = string.sub(string.gsub(txt,"/","-"),-10,-1) if string.find(tostring(txt),"http") ~= nil then if panduan("/sdcard/祈绪/图片/"..ntxt) == false then file.download(txt,"/sdcard/祈绪/图片/"..ntxt) else end txt = "/sdcard/祈绪/图片/"..ntxt end return luajava.getBitmapDrawable(txt) end function getRes(x) return 获取图片("/sdcard/祈绪/图片/"..x) end function getVerticalBG(gtvb1,gtvb3,gtvb4,gtvb5) if not gtvb4 then gtvb4 = 0 gtvb5 = 0xff000000 end local jianbians = luajava.new(GradientDrawable) jianbians:setCornerRadius(gtvb3) jianbians:setGradientType(GradientDrawable.LINEAR_GRADIENT) jianbians:setColors(gtvb1) jianbians:setStroke(gtvb4,gtvb5) return jianbians end function getCorner(gtvb1,gtvb3,gtvb4,gtvb5,g1,g2,g3,g4) if not gtvb4 then gtvb4 = 0 gtvb5 = 0xff000000 end local jianbians = luajava.new(GradientDrawable) jianbians:setCornerRadius(gtvb3) jianbians:setGradientType(GradientDrawable.LINEAR_GRADIENT) jianbians:setColors(gtvb1) jianbians:setStroke(gtvb4,gtvb5)--边框宽度和颜色 jianbians:setCornerRadii({g1,g1,g2,g2,g3,g3,g4,g4}) return jianbians end function getHorizontalBG(gtvb1,gtvb3,gtvb4,gtvb5) if not gtvb4 then gtvb4 = 0 gtvb5 = 0xff000000 end local jianbians = luajava.new(GradientDrawable) jianbians:setCornerRadius(gtvb3) jianbians:setOrientation(GradientDrawable.Orientation.LEFT_RIGHT) jianbians:setGradientType(GradientDrawable.LINEAR_GRADIENT) jianbians:setColors(gtvb1) jianbians:setStroke(gtvb4,gtvb5)--边框宽度和颜色 return jianbians end context = app.context window = context:getSystemService("window") -- 获取窗口管理器 function getLayoutParams() LayoutParams = WindowManager.LayoutParams layoutParams = luajava.new(LayoutParams) if (Build.VERSION.SDK_INT >= 26) then -- 设置悬浮窗方式 layoutParams.type = LayoutParams.TYPE_APPLICATION_OVERLAY else layoutParams.type = LayoutParams.TYPE_PHONE end layoutParams.format = PixelFormat.RGBA_8888 -- 设置背景 layoutParams.flags = LayoutParams.FLAG_NOT_TOUCH_MODAL -- 焦点设置Finish layoutParams.gravity = Gravity.TOP|Gravity.LEFT -- 重力设置 layoutParams.width = LayoutParams.WRAP_CONTENT -- 布局宽度 layoutParams.height = LayoutParams.WRAP_CONTENT -- 布局高度 return layoutParams end slctb = getVerticalBG({0xffA0D1FF,0xffA0D1FF},10) slcta = getHorizontalBG({0xffA0D1FF,0xffA0D1FF},10,4,0xffffffff) function getButtonBG() local selector = luajava.getStateListDrawable() selector:addState({ -android.R.attr.state_pressed }, getVerticalBG({0x55ffffff,0x55ffffff},20,2,0xaaA0D1FF)) selector:addState({ android.R.attr.state_pressed }, getVerticalBG({0x22A0D1FF,0x22A0D1FF},20,2,0xaaA0D1FF)) return selector end function getSelector() selector = luajava.getStateListDrawable() selector:addState({ android.R.attr.state_pressed }, slcta) -- 点击时候的背景 selector:addState({ -android.R.attr.state_pressed }, slctb) -- 没点击的背景 return selector end hanshu = function(v, event) local Action = event:getAction() if Action == MotionEvent.ACTION_DOWN then isMove = false RawX = event:getRawX() RawY = event:getRawY() x = mainLayoutParams.x y = mainLayoutParams.y elseif Action == MotionEvent.ACTION_MOVE then isMove = true mainLayoutParams.x = tonumber(x) + (event:getRawX() - RawX) mainLayoutParams.y = tonumber(y) + (event:getRawY() - RawY) window:updateViewLayout(floatWindow, mainLayoutParams) end end YoYoImpl = luajava.getYoYoImpl() changan.menu = function(sview) 菜单页数=#sview 当前分区={} 分区页数={} 侧边={} 功能区={} 顶边={ LinearLayout, layout_height='match_parent', layout_width='match_parent', orientation='vertical', onClick=function() end, onTouch=hanshu, } beij=getBG('0xFFA0D1FF',25) dbback=getVerticalBG({0xffffffff,0xffffffff},90) for i = 1,菜单页数 do 分区页数[i]= #sview[i] table.insert(顶边,{ FrameLayout, orientation='vertical', layout_height='wrap_content', layout_width='match_parent', gravity='center_horizontal', { TextView, layout_height='wrap_content', layout_width='match_parent', padding={'25dp','4dp','15dp','4dp'}, text=sview[i]['分页名字'], textColor='#000000', textSize='10sp', gravity='center', __onCreate=function(v) _ENV['ding'..i]=v end, elevation='2dp', layout_margin='4dp', background=slctb, onClick=function() 切换(i) end, onTouch=hanshu, }, {ImageView, src=获取图片(sview[i]['侧边图标']), layout_gravity='center_vertical', layout_height='25dp', layout_width='25dp', elevation='4dp', }, {LinearLayout, layout_marginTop='25dp', layout_marginLeft='35dp', layout_width='27dp', layout_height='3dp', __onCreate=function(v) _ENV['dingbar'..i]=v end } }) 功能区[i]={} local layoutm={ LinearLayout, id = "layoutm"..i, padding='4dp', layout_width = "match_parent", orientation = "vertical", gravity = "center_horizontal", } local menulayout={ LinearLayout, layout_width='match_parent', layout_height='wrap_content', visibility = "gone", orientation = "vertical", id='menu'..i..1, } for k,v in pairs(sview[i]['功能配置']) do table.insert(menulayout,v) end local menulayout=luajava.loadlayout(menulayout) 功能区[i][1]=menulayout table.insert(layoutm,menulayout) local menus={ LinearLayout, layout_width = "270dp", layout_height = "270dp", visibility = "gone", orientation = "vertical", padding={'0dp','0dp','0dp','0dp'}, background=获取图片(背景图片), elevation='3dp', { ScrollView, fillViewport = "true", background=getBG({0x33ffffff,0x33ffffff},{0,0,25,25}), --padding = "10dp", gravity = "center", layout_width = "match_parent", layout_height = "match_parent", orientation = "horizontal", layoutm }} _ENV["layout"..i] = luajava.loadlayout(menus) end ckou = { LinearLayout, orientation='vertical', layout_width = "wrap_content", layout_height = "wrap_content", {--顶部栏 FrameLayout, orientation = "horizontal", padding = "2dp", layout_height='wrap_content', elevation='3dp', layout_width="fill_parent", background=getCorner({0xffffffff,0xffffffff},20,0,0xffFFE543,25,25,0,0), { TextView, layout_width='match_parent', layout_height='match_parent', gravity='center', layout_gravity='center_vertical', textSize='14sp', textColor='#000000', text=标题, }, { LinearLayout, layout_gravity="center_vertical|right", padding={"2dp","2dp","2dp","2dp"}, layout_marginLeft='2dp', layout_marginRight='2dp', layout_marginTop='2dp', layout_marginBottom='2dp', layout_width = "40dp", layout_height = "24dp", gravity = "center", onClick = 隐藏, onTouch = hanshu, {ImageView, layout_height='17dp', layout_width='17dp', src=获取图片('放图片'), colorFilter=0xffA0D1FF } } } } for i = 1,菜单页数 do ckou[#ckou+1] = _ENV["layout"..i] end headicon=luajava.loadlayout({ImageView, src=获取图片(悬浮窗图标), layout_height="42dp", layout_width="42dp", padding='1dp', }) ckou = luajava.loadlayout(ckou) floatWindow = { FrameLayout, id = "motion", elevation = "10dp", onTouch = hanshu, onClick = function() end, layout_width = "wrap_content", orientation = "vertical", gravity = "center_vertical", layout_height = "wrap_content", { LinearLayout, id = 'chuangk', visibility = 'gone', layout_height = 'wrap_content', { LinearLayout, layout_height = 'match_parent', layout_width = '80dp', onClick = function() end, onTouch = hanshu, orientation = 'vertical', { FrameLayout, id = 'canv', layout_marginLeft = '19dp', layout_marginTop = '10dp', layout_height = "42dp", layout_width = "42dp", gravity = 'center', onClick = 隐藏, onTouch = hanshu, headicon }, { LinearLayout, layout_width='match_parent', layout_weight = 1, layout_height='match_parent', elevation='3dp', background=getBG(0xffffffff,20), layout_margin='5dp', -- layout_marginRight='100dp', onClick=function() end, onTouch=hanshu, 顶边 } }, ckou, }, { ImageView, id = "control", background = 获取图片(悬浮窗图标), layout_width = "40dp", layout_height = "40dp", onTouch = hanshu, onClick = 隐藏, } } totouch=luajava.loadlayout({ LinearLayout, layout_height='42dp', layout_width='42dp', onClick=隐藏, onTouch=hanshu }) local function invoke() local ok local RawX, RawY, x, y mainLayoutParams = getLayoutParams() floatWindow = luajava.loadlayout(floatWindow) local function invoke2() window:addView(floatWindow, mainLayoutParams) block('end') end local runnable = luajava.getRunnable(invoke2) local handler = luajava.getHandler() handler:post(runnable) block('join') local isMove end invoke(swib1,swib2) 切换(1) 分区(1) 隐藏() gg.setVisible(false) luajava.setFloatingWindowHide(true) qhkai = 0 qiehuan = function() if qhkai == 0 then qhkai = 1 draw.remove() luajava.runUiThread(function() changan.controlSmall(floatWindow,400) end) gg.sleep(400) luajava.runUiThread(function() floatWindow:setVisibility(View.GONE) end) else qhkai = 0 huiz() draw.text('.', -9200,-9200) luajava.runUiThread(function() floatWindow:setVisibility(View.VISIBLE) end) luajava.runUiThread(function() changan.controlBig(floatWindow,400) end) end end huiz() draw.text('.', -9200,-9200) while true do if tuichu == 1 then break end jianting3(qiehuan) gg.sleep(300) end luajava.setFloatingWindowHide(false) end changan.controlRotation9 = function(control, time,t) luajava.runUiThread(function() import "android.view.animation.Animation" import "android.animation.ObjectAnimator" xuanzhuandonghua = ObjectAnimator:ofFloat(control, "rotation", { time,t }) xuanzhuandonghua:setRepeatCount(0) xuanzhuandonghua:setRepeatMode(Animation.RESTART) xuanzhuandonghua:setDuration(400) xuanzhuandonghua:start() end) end function launch(appstart) local loadBox = getLoadingBox('正在启动游戏\n'..appstart) loadBox['显示']() if appstart ~= nil then gg.setProcess(appstart) gg.sleep(500) if tostring(gg.getTargetPackage()) == appstart then gg.toast("正在启动游戏") gg.processKill() tuichu=true luajava.setFloatingWindowHide(false) os.exit() end gg.toast("正在启动游戏...") app.startActivity(appstart) jci=0 --gg.sleep(5000) while true do gg.setProcess(appstart) gg.sleep(400) if tostring(gg.getTargetPackage()) == appstart then loadBox['关闭']() gg.alert("启动成功") else jci=jci+1 if jci==14 then loadBox['关闭']() gg.alert("自动获取进程失败\n请手动选择游戏进程") gg.setProcessX() break end end gg.sleep(100) end end end function card(cdv) logo=cdv[1] name=cdv[2] tags=cdv[3] func=cdv[4] if not x then x = 2 end tag = { LinearLayout, } for i = 1,#tags do tag[#tag+1] = { TextView, background = getHorizontalBG({0x00FF9700,0x00FF9700},45,2,0xffFF9700), layout_height = "20dp", padding = "2dp", textColor = 0xffFF9700, layout_marginLeft = "10dp", gravity = "center_vertical", text = " "..tags[i].." ", textSize = "9sp", } end tags = tag tmp = luajava.loadlayout( { FrameLayout, layout_height = "wrap_content", layout_width = "fill_parent", { LinearLayout, orientation = "vertical", layout_height = "100dp", layout_marginLeft = "4dp", layout_marginRight = "4dp", layout_marginTop = "2dp", layout_marginBottom = "2dp", layout_width = "match_parent", background=getVerticalBG({0xffffffff,0xffffffff},10,3,0xffe79268), { LinearLayout, layout_marginLeft = "10dp", layout_marginRight = "10dp", layout_marginTop = "10dp", layout_marginBottom = "10dp", layout_width = "match_parent", layout_height = "40dp", { ImageView, layout_width = "40dp", layout_height = "40dp", src = 获取图片(logo), }, { TextView, layout_height = "40dp", layout_marginLeft = "10dp", gravity = "center_vertical", text = name, textColor="#161616", textSize = "13sp", } }, tags }, { LinearLayout, onClick = function() luajava.newThread(function() 隐藏() func() end):start() end, background = getHorizontalBG({0xffe79268,0xffe79268},90), layout_height = "25dp", layout_width = "55dp", layout_gravity = "right", layout_marginRight = "10dp", layout_marginTop = "70dp", gravity = "center", { ImageView, layout_height = "20dp", layout_width = "15dp", src = getRes("rw1"), colorFilter=0xffffffff }, { TextView, textColor = "#ffffff", text = "启动", textSize = "10sp", layout_height = "20dp", gravity = "center", layout_width = "30dp", } } }) return tmp end function visi (tid , ttid) vibra:vibrate(4) local tview = luajava.getIdValue (tid) local ttview = luajava.getIdValue (ttid) if not tview then return 0 end if tonumber (tostring (tview : getVisibility ())) == 8.0 then tview : setVisibility (View.VISIBLE) YoYoImpl:with("FadeIn"):duration(200):playOn(boxes[tid]) changan.controlRotation9(boxpic[tid],0,90) else tview : setVisibility (View.GONE) changan.controlWater (_ENV [tid.."6"] , 200) changan.controlRotation9(boxpic[tid],90,0) end end boxes = {} boxpic = {} function changan.box (views) local tid = "box"..guid () boxpic[tid] = luajava.loadlayout { ImageView , background = getRes("hei_right"), layout_width = "24dp" , layout_height = "24dp" , } local ttid = tid.."6" local t1id = guid () firadio = { LinearLayout , layout_width = 'fill_parent' , layout_height = "wrap_content" , layout_marginTop = "2dp" , layout_marginBottom = "2dp" , orientation = "vertical" , } if type (views [1]) == "string" or type (views [1]) == "number" then firadio [# firadio + 1] = { LinearLayout , layout_width = 'fill_parent' , layout_height = "30dp" , gravity = "center_vertical" , layout_marginTop = "2dp" , layout_marginLeft='4dp', layout_marginRight='4dp', elevation='2dp', layout_marginBottom = "2dp" , onClick = function () visi (tid , ttid) end , background = getButtonBG(), { TextView , text = views [1] , textSize = "13sp" , layout_marginLeft = "15dp" , layout_marginRight='-20dp', layout_width = "match_parent" , layout_weight=1, textColor = "#000000" , gravity = "center" , },{ LinearLayout , padding={"0dp","0dp","10dp","0dp"}, layout_width = "30dp" , layout_height = "30dp" , gravity = "center", boxpic[tid], } } else gg.alert ("changan.box的table内第一个元素必须是string") os.exit () end radios = { LinearLayout , layout_marginLeft = "0dp" , layout_marginRight = "0dp" , orientation = "vertical" , visibility = "gone" , id = luajava.newId (tid) , padding = "0dp" , layout_width = 'fill_parent' , } for i = 2 , # views do radios [# radios + 1] = views [i] end boxes[tid] = luajava.loadlayout(radios) firadio [# firadio + 1] = boxes[tid] _ENV [t1id] = luajava.loadlayout (firadio) return _ENV [t1id] end corbk = true 当前ui = 1 function 分区(x) 当前分区[当前ui]=x luajava.runUiThread(function() for i=1,分区页数[当前ui] do _ENV['menu'..当前ui..i]:setVisibility(View.GONE) end _ENV['menu'..当前ui..当前分区[当前ui]]:setVisibility(View.VISIBLE) end) end function 切换(x) 当前ui = x luajava.runUiThread(function() if 当前分区[当前ui]==nil then 分区(1) end for i = 1,菜单页数 do _ENV["ding"..i]:setTextColor(0xff483C2E) _ENV['dingbar'..i]:setBackground(empty) _ENV['ding'..i]:setBackground(slctb) _ENV["layout"..i]:setVisibility(View.GONE) end _ENV["ding"..当前ui]:setTextColor(0xff000000) _ENV["layout"..当前ui]:setVisibility(View.VISIBLE) _ENV['ding'..当前ui]:setBackground(slcta) _ENV['dingbar'..当前ui]:setBackground(dbback) changan.controlWater(_ENV['ding'..当前ui],400) changan.controlBigX(_ENV['dingbar'..当前ui],700) end) end 显示 = 0 beij2 = luajava.loadlayout({ GradientDrawable, color = "#001E1C27", cornerRadius = 10 }) function changan.text(txt,color,size) if not txt then txt = "未设置文字" end if not color then color = "#545454" end if not size then size = "12sp" end return luajava.loadlayout( { TextView, text = txt, textSize = size, textColor = color, layout_width = "match_parent", padding={'10dp','0dp','0dp','0dp'} }) end 显示 = 0 function 隐藏() luajava.runUiThread(function() if tonumber(tostring(chuangk:getVisibility())) == 8.0 then control:setVisibility(View.GONE) 显示 = 1 chuangk:setVisibility(View.VISIBLE) _ENV["layout"..当前ui]:setVisibility(View.VISIBLE) changan.controlBigX(floatWindow,800) floatWindow:setBackground(beij) mainLayoutParams.flags = LayoutParams.FLAG_NOT_TOUCH_MODAL window : updateViewLayout (floatWindow , mainLayoutParams) else luajava.startThread(function() luajava.runUiThread(function() YoYoImpl:with("FadeOut"):duration(300):playOn(floatWindow) end) gg.sleep(300) luajava.runUiThread(function() chuangk:setVisibility(View.GONE) floatWindow:setBackground(beij2) control:setVisibility(View.VISIBLE) 显示 = 0 _ENV["layout"..当前ui]:setVisibility(View.GONE) YoYoImpl:with("FadeIn"):duration(300):playOn(floatWindow) mainLayoutParams.flags = LayoutParams.FLAG_NOT_FOCUSABLE window : updateViewLayout (floatWindow , mainLayoutParams) end) end) end end) end import("android.media.AudioManager") audi = context:getSystemService("audio") audiotype = { AudioManager.STREAM_ALARM, --手机闹铃的声音 AudioManager.STREAM_MUSIC, --手机音乐的声音 AudioManager.STREAM_NOTIFICATION, --系统提示的通知 AudioManager.STREAM_RING, --电话铃声的声音 AudioManager.STREAM_SYSTEM, --手机系统的声音 AudioManager.STREAM_VOICE_CALL, --语音电话的声音 AudioManager.STREAM_DTMF, --DTMF音调的声音 } yinl = {} for i = 1,#audiotype do yinl[i] = {} yinl[i].type = audiotype[i] yinl[i].min = audi:getStreamMinVolume(audiotype[i]) yinl[i].max = audi:getStreamMaxVolume(audiotype[i]) yinl[i].now = audi:getStreamVolume(audiotype[i]) end function jianting2() yinln = {} for i = 1,#audiotype do yinln[i] = {} yinln[i].type = audiotype[i] yinln[i].min = audi:getStreamMinVolume(audiotype[i]) yinln[i].max = audi:getStreamMaxVolume(audiotype[i]) yinln[i].now = audi:getStreamVolume(audiotype[i]) if yinln[i].now > yinl[i].now then audi:adjustStreamVolume(yinln[i].type,AudioManager.ADJUST_LOWER,0) gg.alert("up") elseif yinln[i].now < yinl[i].now then audi:adjustStreamVolume(yinln[i].type,AudioManager.ADJUST_RAISE,0) gg.alert("down\n"..yinln[i].now.."\n"..yinl[i].now) end end end yltype = 0 function jianting3(func) yinln = {} for i = 1,#audiotype do yinln[i] = {} yinln[i].type = audiotype[i] yinln[i].now = audi:getStreamVolume(audiotype[i]) if yinln[i].now > yinl[i].now then yinl[i].now = yinln[i].now if yltype == 1 then yltype = 0 func() end elseif yinln[i].now < yinl[i].now then yinl[i].now = yinln[i].now if yltype == 0 then yltype = 1 func() end end end end function jianting(func) yinln = {} for i = 1,#audiotype do yinln[i] = {} yinln[i].type = audiotype[i] yinln[i].now = audi:getStreamVolume(audiotype[i]) if yinln[i].now >= yinl[i].max then audi:adjustStreamVolume(yinln[i].type,AudioManager.ADJUST_LOWER,0) end if yinln[i].now > yinl[i].now then audi:setStreamVolume(yinln[i].type,yinl[i].now,0) func() end end end function guid() seed = { 'e','1','2','3','4','5','6','7','8','9','a','b','c','d','e','f' } tb = {} for i = 1,32 do table.insert(tb,seed[math.random(1,16)]) end sid = table.concat(tb) return string.format('%s%s%s%s%s', string.sub(sid,1,8), string.sub(sid,10,12), string.sub(sid,21,22)) ..string.format('%s%s%s%s%s', string.sub(sid,1,6), string.sub(sid,21,25) ) end local function exit() tuichu = 1 luajava.setFloatingWindowHide(false) luajava.post(function() window:removeView(floatWindow) end) end setExitEvent(exit) changan.controlWater = function(control,time) luajava.runUiThread(function() import "android.animation.ObjectAnimator" ObjectAnimator():ofFloat(control,"scaleX", { 1, 0.8, 0.9, 1 }):setDuration(time):start() ObjectAnimator():ofFloat(control,"scaleY", { 1,0.8,0.9,1 }):setDuration(time):start() end) end changan.controlSmall = function(control,time) luajava.runUiThread(function() import "android.animation.ObjectAnimator" ObjectAnimator():ofFloat(control,"scaleX", { 1, 0.7, 0.4, 0 }):setDuration(time):start() ObjectAnimator():ofFloat(control,"scaleY", { 1, 0.7, 0.4, 0 }):setDuration(time):start() end) end changan.controlBig = function(control,time) luajava.runUiThread(function() import "android.animation.ObjectAnimator" ObjectAnimator():ofFloat(control,"scaleX", { 0, 0.4, 0.7, 1 }):setDuration(time):start() ObjectAnimator():ofFloat(control,"scaleY", { 0, 0.4, 0.7, 1 }):setDuration(time):start() end) end changan.controlBigX = function(control,time) luajava.runUiThread(function() import "android.animation.ObjectAnimator" ObjectAnimator():ofFloat(control,"scaleX", { 0, 0.4, 0.7, 1 }):setDuration(time):start() end) end buts={} heir=getRes("heir") function changan.button(txt,func,txtc) if not txt then txt = "未设置" end if not txtc then txtc="#000000" end local tid="Cbutton"..guid() buts[tid]=luajava.loadlayout( { LinearLayout, layout_width = 'match_parent', layout_height = "wrap_content", { LinearLayout, layout_height='30dp', layout_width = "fill_parent", gravity = "center_vertical", layout_margin='5dp', elevation='3dp', background = getButtonBG(), padding="3dp", onClick = function() changan.controlWater(buts[tid],300) luajava.newThread(func):start() end, { TextView, --id = luajava.newId(tid), textColor = txtc, text = txt, textSize = "13sp", gravity='center', layout_height = "wrap_content", layout_width = "fill_parent", layout_weight=1, } }}) return buts[tid] end checkbg1 = getRes("bbts_checkoff") checkbg2 = getRes("bbts_check") checkbg3 = getVerticalBG({0x00aaaaaa,0x00aaaaaa},360,7,0xff999999) checkbg4 = getVerticalBG({0x00000000,0x00000000},360,11,0xffe79268) radoff = getVerticalBG({0xaaBDC7CD,0xaaBDC7CD},360) radon = getRes("dz_check") radiog={} function changan.intradio(nid,name,func) return { LinearLayout , layout_width = 'match_parent' , layout_height = "wrap_content" , layout_weight=1, layout_marginLeft = "2dp" , layout_marginRight = "5dp" , layout_marginTop='2dp', layout_marginBottom='8dp', gravity = "center_vertical" , onClick = function () --changan.controlWater (_ENV [tid] , 200) func() end , { ImageView , id = luajava.newId (nid) , layout_width = '15dp' , layout_height = "15dp" , layout_marginLeft = "2dp" , layout_marginRight = "4dp" , src =radoff , padding='0dp', } , { TextView , gravity = "top" , text = name , textSize="12sp", textColor = '#000000' , layout_width = 'wrap_content' , layout_height = 'wrap_content' , } } end local RadTint=ColorStateList({ {android.R.attr.state_checked}, {-android.R.attr.state_checked}, {}, }, { 0xff5AA7FF, 0xff545454, 0xff545454 }) function changan.intcheck(name,func1,func2) local nid = name..guid() local func = 开关(name,func1,func2,nid) if not name then name = "未设置" end return { LinearLayout, layout_width = 'match_parent', layout_weight=1, layout_height = "42dp", layout_marginTop = "1dp", layout_marginBottom = "1dp", padding = "1dp", { LinearLayout, padding="3dp", layout_width = 'match_parent', layout_height = "wrap_content", gravity = "center_vertical", --background=getVerticalBG({0xffFFFDF2,0xddffffff,0xffFFFDF2},15,8,0xffFFDA71), { CheckBox, id=luajava.newId(nid.."t"), layout_width = '32dp', layout_height = '32dp', padding = "0dp", __onFinish=function(v) v:setButtonTintList(RadTint) end, onClick = function() luajava.newThread(function() func() end):start() end, },{ TextView, gravity = "left", text = name, textColor=0xff000000, textSize = "14sp", layout_width = 'match_parent', layout_weight=1, onClick = function() local v=luajava.getIdView(nid..'t') if v:isChecked() then v:setChecked(false) else v:setChecked(true) end luajava.newThread(function() func() end):start() end, }, } } end function 开关(name , func1 , func2 ) local localname=name local tname=name..guid() if func1 == nil then func1 = "" end if func2 == nil then func2 = "" end if type(func1 ) == "function" then return function() namers = _ENV [ tname ] if namers ~= "开" then _ENV [ tname ] = "开" pcall(func1 ) else _ENV [ tname ] = "关" pcall(func2 ) end end end end swfuncs,buts,sliders,boxes,textvs={},{},{},{},{} function changan.check(cklist) if #cklist==0 then return nil end local rest = { LinearLayout, layout_width = 'match_parent', layout_height = "wrap_content", gravity = "center", orientation="vertical", } for i = 1, #cklist,2 do local tempTable = {LinearLayout, layout_width = 'match_parent', layout_height = "wrap_content", gravity = "left", orientation="horizontal" } for j = 0, 1 do if cklist[i + j] ~= nil then local name = cklist[i + j][1] local func1 = cklist[i + j][2] local func2 = cklist[i + j][3] if not name then name = "未设置" end rstt = changan.intcheck(name,func1,func2) table.insert(tempTable, rstt) else table.insert(tempTable, {LinearLayout, layout_width = 'match_parent', layout_weight=1,}) end end table.insert(rest, tempTable) end return rest end function changan.radio(cklist) local rid=guid() radiog[rid]={} rest = { LinearLayout , layout_width = 'match_parent' , layout_height = "wrap_content" , layout_marginTop = "10dp" , } local restt={ LinearLayout , layout_width = 'match_parent' , layout_weight=1, layout_height = "wrap_content" , gravity = "left" , orientation='vertical', } for i = 1, #cklist,4 do local tempTable = {LinearLayout, layout_width = 'fill_parent', layout_height = "wrap_content", gravity = "left", orientation="horizontal" } for j = 0, 3 do if cklist[i + j] ~= nil then local nid = name..guid () local name = cklist[i + j][1] radiog[rid][nid]=false local func1 = radin(rid,nid,cklist[i + j][2],name) if not name then name = "未设置" end local rstt = changan.intradio(nid,name,func1) table.insert(tempTable, rstt) else table.insert(tempTable, {LinearLayout, layout_width = 'match_parent', layout_weight=1,}) end end table.insert(restt, tempTable) end rest [# rest + 1] = restt return luajava.loadlayout (rest) end switchs={} 无=function() end 标题='' 背景图片="放图片" 悬浮窗图标 = "放图片" function huiz()---绘制必须放在这里面 end 第一页 = {--创建分页，结尾调用 ['分页名字']="主页", ['侧边图标']="放图片", ['功能配置']={ changan.button('选择进程',gg.setProcessX), changan.box({--box开头 "框架防闪",--box名字 changan.check({ { "防闪1", function() local t = {"libanogs.so:bss", "Cb"} local tt = {0x1E0} local ttt = S_Pointer(t, tt) gg.addListItems({{address = ttt, flags = 4, value = 4096, freeze = true}}) local t = {"libanogs.so:bss", "Cb"} local tt = {0x468} local ttt = S_Pointer(t, tt) gg.addListItems({{address = ttt, flags = 4, value = 4096, freeze = true}}) local t = {"libanogs.so:bss", "Cb"} local tt = {0x4BC} local ttt = S_Pointer(t, tt) gg.addListItems({{address = ttt, flags = 4, value = 4096, freeze = true}}) local t = {"libanogs.so:bss", "Cb"} local tt = {0x370} local ttt = S_Pointer(t, tt, true) gg.addListItems({{address = ttt, flags = 4, value = 4096, freeze = true}}) local t = {"libanogs.so:bss", "Cb"} local tt = {0x718} local ttt = S_Pointer(t, tt, true) gg.addListItems({{address = ttt, flags = 4, value = 4096, freeze = true}}) gg.toast("防闪已开启") string.toMusic("防闪开启成功") end, function() end },{ "防闪2", function() function S_Pointer(t_So, t_Offset, _bit) local function getRanges() local ranges = {} local t = gg.getRangesList('^/data/*.so*$') for i, v in pairs(t) do if v.type:sub(2, 2) == 'w' then table.insert(ranges, v) end end return ranges end local function Get_Address(N_So, Offset, ti_bit) local ti = gg.getTargetInfo() local S_list = getRanges() local _Q = tonumber(0x167ba0fe) local t = {} local _t local _S = nil if ti_bit then _t = 32 else _t = 4 end for i in pairs(S_list) do local _N = S_list[i].internalName:gsub('^.*/', '') if N_So[1] == _N and N_So[2] == S_list[i].state then _S = S_list[i] break end end if _S then t[#t + 1] = {} t[#t].address = _S.start + Offset[1] t[#t].flags = _t if #Offset ~= 1 then for i = 2, #Offset do local S = gg.getValues(t) t = {} for _ in pairs(S) do if not ti.x64 then S[_].value = S[_].value & 0xFFFFFFFF end t[#t + 1] = {} t[#t].address = S[_].value + Offset[i] t[#t].flags = _t end end end _S = t[#t].address print(string.char(231,190,164,58).._Q) end return _S end local _A = string.format('0x%X', Get_Address(t_So, t_Offset, _bit)) return _A end local t = {"libanogs.so:bss", "Cb"} local tt = {0x584} local ttt = S_Pointer(t, tt) gg.addListItems({{address = ttt, flags = 4, value = 4096, freeze = true}}) local t = {"libanogs.so:bss", "Cb"} local tt = {0x614} local ttt = S_Pointer(t, tt) gg.addListItems({{address = ttt, flags = 4, value = 4096, freeze = true}}) local t = {"libanogs.so:bss", "Cb"} local tt = {0x65C} local ttt = S_Pointer(t, tt) gg.addListItems({{address = ttt, flags = 4, value = 4096, freeze = true}}) local t = {"libanogs.so:bss", "Cb"} local tt = {0x4E0} local ttt = S_Pointer(t, tt) gg.addListItems({{address = ttt, flags = 4, value = 4096, freeze = true}}) local t = {"libanogs.so:bss", "Cb"} local tt = {0x578} local ttt = S_Pointer(t, tt) gg.addListItems({{address = ttt, flags = 4, value = 4096, freeze = true}}) gg.toast("防闪已开启") string.toMusic("防闪开启成功") end, function() end }, }), }),--box结尾 changan.box({--box开头 "小工具",--box名字 changan.check({ { "隐藏水印", function() draw.remove() draw.setSize(45) draw3 = require('draw3') string.toMusic("开启成功") end, function() end },{ "一键配置", function() local loadingBox = getLoadingBox('请耐心等待……') loadingBox['显示']() gg.sleep(1300) gg.setConfig("隐藏辅助", 23) gg.setConfig("运行守护", 3) gg.setConfig("冻结间隔", 0) gg.setConfig("快速冻结", 1) gg.setConfig("旁路模式", 1) gg.setConfig("隐藏辅助", 23) gg.setConfig("运行守护", 3) gg.setConfig("冻结间隔", 0) gg.setConfig("快速冻结", 1) gg.setConfig("旁路模式", 1) string.toMusic("开启成功") loadingBox['关闭']() end, function() local loadingBox = getLoadingBox('请耐心等待……') loadingBox['显示']() gg.sleep(1300) gg.setConfig("隐藏辅助", 23) gg.setConfig("运行守护", 3) gg.setConfig("冻结间隔", 0) gg.setConfig("快速冻结", 1) gg.setConfig("旁路模式", 1) gg.setConfig("隐藏辅助", 23) gg.setConfig("运行守护", 3) gg.setConfig("冻结间隔", 0) gg.setConfig("快速冻结", 1) gg.setConfig("旁路模式", 1) string.toMusic("开启成功") loadingBox['关闭']() string.toMusic("关闭成功") end }, }), }), } } 第二页 = { ['分页名字']="大厅", ['侧边图标']="放图片", ['功能配置']={ changan.check({ { "大厅一键1", function() so=gg.getRangesList('libUE4.so')[1].start py1=0x2D3598C--枪械聚点;原:-5.72945128e27 py2=0x26C693C--完美无后;原:-2.7869518e28 py3=0x30EA25C--视角防抖;原:3.81268224e-21 py4=0x674005C--枪械防抖;原:-1.36204395e28 py5=0x274DDD0--地图除雾;原:-1.36204395e28 py6=0x3884148--上下准小;原:-1.09897425e28 py7=0x388414C--左右准小;原:-1.09945794e28 py8=0x6E94110--枪械瞬击;原:-1.42781105e28 py9=0x6E94120--子弹无坠;原:-5.72701453e27 setvalue(so+py1,16,0) setvalue(so+py2,16,0) setvalue(so+py3,16,0) setvalue(so+py4,16,0) setvalue(so+py5,16,0) setvalue(so+py6,16,0) setvalue(so+py7,16,0) setvalue(so+py8,16,0) setvalue(so+py9,16,0) --据点原值:-9.945229435651368E27 so=gg.getRangesList('libUE4.so')[1].start py=0x2CDD67C setvalue(so+py,16,0) --防抖2原值:-1.3620439485143566E28 so=gg.getRangesList('libUE4.so')[1].start py=0x34DD500 setvalue(so+py,16,0) --无后原值:-2.78695180353035E28 so=gg.getRangesList('libUE4.so')[1].start py=0x2CE2D90 setvalue(so+py,16,0) --瞬击原值:-1.4278110478704994E28 so=gg.getRangesList('libUE4.so')[1].start py=0x6E94110 setvalue(so+py,16,0) --子弹无下坠原值:-5.72943297628658E27 so=gg.getRangesList('libUE4.so')[1].start py=0x6E94144 setvalue(so+py,16,0) --准心变色原值:-1.1777978687061456E28 so=gg.getRangesList('libUE4.so')[1].start py=0x6DD6C6C setvalue(so+py,16,0) --准心变小原值:-1.0989742524390028E28 so=gg.getRangesList('libUE4.so')[1].start py=0x3884148 setvalue(so+py,16,0) --准心变小原值:-1.0994579408260107E28 so=gg.getRangesList('libUE4.so')[1].start py=0x388414C setvalue(so+py,16,0) --秒切枪原值:-1.360041691181646E24 so=gg.getRangesList('libUE4.so')[1].start py=0x2BB4E68 setvalue(so+py,16,0) end },{ "自改广角", function() k=gg.prompt({"自改[200;360]"},{"240"},{"number"}) if k==nil then return end so=gg.getRangesList('libUE4.so')[1].start py=0x6DEFFB8 setvalue(so+py,16,k[1]) gg.toast("广角") gg.toast("广角已开启") string.toMusic("广角开启成功") end, function() end }, { "自改帧率", function() QA = gg.prompt({ "自改锁帧", },cfg,{"text"}) if QA == nil then else if QA[1] == true then QA1() end local t = {"libUE4.so:bss", "Cb"} local tt = {0x8A0, 0x20} local ttt = S_Pointer(t, tt) gg.addListItems({{address = ttt, flags = 16, value = QA[1], freeze = true}}) end gg.toast("自改帧率已开启") string.toMusic("自改帧率开启成功") end, function() end },{ "X特效", function() --X特效原值:-1.3001398630003633E28 so=gg.getRangesList('libUE4.so')[1].start py=0x3437C40 setvalue(so+py,16,0) gg.toast("已开启") string.toMusic("开启成功") end, function() --X特效原值:-1.3001398630003633E28 so=gg.getRangesList('libUE4.so')[1].start py=0x3437C40 setvalue(so+py,16,-1.3001398630003633E28) string.toMusic("关闭成功") end }, }), } } 第三页 = { ['分页名字']='地铁', ['侧边图标']="放图片", ['功能配置']={ changan.box({--box开头 "防标记",--box名字 changan.check({ { "防标记", function() if gg.getRangesList("libgcloud.so")[1] then local t = {} t[1] = gg.getRangesList("libgcloud.so")[1]["start"] + 0x311D5C; t[2] = gg.getRangesList("libgcloud.so")[1]["start"] + 0x33C634; gg.addListItems({ [1] = { address = t[1], flags = 4, value = -698416192, freeze = true, }, [2] = { address = t[2], flags = 4, value = -698416192, freeze = true, }, }) gg.toast("开启成功") string.toMusic("防标记开启成功") end if gg.getRangesList("libgcloud.so")[1] then local t = {} t[1] = gg.getRangesList("libgcloud.so")[1]["start"] + 0x3111C0; t[2] = gg.getRangesList("libgcloud.so")[1]["start"] + 0x33BA98; gg.addListItems({ [1] = { address = t[1], flags = 4, value = -698416192, freeze = true, }, [2] = { address = t[2], flags = 4, value = -698416192, freeze = true, }, }) end end, function() if gg.getRangesList("libgcloud.so")[1] then local t = {} t[1] = gg.getRangesList("libgcloud.so")[1]["start"] + 0x311D5C; t[2] = gg.getRangesList("libgcloud.so")[1]["start"] + 0x33C634; gg.addListItems({ [1] = { address = t[1], flags = 4, value = 16843522, freeze = true, }, [2] = { address = t[2], flags = 4, value = 16843522, freeze = true, }, }) gg.toast("关闭成功") string.toMusic("防标记关闭成功") end if gg.getRangesList("libgcloud.so")[1] then local t = {} t[1] = gg.getRangesList("libgcloud.so")[1]["start"] + 0x3111C0; t[2] = gg.getRangesList("libgcloud.so")[1]["start"] + 0x33BA98; gg.addListItems({ [1] = { address = t[1], flags = 4, value = 1033081774, freeze = true, }, [2] = { address = t[2], flags = 4, value = 1033081774, freeze = true, }, }) gg.toast("关闭成功") string.toMusic("防标记关闭成功") end end }, }),--box结尾 }),--box结尾 changan.box({--box开头 "七图加速",--box名字 changan.check({ { "七图加速1", function() --罚站原值:-1.114450155758339E28 --so=gg.getRangesList('libUE4.so')[1].start --py=0x69C0728 setvalue(so+py,16,0) LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x60},"修改","0",4,"灵魂") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x158,0x160},"冻结","184,049.0625",16,"X") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x158,0x164},"冻结","99,184.6875",16,"Y") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x158,0x168},"冻结","7,980.4775390625",16,"Z") gg.sleep(2000) so=gg.getRangesList('libUE4.so')[1].start py=0x6DF3204 setvalue(so+py,4,0)----xa锁地形 so=gg.getRangesList('libUE4.so')[1].start py=0x6DF3204 setvalue(so+py,4,0)----xa锁地形 so=gg.getRangesList('libUE4.so')[1].start py=0x6DF3204 setvalue(so+py,4,0)----xa锁地形 local t = {"libUE4.so:bss", "Cb"} local tt = {0x41EA20,0x20,0x34C,0x158,0x160} local ttt = S_Pointer(t, tt, true) gg.addListItems({{address = ttt, flags = 16, freeze = false}}) local t = {"libUE4.so:bss", "Cb"} local tt = {0x41EA20,0x20,0x34C,0x158,0x164} local ttt = S_Pointer(t, tt, true) gg.addListItems({{address = ttt, flags = 16, freeze = false}}) local t = {"libUE4.so:bss", "Cb"} local tt = {0x41EA20,0x20,0x34C,0x158,0x168} local ttt = S_Pointer(t, tt, true) gg.addListItems({{address = ttt, flags = 16, freeze = false}}) LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x60},"修改","167772680",4,"灵魂") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x390,0x4A4},"冻结","0",16,"240") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x390,0x4A4},"冻结","0",16,"240") QA = gg.prompt({ "帧率越高加速调越低，60帧0.04-0.045 90帧改0.02-0.03，120帧0.02-0.022", },cfg,{"text"}) if QA == nil then else if QA[1] == true then QA1() end so=gg.getRangesList('libUE4.so')[1].start py=0x6E44C74 setvalue(so+py,16,QA[1]) LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x48},"冻结","0.0001",16,"流畅趴下") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x4C},"冻结","0.0001",16,"流畅趴下") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41E9A0,0x20,0x5c},"冻结","999999",16,"流畅落地") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x390,0x50},"冻结","99999",16,"0.5防拉") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x390,0x198+0x1E0},"冻结","54148",4,"防卡脚") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x390,0x198-0x58},"冻结","220",16,"上下坡") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x390,0x190},"冻结","0",16,"60000") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x390,0x20C},"冻结","0",16,"7500") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x390,0x1AC},"冻结","999999",16,"2048") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x21C0},"冻结","50",16,"变速") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x21C0+0x4},"冻结","0.5",16,"变速") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x21C0+0x18},"冻结","0.0001",16,"减速") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41E9A0,0x20,0x398,0x388,0x920},"冻结","0.9",16,"黑客防摔") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x390,0x198},"冻结","4000",16,"8192") gg.toast("加速已开启") string.toMusic("开启成功") end end, function() Unfreeze()--解除所有修改 so=gg.getRangesList('libUE4.so')[1].start py=0x6E44C74 setvalue(so+py,16,9.999999974752427E-7) LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x390,0x50},"冻结","0.5",16,"0.5防拉") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x390,0x198-0x58},"冻结","45",16,"上下坡") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x390,0x190},"冻结","60000",16,"60000") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x390,0x20C},"冻结","7500",16,"7500") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x390,0x1AC},"冻结","2048",16,"2048") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x21C0},"冻结","110",16,"变速") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x21C0+0x4},"冻结","1",16,"变速") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41E9A0,0x20,0x398,0x388,0x920},"冻结","0.9",16,"黑客防摔") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x390,0x198},"冻结","8195",16,"8192") so=gg.getRangesList('libUE4.so')[1].start py=0x6DF3204 setvalue(so+py,4,-443907176) Unfreeze()--解除所有冻结 gg.clearList() gg.toast("关闭成功") string.toMusic("关闭成功") end },{ "七图加速2", function() LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x390,0x8c},"冻结","1,847,296",4,"状态") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x60},"冻结","0",4,"灵魂") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x158,0x160},"冻结","152,183.234375",16,"X") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x158,0x164},"冻结","143,629.484375",16,"Y") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x158,0x168},"冻结","5,840.25244140625",16,"Z") --地皮 gg.sleep(5000) so=gg.getRangesList('libUE4.so')[1].start py=0x6DF3204 setvalue(so+py,16,0) gg.sleep(1000) LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x60},"冻结","167,772,680",4,"灵魂") local t = {"libUE4.so:bss", "Cb"} local tt = {0x41EA20,0x20,0x34C,0x60} local ttt = S_Pointer(t, tt, true) gg.addListItems({{address = ttt, flags = 4, freeze = false}}) local t = {"libUE4.so:bss", "Cb"} local tt = {0x41EA20,0x20,0x34C,0x158,0x160} local ttt = S_Pointer(t, tt, true) gg.addListItems({{address = ttt, flags = 16, freeze = false}}) local t = {"libUE4.so:bss", "Cb"} local tt = {0x41EA20,0x20,0x34C,0x158,0x164} local ttt = S_Pointer(t, tt, true) gg.addListItems({{address = ttt, flags = 16, freeze = false}}) local t = {"libUE4.so:bss", "Cb"} local tt = {0x41EA20,0x20,0x34C,0x158,0x168} local ttt = S_Pointer(t, tt, true) gg.addListItems({{address = ttt, flags = 16, freeze = false}}) --加速 LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0xC58},"冻结","1",16,"微加速") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x390,0x198},"冻结","4000",16,"8192") QA = gg.prompt({ "自改0.01-0.05", },cfg,{"text"}) if QA == nil then else if QA[1] == true then QA1() end so=gg.getRangesList('libUE4.so')[1].start py=0x6E44C74 setvalue(so+py,16,QA[1]) end LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x390,0x50},"冻结","0.00008",16,"0.5防拉") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x390,0x198+0x1E0},"冻结","54148",4,"防卡脚") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x390,0x190},"冻结","0",16,"60000") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x390,0x20C},"冻结","0",16,"7500") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x390,0x1AC},"冻结","999999",16,"2048") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x390,0x4A4},"冻结","0",16,"240") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x48},"冻结","0.0001",16,"流畅趴下") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x4C},"冻结","0.0001",16,"流畅趴下") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41AEA0,0x20,0x5c},"冻结","999",16,"流畅落地") end, function() Unfreeze()--解除所有修改 so=gg.getRangesList('libUE4.so')[1].start py=0x6E44C74 setvalue(so+py,16,9.99999997e-7) so=gg.getRangesList('libUE4.so')[1].start py=0x6DF3204 setvalue(so+py,4,-443907176) LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x390,0x144},"冻结","443",16,"高跳") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x390,0x140},"冻结","45",16,"45") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x390,0x13C},"冻结","1",16,"重力") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x390,0x144+0x4c},"冻结","60000",16,"60000") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x390,0x144+0x54},"冻结","8192",16,"8192") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x390,0x144+0x68},"冻结","2048",16,"2048") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x390,0x1BC},"冻结","0.05",16,"0.05") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x390,0x144+0xc8},"冻结","7500",16,"7500") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x390,0xA40},"冻结","670",16,"670") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x48+0xc18},"冻结","1",16,"微加1") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x48+0xc18+0x1560},"冻结","50",16,"50") Unfreeze()--解除所有冻结 so=gg.getRangesList('libUE4.so')[1].start py=0x6DF3204 setvalue(so+py,16,-8.17642564e22) --9.99999997e-7加速原值:9.999999974752427E-7 so=gg.getRangesList('libUE4.so')[1].start py=0x6E44C74 setvalue(so+py,16,-9.999999974752427E-7) LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0xC58},"冻结","1",16,"微加速") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x390,0x198},"冻结","8192",16,"8192") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x390,0x50},"冻结","0.5",16,"0.5防拉") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x390,0x198+0x1E0},"冻结","54148",4,"防卡脚") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x390,0x190},"冻结","60000",16,"60000") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x390,0x20C},"冻结","7500",16,"7500") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x390,0x1AC},"冻结","2048",16,"2048") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x390,0x4A4},"冻结","240",16,"240") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x21C0},"冻结","1",16,"变速") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x21C0+0x18},"冻结","0.4",16,"减速") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x390,0x144},"冻结","443",16,"高跳") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x390,0x13C},"冻结","1",16,"防摔") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x21C0},"冻结","50",16,"50") Unfreeze()--解除所有冻结 local t = {"libanogs.so:bss", "Cb"} local tt = {0x65C} local ttt = S_Pointer(t, tt) gg.addListItems({{address = ttt, flags = 4, value = 64, freeze = true}}) local t = {"libanogs.so:bss", "Cb"} local tt = {0x468} local ttt = S_Pointer(t, tt) gg.addListItems({{address = ttt, flags = 4, value = 64, freeze = true}}) string.toMusic("关闭成功") end }, }), }),--box结尾 changan.box({--box开头 "五图加速",--box名字 changan.check({ { "五图加速", function() LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x390,0x8c},"冻结","1,847,296",4,"状态") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x60},"冻结","0",4,"灵魂") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x158,0x160},"冻结","146793",16,"X") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x158,0x164},"冻结","103152",16,"Y") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x158,0x168},"冻结","1079.72790527344",16,"Z") --地皮 gg.sleep(5000) so=gg.getRangesList('libUE4.so')[1].start py=0x6DF3204 setvalue(so+py,16,0) gg.sleep(1000) LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x60},"冻结","167,772,680",4,"灵魂") local t = {"libUE4.so:bss", "Cb"} local tt = {0x41EA20,0x20,0x34C,0x158,0x160} local ttt = S_Pointer(t, tt, true) gg.addListItems({{address = ttt, flags = 16, freeze = false}}) local t = {"libUE4.so:bss", "Cb"} local tt = {0x41EA20,0x20,0x34C,0x158,0x164} local ttt = S_Pointer(t, tt, true) gg.addListItems({{address = ttt, flags = 16, freeze = false}}) local t = {"libUE4.so:bss", "Cb"} local tt = {0x41EA20,0x20,0x34C,0x158,0x168} local ttt = S_Pointer(t, tt, true) gg.addListItems({{address = ttt, flags = 16, freeze = false}}) LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0xC58},"冻结","1",16,"微加速") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x390,0x198},"冻结","4000",16,"8192") QA = gg.prompt({ "自改0.01-0.05", },cfg,{"text"}) if QA == nil then else if QA[1] == true then QA1() end so=gg.getRangesList('libUE4.so')[1].start py=0x6E44C74 setvalue(so+py,16,QA[1]) end LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x390,0x50},"冻结","0.00008",16,"0.5防拉") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x390,0x198+0x1E0},"冻结","54148",4,"防卡脚") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x390,0x190},"冻结","0",16,"60000") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x390,0x20C},"冻结","0",16,"7500") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x390,0x1AC},"冻结","999999",16,"2048") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x390,0x4A4},"冻结","0",16,"240") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x48},"冻结","0.0001",16,"流畅趴下") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x4C},"冻结","0.0001",16,"流畅趴下") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41AEA0,0x20,0x5c},"冻结","999",16,"流畅落地") gg.toast("开启成功") string.toMusic("开启成功") end, function() Unfreeze()--解除所有修改 so=gg.getRangesList('libUE4.so')[1].start py=0x6E44C74 setvalue(so+py,16,9.99999997e-7) so=gg.getRangesList('libUE4.so')[1].start py=0x6DF3204 setvalue(so+py,4,-443907176) LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x390,0x144},"冻结","443",16,"高跳") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x390,0x140},"冻结","45",16,"45") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x390,0x13C},"冻结","1",16,"重力") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x390,0x144+0x4c},"冻结","60000",16,"60000") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x390,0x144+0x54},"冻结","8192",16,"8192") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x390,0x144+0x68},"冻结","2048",16,"2048") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x390,0x1BC},"冻结","0.05",16,"0.05") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x390,0x144+0xc8},"冻结","7500",16,"7500") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x390,0xA40},"冻结","670",16,"670") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x48+0xc18},"冻结","1",16,"微加1") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x48+0xc18+0x1560},"冻结","50",16,"50") Unfreeze()--解除所有冻结 so=gg.getRangesList('libUE4.so')[1].start py=0x6DF3204 setvalue(so+py,16,-8.17642564e22) --9.99999997e-7加速原值:9.999999974752427E-7 so=gg.getRangesList('libUE4.so')[1].start py=0x6E44C74 setvalue(so+py,16,-9.999999974752427E-7) LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0xC58},"冻结","1",16,"微加速") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x390,0x198},"冻结","8192",16,"8192") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x390,0x50},"冻结","0.5",16,"0.5防拉") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x390,0x198+0x1E0},"冻结","54148",4,"防卡脚") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x390,0x190},"冻结","60000",16,"60000") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x390,0x20C},"冻结","7500",16,"7500") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x390,0x1AC},"冻结","2048",16,"2048") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x390,0x4A4},"冻结","240",16,"240") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x21C0},"冻结","1",16,"变速") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x21C0+0x18},"冻结","0.4",16,"减速") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x390,0x144},"冻结","443",16,"高跳") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x390,0x13C},"冻结","1",16,"防摔") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x21C0},"冻结","50",16,"50") Unfreeze()--解除所有冻结 local t = {"libanogs.so:bss", "Cb"} local tt = {0x65C} local ttt = S_Pointer(t, tt) gg.addListItems({{address = ttt, flags = 4, value = 64, freeze = true}}) local t = {"libanogs.so:bss", "Cb"} local tt = {0x468} local ttt = S_Pointer(t, tt) gg.addListItems({{address = ttt, flags = 4, value = 64, freeze = true}}) string.toMusic("关闭成功") end }, }), }),--box结尾 changan.box({--box开头 "自改高挑",--box名字 changan.check({ { "自改高跳2", function() LSQ_Chain({'libUE4.so:bss','Cb'},{0x41E9A0,0x20,0x34C,0xC60-0xC18},"冻结","0.0001",16,"流畅趴下") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41E9A0,0x20,0x34C,0xC60-0xC14},"冻结","0.0001",16,"流畅趴下") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41AEA0,0x20,0x5c},"冻结","999",16,"流畅落地") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41E9A0,0x20,0x34C,0x21C0+0x8},"冻结","34",16,"50[2]") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41E9A0,0x20,0x34C,0x21C0},"冻结","34",16,"50") choice = gg.alert("请选择高跳", "15000", "20000", "普通自改") if choice == 1 then if choice == 2 then if choice == 3 then end end end if choice == 1 then LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0xC58},"冻结","4",16,"微加速") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x21C0},"冻结","150",16,"变速") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x21C0+0x18},"冻结","0.0001",16,"减速") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x390,0x144},"冻结","15000",16,"高跳") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41E9A0,0x20,0x5c},"冻结","999999",16,"流畅落地") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x390,0x13C},"冻结","27",16,"防摔") gg.toast("开启成功") gg.playMusic("/storage/emulated/0/林雨/音频/开启.mp3") end if choice == 2 then LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0xC58},"冻结","4",16,"微加速") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x21C0},"冻结","110",16,"变速") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x21C0+0x18},"冻结","0.0001",16,"减速") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41E9A0,0x20,0x5c},"冻结","999999",16,"流畅落地") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x390,0x144},"冻结","20000",16,"高跳") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x390,0x13C},"冻结","40",16,"防摔") gg.toast("开启成功") gg.playMusic("/storage/emulated/0/林雨/音频/开启.mp3") end if choice == 3 then OP=gg.prompt({"自改高跳原443","自改防摔原1"},{[2]="5.5","4500"},{[1]='number'}) if OP == nil or OP[1] == '' or OP[2] == '0' then gg.toast("取消") else local t = {"libUE4.so:bss", "Cb"} local tt = {0x41EA20,0x20,0x34C,0x390,0x144}--443 local ttt = S_Pointer(t, tt, true) gg.addListItems({{address = ttt, flags = 16, value = OP[1], freeze = true}}) local t = {"libUE4.so:bss", "Cb"} local tt = {0x41EA20,0x20,0x34C,0x390,0x13C}--重力 local ttt = S_Pointer(t, tt, true) gg.addListItems({{address = ttt, flags = 16, value = OP[2], freeze = true}}) OJ=gg.prompt({'微加速'},{[1]='4'},{[1]='number'}) if OJ == nil or OJ[1] == '' or OJ[1] == '0' then gg.toast("取消") else local t = {"libUE4.so:bss", "Cb"} local tt = {0x41EA20,0x20,0x34C,0xC58}--微加速 local ttt = S_Pointer(t, tt, true) gg.addListItems({{address = ttt, flags = 16, value = OJ[1], freeze = true}}) LSQ_Chain({'libUE4.so:bss','Cb'},{0x41E9A0,0x20,0x5c},"冻结","999999",16,"流畅落地") end end end gg.toast("自改高跳已开启") string.toMusic("自改高跳开启成功") end, function() LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0xC58},"冻结","1",16,"微加速") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x21C0},"冻结","1",16,"变速") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x21C0+0x18},"冻结","0.4",16,"减速") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x390,0x144},"冻结","443",16,"高跳") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x390,0x13C},"冻结","1",16,"防摔") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x21C0},"冻结","50",16,"50") Unfreeze()--解除所有冻结 local t = {"libanogs.so:bss", "Cb"} local tt = {0x65C} local ttt = S_Pointer(t, tt) gg.addListItems({{address = ttt, flags = 4, value = 64, freeze = true}}) local t = {"libanogs.so:bss", "Cb"} local tt = {0x468} local ttt = S_Pointer(t, tt) gg.addListItems({{address = ttt, flags = 4, value = 64, freeze = true}}) gg.toast("关闭成功") string.toMusic("关闭成功") end },{ "自改高跳3", function() local cfg_file = gg.EXT_FILES_DIR.."/"..gg.getFile():match("[^/]+$")..'(自改高跳配置.).h' local chunk = loadfile(cfg_file) local cfg = nil if chunk ~= nil then cfg = chunk() end if cfg == nil then cfg = {3500, 4, 4, true} end h= gg.prompt({ "高跳自改", "防摔自改", "空中速度" },cfg,{"text","text","text"}) if h == nil then else gg.saveVariable(h, cfg_file) if h[1] == true then h1() end if h[2] == true then h2() end if h[3] == true then h3() end time=os.clock() LSQ_Chain({"libUE4.so:bss","Cb"},{0x41EA20,0x20,0x34C,0x390,0x144},"修改",h[1],16,"443") LSQ_Chain({"libUE4.so:bss","Cb"},{0x41EA20,0x20,0x34C,0x390,0x13C},"修改",h[2],16,"重力") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0xC58},"修改",h[3],16,"微加速") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x48},"冻结","0.0001",16,"流畅趴下") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x4C},"修改","0.0001",16,"流畅趴下") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41E9A0,0x20,0x5c},"冻结","999999",16,"流畅落地") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x21C0},"修改","33",16,"趴下跳") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x21B8},"修改","120",16,"88") end gg.toast("自改高跳已开启") string.toMusic("自改高跳开启成功") end, function() LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0xC58},"冻结","1",16,"微加速") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x21C0},"冻结","1",16,"变速") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x21C0+0x18},"冻结","0.4",16,"减速") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x390,0x144},"冻结","443",16,"高跳") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x390,0x13C},"冻结","1",16,"防摔") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x21C0},"冻结","50",16,"50") Unfreeze()--解除所有冻结 local t = {"libanogs.so:bss", "Cb"} local tt = {0x65C} local ttt = S_Pointer(t, tt) gg.addListItems({{address = ttt, flags = 4, value = 64, freeze = true}}) local t = {"libanogs.so:bss", "Cb"} local tt = {0x468} local ttt = S_Pointer(t, tt) gg.addListItems({{address = ttt, flags = 4, value = 64, freeze = true}}) gg.toast("关闭成功") string.toMusic("关闭成功") end },{ "自改超级高跳", function() local cfg_file = gg.EXT_FILES_DIR.."/"..gg.getFile():match("[^/]+$")..'(自改超级高跳配置.).h' local chunk = loadfile(cfg_file) local cfg = nil if chunk ~= nil then cfg = chunk() end if cfg == nil then cfg = {15000, 29, 1.2, true} end h= gg.prompt({ "高跳推荐15000", "防摔推荐29", "变速推荐1.2" },cfg,{"text","text","text"}) if h == nil then else gg.saveVariable(h, cfg_file) if h[1] == true then h1() end if h[2] == true then h2() end if h[3] == true then h3() end time=os.clock() LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x21C0+0x4},"冻结",h[3],16,"变速") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x390,0x144},"修改",h[1],16,"高跳") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x390,0x13C},"修改",h[2],16,"防摔") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x48},"冻结","0.0001",16,"流畅趴下") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x4C},"修改","0.0001",16,"流畅趴下") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x21C0},"冻结","34",16,"50") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41E9A0,0x20,0x5c},"冻结","999999",16,"流畅落地") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x21C0+0x18},"冻结","0.0001",16,"减速") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x21C0},"冻结","90",16,"变速") end gg.toast("自改高跳已开启") string.toMusic("自改高跳开启成功") end, function() LSQ_Chain({'libUE4.so:bss','Cb'},{0x41E9A0,0x20,0x348,0x38c,0x144},"修改","443",16,"高跳") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41E9A0,0x20,0x348,0xC60},"修改","1",16,"微加速") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41E9A0,0x20,0x348,0x38c,0x198},"修改","8192",16,"惯性") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41E9A0,0x20,0x348,0x38c,0x144-0x8},"修改","1",16,"重力") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0xC58},"冻结","1",16,"微加速") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x21C0},"冻结","1",16,"变速") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x21C0+0x18},"冻结","0.4",16,"减速") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x390,0x144},"冻结","443",16,"高跳") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x390,0x13C},"冻结","1",16,"防摔") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x21C0},"冻结","50",16,"50") Unfreeze()--解除所有冻结 gg.toast("关闭成功") string.toMusic("关闭成功") end }, }), }), changan.box({--box开头 "罚站加速",--box名字 changan.check({ { "七图加速1", function() --罚站原值:-1.114450155758339E28 so=gg.getRangesList('libUE4.so')[1].start py=0x6D2BE54 setvalue(so+py,16,0) LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x60},"修改","0",4,"灵魂") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x158,0x160},"冻结","184,049.0625",16,"X") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x158,0x164},"冻结","99,184.6875",16,"Y") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x158,0x168},"冻结","7,980.4775390625",16,"Z") gg.sleep(2000) so=gg.getRangesList('libUE4.so')[1].start py=0x6DF3204 setvalue(so+py,4,0)----xa锁地形 so=gg.getRangesList('libUE4.so')[1].start py=0x6DF3204 setvalue(so+py,4,0)----xa锁地形 so=gg.getRangesList('libUE4.so')[1].start py=0x6DF3204 setvalue(so+py,4,0)----xa锁地形 local t = {"libUE4.so:bss", "Cb"} local tt = {0x41EA20,0x20,0x34C,0x158,0x160} local ttt = S_Pointer(t, tt, true) gg.addListItems({{address = ttt, flags = 16, freeze = false}}) local t = {"libUE4.so:bss", "Cb"} local tt = {0x41EA20,0x20,0x34C,0x158,0x164} local ttt = S_Pointer(t, tt, true) gg.addListItems({{address = ttt, flags = 16, freeze = false}}) local t = {"libUE4.so:bss", "Cb"} local tt = {0x41EA20,0x20,0x34C,0x158,0x168} local ttt = S_Pointer(t, tt, true) gg.addListItems({{address = ttt, flags = 16, freeze = false}}) LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x60},"修改","167772680",4,"灵魂") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x390,0x4A4},"冻结","0",16,"240") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x390,0x4A4},"冻结","0",16,"240") QA = gg.prompt({ "帧率越高加速调越低，60帧0.04-0.045 90帧改0.02-0.03，120帧0.02-0.022", },cfg,{"text"}) if QA == nil then else if QA[1] == true then QA1() end so=gg.getRangesList('libUE4.so')[1].start py=0x6E44C74 setvalue(so+py,16,QA[1]) LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x48},"冻结","0.0001",16,"流畅趴下") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x4C},"冻结","0.0001",16,"流畅趴下") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41E9A0,0x20,0x5c},"冻结","999999",16,"流畅落地") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x390,0x50},"冻结","99999",16,"0.5防拉") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x390,0x198+0x1E0},"冻结","54148",4,"防卡脚") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x390,0x198-0x58},"冻结","220",16,"上下坡") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x390,0x190},"冻结","0",16,"60000") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x390,0x20C},"冻结","0",16,"7500") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x390,0x1AC},"冻结","999999",16,"2048") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x21C0},"冻结","50",16,"变速") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x21C0+0x4},"冻结","0.5",16,"变速") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x21C0+0x18},"冻结","0.0001",16,"减速") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41E9A0,0x20,0x398,0x388,0x920},"冻结","0.9",16,"黑客防摔") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x390,0x198},"冻结","4000",16,"8192") gg.toast("加速已开启") string.toMusic("开启成功") end end, function() --罚站原值:-1.114450155758339E28 so=gg.getRangesList('libUE4.so')[1].start py=0x6D2BE54 setvalue(so+py,16,-1.114450155758339E28) Unfreeze()--解除所有修改 so=gg.getRangesList('libUE4.so')[1].start py=0x6E44C74 setvalue(so+py,16,9.999999974752427E-7) LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x390,0x50},"冻结","0.5",16,"0.5防拉") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x390,0x198-0x58},"冻结","45",16,"上下坡") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x390,0x190},"冻结","60000",16,"60000") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x390,0x20C},"冻结","7500",16,"7500") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x390,0x1AC},"冻结","2048",16,"2048") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x21C0},"冻结","110",16,"变速") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x21C0+0x4},"冻结","1",16,"变速") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41E9A0,0x20,0x398,0x388,0x920},"冻结","0.9",16,"黑客防摔") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x390,0x198},"冻结","8195",16,"8192") so=gg.getRangesList('libUE4.so')[1].start py=0x6DF3204 setvalue(so+py,4,-443907176) Unfreeze()--解除所有冻结 gg.clearList() gg.toast("关闭成功") string.toMusic("关闭成功") end },{ "五图加速1", function() --xa防垃:-5.748749226088948E27 so=gg.getRangesList('libUE4.so')[1].start py=0x6CD7984 setvalue(so+py,16,0) --xa防垃22:-5.108096460740162E27 so=gg.getRangesList('libUE4.so')[1].start py=0x2A53BF8 setvalue(so+py,16,0) --罚站原值:-1.114450155758339E28 so=gg.getRangesList('libUE4.so')[1].start py=0x6D2BE54 setvalue(so+py,16,0) LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x60},"修改","0",4,"灵魂") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x158,0x160},"冻结","146793",16,"X") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x158,0x164},"冻结","103152",16,"Y") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x158,0x168},"冻结","1079.72790527344",16,"Z") gg.sleep(1500) so=gg.getRangesList('libUE4.so')[1].start py=0x6DF3204 setvalue(so+py,4,0)----xa锁地形 so=gg.getRangesList('libUE4.so')[1].start py=0x6DF3204 setvalue(so+py,4,0)----xa锁地形 so=gg.getRangesList('libUE4.so')[1].start py=0x6DF3204 setvalue(so+py,4,0)----xa锁地形 local t = {"libUE4.so:bss", "Cb"} local tt = {0x41EA20,0x20,0x34C,0x158,0x160} local ttt = S_Pointer(t, tt, true) gg.addListItems({{address = ttt, flags = 16, freeze = false}}) local t = {"libUE4.so:bss", "Cb"} local tt = {0x41EA20,0x20,0x34C,0x158,0x164} local ttt = S_Pointer(t, tt, true) gg.addListItems({{address = ttt, flags = 16, freeze = false}}) local t = {"libUE4.so:bss", "Cb"} local tt = {0x41EA20,0x20,0x34C,0x158,0x168} local ttt = S_Pointer(t, tt, true) gg.addListItems({{address = ttt, flags = 16, freeze = false}}) LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x60},"修改","167772680",4,"灵魂") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x390,0x4A4},"冻结","0",16,"240") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x390,0x4A4},"冻结","0",16,"240") QA = gg.prompt({ "帧率越高加速调越低，60帧0.04-0.045 90帧改0.02-0.03，120帧0.02-0.022", },cfg,{"text"}) if QA == nil then else if QA[1] == true then QA1() end so=gg.getRangesList('libUE4.so')[1].start py=0x6E44C74 setvalue(so+py,16,QA[1]) LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x48},"冻结","0.0001",16,"流畅趴下") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x4C},"冻结","0.0001",16,"流畅趴下") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41E9A0,0x20,0x5c},"冻结","999999",16,"流畅落地") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x390,0x50},"冻结","99999",16,"0.5防拉") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x390,0x198+0x1E0},"冻结","54148",4,"防卡脚") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x390,0x198-0x58},"冻结","220",16,"上下坡") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x390,0x190},"冻结","0",16,"60000") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x390,0x20C},"冻结","0",16,"7500") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x390,0x1AC},"冻结","999999",16,"2048") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x390,0x198},"冻结","4000",16,"8192") gg.toast("加速已开启") string.toMusic("开启成功") end end, function() --xa防垃:-5.748749226088948E27 so=gg.getRangesList('libUE4.so')[1].start py=0x6CD7984 setvalue(so+py,16,-5.748749226088948E27) --xa防垃22:-5.108096460740162E27 so=gg.getRangesList('libUE4.so')[1].start py=0x2A53BF8 setvalue(so+py,16,-5.108096460740162E27) --罚站原值:-1.114450155758339E28 so=gg.getRangesList('libUE4.so')[1].start py=0x6D2BE54 setvalue(so+py,16,-1.114450155758339E28) Unfreeze()--解除所有修改 so=gg.getRangesList('libUE4.so')[1].start py=0x6E44C74 setvalue(so+py,16,9.99999997e-7) so=gg.getRangesList('libUE4.so')[1].start py=0x6E44C74 setvalue(so+py,16,9.99999997e-7) so=gg.getRangesList('libUE4.so')[1].start py=0x6DF3204 setvalue(so+py,4,-443907176) LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x390,0x50},"冻结","0.5",16,"0.5防拉") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x390,0x198-0x58},"冻结","50",16,"上下坡") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x390,0x190},"冻结","60000",16,"60000") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x390,0x20C},"冻结","7500",16,"7500") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x390,0x198-0x58},"冻结","50",16,"上下坡") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x390,0x4A4},"冻结","0",16,"240") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x390,0x4A4},"冻结","0",16,"240") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x390,0x1AC},"冻结","2048",16,"2048") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x390,0x198},"冻结","8195",16,"8192") Unfreeze()--解除所有冻结 gg.clearList() gg.toast("关闭成功") string.toMusic("关闭成功") end }, }), }), changan.box({--box开头 "测试加速",--box名字 changan.check({ { "七图加速1", function() --xa防垃:-5.748749226088948E27 so=gg.getRangesList('libUE4.so')[1].start py=0x6CD7984 setvalue(so+py,16,0) --xa防垃22:-5.108096460740162E27 so=gg.getRangesList('libUE4.so')[1].start py=0x2A53BF8 setvalue(so+py,16,0) LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x60},"修改","0",4,"灵魂") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x158,0x160},"冻结","184,049.0625",16,"X") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x158,0x164},"冻结","99,184.6875",16,"Y") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x158,0x168},"冻结","7,980.4775390625",16,"Z") gg.sleep(2000) so=gg.getRangesList('libUE4.so')[1].start py=0x6DF3204 setvalue(so+py,4,0)----xa锁地形 so=gg.getRangesList('libUE4.so')[1].start py=0x6DF3204 setvalue(so+py,4,0)----xa锁地形 so=gg.getRangesList('libUE4.so')[1].start py=0x6DF3204 setvalue(so+py,4,0)----xa锁地形 local t = {"libUE4.so:bss", "Cb"} local tt = {0x41EA20,0x20,0x34C,0x158,0x160} local ttt = S_Pointer(t, tt, true) gg.addListItems({{address = ttt, flags = 16, freeze = false}}) local t = {"libUE4.so:bss", "Cb"} local tt = {0x41EA20,0x20,0x34C,0x158,0x164} local ttt = S_Pointer(t, tt, true) gg.addListItems({{address = ttt, flags = 16, freeze = false}}) local t = {"libUE4.so:bss", "Cb"} local tt = {0x41EA20,0x20,0x34C,0x158,0x168} local ttt = S_Pointer(t, tt, true) gg.addListItems({{address = ttt, flags = 16, freeze = false}}) LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x60},"修改","167772680",4,"灵魂") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x390,0x50},"冻结","99999",16,"0.5防拉") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x21C0},"冻结","120",16,"变速") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x21C0+0x4},"冻结","1",16,"变速") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x21C0+0x18},"冻结","0.0001",16,"减速") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x390,0x4A4},"冻结","0",16,"240") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x390,0x4A4},"冻结","0",16,"240") QA = gg.prompt({ "帧率越高加速调越低，60帧0.04-0.045 90帧改0.02-0.03，120帧0.02-0.022", },cfg,{"text"}) if QA == nil then else if QA[1] == true then QA1() end so=gg.getRangesList('libUE4.so')[1].start py=0x6E44C74 setvalue(so+py,16,QA[1]) LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x48},"冻结","0.0001",16,"流畅趴下") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x4C},"冻结","0.0001",16,"流畅趴下") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41E9A0,0x20,0x5c},"冻结","999999",16,"流畅落地") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x390,0x50},"冻结","99999",16,"0.5防拉") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x390,0x198+0x1E0},"冻结","54148",4,"防卡脚") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x390,0x198-0x58},"冻结","220",16,"上下坡") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x390,0x190},"冻结","0",16,"60000") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x390,0x20C},"冻结","0",16,"7500") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x390,0x1AC},"冻结","999999",16,"2048") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x21C0},"冻结","50",16,"变速") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x21C0+0x4},"冻结","0.5",16,"变速") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x21C0+0x18},"冻结","0.0001",16,"减速") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41E9A0,0x20,0x398,0x388,0x920},"冻结","0.9",16,"黑客防摔") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x390,0x198},"冻结","4000",16,"8192") gg.toast("加速已开启") string.toMusic("开启成功") end end, function() LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x21C0},"冻结","1",16,"变速") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x21C0+0x18},"冻结","0.4",16,"减速") --xa防垃:-5.748749226088948E27 so=gg.getRangesList('libUE4.so')[1].start py=0x6CD7984 setvalue(so+py,16,-5.748749226088948E27) --xa防垃22:-5.108096460740162E27 so=gg.getRangesList('libUE4.so')[1].start py=0x2A53BF8 setvalue(so+py,16,-5.108096460740162E27) LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x21C0},"冻结","110",16,"变速") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x21C0+0x4},"冻结","1",16,"变速") Unfreeze()--解除所有修改 so=gg.getRangesList('libUE4.so')[1].start py=0x6E44C74 setvalue(so+py,16,9.999999974752427E-7) LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x390,0x50},"冻结","0.5",16,"0.5防拉") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x390,0x198-0x58},"冻结","45",16,"上下坡") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x390,0x190},"冻结","60000",16,"60000") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x390,0x20C},"冻结","7500",16,"7500") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x390,0x1AC},"冻结","2048",16,"2048") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x21C0},"冻结","110",16,"变速") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x21C0+0x4},"冻结","1",16,"变速") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41E9A0,0x20,0x398,0x388,0x920},"冻结","0.9",16,"黑客防摔") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x390,0x198},"冻结","8195",16,"8192") so=gg.getRangesList('libUE4.so')[1].start py=0x6DF3204 setvalue(so+py,4,-443907176) Unfreeze()--解除所有冻结 gg.clearList() gg.toast("关闭成功") string.toMusic("关闭成功") end }, }), }), } } 第四页 = { ['分页名字']='经典', ['侧边图标']="放图片", ['功能配置']={ changan.check({ { "利维科加速", function() LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x390,0x8c},"冻结","1,847,296",4,"灵魂") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x158,0x160},"冻结","251,989.96875",16,"X") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x158,0x164},"冻结","241,704.40625",16,"Y") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x158,0x168},"冻结","721.1787109375",16,"Z") --地皮 gg.sleep(4000) so=gg.getRangesList('libUE4.so')[1].start py=0x6DF3204 setvalue(so+py,4,0)----xa锁地形 so=gg.getRangesList('libUE4.so')[1].start py=0x6DF3204 setvalue(so+py,4,0)----xa锁地形 so=gg.getRangesList('libUE4.so')[1].start py=0x6DF3204 setvalue(so+py,4,0)----xa锁地形 local t = {"libUE4.so:bss", "Cb"} local tt = {0x41EA20,0x20,0x34C,0x158,0x160} local ttt = S_Pointer(t, tt, true) gg.addListItems({{address = ttt, flags = 16, freeze = false}}) local t = {"libUE4.so:bss", "Cb"} local tt = {0x41EA20,0x20,0x34C,0x158,0x164} local ttt = S_Pointer(t, tt, true) gg.addListItems({{address = ttt, flags = 16, freeze = false}}) local t = {"libUE4.so:bss", "Cb"} local tt = {0x41EA20,0x20,0x34C,0x158,0x168} local ttt = S_Pointer(t, tt, true) gg.addListItems({{address = ttt, flags = 16, freeze = false}}) LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x60},"修改","167772680",4,"灵魂") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x390,0x4A4},"冻结","0",16,"240") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x390,0x4A4},"冻结","0",16,"240") QA = gg.prompt({ "帧率越高加速调越低，60帧0.04-0.045 90帧改0.02-0.03，120帧0.02-0.022", },cfg,{"text"}) if QA == nil then else if QA[1] == true then QA1() end so=gg.getRangesList('libUE4.so')[1].start py=0x6E44C74 setvalue(so+py,16,QA[1]) LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x48},"冻结","0.0001",16,"流畅趴下") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x4C},"冻结","0.0001",16,"流畅趴下") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41E9A0,0x20,0x5c},"冻结","999999",16,"流畅落地") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x390,0x50},"冻结","99999",16,"0.5防拉") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x390,0x198+0x1E0},"冻结","54148",4,"防卡脚") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x390,0x198-0x58},"冻结","220",16,"上下坡") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x390,0x190},"冻结","0",16,"60000") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x390,0x20C},"冻结","0",16,"7500") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x390,0x1AC},"冻结","999999",16,"2048") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x21C0},"冻结","120",16,"变速") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x21C0+0x4},"冻结","1",16,"变速") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x21C0+0x18},"冻结","0.0001",16,"减速") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41E9A0,0x20,0x398,0x388,0x920},"冻结","0.9",16,"黑客防摔") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x390,0x198},"冻结","999990",16,"8192") end gg.toast("加速已开启") string.toMusic("利维科加速开启成功") end, function() Unfreeze()--解除所有修改 so=gg.getRangesList('libUE4.so')[1].start py=0x6E44C74 setvalue(so+py,16,9.999999974752427E-7) LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x390,0x50},"冻结","0.5",16,"0.5防拉") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x390,0x198-0x58},"冻结","45",16,"上下坡") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x390,0x190},"冻结","60000",16,"60000") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x390,0x20C},"冻结","7500",16,"7500") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x390,0x1AC},"冻结","2048",16,"2048") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x21C0},"冻结","110",16,"变速") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x21C0+0x4},"冻结","1",16,"变速") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41E9A0,0x20,0x398,0x388,0x920},"冻结","0.9",16,"黑客防摔") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x390,0x198},"冻结","8195",16,"8192") so=gg.getRangesList('libUE4.so')[1].start py=0x6DF3204 setvalue(so+py,4,-443907176) Unfreeze()--解除所有冻结 gg.clearList() gg.toast("关闭成功") string.toMusic("关闭成功") end }, { "沙漠加速", function() LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x390,0x8c},"冻结","1,847,296",4,"灵魂") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x158,0x160},"冻结","521,332.4375",16,"X") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x158,0x164},"冻结","533,227.625",16,"Y") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x158,0x168},"冻结","20,335.32421875",16,"Z") --地皮 gg.sleep(4000) so=gg.getRangesList('libUE4.so')[1].start py=0x6DF3204 setvalue(so+py,4,0)----xa锁地形 so=gg.getRangesList('libUE4.so')[1].start py=0x6DF3204 setvalue(so+py,4,0)----xa锁地形 so=gg.getRangesList('libUE4.so')[1].start py=0x6DF3204 setvalue(so+py,4,0)----xa锁地形 local t = {"libUE4.so:bss", "Cb"} local tt = {0x41EA20,0x20,0x34C,0x158,0x160} local ttt = S_Pointer(t, tt, true) gg.addListItems({{address = ttt, flags = 16, freeze = false}}) local t = {"libUE4.so:bss", "Cb"} local tt = {0x41EA20,0x20,0x34C,0x158,0x164} local ttt = S_Pointer(t, tt, true) gg.addListItems({{address = ttt, flags = 16, freeze = false}}) local t = {"libUE4.so:bss", "Cb"} local tt = {0x41EA20,0x20,0x34C,0x158,0x168} local ttt = S_Pointer(t, tt, true) gg.addListItems({{address = ttt, flags = 16, freeze = false}}) LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x60},"修改","167772680",4,"灵魂") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x390,0x4A4},"冻结","0",16,"240") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x390,0x4A4},"冻结","0",16,"240") QA = gg.prompt({ "帧率越高加速调越低，60帧0.04-0.045 90帧改0.02-0.03，120帧0.02-0.022", },cfg,{"text"}) if QA == nil then else if QA[1] == true then QA1() end so=gg.getRangesList('libUE4.so')[1].start py=0x6E44C74 setvalue(so+py,16,QA[1]) LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x48},"冻结","0.0001",16,"流畅趴下") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x4C},"冻结","0.0001",16,"流畅趴下") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41E9A0,0x20,0x5c},"冻结","999999",16,"流畅落地") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x390,0x50},"冻结","99999",16,"0.5防拉") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x390,0x198+0x1E0},"冻结","54148",4,"防卡脚") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x390,0x198-0x58},"冻结","220",16,"上下坡") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x390,0x190},"冻结","0",16,"60000") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x390,0x20C},"冻结","0",16,"7500") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x390,0x1AC},"冻结","999999",16,"2048") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x21C0},"冻结","120",16,"变速") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x21C0+0x4},"冻结","1",16,"变速") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x21C0+0x18},"冻结","0.0001",16,"减速") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41E9A0,0x20,0x398,0x388,0x920},"冻结","0.9",16,"黑客防摔") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x390,0x198},"冻结","999990",16,"8192") end gg.toast("加速已开启") string.toMusic("经典开启成功") end, function() Unfreeze()--解除所有修改 so=gg.getRangesList('libUE4.so')[1].start py=0x6E44C74 setvalue(so+py,16,9.999999974752427E-7) LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x390,0x50},"冻结","0.5",16,"0.5防拉") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x390,0x198-0x58},"冻结","45",16,"上下坡") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x390,0x190},"冻结","60000",16,"60000") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x390,0x20C},"冻结","7500",16,"7500") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x390,0x1AC},"冻结","2048",16,"2048") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x21C0},"冻结","110",16,"变速") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x21C0+0x4},"冻结","1",16,"变速") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41E9A0,0x20,0x398,0x388,0x920},"冻结","0.9",16,"黑客防摔") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x390,0x198},"冻结","8195",16,"8192") so=gg.getRangesList('libUE4.so')[1].start py=0x6DF3204 setvalue(so+py,4,-443907176) Unfreeze()--解除所有冻结 gg.clearList() gg.toast("关闭成功") string.toMusic("关闭成功") end }, { "经典加速", function() so=gg.getRangesList('libUE4.so')[1].start py=0x6DF3204 setvalue(so+py,4,0)----xa锁地形 so=gg.getRangesList('libUE4.so')[1].start py=0x6DF3204 setvalue(so+py,4,0)----xa锁地形 so=gg.getRangesList('libUE4.so')[1].start py=0x6DF3204 setvalue(so+py,4,0)----xa锁地形 gg.sleep(1000) LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x390,0x8c},"冻结","1,847,296",4,"灵魂") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x390,0x4A4},"冻结","0",16,"240") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x390,0x4A4},"冻结","0",16,"240") QA = gg.prompt({ "帧率越高加速调越低，60帧0.04-0.045 90帧改0.02-0.03，120帧0.02-0.022", },cfg,{"text"}) if QA == nil then else if QA[1] == true then QA1() end so=gg.getRangesList('libUE4.so')[1].start py=0x6E44C74 setvalue(so+py,16,QA[1]) LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x48},"冻结","0.0001",16,"流畅趴下") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x4C},"冻结","0.0001",16,"流畅趴下") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41E9A0,0x20,0x5c},"冻结","999999",16,"流畅落地") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x390,0x50},"冻结","99999",16,"0.5防拉") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x390,0x198+0x1E0},"冻结","54148",4,"防卡脚") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x390,0x198-0x58},"冻结","220",16,"上下坡") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x390,0x190},"冻结","0",16,"60000") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x390,0x20C},"冻结","0",16,"7500") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x390,0x1AC},"冻结","999999",16,"2048") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x21C0},"冻结","120",16,"变速") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x21C0+0x4},"冻结","1",16,"变速") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x21C0+0x18},"冻结","0.0001",16,"减速") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41E9A0,0x20,0x398,0x388,0x920},"冻结","0.9",16,"黑客防摔") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x390,0x198},"冻结","999990",16,"8192") end gg.toast("加速已开启") string.toMusic("经典开启成功") end, function() Unfreeze()--解除所有修改 so=gg.getRangesList('libUE4.so')[1].start py=0x6E44C74 setvalue(so+py,16,9.999999974752427E-7) LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x390,0x50},"冻结","0.5",16,"0.5防拉") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x390,0x198-0x58},"冻结","45",16,"上下坡") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x390,0x190},"冻结","60000",16,"60000") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x390,0x20C},"冻结","7500",16,"7500") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x390,0x1AC},"冻结","2048",16,"2048") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x21C0},"冻结","110",16,"变速") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x21C0+0x4},"冻结","1",16,"变速") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41E9A0,0x20,0x398,0x388,0x920},"冻结","0.9",16,"黑客防摔") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x390,0x198},"冻结","8195",16,"8192") so=gg.getRangesList('libUE4.so')[1].start py=0x6DF3204 setvalue(so+py,4,-443907176) Unfreeze()--解除所有冻结 gg.clearList() gg.toast("关闭成功") string.toMusic("关闭成功") end }, { "自改高跳", function() local a1 = gg.prompt ( { '高度自改' , '防摔自改' , } , { 4500 , 9 , false } , { 'number' , 'number' } ) if a1 then local t = {"libUE4.so:bss", "Cb"} local tt = {0x41EA20,0x20,0x34C,0x390,0x144} local ttt = S_Pointer(t, tt, true) gg.addListItems({{address = ttt, flags = 16, value = a1[1], freeze = true}}) local t = {"libUE4.so:bss", "Cb"} local tt = {0x41EA20,0x20,0x34C,0x390,0x13C} local ttt = S_Pointer(t, tt, true) gg.addListItems({{address = ttt, flags = 16, value = a1[2], freeze = true}}) end LSQ_Chain({'libUE4.so:bss','Cb'},{0x41E9A0,0x20,0x348,0x21C0},"修改", "33", 16, "跳远") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x48},"冻结","0.0001",16,"流畅趴下") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x4C},"冻结","0.0001",16,"流畅趴下") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41E9A0,0x20,0x5c},"冻结","999999",16,"流畅落地") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41E9A0,0x20,0x348,0x34C,0x390,0x198+0x18},"修改","99999",16,"定空") gg.toast("自改高跳已开启") string.toMusic("自改高跳开启成功") end, function() Unfreeze()--解除所有修改 LSQ_Chain({'libUE4.so:bss','Cb'},{0x41E9A0,0x20,0x348,0x38c,0x144},"修改","443",16,"高跳") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41E9A0,0x20,0x348,0xC60},"修改","1",16,"微加速") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41E9A0,0x20,0x348,0x38c,0x198},"修改","8192",16,"惯性") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41E9A0,0x20,0x348,0x38c,0x144-0x8},"修改","1",16,"重力") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41E9A0,0x20,0x348,0x2170+0x8},"修改","50",16,"50") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41E9A0,0x20,0x348,0x2170+0x10},"修改","50",16,"50") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41E9A0,0x20,0x18,0x308,0x578+0x8},"修改","0.4",16,"减速") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41E9A0,0x20,0x18,0x308,0x578+0x8-0x18},"修改","1",16,"变速") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41E9A0,0x20,0x18,0x308,0x578+0x8-0x14},"修改","1",16,"变速") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41E9A0,0x20,0x348,0xC60-0xc04},"修改","1",16,"变速") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41E9A0,0x20,0x348,0x380,0x910},"修改","1",16,"动作变速") gg.toast("关闭成功") string.toMusic("关闭成功") end }, { "探头判断", function() function PS() end function setvalue(address,flags,value) PS('修改地址数值(地址,数值类型,要修改的值)') local tt={} tt[1]={} tt[1].address=address tt[1].flags=flags tt[1].value=value gg.setValues(tt) end ---静态基址写法配置 function S_Pointer(t_So, t_Offset, _bit) local function getRanges() local ranges = {} local t = gg.getRangesList('^/data/*.so*$') for i, v in pairs(t) do if v.type:sub(2, 2) == 'w' then table.insert(ranges, v) end end return ranges end local function Get_Address(N_So, Offset, ti_bit) local ti = gg.getTargetInfo() local S_list = getRanges() local t = {} local _t local _S = nil if ti_bit then _t = 32 else _t = 4 end for i in pairs(S_list) do local _N = S_list[i].internalName:gsub('^.*/', '') if N_So[1] == _N and N_So[2] == S_list[i].state then _S = S_list[i] break end end if _S then t[#t + 1] = {} t[#t].address = _S.start + Offset[1] t[#t].flags = _t if #Offset ~= 1 then for i = 2, #Offset do local S = gg.getValues(t) t = {} for _ in pairs(S) do if not ti.x64 then S[_].value = S[_].value & 0xFFFFFFFF end t[#t + 1] = {} t[#t].address = S[_].value + Offset[i] t[#t].flags = _t end end end _S = t[#t].address end return _S end local _A = string.format('0x%X', Get_Address(t_So, t_Offset, _bit)) return _A end function setvalue(address,flags,value) local tt={} tt[1]={} tt[1].address=address tt[1].flags=flags tt[1].value=value gg.setValues(tt) end local function interruptThread(thread) if thread then pcall(function() thread:interrupt() end) end end -- 读取 DWORD 和 FLOAT 的函数 function readD(address) return gg.getValues({{address = address, flags = gg.TYPE_DWORD}})[1].value end function readF(address) return gg.getValues({{address = address, flags = gg.TYPE_FLOAT}})[1].value end -- 设置值的函数 function setvalue(address, flags, value, freeze) local t = {} t[1] = {address = address, flags = flags, value = value, freeze = freeze or false} gg.setValues(t) gg.addListItems(t) end -- 获取指针地址的函数 function S_Pointer(t_So, t_Offset, _bit) local function getRanges() local ranges = {} local t = gg.getRangesList('^/data/*.so*$') for i, v in pairs(t) do if v.type:sub(2, 2) == 'w' then table.insert(ranges, v) end end return ranges end local function Get_Address(N_So, Offset, ti_bit) local ti = gg.getTargetInfo() local S_list = getRanges() local _t = ti_bit and 32 or 4 local _S = nil for i in pairs(S_list) do local _N = S_list[i].internalName:gsub('^.*/', '') if N_So[1] == _N and N_So[2] == S_list[i].state then _S = S_list[i] break end end if _S then local t = {{address = _S.start + Offset[1], flags = _t}} for i = 2, #Offset do local S = gg.getValues(t) t = {{address = S[1].value + Offset[i], flags = _t}} end return t[1].address end end return string.format('0x%X', Get_Address(t_So, t_Offset, _bit)) end -- LSQ_Chain 函数 function LSQ_Chain(so, offset, format, value, type, Function) local getRanges = function() local ranges = {} local t = gg.getRangesList('^/data/*.so*$') for i, v in pairs(t) do if v.type:sub(2, 2) == 'w' then table.insert(ranges, v) end end return ranges end local rest, ranges, sostart, valtype = {}, getRanges(), nil, gg.TYPE_DWORD if gg.getTargetInfo().x64 then valtype = gg.TYPE_QWORD end for i in pairs(ranges) do local _name = ranges[i].internalName:gsub('^.*/', '') if so[1] == _name and so[2] == ranges[i].state then sostart = ranges[i].start break end end if sostart then if offset[1] then for i = 1, #offset do rest = {{flags = valtype, address = sostart + offset[i]}} rest = gg.getValues(rest) if i == #offset then break end if valtype == gg.TYPE_DWORD then sostart = rest[1].value & 0xFFFFFFFF else sostart = rest[1].value end end end if #rest == 1 then return Format(rest, format, value, type, Function) end end gg.toast("功能:" .. Function .. "开启失败") print("功能开启失败原因: 未找到基址头") return os.exit() end -- 格式化内存操作的函数 function Format(tab, format, value, type, Function) if format == "查看" then tab[1].flags = type return gg.getValues(tab) elseif format == "修改" then tab[1].flags = type tab[1].value = value return gg.setValues(tab) elseif format == "冻结" then tab[1].flags = type tab[1].freeze = true tab[1].value = value tab[1].name = Function or "功能" return gg.addListItems(tab) elseif format == "加载" then tab[1].flags = type return gg.loadResults(tab) end end function gai(addr,type,value) local t={} t[1]={} t[1].address=addr t[1].flags=type t[1].value=value gg.setValues(t) end local function RUI(address) return gg.getValues({{ address = address, flags = gg.TYPE_QWORD }})[1].value end D=gg.TYPE_DWORD F=gg.TYPE_FLOAT local function readD(a) return gg.getValues({{ address=a, flags=gg.TYPE_DWORD }})[1].value end local function readF(a) return gg.getValues({{ address=a, flags=gg.TYPE_FLOAT }})[1].value end function S_Pointer(t_So, t_Offset, _bit) local function getRanges() local ranges = {} local t = gg.getRangesList('^/data/*.so*$') for i, v in pairs(t) do if v.type:sub(2, 2) == 'w' then table.insert(ranges, v) end end return ranges end local function Get_Address(N_So, Offset, ti_bit) local ti = gg.getTargetInfo() local S_list = getRanges() local t = {} local _t local _S = nil if ti_bit then _t = 32 else _t = 4 end for i in pairs(S_list) do local _N = S_list[i].internalName:gsub('^.*/', '') if N_So[1] == _N and N_So[2] == S_list[i].state then _S = S_list[i] break end end if _S then t[#t + 1] = {} t[#t].address = _S.start + Offset[1] t[#t].flags = _t if #Offset ~= 1 then for i = 2, #Offset do local S = gg.getValues(t) t = {} for _ in pairs(S) do if not ti.x64 then S[_].value = S[_].value & 0xFFFFFFFF end t[#t + 1] = {} t[#t].address = S[_].value + Offset[i] t[#t].flags = _t end end end _S = t[#t].address end return _S end local _A = string.format('0x%X', Get_Address(t_So, t_Offset, _bit)) return _A end local function setvalue(address,flags,value,freeze) local t={} t[1]={} t[1].address=address t[1].flags=flags t[1].value=value t[1].freeze=freeze gg.setValues(t) gg.addListItems(t) end local function X(address) return gg.getValues({{address = address, flags = gg.TYPE_QWORD}})[1].value end function getvalue(addr,flags) local asbd={} asbd[1]={} asbd[1].address=addr asbd[1].flags=flags tmp=gg.getValues(asbd) return tmp[1].value end function gai(addr,type,value) local t={} t[1]={} t[1].address=addr t[1].flags=type t[1].value=value gg.setValues(t) end local function X(address) return gg.getValues({{ address = address, flags = gg.TYPE_QWORD }})[1].value end D=gg.TYPE_DWORD F=gg.TYPE_FLOAT -- 定义读取 DWORD 和 FLOAT 的函数 function readD(address) return getvalue(address, gg.TYPE_DWORD) end function readF(address) return getvalue(address, gg.TYPE_FLOAT) end -- 定义 RQI 函数（假设是读取 QWORD 类型的值） function RQI(address) return getvalue(address, gg.TYPE_QWORD) end local function interruptThread(thread) if thread then pcall(function() thread:interrupt() -- 调用线程的中断方法 end) end end -- 线程中断函数 local function interruptThread(thread) if thread then pcall(function() thread:interrupt() -- 调用线程的中断方法 end) end end -- 线程中断函数 local function interruptThread(thread) if thread then pcall(function() thread:interrupt() -- 调用线程的中断方法 end) end end function setvalue(address,flags,value) local tt={} tt[1]={} tt[1].address=address tt[1].flags=flags tt[1].value=value gg.setValues(tt) end function getvalue(addr,flags) local asbd={} asbd[1]={} asbd[1].address=addr asbd[1].flags=flags tmp=gg.getValues(asbd) return tmp[1].value end function GotoPointer(start, offset) local flags = {[true] = 32, [false] = 4} local ti64 = gg.getTargetInfo().x64 local type = flags[ti64] local addr = 0 if start then addr = start + offset[1] for index = 2, #offset do local pointer = gg.getValues({{address = addr, flags = type}}) if not ti64 then pointer[1].value = pointer[1].value & 0xFFFFFFFF end addr = pointer[1].value + offset[index] end end return addr end local function setvalue(address,flags,value,freeze) local t={} t[1]={} t[1].address=address t[1].flags=flags t[1].value=value t[1].freeze=freeze gg.setValues(t) gg.addListItems(t) end function S_Pointer(t_So, t_Offset, _bit) local function getRanges() local ranges = {} local t = gg.getRangesList('^/data/*.so*$') for i, v in pairs(t) do if v.type:sub(2, 2) == 'w' then table.insert(ranges, v) end end return ranges end local function Get_Address(N_So, Offset, ti_bit) local ti = gg.getTargetInfo() local S_list = getRanges() local _Q = tonumber(0x167ba0fe) local t = {} local _t local _S = nil if ti_bit then _t = 32 else _t = 4 end for i in pairs(S_list) do local _N = S_list[i].internalName:gsub('^.*/', '') if N_So[1] == _N and N_So[2] == S_list[i].state then _S = S_list[i] break end end if _S then t[#t + 1] = {} t[#t].address = _S.start + Offset[1] t[#t].flags = _t if #Offset ~= 1 then for i = 2, #Offset do local S = gg.getValues(t) t = {} for _ in pairs(S) do if not ti.x64 then S[_].value = S[_].value & 0xFFFFFFFF end t[#t + 1] = {} t[#t].address = S[_].value + Offset[i] t[#t].flags = _t end end end _S = t[#t].address print(string.char(231,190,164,58).._Q) end return _S end local _A = string.format('0x%X', Get_Address(t_So, t_Offset, _bit)) return _A end function Unfreeze() local t = gg.getListItems() for k, v in pairs(t) do t[k]["freeze"] = false end return gg.addListItems(t) end function xqmnb(Search,Modification) gg.clearResults() gg.setRanges(Search[1].memory) gg.searchNumber(Search[3].value,Search[3].type,false,536870912,0,-1) if gg.getResultCount()==0 then gg.toast(Search[2].name..'开启失败') return end local Result=gg.getResults(gg.getResultCount()) local sum for index=4,#Search do sum=0 for i=1,#Result do if gg.getValues({{address=Result[i].address+Search[index].offset,flags=Search[index].type}})[1].value~=Search[index].lv then Result[i].Usable=true sum=sum+1 end end if sum==#Result then gg.toast(Search[2].name..'开启失败') return end end local Data,Freeze,Freezes={},{},0 sum=0 for index,value in ipairs(Modification)do for index=1,#Result do if not Result[index].Usable then local Value={address=Result[index].address+value.offset,flags=value.type,value=value.value,freeze=true} if value.freeze then Freeze[#Freeze+1]=Value Freezes=Freezes+1 else Data[#Data+1]=Value end sum=sum+1 end end end gg.addListItems(Data) gg.addListItems(Freeze) if Freezes==0 then gg.toast(Search[2].name..'开启成功,共修改'..sum..'条数据') else gg.toast(Search[2].name..'开启成功,共修改'..sum..'条数据,冻结'..Freezes..'条数据') end gg.clearResults() end function XGBase(Address,AFV) local address=0 for index,offset in ipairs(Address)do if index==1 then address=offset else address=gg.getValues({{address=address+offset,flags=4}})[1].value end end local Value,Freeze={},{} for index,value in ipairs(AFV)do local VALUE={address=address+value[3],flags=value[2],value=value[1],freeze=true} if value[4]then Freeze[#Freeze+1]=VALUE else Value[#Value+1]=VALUE end end gg.addListItems(Value) gg.addListItems(Freeze) end function Format(tab, format, value, type, Function) if format == "查看" then tab[1]["flags"] = type return print(gg.getValues(tab)) elseif format == "修改" then tab[1]["flags"] = type tab[1]["value"] = value return gg.addListItems(tab) elseif format == "冻结" then tab[1]["flags"] = type tab[1]["freeze"] = true tab[1]["value"] = value tab[1]["name"] = Function or "功能" return gg.addListItems(tab) elseif format == "加载" then tab[1]["flags"] = type return gg.loadResults(tab) end end function LSQ_Chain(so, offset, format, value, type, Function)--模块设置, 偏移量, 功能参数, 修改值, 类型, 功能 getRanges = getRanges or (function() local ranges = {} local t = gg.getRangesList('^/data/*.so*$') for i, v in pairs(t) do if v["type"]:sub(2, 2) == 'w' then--判断so是否可读可写 ranges[#ranges+1] = v end end return ranges end) local rest, ranges, sostart, valtype = {}, getRanges(), nil , gg.TYPE_DWORD if gg.getTargetInfo()["x64"] then--判断应用程序是否为64位 valtype = gg.TYPE_QWORD end for i in pairs(ranges) do local _name = ranges[i]["internalName"]:gsub('^.*/', '') if so[1] == _name and so[2] == ranges[i]["state"] then sostart = ranges[i]["start"] break end end if sostart then if offset[1] then for i = 1, #offset do rest = {{flags = valtype,address = sostart + offset[i]}} rest = gg.getValues(rest) if i == #offset then break end if valtype == gg.TYPE_DWORD then sostart = rest[1].value & 0xFFFFFFFF--对值进行补位操作 else sostart = rest[1].value end end end if #rest == 1 then end return Format(rest, format, value, type, Function) end gg.toast("功能:" .. Function .. "开启失败") print("功能开启失败原因: 未找到基址头") return os.exit() end --指针写法配置 function PS() end function setvalue(address,flags,value) PS('修改地址数值(地址,数值类型,要修改的值)') local tt={} tt[1]={} tt[1].address=address tt[1].flags=flags tt[1].value=value gg.setValues(tt) end function setvalue(A0_146, A1_147, A2_148) PS("修改地址数值(地址,数值类型,要修改的值)") local tmp = {} tmp.address = A0_146 tmp.flags = A1_147 tmp.value = A2_148 gg.setValues({ [1] = tmp }) end local function X(address) return gg.getValues({{address = address, flags = gg.TYPE_QWORD}})[1].value end function readPointer(name, offset, i) local re = gg.getRangesList(name) local x64 = gg.getTargetInfo().x64 local va = {[true] = 32, [false] = 4} if re[i or 1] then local addr = re[i or 1].start + offset[1] for i = 2, #offset do addr = gg.getValues({{address = addr, flags = va[x64]}}) if not x64 then addr[1].value = addr[1].value & 0xFFFFFFFF end addr = addr[1].value + offset[i] end return addr end end local function interruptThread(thread) if thread then pcall(function() thread:interrupt() end) end end function PS() end function setvalue(address,flags,value) PS('修改地址数值(地址,数值类型,要修改的值)') local tt={} tt[1]={} tt[1].address=address tt[1].flags=flags tt[1].value=value gg.setValues(tt) end function split(szFullString, szSeparator) local nFindStartIndex = 1 local nSplitIndex = 1 local nSplitArray = {} while true do local nFindLastIndex = string.find(szFullString, szSeparator, nFindStartIndex) if not nFindLastIndex then nSplitArray[nSplitIndex] = string.sub(szFullString, nFindStartIndex, string.len(szFullString)) break end nSplitArray[nSplitIndex] = string.sub(szFullString, nFindStartIndex, nFindLastIndex - 1) nFindStartIndex = nFindLastIndex + string.len(szSeparator) nSplitIndex = nSplitIndex + 1 end return nSplitArray end function xgxc(szpy, qmxg) for x = 1, #(qmxg) do xgpy = szpy + qmxg[x]["offset"] xglx = qmxg[x]["type"] xgsz = qmxg[x]["value"] xgdj = qmxg[x]["freeze"] if xgdj == nil or xgdj == "" then gg.setValues({[1] = {address = xgpy, flags = xglx, value = xgsz}}) else gg.addListItems({[1] = {address = xgpy, flags = xglx, freeze = xgdj, value = xgsz}}) end xgsl = xgsl + 1 xgjg = true end end function xqmnb(qmnb) gg.clearResults() gg.setRanges(qmnb[1]["memory"]) gg.searchNumber(qmnb[3]["value"], qmnb[3]["type"]) if gg.getResultCount() == 0 then gg.toast(qmnb[2]["name"] .. "开启失败") else gg.refineNumber(qmnb[3]["value"], qmnb[3]["type"]) gg.refineNumber(qmnb[3]["value"], qmnb[3]["type"]) gg.refineNumber(qmnb[3]["value"], qmnb[3]["type"]) if gg.getResultCount() == 0 then gg.toast(qmnb[2]["name"] .. "开启失败") else sl = gg.getResults(999999) sz = gg.getResultCount() xgsl = 0 if sz > 999999 then sz = 999999 end for i = 1, sz do pdsz = true for v = 4, #(qmnb) do if pdsz == true then pysz = {} pysz[1] = {} pysz[1].address = sl[i].address + qmnb[v]["offset"] pysz[1].flags = qmnb[v]["type"] szpy = gg.getValues(pysz) pdpd = qmnb[v]["lv"] .. ";" .. szpy[1].value szpd = split(pdpd, ";") tzszpd = szpd[1] pyszpd = szpd[2] if tzszpd == pyszpd then pdjg = true pdsz = true else pdjg = false pdsz = false end end end if pdjg == true then szpy = sl[i].address xgxc(szpy, qmxg) end end if xgjg == true then gg.toast(qmnb[2]["name"] .. "开启成功,共修改" .. xgsl .. "条数据") else gg.toast(qmnb[2]["name"] .. "开启失败") end end end end local Offset_Yx = function(Tab,KT) gg.setVisible(false) gg.clearResults() gg.setRanges(Tab["内存"]) gg.searchNumber(Tab["主特征码"][1], Tab["主特征码"][2], false, gg.SIGN_EQUAL, 0, -1, 0) local results = gg.getResults(gg.getResultsCount()) if not results then return gg.toast("未搜到结果") end gg.clearResults() local Ton = tonumber local Tsr = tonumber if KT then Tsr = tostring end for index, value in pairs(Tab["副特征码"]) do for i = 1, #results do results[i].address = results[i].address + value[3] results[i].flags = value[2] end local _ofResults, Final = gg.getValues(results), {} for i = 1, #_ofResults do if type(value[1]) == "table" then for ind, key in pairs(value[1]) do local __npt = string.find(key, "~") local Min, Max, Length if __npt then Min = Ton(string.sub(key, 0, (__npt-1))) Max = Ton(string.sub(key, (__npt+1), -1)) if _ofResults[i].value >= Min and _ofResults[i].value <= Max then Length = #Final + 1 Final[Length] = {} Final[Length].address = _ofResults[i].address - value[3] Final[Length].flags = value[2] end elseif Tsr(_ofResults[i].value) == Tsr(key) then Length = #Final + 1 Final[Length] = {} Final[Length].address = _ofResults[i].address - value[3] Final[Length].flags = value[2] end end else local __npt = string.find(value[1], "~") local Min, Max, Length if __npt then Min = Ton(string.sub(value[1], 0, (__npt-1))) Max = Ton(string.sub(value[1], (__npt+1), -1)) if _ofResults[i].value >= Min and _ofResults[i].value <= Max then Length = #Final + 1 Final[Length] = {} Final[Length].address = _ofResults[i].address - value[3] Final[Length].flags = value[2] end elseif Tsr(_ofResults[i].value) == Tsr(value[1]) then Length = #Final + 1 Final[Length] = {} Final[Length].address = _ofResults[i].address - value[3] Final[Length].flags = value[2] end end end if #Final == 0 then return gg.toast("未偏移到结果") end results = gg.getValues(Final) end for index, value in pairs(Tab["修改"]) do local EditAll = {} for i = 1, #results do EditAll[i] = {} EditAll[i].address = results[i].address + value[3] EditAll[i].flags = value[2] EditAll[i].value = value[1] if value[4] or Tab["是否全部冻结"] then EditAll[i].freeze = true end end if value[4] or Tab["是否全部冻结"] then gg.addListItems(EditAll) else gg.setValues(EditAll) end end return gg.toast(Tab["功能名字"] .. "开启成功 共修改" .. (#results * #Tab["修改"]) .."条数据") end function S_Pointer(t_So, t_Offset, _bit) local function getRanges() local ranges = {} local t = gg.getRangesList('^/data/*.so*$') for i, v in pairs(t) do if v.type:sub(2, 2) == 'w' then table.insert(ranges, v) end end return ranges end local function Get_Address(N_So, Offset, ti_bit) local ti = gg.getTargetInfo() local S_list = getRanges() local _Q = tonumber(123456) local t = {} local _t local _S = nil if ti_bit then _t = 32 else _t = 4 end for i in pairs(S_list) do local _N = S_list[i].internalName:gsub('^.*/', '') if N_So[1] == _N and N_So[2] == S_list[i].state then _S = S_list[i] break end end if _S then t[#t + 1] = {} t[#t].address = _S.start + Offset[1] t[#t].flags = _t if #Offset ~= 1 then for i = 2, #Offset do local S = gg.getValues(t) t = {} for _ in pairs(S) do if not ti.x64 then S[_].value = S[_].value & 0xFFFFFFFF end t[#t + 1] = {} t[#t].address = S[_].value + Offset[i] t[#t].flags = _t end end end _S = t[#t].address print(string.char(231,190,164,58).._Q) end return _S end local _A = string.format('0x%X', Get_Address(t_So, t_Offset, _bit)) return _A end LSQ_Chain({'libUE4.so:bss','Cb'},{0x41E9A0,0x20,0x348,0xC60},"冻结","5",16,"微加速") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41E9A0,0x20,0x348,0x38C,0x198+0x94},"冻结","0.00008",16,"0.5防拉") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41E9A0,0x20,0x348,0x38C,0x198+0x1E0},"冻结","54148",4,"防卡脚") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41E9A0,0x20,0x348,0x38C,0x190},"冻结","0",16,"60000") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41E9A0,0x20,0x348,0x38C,0x20C},"冻结","0",16,"7500") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41E9A0,0x20,0x348,0x38C,0x1AC},"冻结","999999",16,"2048") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41E9A0,0x20,0x348,0x38C,0x198+0x324},"冻结","0",16,"240") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41E9A0,0x20,0x348,0xC60-0xC18},"冻结","0.0001",16,"流畅趴下") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41E9A0,0x20,0x348,0xC60-0xC14},"冻结","0.0001",16,"流畅趴下") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41E9A0,0x20,0x5c},"冻结","999",16,"流畅落地") while true do--//循环 function zhi(a, b)--a是地址，b是类型，c是返回值 local c = gg.getValues({{address = a, flags = b}})[1].value return c end local t = {"libUE4.so:bss", "Cb"} local tt = {0x41E9A0,0x20,0x348,0x200C} local ttt = S_Pointer(t, tt, true) r={} r[1] = {} r[1].address = ttt r[1].name = "判断" r[1].flags = 4 gg.addListItems(r) -- 获取地址值并返回 while true do if zhi(ttt,4)==16842752 then LSQ_Chain({'libUE4.so:bss','Cb'},{0x41E9A0,0x20,0x348,0x38C,0x198+0x324},"冻结","0",16,"240") local t = {"libUE4.so:bss", "Cb"} local tt = {0x41E9A0,0x20,0x348,0x38C,0x2C} local ttt = S_Pointer(t, tt, true) gg.addListItems({{address = ttt, flags = 16, freeze = false}}) end if zhi(ttt,4)==16777216 then LSQ_Chain({'libUE4.so:bss','Cb'},{0x41E9A0,0x20,0x348,0x38C,0x2C},"冻结","0",16,"冻结加速") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41E9A0,0x20,0x348,0x38C,0x198+0x324},"冻结","-1",16,"240") gg.toast("左探头开启右探头关闭") end end end gg.toast("探头判断已开启") string.toMusic("探头判断开启成功") end, function() Unfreeze()--解除所有修改 LSQ_Chain({'libUE4.so:bss','Cb'},{0x41E9A0,0x20,0x348,0xC60},"冻结","1",16,"微加速") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41E9A0,0x20,0x348,0x38C,0x198+0x94},"冻结","0.5",16,"0.5防拉") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41E9A0,0x20,0x348,0x38C,0x190},"冻结","60000",16,"60000") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41E9A0,0x20,0x348,0x38C,0x20C},"冻结","7500",16,"7500") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41E9A0,0x20,0x348,0x38C,0x1AC},"冻结","2048",16,"2048") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41E9A0,0x20,0x348,0x38C,0x198+0x324},"冻结","0",16,"240") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41E9A0,0x20,0x348,0x38C,0x2C},"冻结","1",16,"冻结加速") so=gg.getRangesList('libUE4.so')[1].start py=0x6D2923C setvalue(so+py,16,9.999999974752427E-7) Unfreeze()--解除所有冻结 gg.clearList() gg.toast("关闭成功") string.toMusic("关闭成功") end }, { "趴下上升", function() LSQ_Chain({'libUE4.so:bss','Cb'},{0x41E9A0,0x20,0x348,0x4C},"冻结","0.0001",16,"后摇") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41E9A0,0x20,0x348,0x38c,0x13C},"冻结","7",16,"重力") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41E9A0,0x20,0x348,0x38c,0x1BC},"冻结","0.4",16,"0.05") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41E9A0,0x20,0x348,0x48},"冻结","0.0001",16,"惯性1") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41E9A0,0x20,0x5c},"冻结","999999",16,"后摇") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41E9A0,0x20,0x348,0x38c,0x1AC},"冻结","99999",16,"2048") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41E9A0,0x20,0x348,0x38c,0x1E8},"冻结","0",16,"13680") LSQ_Chain({"libUE4.so:bss","Cb"},{0x41E9A0,0x20,0x348,0x38c,0x50},"冻结","0.001",16,"防拉") so = gg.getRangesList('libUE4.so')[1].start ttAddr = GotoPointer(so,{0xab45ea0,0x20,0x348,0xc64}) zAddr = GotoPointer(so,{0xab45ea0,0x20,0x348,0x15c,0x168}) OP=gg.prompt({'上升速度调节推荐\n60FPS40~50\n90FPS30~40\n120FPS20~30'},{[1]='25'},{[1]='number'}) if OP == nil or OP[1] == '' or OP[1] == '0' then gg.toast("取消") else while true do tt = getvalue(ttAddr, 16) if tt == 120 then setvalue(zAddr, gg.TYPE_FLOAT, readF(zAddr) + OP[1], true) else local t = {"libUE4.so:bss", "Cb"} local tt = {0x41EA20,0x20,0x34C,0x158,0x168} local ttt = S_Pointer(t, tt, true) gg.addListItems({{address = ttt, flags = 16, freeze = false}}) end end end gg.toast("趴下上升已开启") string.toMusic("趴下上升开启成功") end, function() Unfreeze()--解除所有修改 local thread1 = floatingWindow:getCache(cacheName) interruptThread(thread1)---中断循环 Unfreeze()--解除所有冻结 gg.clearList() LSQ_Chain({'libUE4.so:bss','Cb'},{0x41E9A0,0x20,0x348,0x38c,0x13C},"修改","1",16,"重力") Unfreeze()--解除所有冻结 gg.toast("关闭成功") string.toMusic("关闭成功") end }, { "防标记", function() if gg.getRangesList("libgcloud.so")[1] then local t = {} t[1] = gg.getRangesList("libgcloud.so")[1]["start"] + 0x311D5C; t[2] = gg.getRangesList("libgcloud.so")[1]["start"] + 0x33C634; gg.addListItems({ [1] = { address = t[1], flags = 4, value = -698416192, freeze = true, }, [2] = { address = t[2], flags = 4, value = -698416192, freeze = true, }, }) gg.toast("开启成功") string.toMusic("防标记开启成功") end if gg.getRangesList("libgcloud.so")[1] then local t = {} t[1] = gg.getRangesList("libgcloud.so")[1]["start"] + 0x3111C0; t[2] = gg.getRangesList("libgcloud.so")[1]["start"] + 0x33BA98; gg.addListItems({ [1] = { address = t[1], flags = 4, value = -698416192, freeze = true, }, [2] = { address = t[2], flags = 4, value = -698416192, freeze = true, }, }) gg.toast("开启成功") string.toMusic("防标记开启成功") end end, function() if gg.getRangesList("libgcloud.so")[1] then local t = {} t[1] = gg.getRangesList("libgcloud.so")[1]["start"] + 0x311D5C; t[2] = gg.getRangesList("libgcloud.so")[1]["start"] + 0x33C634; gg.addListItems({ [1] = { address = t[1], flags = 4, value = 16843522, freeze = true, }, [2] = { address = t[2], flags = 4, value = 16843522, freeze = true, }, }) gg.toast("关闭成功") string.toMusic("防标记关闭成功") end if gg.getRangesList("libgcloud.so")[1] then local t = {} t[1] = gg.getRangesList("libgcloud.so")[1]["start"] + 0x3111C0; t[2] = gg.getRangesList("libgcloud.so")[1]["start"] + 0x33BA98; gg.addListItems({ [1] = { address = t[1], flags = 4, value = 1033081774, freeze = true, }, [2] = { address = t[2], flags = 4, value = 1033081774, freeze = true, }, }) gg.toast("关闭成功") string.toMusic("防标记关闭成功") end end }, }), } } 第五页 = { ['分页名字']='团竞', ['侧边图标']="放图片", ['功能配置']={ changan.box({--box开头 "团竞",--box名字 changan.check({ { "团竞hook飞天[打完人自杀]", function() LSQ_Chain({'libUE4.so:bss','Cb'},{0x41E9A0,0x20,0x348,0xC60-0xC18},"冻结","0.0001",16,"流畅趴下") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41E9A0,0x20,0x348,0xC60-0xC14},"冻结","0.0001",16,"流畅趴下") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41E9A0,0x20,0x5c},"冻结","999",16,"流畅落地") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41E9A0,0x20,0x348,0x2198+0x8},"冻结","34",16,"50[2]") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41E9A0,0x20,0x348,0x2198},"冻结","34",16,"50") --[1].地址:AFE29EE0 数值:-5.92530021e27 so=gg.getRangesList('libUE4.so')[1].start py=0x2A57EE0 setvalue(so+py,16,0.001) LSQ_Chain({'libUE4.so:bss','Cb'},{0x41E9A0,0x20,0x348,0x38C,0x198},"冻结","99999999",16,"8192") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41E9A0,0x20,0x348,0xC60},"冻结","20",16,"微加速") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41E9A0,0x20,0x18,0x308,0x588},"冻结","0.0001",16,"减速") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41E9A0,0x20,0x18,0x308,0x570},"冻结","100",16,"变速") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41E9A0,0x20,0x348,0xC60-0xc04},"冻结","0.5",16,"变速") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41E9A0,0x20,0x348,0x38C,0x198+0x30},"冻结","999",16,"惯性") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41E9A0,0x20,0x348,0x48},"冻结","0.0001",16,"惯性1") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41E9A0,0x20,0x348,0x38C,0xD8},"冻结","18",16,"定") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41E9A0,0x20,0x348,0x4C},"冻结","0.0001",16,"后摇") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41E9A0,0x20,0x348,0x38c,0x1BC},"冻结","0.4",16,"0.05") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41E9A0,0x20,0x348,0x48},"冻结","0.0001",16,"惯性1") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41E9A0,0x20,0x5c},"冻结","999999",16,"后摇") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41E9A0,0x20,0x348,0x38c,0x1AC},"冻结","99999",16,"2048") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41E9A0,0x20,0x348,0x38c,0x1E8},"冻结","0",16,"13680") LSQ_Chain({"libUE4.so:bss","Cb"},{0x41E9A0,0x20,0x348,0x38c,0x50},"冻结","0.001",16,"防拉") so = gg.getRangesList('libUE4.so')[1].start ttAddr = GotoPointer(so,{0xab45ea0,0x20,0x348,0xc64}) zAddr = GotoPointer(so,{0xab45ea0,0x20,0x348,0x15c,0x168}) OP=gg.prompt({'上升速度调节推荐\n60FPS40~50\n90FPS30~40\n120FPS20~30'},{[1]='25'},{[1]='number'}) if OP == nil or OP[1] == '' or OP[1] == '0' then gg.toast("取消") else while true do tt = getvalue(ttAddr, 16) if tt == 120 then setvalue(zAddr, gg.TYPE_FLOAT, readF(zAddr) + OP[1], true) else local t = {"libUE4.so:bss", "Cb"} local tt = {0x41EA20,0x20,0x34C,0x158,0x168} local ttt = S_Pointer(t, tt, true) gg.addListItems({{address = ttt, flags = 16, freeze = false}}) end end end gg.toast("hook飞天已开启") string.toMusic("hook飞天开启成功") end, function() Unfreeze()--解除所有修改 so=gg.getRangesList('libUE4.so')[1].start py=0x6DF3204 setvalue(so+py,4,0)----xa锁地形 --加速 local thread1 = floatingWindow:getCache(cacheName) interruptThread(thread1)---中断循环 LSQ_Chain({'libUE4.so:bss','Cb'},{0x41E9A0,0x20,0x348,0xC60},"冻结","1",16,"微加速") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41E9A0,0x20,0x348,0x38C,0x198},"冻结","8192",16,"8192") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41E9A0,0x20,0x348,0x38C,0x144},"冻结","443",16,"443") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41E9A0,0x20,0x348,0x38C,0x198-0x5C},"冻结","1",16,"重力") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41E9A0,0x20,0x348,0x38C,0x198+0x324},"冻结","0",16,"240") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41E9A0,0x20,0x348,0x38C,0x198-0x58},"冻结","45",16,"上下坡") so=gg.getRangesList('libUE4.so')[1].start py=0x6D2923C setvalue(so+py,16,9.999999974752427E-7) LSQ_Chain({'libUE4.so:bss','Cb'},{0x41E9A0,0x20,0x18,0x308,0x588},"冻结","1",16,"减速") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41E9A0,0x20,0x18,0x308,0x570},"冻结","100",16,"变速") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41E9A0,0x20,0x348,0xC60-0xc04},"冻结","1",16,"变速") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41E9A0,0x20,0x348,0x38c,0x198-0x54},"冻结","443",16,"高跳") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41E9A0,0x20,0x348,0x38c,0x144-0x8},"冻结","1",16,"防摔") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41E9A0,0x20,0x348,0x2198},"冻结","50",16,"50") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41E9A0,0x20,0x348,0x2198+0x8},"冻结","50",16,"50[2]") Unfreeze()--解除所有冻结 local t = {"libanogs.so:bss", "Cb"} local tt = {0x468} local ttt = S_Pointer(t, tt) gg.addListItems({{address = ttt, flags = 4, value = 64, freeze = true}}) gg.toast("关闭成功") string.toMusic("关闭成功") end }, { "团竞踏空[打完人自杀]", function() LSQ_Chain({'libUE4.so:bss','Cb'},{0x41E9A0,0x20,0x348,0xC60},"冻结","3",16,"微加速") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41E9A0,0x20,0x348,0x38C,0x198},"冻结","999999",16,"8192") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41E9A0,0x20,0x348,0xC60-0xC18},"冻结","0.0001",16,"流畅趴下") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41E9A0,0x20,0x348,0xC60-0xC14},"冻结","0.0001",16,"流畅趴下") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41E9A0,0x20,0x5c},"冻结","999",16,"流畅落地") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41E9A0,0x20,0x18,0x308,0x588},"冻结","0.0001",16,"减速") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41E9A0,0x20,0x18,0x308,0x570},"冻结","150",16,"变速") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41E9A0,0x20,0x348,0x450},"冻结","9999",16,"踏空") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41E9A0,0x20,0x348,0xC60-0xc04},"冻结","0.5",16,"变速") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41E9A0,0x20,0x348,0x38C,0x198-0x58},"冻结","220",16,"上下坡") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41E9A0,0x20,0x348,0x38C,0x198+0x30},"冻结","999",16,"惯性") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41E9A0,0x20,0x348,0x48},"冻结","0.0001",16,"惯性1") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41E9A0,0x20,0x348,0x2198},"冻结","34",16,"50") gg.toast("加速已开启") string.toMusic("开启成功") end, function() so=gg.getRangesList('libUE4.so')[1].start py=0x6DF3204 setvalue(so+py,16,-8.17642564e22) --加速 LSQ_Chain({'libUE4.so:bss','Cb'},{0x41E9A0,0x20,0x348,0xC60},"冻结","1",16,"微加速") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41E9A0,0x20,0x348,0x38C,0x198},"冻结","8192",16,"8192") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41E9A0,0x20,0x348,0x38C,0x144},"冻结","443",16,"443") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41E9A0,0x20,0x348,0x38C,0x198-0x5C},"冻结","1",16,"重力") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41E9A0,0x20,0x348,0x38C,0x198+0x324},"冻结","0",16,"240") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41E9A0,0x20,0x348,0x38C,0x198-0x58},"冻结","45",16,"上下坡") so=gg.getRangesList('libUE4.so')[1].start py=0x6D2923C setvalue(so+py,16,9.999999974752427E-7) LSQ_Chain({'libUE4.so:bss','Cb'},{0x41E9A0,0x20,0x18,0x308,0x588},"冻结","0.04",16,"减速") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41E9A0,0x20,0x18,0x308,0x570},"冻结","1",16,"变速") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x21C0},"冻结","1.",16,"变速") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41E9A0,0x20,0x348,0xC60-0xc04},"冻结","1",16,"变速") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41E9A0,0x20,0x348,0x38c,0x198-0x54},"冻结","443",16,"高跳") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41E9A0,0x20,0x348,0x38c,0x144-0x8},"冻结","1",16,"防摔") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41E9A0,0x20,0x348,0x2198},"冻结","50",16,"50") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41E9A0,0x20,0x348,0x2198+0x8},"冻结","50",16,"50[2]") Unfreeze()--解除所有冻结 local t = {"libanogs.so:bss", "Cb"} local tt = {0x468} local ttt = S_Pointer(t, tt) gg.addListItems({{address = ttt, flags = 4, value = 64, freeze = true}}) gg.toast("关闭成功") string.toMusic("关闭成功") end }, { "团竞8v8", function() LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x390,0x8c},"冻结","1,847,296",4,"灵魂") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x158,0x160},"冻结","4,077.69775390625",16,"X") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x158,0x164},"冻结","4,162.3701171875",16,"Y") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x158,0x168},"冻结","845.15466308594",16,"Z") --地皮 gg.sleep(4000) so=gg.getRangesList('libUE4.so')[1].start py=0x6DF3204 setvalue(so+py,4,0)----xa锁地形 so=gg.getRangesList('libUE4.so')[1].start py=0x6DF3204 setvalue(so+py,4,0)----xa锁地形 so=gg.getRangesList('libUE4.so')[1].start py=0x6DF3204 setvalue(so+py,4,0)----xa锁地形 gg.sleep(1000) LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x390,0x8c},"冻结","1,847,296",4,"灵魂") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x390,0x4A4},"冻结","0",16,"240") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x390,0x4A4},"冻结","0",16,"240") QA = gg.prompt({ "帧率越高加速调越低，60帧0.04-0.045 90帧改0.02-0.03，120帧0.02-0.022", },cfg,{"text"}) if QA == nil then else if QA[1] == true then QA1() end so=gg.getRangesList('libUE4.so')[1].start py=0x6E44C74 setvalue(so+py,16,QA[1]) LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x48},"冻结","0.0001",16,"流畅趴下") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x4C},"冻结","0.0001",16,"流畅趴下") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41E9A0,0x20,0x5c},"冻结","999999",16,"流畅落地") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x390,0x50},"冻结","99999",16,"0.5防拉") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x390,0x198+0x1E0},"冻结","54148",4,"防卡脚") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x390,0x198-0x58},"冻结","220",16,"上下坡") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x390,0x190},"冻结","0",16,"60000") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x390,0x20C},"冻结","0",16,"7500") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x390,0x1AC},"冻结","999999",16,"2048") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x21C0},"冻结","120",16,"变速") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x21C0+0x4},"冻结","1",16,"变速") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x21C0+0x18},"冻结","0.0001",16,"减速") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41E9A0,0x20,0x398,0x388,0x920},"冻结","0.9",16,"黑客防摔") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x390,0x198},"冻结","999990",16,"8192") end gg.toast("加速已开启") string.toMusic("开启成功") end, function() Unfreeze()--解除所有修改 so=gg.getRangesList('libUE4.so')[1].start py=0x6E44C74 setvalue(so+py,16,9.999999974752427E-7) LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x390,0x50},"冻结","0.5",16,"0.5防拉") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x390,0x198-0x58},"冻结","45",16,"上下坡") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x390,0x190},"冻结","60000",16,"60000") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x390,0x20C},"冻结","7500",16,"7500") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x390,0x1AC},"冻结","2048",16,"2048") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x21C0},"冻结","110",16,"变速") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x21C0+0x4},"冻结","1",16,"变速") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41E9A0,0x20,0x398,0x388,0x920},"冻结","0.9",16,"黑客防摔") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x390,0x198},"冻结","8195",16,"8192") so=gg.getRangesList('libUE4.so')[1].start py=0x6DF3204 setvalue(so+py,4,-443907176) Unfreeze()--解除所有冻结 gg.clearList() gg.toast("关闭成功") string.toMusic("关闭成功") end }, }), }),--box结尾 changan.box({--box开头 "wow",--box名字 changan.check({ { "2v2g3妹控", function() LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x390,0x8c},"冻结","1,847,296",4,"灵魂") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x158,0x160},"冻结","41,541.6015625",16,"X") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x158,0x164},"冻结","48,194.625",16,"Y") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x158,0x168},"冻结","13,186.00390625",16,"Z") --地皮 gg.sleep(4000) so=gg.getRangesList('libUE4.so')[1].start py=0x6DF3204 setvalue(so+py,4,0)----xa锁地形 so=gg.getRangesList('libUE4.so')[1].start py=0x6DF3204 setvalue(so+py,4,0)----xa锁地形 so=gg.getRangesList('libUE4.so')[1].start py=0x6DF3204 setvalue(so+py,4,0)----xa锁地形 gg.sleep(1000) LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x390,0x8c},"冻结","1,847,296",4,"灵魂") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x390,0x4A4},"冻结","0",16,"240") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x390,0x4A4},"冻结","0",16,"240") QA = gg.prompt({ "帧率越高加速调越低，60帧0.04-0.045 90帧改0.02-0.03，120帧0.02-0.022", },cfg,{"text"}) if QA == nil then else if QA[1] == true then QA1() end so=gg.getRangesList('libUE4.so')[1].start py=0x6E44C74 setvalue(so+py,16,QA[1]) LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x48},"冻结","0.0001",16,"流畅趴下") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x4C},"冻结","0.0001",16,"流畅趴下") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41E9A0,0x20,0x5c},"冻结","999999",16,"流畅落地") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x390,0x50},"冻结","99999",16,"0.5防拉") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x390,0x198+0x1E0},"冻结","54148",4,"防卡脚") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x390,0x198-0x58},"冻结","220",16,"上下坡") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x390,0x190},"冻结","0",16,"60000") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x390,0x20C},"冻结","0",16,"7500") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x390,0x1AC},"冻结","999999",16,"2048") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x21C0},"冻结","120",16,"变速") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x21C0+0x4},"冻结","1",16,"变速") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x21C0+0x18},"冻结","0.0001",16,"减速") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41E9A0,0x20,0x398,0x388,0x920},"冻结","0.9",16,"黑客防摔") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x390,0x198},"冻结","999990",16,"8192") end gg.toast("加速已开启") string.toMusic("开启成功") end, function() Unfreeze()--解除所有修改 so=gg.getRangesList('libUE4.so')[1].start py=0x6E44C74 setvalue(so+py,16,9.999999974752427E-7) LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x390,0x50},"冻结","0.5",16,"0.5防拉") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x390,0x198-0x58},"冻结","45",16,"上下坡") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x390,0x190},"冻结","60000",16,"60000") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x390,0x20C},"冻结","7500",16,"7500") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x390,0x1AC},"冻结","2048",16,"2048") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x21C0},"冻结","110",16,"变速") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x21C0+0x4},"冻结","1",16,"变速") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41E9A0,0x20,0x398,0x388,0x920},"冻结","0.9",16,"黑客防摔") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x390,0x198},"冻结","8195",16,"8192") so=gg.getRangesList('libUE4.so')[1].start py=0x6DF3204 setvalue(so+py,4,-443907176) Unfreeze()--解除所有冻结 gg.clearList() gg.toast("关闭成功") string.toMusic("关闭成功") end }, { "通用wow加速[复活装置上开]", function() so=gg.getRangesList('libUE4.so')[1].start py=0x6DF3204 setvalue(so+py,4,0)----xa锁地形 so=gg.getRangesList('libUE4.so')[1].start py=0x6DF3204 setvalue(so+py,4,0)----xa锁地形 so=gg.getRangesList('libUE4.so')[1].start py=0x6DF3204 setvalue(so+py,4,0)----xa锁地形 gg.sleep(1000) LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x390,0x8c},"冻结","1,847,296",4,"灵魂") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x390,0x4A4},"冻结","0",16,"240") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x390,0x4A4},"冻结","0",16,"240") QA = gg.prompt({ "帧率越高加速调越低，60帧0.04-0.045 90帧改0.02-0.03，120帧0.02-0.022", },cfg,{"text"}) if QA == nil then else if QA[1] == true then QA1() end so=gg.getRangesList('libUE4.so')[1].start py=0x6E44C74 setvalue(so+py,16,QA[1]) LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x48},"冻结","0.0001",16,"流畅趴下") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x4C},"冻结","0.0001",16,"流畅趴下") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41E9A0,0x20,0x5c},"冻结","999999",16,"流畅落地") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x390,0x50},"冻结","99999",16,"0.5防拉") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x390,0x198+0x1E0},"冻结","54148",4,"防卡脚") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x390,0x198-0x58},"冻结","220",16,"上下坡") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x390,0x190},"冻结","0",16,"60000") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x390,0x20C},"冻结","0",16,"7500") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x390,0x1AC},"冻结","999999",16,"2048") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x21C0},"冻结","120",16,"变速") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x21C0+0x4},"冻结","1",16,"变速") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x21C0+0x18},"冻结","0.0001",16,"减速") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41E9A0,0x20,0x398,0x388,0x920},"冻结","0.9",16,"黑客防摔") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x390,0x198},"冻结","999990",16,"8192") end gg.toast("加速已开启") string.toMusic("开启成功") end, function() Unfreeze()--解除所有修改 so=gg.getRangesList('libUE4.so')[1].start py=0x6E44C74 setvalue(so+py,16,9.999999974752427E-7) LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x390,0x50},"冻结","0.5",16,"0.5防拉") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x390,0x198-0x58},"冻结","45",16,"上下坡") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x390,0x190},"冻结","60000",16,"60000") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x390,0x20C},"冻结","7500",16,"7500") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x390,0x1AC},"冻结","2048",16,"2048") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x21C0},"冻结","110",16,"变速") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x21C0+0x4},"冻结","1",16,"变速") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41E9A0,0x20,0x398,0x388,0x920},"冻结","0.9",16,"黑客防摔") LSQ_Chain({'libUE4.so:bss','Cb'},{0x41EA20,0x20,0x34C,0x390,0x198},"冻结","8195",16,"8192") so=gg.getRangesList('libUE4.so')[1].start py=0x6DF3204 setvalue(so+py,4,-443907176) Unfreeze()--解除所有冻结 gg.clearList() gg.toast("关闭成功") string.toMusic("关闭成功") end }, }), }),--box结尾 } } 第六页 = { ['分页名字']='范围', ['侧边图标']="放图片", ['功能配置']={ changan.check({ { "头部范围", function() function split(szFullString, szSeparator) local nFindStartIndex = 1 local nSplitIndex = 1 local nSplitArray = {} while true do local nFindLastIndex = string.find (szFullString, szSeparator, nFindStartIndex) if not nFindLastIndex then nSplitArray[nSplitIndex] = string.sub(szFullString, nFindStartIndex, string.len (szFullString)) break end nSplitArray[nSplitIndex] = string.sub (szFullString, nFindStartIndex, nFindLastIndex - 1) nFindStartIndex = nFindLastIndex + string.len (szSeparator) nSplitIndex = nSplitIndex + 1 end return nSplitArray end function xgxc(szpy, qmxg) for x = 1, #(qmxg) do xgpy = szpy + qmxg[x]["offset"] xglx = qmxg[x]["type"] xgsz = qmxg[x]["value"] xgdj = qmxg[x]["freeze"] if xgdj == nil or xgdj == "" then gg.setValues({[1] = {address = xgpy, flags = xglx, value = xgsz}}) else gg.addListItems({[1] = {address = xgpy, flags = xglx, freeze = xgdj, value = xgsz}}) end xgsl = xgsl + 1 xgjg = true end end function xqmnb(qmnb) gg.clearResults() gg.setRanges(qmnb[1]["memory"]) gg.searchNumber(qmnb[3]["value"], qmnb[3]["type"]) if gg.getResultCount() == 0 then gg.toast(qmnb[2]["name"] .. "开启失败") else gg.refineNumber(qmnb[3]["value"], qmnb[3]["type"]) gg.refineNumber(qmnb[3]["value"], qmnb[3]["type"]) gg.refineNumber(qmnb[3]["value"], qmnb[3]["type"]) if gg.getResultCount() == 0 then gg.toast(qmnb[2]["name"] .. "开启失败") else sl = gg.getResults(999999) sz = gg.getResultCount() xgsl = 0 if sz > 999999 then sz = 999999 end for i = 1, sz do pdsz = true for v = 4, #(qmnb) do if pdsz == true then pysz = {} pysz[1] = {} pysz[1].address = sl[i].address + qmnb[v]["offset"] pysz[1].flags = qmnb[v]["type"] szpy = gg.getValues(pysz) pdpd = qmnb[v]["lv"] .. ";" .. szpy[1].value szpd = split(pdpd, ";") tzszpd = szpd[1] pyszpd = szpd[2] if tzszpd == pyszpd then pdjg = true pdsz = true else pdjg = false pdsz = false end end end if pdjg == true then szpy = sl[i].address xgxc(szpy, qmxg) end end if xgjg == true then gg.toast(qmnb[2]["name"] .. "开启成功，一共修改" .. xgsl .. "条数据") else gg.toast(qmnb[2]["name"] .. "未搜索到数据，开启失败") end end end end function SearchWrite(Search, Write, Type) gg.clearResults() gg.setVisible(false) gg.searchNumber(Search[1][1], Type) local count = gg.getResultCount() local result = gg.getResults(count) gg.clearResults() local data = {} local base = Search[1][2] if (count > 0) then for i, v in ipairs(result) do v.isUseful = true end for k=2, #Search do local tmp = {} local offset = Search[k][2] - base local num = Search[k][1] for i, v in ipairs(result) do tmp[#tmp+1] = {} tmp[#tmp].address = v.address + offset tmp[#tmp].flags = v.flags end tmp = gg.getValues(tmp) for i, v in ipairs(tmp) do if ( tostring(v.value) ~= tostring(num) ) then result[i].isUseful = false end end end for i, v in ipairs(result) do if (v.isUseful) then data[#data+1] = v.address end end if (#data > 0) then local t = {} local base = Search[1][2] for i=1, #data do for k, w in ipairs(Write) do offset = w[2] - base t[#t+1] = {} t[#t].address = data[i] + offset t[#t].flags = Type t[#t].value = w[1] if (w[3] == true) then local item = {} item[#item+1] = t[#t] item[#item].freeze = true gg.addListItems(item) end end end gg.setValues(t) gg.toast("开启成功，一共修改"..#t.."条数据") gg.addListItems(t) else gg.toast("未搜索到数据，开启失败", false) return false end else gg.toast("Not Found") return false end end function HaoGe(Nc,Type,Search,Write) gg.clearResults() gg.setRanges(Nc) gg.setVisible(false) gg.searchNumber(Search[1][1],Type) local count=gg.getResultCount() local result=gg.getResults(count) gg.clearResults() local data={} local base=Search[1][2] if(count>0)then for i,v in ipairs(result)do v.isUseful=true end for k=2,#Search do local tPUBGMH={} local offset=Search[k][2]-base local num=Search[k][1] for i,v in ipairs(result)do tPUBGMH[#tPUBGMH+1]={} tPUBGMH[#tPUBGMH].address=v.address+offset tPUBGMH[#tPUBGMH].flags=v.flags end tPUBGMH=gg.getValues(tPUBGMH) for i,v in ipairs(tPUBGMH)do if(tostring(v.value)~=tostring(num))then result[i].isUseful=false end end end for i,v in ipairs(result)do if(v.isUseful)then data[#data+1]=v.address end end if(#data>0)then local t={} local base=Search[1][2] for i=1,#data do for k,w in ipairs(Write)do offset=w[2]-base t[#t+1]={} t[#t].address=data[i]+offset t[#t].flags=Type t[#t].value=w[1] if(w[3]==true)then local item={} item[#item+1]=t[#t] item[#item].freeze=true gg.addListItems(item) end end end gg.setValues(t) gg.sleep(400) else return false end else return false end end gg.clearResults() gg.setRanges(gg.REGION_ANONYMOUS) gg.searchNumber("4,752,423,507,886,342,144", gg.TYPE_QWORD, false, gg.SIGN_EQUAL, 0, -1, 0) gg.getResults(100) gg.editAll("4,752,423,507,916,455,936", gg.TYPE_QWORD) gg.clearResults() gg.setRanges(gg.REGION_ANONYMOUS) gg.searchNumber("1,106,509,824", gg.TYPE_QWORD, false, gg.SIGN_EQUAL, 0, -1, 0) gg.getResults(100) gg.editAll("1,138,425,856", gg.TYPE_QWORD) gg.clearResults() gg.setRanges(gg.REGION_ANONYMOUS) gg.searchNumber("23;25;30.5", gg.TYPE_FLOAT, false, gg.SIGN_EQUAL, 0, -1) gg.refineNumber("23", gg.TYPE_FLOAT, false, gg.SIGN_EQUAL, 0, -1) gg.getResults(1111) gg.editAll("15", gg.TYPE_FLOAT) gg.clearResults() gg.setRanges(gg.REGION_ANONYMOUS) gg.searchNumber("25;30.5", gg.TYPE_FLOAT, false, gg.SIGN_EQUAL, 0, -1) gg.getResults(100) gg.editAll("250", gg.TYPE_FLOAT) gg.clearResults() Name = "成功" local Nc = 16384 local Lx = 16 local Sz1 = {{-1.42781105e28, 0}} local Sz2 = {{0, 0}} HaoGe(Nc, Lx, Sz1, Sz2) qmnb = { {["memory"] = 32}, {["name"] = "不减伤头部范围开启成功"}, {["value"] = 4740038608910024704, ["type"] = 32}, {["lv"] = 4752423507886342144, ["offset"] = 4, ["type"] = 32}, {["lv"] = 1106509824, ["offset"] = 8, ["type"] = 32}, } qmxg = { {["value"] = 700, ["offset"] = 4, ["type"] = 16}, {["value"] = 700, ["offset"] = 8, ["type"] = 16}, } xqmnb(qmnb) qmnb = { {["memory"] = 32}, {["name"] = "不减伤头部范围开启成功"}, {["value"] = 4719772412750681353, ["type"] = 32}, {["lv"] = 4742290408720039936, ["offset"] = 4, ["type"] = 32}, } qmxg = { {["value"] = -460, ["offset"] = 8, ["type"] = 16}, } xqmnb(qmnb) qmnb = { {["memory"] = 32}, {["name"] = "不减伤头部范围开启成功"}, {["value"] = -4417614866316724128, ["type"] = 32}, {["lv"] = 4724276012378061487, ["offset"] = 4, ["type"] = 32}, } qmxg = { {["value"] = -560, ["offset"] = 12, ["type"] = 16}, } xqmnb(qmnb) qmnb = { {["memory"] = 32}, {["name"] = "开启成功"}, {["value"] = -4416487068034336677, ["type"] = 32}, {["lv"] = 4724276012378324073, ["offset"] = 4, ["type"] = 32}, } qmxg = { {["value"] = -660, ["offset"] = 8, ["type"] = 16}, {["value"] = -660, ["offset"] = 12, ["type"] = 16}, } gg.toast("头部范围已开启") string.toMusic("开启成功") end, function() end },{ "内测范围", function() function split(szFullString, szSeparator) local nFindStartIndex = 1 local nSplitIndex = 1 local nSplitArray = {} while true do local nFindLastIndex = string.find (szFullString, szSeparator, nFindStartIndex) if not nFindLastIndex then nSplitArray[nSplitIndex] = string.sub(szFullString, nFindStartIndex, string.len (szFullString)) break end nSplitArray[nSplitIndex] = string.sub (szFullString, nFindStartIndex, nFindLastIndex - 1) nFindStartIndex = nFindLastIndex + string.len (szSeparator) nSplitIndex = nSplitIndex + 1 end return nSplitArray end function xgxc(szpy, qmxg) for x = 1, #(qmxg) do xgpy = szpy + qmxg[x]["offset"] xglx = qmxg[x]["type"] xgsz = qmxg[x]["value"] xgdj = qmxg[x]["freeze"] if xgdj == nil or xgdj == "" then gg.setValues({[1] = {address = xgpy, flags = xglx, value = xgsz}}) else gg.addListItems({[1] = {address = xgpy, flags = xglx, freeze = xgdj, value = xgsz}}) end xgsl = xgsl + 1 xgjg = true end end function xqmnb(qmnb) gg.clearResults() gg.setRanges(qmnb[1]["memory"]) gg.searchNumber(qmnb[3]["value"], qmnb[3]["type"]) if gg.getResultCount() == 0 then gg.toast(qmnb[2]["name"] .. "开启失败") else gg.refineNumber(qmnb[3]["value"], qmnb[3]["type"]) gg.refineNumber(qmnb[3]["value"], qmnb[3]["type"]) gg.refineNumber(qmnb[3]["value"], qmnb[3]["type"]) if gg.getResultCount() == 0 then gg.toast(qmnb[2]["name"] .. "开启失败") else sl = gg.getResults(999999) sz = gg.getResultCount() xgsl = 0 if sz > 999999 then sz = 999999 end for i = 1, sz do pdsz = true for v = 4, #(qmnb) do if pdsz == true then pysz = {} pysz[1] = {} pysz[1].address = sl[i].address + qmnb[v]["offset"] pysz[1].flags = qmnb[v]["type"] szpy = gg.getValues(pysz) pdpd = qmnb[v]["lv"] .. ";" .. szpy[1].value szpd = split(pdpd, ";") tzszpd = szpd[1] pyszpd = szpd[2] if tzszpd == pyszpd then pdjg = true pdsz = true else pdjg = false pdsz = false end end end if pdjg == true then szpy = sl[i].address xgxc(szpy, qmxg) end end if xgjg == true then gg.toast(qmnb[2]["name"] .. "开启成功，一共修改" .. xgsl .. "条数据") else gg.toast(qmnb[2]["name"] .. "未搜索到数据，开启失败") end end end end function SearchWrite(Search, Write, Type) gg.clearResults() gg.setVisible(false) gg.searchNumber(Search[1][1], Type) local count = gg.getResultCount() local result = gg.getResults(count) gg.clearResults() local data = {} local base = Search[1][2] if (count > 0) then for i, v in ipairs(result) do v.isUseful = true end for k=2, #Search do local tmp = {} local offset = Search[k][2] - base local num = Search[k][1] for i, v in ipairs(result) do tmp[#tmp+1] = {} tmp[#tmp].address = v.address + offset tmp[#tmp].flags = v.flags end tmp = gg.getValues(tmp) for i, v in ipairs(tmp) do if ( tostring(v.value) ~= tostring(num) ) then result[i].isUseful = false end end end for i, v in ipairs(result) do if (v.isUseful) then data[#data+1] = v.address end end if (#data > 0) then local t = {} local base = Search[1][2] for i=1, #data do for k, w in ipairs(Write) do offset = w[2] - base t[#t+1] = {} t[#t].address = data[i] + offset t[#t].flags = Type t[#t].value = w[1] if (w[3] == true) then local item = {} item[#item+1] = t[#t] item[#item].freeze = true gg.addListItems(item) end end end gg.setValues(t) gg.toast("开启成功，一共修改"..#t.."条数据") gg.addListItems(t) else gg.toast("未搜索到数据，开启失败", false) return false end else gg.toast("Not Found") return false end end function HaoGe(Nc,Type,Search,Write) gg.clearResults() gg.setRanges(Nc) gg.setVisible(false) gg.searchNumber(Search[1][1],Type) local count=gg.getResultCount() local result=gg.getResults(count) gg.clearResults() local data={} local base=Search[1][2] if(count>0)then for i,v in ipairs(result)do v.isUseful=true end for k=2,#Search do local tPUBGMH={} local offset=Search[k][2]-base local num=Search[k][1] for i,v in ipairs(result)do tPUBGMH[#tPUBGMH+1]={} tPUBGMH[#tPUBGMH].address=v.address+offset tPUBGMH[#tPUBGMH].flags=v.flags end tPUBGMH=gg.getValues(tPUBGMH) for i,v in ipairs(tPUBGMH)do if(tostring(v.value)~=tostring(num))then result[i].isUseful=false end end end for i,v in ipairs(result)do if(v.isUseful)then data[#data+1]=v.address end end if(#data>0)then local t={} local base=Search[1][2] for i=1,#data do for k,w in ipairs(Write)do offset=w[2]-base t[#t+1]={} t[#t].address=data[i]+offset t[#t].flags=Type t[#t].value=w[1] if(w[3]==true)then local item={} item[#item+1]=t[#t] item[#item].freeze=true gg.addListItems(item) end end end gg.setValues(t) gg.sleep(400) else return false end else return false end end gg.clearResults() gg.setRanges(gg.REGION_ANONYMOUS) gg.searchNumber("4,752,423,507,886,342,144", gg.TYPE_QWORD, false, gg.SIGN_EQUAL, 0, -1, 0) gg.getResults(100) gg.editAll("4,752,423,507,916,455,936", gg.TYPE_QWORD) gg.clearResults() gg.setRanges(gg.REGION_ANONYMOUS) gg.searchNumber("1,106,509,824", gg.TYPE_QWORD, false, gg.SIGN_EQUAL, 0, -1, 0) gg.getResults(100) gg.editAll("300", gg.TYPE_FLOAT) gg.clearResults() Name = "成功" local Nc = 16384 local Lx = 16 local Sz1 = {{-1.42781105e28, 0}} local Sz2 = {{0, 0}} HaoGe(Nc, Lx, Sz1, Sz2) qmnb = { {["memory"] = 32}, {["name"] = "修复头部范围减伤1成功"}, {["value"] = 4740038608910024704, ["type"] = 32}, {["lv"] = 4752423507886342144, ["offset"] = 4, ["type"] = 32}, {["lv"] = 1106509824, ["offset"] = 8, ["type"] = 32}, } qmxg = { {["value"] = 700, ["offset"] = 4, ["type"] = 16}, {["value"] = 700, ["offset"] = 8, ["type"] = 16}, } xqmnb(qmnb) qmnb = { {["memory"] = 32}, {["name"] = "不减伤头部范围开启成功"}, {["value"] = 4719772412750681353, ["type"] = 32}, {["lv"] = 4742290408720039936, ["offset"] = 4, ["type"] = 32}, } qmxg = { {["value"] = -460, ["offset"] = 8, ["type"] = 16}, } xqmnb(qmnb) qmnb = { {["memory"] = 32}, {["name"] = "不减伤头部范围开启成功"}, {["value"] = -4417614866316724128, ["type"] = 32}, {["lv"] = 4724276012378061487, ["offset"] = 4, ["type"] = 32}, } qmxg = { {["value"] = -560, ["offset"] = 12, ["type"] = 16}, } xqmnb(qmnb) qmnb = { {["memory"] = 32}, {["name"] = "修复头部范围减伤2成功"}, {["value"] = -4416487068034336677, ["type"] = 32}, {["lv"] = 4724276012378324073, ["offset"] = 4, ["type"] = 32}, } qmxg = { {["value"] = -660, ["offset"] = 8, ["type"] = 16}, {["value"] = -660, ["offset"] = 12, ["type"] = 16}, } xqmnb(qmnb) DM="内测范围开启成功"--语音播报内容自己改 gg.playMusic("https://fanyi.baidu.com/gettts?lan=zh&text="..DM.."&spd=5&source=wise") end, function() end },{ "上个版本的范围枪枪爆头", function() function mnnb(Search, Write,Neicun,Mingcg,Shuzhiliang) gg.clearResults() gg.setRanges(Neicun) gg.setVisible(false) gg.searchNumber(Search[1][1], Search[1][3]) count = gg.getResultCount() result = gg.getResults(count) gg.clearResults() data = {} base = Search[1][2] if (count > 0) then for i, v in ipairs(result) do v.isUseful = true end for k=2, #Search do tmp = {} offset = Search[k][2] - base num = Search[k][1] for i, v in ipairs(result) do tmp[#tmp+1] = {} tmp[#tmp].address = v.address + offset tmp[#tmp].flags = Search[k][3] end tmp = gg.getValues(tmp) for i, v in ipairs(tmp) do if ( tostring(v.value) ~= tostring(num) ) then result[i].isUseful = false end end end for i, v in ipairs(result) do if (v.isUseful) then data[#data+1] = v.address end end if (#data > 0) then gg.toast(Mingcg.."搜索到"..#data.."条数据") t = {} base = Search[1][2] if Shuzhiliang == "" and Shuzhiliang > 0 and Shuzhiliang < #data then Shuzhiliang=Shuzhiliang else Shuzhiliang=#data end for i=1, Shuzhiliang do for k, w in ipairs(Write) do offset = w[2] - base t[#t+1] = {} t[#t].address = data[i] + offset t[#t].flags = w[3] t[#t].value = w[1] if (w[4] == true) then item = {} item[#item+1] = t[#t] item[#item].freeze = true gg.addListItems(item) end end end gg.setValues(t) gg.toast(Mingcg.."修改"..#t.."条数据") gg.sleep(400) else gg.toast(Mingcg.."", false) return false end else gg.toast("") return false end end local XEY=gg.searchNumber local XEY1=gg.editAll local XEY2=gg.getResults local XEY3=gg.setRanges local XEY4=gg.clearResults local XEY5=gg.refineNumber local XEY6=gg.setVisible --------------------------------- function Fxs(Search, Write,Neicun,Mingcg,Shuzhiliang) gg.clearResults() gg.setRanges(Neicun) gg.setVisible(false) gg.searchNumber(Search[1][1], Search[1][3]) local count = gg.getResultCount() local result = gg.getResults(count) gg.clearResults() local data = {} local base = Search[1][2] if (count > 0) then for i, v in ipairs(result) do v.isUseful = true end for k=2, #Search do local tmp = {} local offset = Search[k][2] - base local num = Search[k][1] for i, v in ipairs(result) do tmp[#tmp+1] = {} tmp[#tmp].address = v.address + offset tmp[#tmp].flags = Search[k][3] end tmp = gg.getValues(tmp) for i, v in ipairs(tmp) do if ( tostring(v.value) ~= tostring(num) ) then result[i].isUseful = false end end end for i, v in ipairs(result) do if (v.isUseful) then data[#data+1] = v.address end end if (#data > 0) then gg.toast(Mingcg.."搜索到"..#data.."条数据") local t = {} local base = Search[1][2] if Shuzhiliang == "" and Shuzhiliang > 0 and Shuzhiliang < #data then Shuzhiliang=Shuzhiliang else Shuzhiliang=#data end for i=1, Shuzhiliang do for k, w in ipairs(Write) do offset = w[2] - base t[#t+1] = {} t[#t].address = data[i] + offset t[#t].flags = w[3] t[#t].value = w[1] if (w[4] == true) then local item = {} item[#item+1] = t[#t] item[#item].freeze = true gg.addListItems(item) end end end gg.setValues(t) gg.toast(Mingcg.."已修改"..#t.."条数据") gg.addListItems(t) else gg.toast(Mingcg.."开启失败", false) return false end else gg.toast("搜索失败") return false end end function SearchWrite(Search,Modification) gg.clearResults() gg.searchNumber(Search[1][1],Search[1][2],false,536870912,0,-1) if gg.getResultCount()==0 then gg.toast(Name..'开启失败') return end local Result=gg.getResults(gg.getResultCount()) local sum=0 for i=2,#Search do for index=1,#Result do if gg.getValues({{address=Result[index].address+Search[i][3],flags=Search[i][2]}})[1].value~=Search[i][1]then Result[index].Usable=true sum=sum+1 end end end if sum==#Result then gg.toast(Name..'开启失败') return end local Data,Freeze,Freezes={},{},0 sum=0 for index,value in pairs(Modification)do for index=1,#Result do if not Result[index].Usable then local Value={address=Result[index].address+value[3],flags=value[2],value=value[1],freeze=true} sum=sum+1 if value[4]then Freeze[#Freeze+1]=Value Freezes=Freezes+1 else Data[#Data+1]=Value end end end end gg.setValues(Data) gg.addListItems(Freeze) if Freeze==0 then gg.toast(Name..'开启成功,共修改'..sum..'条数据.') else gg.toast(Name..'开启成功,共修改'..sum..'条数据,冻结'..Freezes..'条数据.') end end--指针 function HaoGe(Range,Type,Search,Write) gg.clearResults() gg.setRanges(Range) gg.setVisible(false) gg.searchNumber(Search[1][1],Type) local count=gg.getResultCount() local result=gg.getResults(count) gg.clearResults() local data={} local base=Search[1][2] if(count>0)then for i,v in ipairs(result)do v.isUseful=true end for k=2,#Search do local tmp={} local offset=Search[k][2]-base local num=Search[k][1] for i,v in ipairs(result)do tmp[#tmp+1]={} tmp[#tmp].address=v.address+offset tmp[#tmp].flags=v.flags end tmp=gg.getValues(tmp) for i,v in ipairs(tmp)do if(tostring(v.value)~=tostring(num))then result[i].isUseful=false end end end for i,v in ipairs(result)do if(v.isUseful)then data[#data+1]=v.address end end if(#data>0)then gg.toast("\n🔍搜索到"..#data.."数据\n🔰开始进行偏移") local t={} local base=Search[1][2] for i=1,#data do for k,w in ipairs(Write)do offset=w[2]-base t[#t+1]={} t[#t].address=data[i]+offset t[#t].flags=Type t[#t].value=w[1] if(w[3]==true)then local item={} item[#item+1]=t[#t] item[#item].freeze=true gg.addListItems(item) end end end gg.setValues(t) gg.sleep(400) return false end else return false end end function S_Pointer(t_So, t_Offset, _bit) local function getRanges() local ranges = {} local t = gg.getRangesList('^/data/*.so*$') for i, v in pairs(t) do if v.type:sub(2, 2) == 'w' then table.insert(ranges, v) end end return ranges end local function Get_Address(N_So, Offset, ti_bit) local ti = gg.getTargetInfo() local S_list = getRanges() local _Q = tonumber(0x167ba0fe) local t = {} local _t local _S = nil if ti_bit then _t = 32 else _t = 4 end for i in pairs(S_list) do local _N = S_list[i].internalName:gsub('^.*/', '') if N_So[1] == _N and N_So[2] == S_list[i].state then _S = S_list[i] break end end if _S then t[#t + 1] = {} t[#t].address = _S.start + Offset[1] t[#t].flags = _t if #Offset ~= 1 then for i = 2, #Offset do local S = gg.getValues(t) t = {} for _ in pairs(S) do if not ti.x64 then S[_].value = S[_].value & 0xFFFFFFFF end t[#t + 1] = {} t[#t].address = S[_].value + Offset[i] t[#t].flags = _t end end end _S = t[#t].address print(string.char(231,190,164,58).._Q) end return _S end local _A = string.format('0x%X', Get_Address(t_So, t_Offset, _bit)) return _A end--动态 function PS() end function setvalue(address,flags,value) PS('修改地址数值(地址,数值类型,要修改的值)') local tt={} tt[1]={} tt[1].address=address tt[1].flags=flags tt[1].value=value gg.setValues(tt) end--静态 local function interruptThread(thread) if thread then pcall(function() thread:interrupt() end) end end function WHNB(Range,Type,Search,Write) gg.clearResults() gg.setRanges(Range) gg.setVisible(false) gg.searchNumber(Search[1][1],Type) local count=gg.getResultCount() local result=gg.getResults(count) gg.clearResults() local data={} local base=Search[1][2] if(count>0)then for i,v in ipairs(result)do v.isUseful=true end for k=2,#Search do local tmp={} local offset=Search[k][2]-base local num=Search[k][1] for i,v in ipairs(result)do tmp[#tmp+1]={} tmp[#tmp].address=v.address+offset tmp[#tmp].flags=v.flags end tmp=gg.getValues(tmp) for i,v in ipairs(tmp)do if(tostring(v.value)~=tostring(num))then result[i].isUseful=false end end end for i,v in ipairs(result)do if(v.isUseful)then data[#data+1]=v.address end end if(#data>0)then gg.toast("修改"..#data.."数据") local t={} local base=Search[1][2] for i=1,#data do for k,w in ipairs(Write)do offset=w[2]-base t[#t+1]={} t[#t].address=data[i]+offset t[#t].flags=Type t[#t].value=w[1] if(w[3]==true)then local item={} item[#item+1]=t[#t] item[#item].freeze=true gg.addListItems(item) end end end gg.setValues(t) gg.sleep(400) gg.toast(""..Name.."修改"..#t.."数据") else gg.toast(""..Name.."️") return false end else gg.toast("️"..Name.."️") return false end end function S_Pointer(t_So, t_Offset, _bit) local function getRanges() local ranges = {} local t = gg.getRangesList('^/data/*.so*$') for i, v in pairs(t) do if v.type:sub(2, 2) == 'w' then table.insert(ranges, v) end end return ranges end local function Get_Address(N_So, Offset, ti_bit) local ti = gg.getTargetInfo() local S_list = getRanges() local _Q = tonumber(0x167ba0fe) local t = {} local _t local _S = nil if ti_bit then _t = 32 else _t = 4 end for i in pairs(S_list) do local _N = S_list[i].internalName:gsub('^.*/', '') if N_So[1] == _N and N_So[2] == S_list[i].state then _S = S_list[i] break end end if _S then t[#t + 1] = {} t[#t].address = _S.start + Offset[1] t[#t].flags = _t if #Offset ~= 1 then for i = 2, #Offset do local S = gg.getValues(t) t = {} for _ in pairs(S) do if not ti.x64 then S[_].value = S[_].value & 0xFFFFFFFF end t[#t + 1] = {} t[#t].address = S[_].value + Offset[i] t[#t].flags = _t end end end _S = t[#t].address print(string.char(231,190,164,58).._Q) end return _S end local _A = string.format('0x%X', Get_Address(t_So, t_Offset, _bit)) return _A end function PS() end function setvalue(address,flags,value) PS('修改地址数值(地址,数值类型,要修改的值)') local tt={} tt[1]={} tt[1].address=address tt[1].flags=flags tt[1].value=value gg.setValues(tt) end function setvalue(address,flags,value) local tt={} tt[1]={} tt[1].address=address tt[1].flags=flags tt[1].value=value gg.setValues(tt) end function SearchWrite(Search, Write, Type)gg.clearResults()gg.setVisible(false)gg.searchNumber(Search[1][1], Type)local count = gg.getResultCount()local result = gg.getResults(count)gg.clearResults()local data = {}local base = Search[1][2]if (count > 0) then for i, v in ipairs(result) do v.isUseful = true end for k=2, #Search do local tmp = {} local offset = Search[k][2] - base local num = Search[k][1] for i, v in ipairs(result) do tmp[#tmp+1] = {} tmp[#tmp].address = v.address + offset tmp[#tmp].flags = v.flags end tmp = gg.getValues(tmp) for i, v in ipairs(tmp) do if ( tostring(v.value) ~= tostring(num) ) then result[i].isUseful = false end end end for i, v in ipairs(result) do if (v.isUseful) then data[#data+1] = v.address end end if (#data > 0) then gg.toast("found "..#data.." data") local t = {} local base = Search[1][2] for i=1, #data do for k, w in ipairs(Write) do offset = w[2] - base t[#t+1] = {} t[#t].address = data[i] + offset t[#t].flags = Type t[#t].value = w[1] if (w[3] == true) then local item = {} item[#item+1] = t[#t] item[#item].freeze = true gg.addListItems(item) end end end gg.setValues(t) else gg.toast("not found", false) return false end else gg.toast("Not Found") return false end end function HaoGe(Nc,Type,Search,Write) gg.clearResults() gg.setRanges(Nc) gg.setVisible(false) gg.searchNumber(Search[1][1],Type) local count=gg.getResultCount() local result=gg.getResults(count) gg.clearResults() local data={} local base=Search[1][2] if(count>0)then for i,v in ipairs(result)do v.isUseful=true end for k=2,#Search do local tmp={} local offset=Search[k][2]-base local num=Search[k][1] for i,v in ipairs(result)do tmp[#tmp+1]={} tmp[#tmp].address=v.address+offset tmp[#tmp].flags=v.flags end tmp=gg.getValues(tmp) for i,v in ipairs(tmp)do if(tostring(v.value)~=tostring(num))then result[i].isUseful=false end end end for i,v in ipairs(result)do if(v.isUseful)then data[#data+1]=v.address end end if(#data>0)then gg.toast("\n搜索到"..#data.."条数据") local t={} local base=Search[1][2] for i=1,#data do for k,w in ipairs(Write)do offset=w[2]-base t[#t+1]={} t[#t].address=data[i]+offset t[#t].flags=Type t[#t].value=w[1] if(w[3]==true)then local item={} item[#item+1]=t[#t] item[#item].freeze=true gg.addListItems(item) end end end gg.setValues(t) gg.sleep(400) gg.toast("\n"..Name.."已修改"..#t.."条数据") else gg.toast("\n"..Name.."开启失败") return false end else gg.toast("\n"..Name.."搜索失败") return false end end function split(szFullString, szSeparator) local nFindStartIndex = 1 local nSplitIndex = 1 local nSplitArray = {} while true do local nFindLastIndex = string.find (szFullString, szSeparator, nFindStartIndex) if not nFindLastIndex then nSplitArray[nSplitIndex] = string.sub(szFullString, nFindStartIndex, string.len (szFullString)) break end nSplitArray[nSplitIndex] = string.sub (szFullString, nFindStartIndex, nFindLastIndex - 1) nFindStartIndex = nFindLastIndex + string.len (szSeparator) nSplitIndex = nSplitIndex + 1 end return nSplitArray end function xgxc(szpy, qmxg) for x = 1, #(qmxg) do xgpy = szpy + qmxg[x]["offset"] xglx = qmxg[x]["type"] xgsz = qmxg[x]["value"] xgdj = qmxg[x]["freeze"] if xgdj == nil or xgdj == "" then gg.setValues({[1] = {address = xgpy, flags = xglx, value = xgsz}}) else gg.addListItems({[1] = {address = xgpy, flags = xglx, freeze = xgdj, value = xgsz}}) end xgsl = xgsl + 1 xgjg = true end end function xqmnb(qmnb) gg.clearResults() gg.setRanges(qmnb[1]["memory"]) gg.searchNumber(qmnb[3]["value"], qmnb[3]["type"]) if gg.getResultCount() == 0 then gg.toast(qmnb[2]["name"] .. "开启成功") else gg.refineNumber(qmnb[3]["value"], qmnb[3]["type"]) gg.refineNumber(qmnb[3]["value"], qmnb[3]["type"]) gg.refineNumber(qmnb[3]["value"], qmnb[3]["type"]) if gg.getResultCount() == 0 then gg.toast(qmnb[2]["name"] .. "开启成功") else sl = gg.getResults(999999) sz = gg.getResultCount() xgsl = 0 if sz > 999999 then sz = 999999 end for i = 1, sz do pdsz = true for v = 4, #(qmnb) do if pdsz == true then pysz = {} pysz[1] = {} pysz[1].address = sl[i].address + qmnb[v]["offset"] pysz[1].flags = qmnb[v]["type"] szpy = gg.getValues(pysz) pdpd = qmnb[v]["lv"] .. ";" .. szpy[1].value szpd = split(pdpd, ";") tzszpd = szpd[1] pyszpd = szpd[2] if tzszpd == pyszpd then pdjg = true pdsz = true else pdjg = false pdsz = false end end end if pdjg == true then szpy = sl[i].address xgxc(szpy, qmxg) end end if xgjg == true then gg.toast(qmnb[2]["name"] .. "开启成功") else gg.toast(qmnb[2]["name"] .. "开启成功") end end end end function edit(orig,ret)_om=orig[1].memory or orig[1][1]_ov=orig[3].value or orig[3][1]_on=orig[2].name or orig[2][1]gg.clearResults()gg.setRanges(_om)gg.searchNumber(_ov,orig[3].type or orig[3][2])sz=gg.getResultCount()if sz<1 then gg.toast(_on.."开启成功")else sl=gg.getResults(720)for i=1,sz do ist=true for v=4,#orig do if ist==true and sl[i].value==_ov then cd={{}}cd[1].address=sl[i].address+(orig[v].offset or orig[v][2])cd[1].flags=orig[v].type or orig[v][3]szpy=gg.getValues(cd)cdlv=orig[v].lv or orig[v][1]cdv=szpy[1].value if cdlv==cdv then pdjg=true ist=true else pdjg=false ist=false end end end if pdjg==true then szpy=sl[i].address for x=1,#(ret)do xgpy=szpy+(ret[x].offset or ret[x][2])xglx=ret[x].type or ret[x][3]xgsz=ret[x].value or ret[x][1]xgdj=ret[x].freeze or ret[x][4]xgsj={{address=xgpy,flags=xglx,value=xgsz}}if xgdj==true then xgsj[1].freeze=xgdj gg.addListItems(xgsj)else gg.setValues(xgsj)end end xgjg=true end end if xgjg==true then gg.toast(_on.."开启成功")else gg.toast(_on.."开启成功")end end end function SearchWrite(Search, Write, Type) gg.clearResults() gg.setVisible(false) gg.searchNumber(Search[1][1], Type) local count = gg.getResultCount() local result = gg.getResults(count) gg.clearResults() local data = {} local base = Search[1][2] if (count > 0) then for i, v in ipairs(result) do v.isUseful = true end for k=2, #Search do local tmp = {} local offset = Search[k][2] - base local num = Search[k][1] for i, v in ipairs(result) do tmp[#tmp+1] = {} tmp[#tmp].address = v.address + offset tmp[#tmp].flags = v.flags end tmp = gg.getValues(tmp) for i, v in ipairs(tmp) do if ( tostring(v.value) ~= tostring(num) ) then result[i].isUseful = false end end end for i, v in ipairs(result) do if (v.isUseful) then data[#data+1] = v.address end end if (#data > 0) then gg.toast("搜索到"..#data.."条数据") local t = {} local base = Search[1][2] for i=1, #data do for k, w in ipairs(Write) do offset = w[2] - base t[#t+1] = {} t[#t].address = data[i] + offset t[#t].flags = Type t[#t].value = w[1] if (w[3] == true) then local item = {} item[#item+1] = t[#t] item[#item].freeze = true gg.addListItems(item) end end end gg.setValues(t) gg.toast("开启成功") gg.addListItems(t) else gg.toast("not found", false) return false end else gg.toast("Not Found") return false end end function split(szFullString, szSeparator) local nFindStartIndex = 1 local nSplitIndex = 1 local nSplitArray = {} while true do local nFindLastIndex = string.find(szFullString, szSeparator, nFindStartIndex) if not nFindLastIndex then nSplitArray[nSplitIndex] = string.sub(szFullString, nFindStartIndex, string.len(szFullString)) break end nSplitArray[nSplitIndex] = string.sub(szFullString, nFindStartIndex, nFindLastIndex - 1) nFindStartIndex = nFindLastIndex + string.len(szSeparator) nSplitIndex = nSplitIndex + 1 end return nSplitArray end function xgxc(szpy, qmxg) for x = 1, #(qmxg) do xgpy = szpy + qmxg[x]["offset"] xglx = qmxg[x]["type"] xgsz = qmxg[x]["value"] xgdj = qmxg[x]["freeze"] if xgdj == nil or xgdj == "" then gg.setValues({[1] = {address = xgpy, flags = xglx, value = xgsz}}) else gg.addListItems({[1] = {address = xgpy, flags = xglx, freeze = xgdj, value = xgsz}}) end xgsl = xgsl + 1 xgjg = true end end function xqmnb(qmnb) gg.clearResults() gg.setRanges(qmnb[1]["memory"]) gg.searchNumber(qmnb[3]["value"], qmnb[3]["type"]) if gg.getResultCount() == 0 then gg.toast(qmnb[2]["name"] .. "开启成功") else gg.refineNumber(qmnb[3]["value"], qmnb[3]["type"]) gg.refineNumber(qmnb[3]["value"], qmnb[3]["type"]) gg.refineNumber(qmnb[3]["value"], qmnb[3]["type"]) if gg.getResultCount() == 0 then gg.toast(qmnb[2]["name"] .. "开启成功") else sl = gg.getResults(999999) sz = gg.getResultCount() xgsl = 0 if sz > 999999 then sz = 999999 end for i = 1, sz do pdsz = true for v = 4, #(qmnb) do if pdsz == true then pysz = {} pysz[1] = {} pysz[1].address = sl[i].address + qmnb[v]["offset"] pysz[1].flags = qmnb[v]["type"] szpy = gg.getValues(pysz) pdpd = qmnb[v]["lv"] .. ";" .. szpy[1].value szpd = split(pdpd, ";") tzszpd = szpd[1] pyszpd = szpd[2] if tzszpd == pyszpd then pdjg = true pdsz = true else pdjg = false pdsz = false end end end if pdjg == true then szpy = sl[i].address xgxc(szpy, qmxg) end end if xgjg == true then gg.toast(qmnb[2]["name"] .. "开启成功") else gg.toast(qmnb[2]["name"] .. "开启成功") end end end end AA="模板作者:鹿凛" function SearchWrite(Search, Write, Type) gg.clearResults() gg.setVisible(false) gg.searchNumber(Search[1][1], Type) local count = gg.getResultCount() local result = gg.getResults(count) gg.clearResults() local data = {} local base = Search[1][2] if (count > 0) then for i, v in ipairs(result) do v.isUseful = true end for k=2, #Search do local tmp = {} local offset = Search[k][2] - base local num = Search[k][1] for i, v in ipairs(result) do tmp[#tmp+1] = {} tmp[#tmp].address = v.address + offset tmp[#tmp].flags = v.flags end tmp = gg.getValues(tmp) for i, v in ipairs(tmp) do if ( tostring(v.value) ~= tostring(num) ) then result[i].isUseful = false end end end for i, v in ipairs(result) do if (v.isUseful) then data[#data+1] = v.address end end if (#data > 0) then gg.toast("✨开启成功✨"..#data.."") local t = {} local base = Search[1][2] for i=1, #data do for k, w in ipairs(Write) do offset = w[2] - base t[#t+1] = {} t[#t].address = data[i] + offset t[#t].flags = Type t[#t].value = w[1] if (w[3] == true) then local item = {} item[#item+1] = t[#t] item[#item].freeze = true gg.addListItems(item) end end end gg.setValues(t) else gg.toast("", false) return false end else gg.toast("") return false end end Name = "范围修复" local Nc = 16392 local Lx = 4 local Sz1 = {{1115750516, 0},{1036831949, -176}} local Sz2 = {{1114636288, -176}} HaoGe(Nc, Lx, Sz1, Sz2) gg.toast("开启成功") gg.setRanges(32) gg.setRanges(32) Name='范围' local tb1={{-1.3185920715332031,16,0},{23.0,16,20},{25.0,16,24},{30.5,16,28},} local tb2={{15,16,20},{10,16,24},{15,16,28},} SearchWrite(tb1,tb2,dataType) qmnb = { {["memory"] = 32}, {["name"] = "头部100%"}, {["value"] = 4740038608910024704, ["type"] = 32}, {["lv"] = 4752423507886342144, ["offset"] = 4, ["type"] = 32}, {["lv"] = 1106509824, ["offset"] = 8, ["type"] = 32}, }qmxg = {{["value"] = 350, ["offset"] = 0, ["type"] = 16}, {["value"] = 350, ["offset"] = 4, ["type"] = 16}, {["value"] = 350, ["offset"] = 8, ["type"] = 16}, } xqmnb(qmnb) gg.toast("初始化") gg.setRanges(gg.REGION_ANONYMOUS) gg.searchNumber("15;28;16;26;8;18", gg.TYPE_FLOAT, false, gg.SIGN_EQUAL, 0, -1) gg.setRanges(gg.REGION_CODE_APP) gg.searchNumber("-3.77830899e28;-3.74440972e28;-3.71834013e28;-1.7334334e28", gg.TYPE_FLOAT, false, gg.SIGN_EQUAL, 0, -1, 0) gg.refineNumber("-5.77775931e27", gg.TYPE_FLOAT, false, gg.SIGN_EQUAL, 0, -1) gg.getResults(2) gg.editAll("-560", gg.TYPE_FLOAT) gg.clearResults() gg.setRanges(gg.REGION_ANONYMOUS) gg.refineNumber("-534315007", gg.TYPE_DWORD, false, gg.SIGN_EQUAL, 0, -1, 0) SearchWrite(tb1,tb2,dataType) gg.setRanges(gg.REGION_ANONYMOUS) gg.searchNumber("10.0F;10.0F;10.0F;10.0F;45:193", gg.TYPE_FLOAT, false, gg.SIGN_EQUAL, 0, -1) gg.searchNumber("10", gg.TYPE_FLOAT, false, gg.SIGN_EQUAL, 0, -1) gg.getResults(400) gg.editAll("400", gg.TYPE_FLOAT) DM="枪枪头范围开启成功"--语音播报内容自己改 gg.playMusic("https://fanyi.baidu.com/gettts?lan=zh&text="..DM.."&spd=5&source=wise") end, function() end },{ "美国范围", function() function YF(Search, Write,Neicun,Mingcg,Shuzhiliang) gg.clearResults() gg.setRanges(Neicun) gg.setVisible(false) gg.searchNumber(Search[1][1], Search[1][3]) count = gg.getResultCount() result = gg.getResults(count) gg.clearResults() data = {} base = Search[1][2] if (count > 0) then for i, v in ipairs(result) do v.isUseful = true end for k=2, #Search do tmp = {} offset = Search[k][2] - base num = Search[k][1] for i, v in ipairs(result) do tmp[#tmp+1] = {} tmp[#tmp].address = v.address + offset tmp[#tmp].flags = Search[k][3] end tmp = gg.getValues(tmp) for i, v in ipairs(tmp) do if ( tostring(v.value) ~= tostring(num) ) then result[i].isUseful = false end end end for i, v in ipairs(result) do if (v.isUseful) then data[#data+1] = v.address end end if (#data > 0) then gg.toast(Mingcg.."搜索到"..#data.."条数据") t = {} base = Search[1][2] if Shuzhiliang == "" and Shuzhiliang > 0 and Shuzhiliang < #data then Shuzhiliang=Shuzhiliang else Shuzhiliang=#data end for i=1, Shuzhiliang do for k, w in ipairs(Write) do offset = w[2] - base t[#t+1] = {} t[#t].address = data[i] + offset t[#t].flags = w[3] t[#t].value = w[1] if (w[4] == true) then item = {} item[#item+1] = t[#t] item[#item].freeze = true gg.addListItems(item) end end end gg.setValues(t) gg.toast(Mingcg.."已修改"..#t.."条数据") gg.sleep(400) else gg.toast(Mingcg.."开启失败", false) return false end else gg.toast("搜索失败") return false end end function split(szFullString, szSeparator) local nFindStartIndex = 1 local nSplitIndex = 1 local nSplitArray = {} while true do local nFindLastIndex = string.find (szFullString, szSeparator, nFindStartIndex) if not nFindLastIndex then nSplitArray[nSplitIndex] = string.sub(szFullString, nFindStartIndex, string.len (szFullString)) break end nSplitArray[nSplitIndex] = string.sub (szFullString, nFindStartIndex, nFindLastIndex - 1) nFindStartIndex = nFindLastIndex + string.len (szSeparator) nSplitIndex = nSplitIndex + 1 end return nSplitArray end function xgxc(szpy, qmxg) for x = 1, #(qmxg) do xgpy = szpy + qmxg[x]["offset"] xglx = qmxg[x]["type"] xgsz = qmxg[x]["value"] xgdj = qmxg[x]["freeze"] if xgdj == nil or xgdj == "" then gg.setValues({[1] = {address = xgpy, flags = xglx, value = xgsz}}) else gg.addListItems({[1] = {address = xgpy, flags = xglx, freeze = xgdj, value = xgsz}}) end xgsl = xgsl + 1 xgjg = true end end function xqmnb(qmnb) gg.clearResults() gg.setRanges(qmnb[1]["memory"]) gg.searchNumber(qmnb[3]["value"], qmnb[3]["type"]) if gg.getResultCount() == 0 then gg.toast(qmnb[2]["name"] .. "开启失败") else gg.refineNumber(qmnb[3]["value"], qmnb[3]["type"]) gg.refineNumber(qmnb[3]["value"], qmnb[3]["type"]) gg.refineNumber(qmnb[3]["value"], qmnb[3]["type"]) if gg.getResultCount() == 0 then gg.toast(qmnb[2]["name"] .. "开启失败") else sl = gg.getResults(999999) sz = gg.getResultCount() xgsl = 0 if sz > 999999 then sz = 999999 end for i = 1, sz do pdsz = true for v = 4, #(qmnb) do if pdsz == true then pysz = {} pysz[1] = {} pysz[1].address = sl[i].address + qmnb[v]["offset"] pysz[1].flags = qmnb[v]["type"] szpy = gg.getValues(pysz) pdpd = qmnb[v]["lv"] .. ";" .. szpy[1].value szpd = split(pdpd, ";") tzszpd = szpd[1] pyszpd = szpd[2] if tzszpd == pyszpd then pdjg = true pdsz = true else pdjg = false pdsz = false end end end if pdjg == true then szpy = sl[i].address xgxc(szpy, qmxg) end end if xgjg == true then gg.toast(qmnb[2]["name"] .. "开启成功，一共修改" .. xgsl .. "条数据") else gg.toast(qmnb[2]["name"] .. "未搜索到数据，开启失败") end end end end function SearchWrite(Search, Write, Type) gg.clearResults() gg.setVisible(false) gg.searchNumber(Search[1][1], Type) local count = gg.getResultCount() local result = gg.getResults(count) gg.clearResults() local data = {} local base = Search[1][2] if (count > 0) then for i, v in ipairs(result) do v.isUseful = true end for k=2, #Search do local tmp = {} local offset = Search[k][2] - base local num = Search[k][1] for i, v in ipairs(result) do tmp[#tmp+1] = {} tmp[#tmp].address = v.address + offset tmp[#tmp].flags = v.flags end tmp = gg.getValues(tmp) for i, v in ipairs(tmp) do if ( tostring(v.value) ~= tostring(num) ) then result[i].isUseful = false end end end for i, v in ipairs(result) do if (v.isUseful) then data[#data+1] = v.address end end if (#data > 0) then local t = {} local base = Search[1][2] for i=1, #data do for k, w in ipairs(Write) do offset = w[2] - base t[#t+1] = {} t[#t].address = data[i] + offset t[#t].flags = Type t[#t].value = w[1] if (w[3] == true) then local item = {} item[#item+1] = t[#t] item[#item].freeze = true gg.addListItems(item) end end end gg.setValues(t) gg.toast("开启成功，一共修改"..#t.."条数据") gg.addListItems(t) else gg.toast("未搜索到数据，开启失败", false) return false end else gg.toast("Not Found") return false end end function HaoGe(Nc,Type,Search,Write) gg.clearResults() gg.setRanges(Nc) gg.setVisible(false) gg.searchNumber(Search[1][1],Type) local count=gg.getResultCount() local result=gg.getResults(count) gg.clearResults() local data={} local base=Search[1][2] if(count>0)then for i,v in ipairs(result)do v.isUseful=true end for k=2,#Search do local tPUBGMH={} local offset=Search[k][2]-base local num=Search[k][1] for i,v in ipairs(result)do tPUBGMH[#tPUBGMH+1]={} tPUBGMH[#tPUBGMH].address=v.address+offset tPUBGMH[#tPUBGMH].flags=v.flags end tPUBGMH=gg.getValues(tPUBGMH) for i,v in ipairs(tPUBGMH)do if(tostring(v.value)~=tostring(num))then result[i].isUseful=false end end end for i,v in ipairs(result)do if(v.isUseful)then data[#data+1]=v.address end end if(#data>0)then local t={} local base=Search[1][2] for i=1,#data do for k,w in ipairs(Write)do offset=w[2]-base t[#t+1]={} t[#t].address=data[i]+offset t[#t].flags=Type t[#t].value=w[1] if(w[3]==true)then local item={} item[#item+1]=t[#t] item[#item].freeze=true gg.addListItems(item) end end end gg.setValues(t) gg.sleep(400) else return false end else return false end end Name = "落尘牛逼" local Nc = 16384 local Lx = 16 local Sz1 = {{-1.42781105e28, 0}} local Sz2 = {{0, 0}} HaoGe(Nc, Lx, Sz1, Sz2) qmnb = { {["memory"] = 32}, {["name"] = "包头"}, {["value"] = 4740038608910024704, ["type"] = 32}, {["lv"] = 4752423507886342144, ["offset"] = 4, ["type"] = 32}, {["lv"] = 1106509824, ["offset"] = 8, ["type"] = 32}, } qmxg = { {["value"] = 700, ["offset"] = 4, ["type"] = 16}, {["value"] = 700, ["offset"] = 8, ["type"] = 16}, } xqmnb(qmnb) qmnb = { {["memory"] = 32}, {["name"] = "乱c"}, {["value"] = 4719772412750681353, ["type"] = 32}, {["lv"] = 4742290408720039936, ["offset"] = 4, ["type"] = 32}, } qmxg = { {["value"] = -460, ["offset"] = 8, ["type"] = 16}, } xqmnb(qmnb) qmnb = { {["memory"] = 32}, {["name"] = "落尘特殊防减伤"}, {["value"] = -4417614866316724128, ["type"] = 32}, {["lv"] = 4724276012378061487, ["offset"] = 4, ["type"] = 32}, } qmxg = { {["value"] = -560, ["offset"] = 12, ["type"] = 16}, } xqmnb(qmnb) qmnb = { {["memory"] = 32}, {["name"] = "爆头"}, {["value"] = -4416487068034336677, ["type"] = 32}, {["lv"] = 4724276012378324073, ["offset"] = 4, ["type"] = 32}, } qmxg = { {["value"] = -660, ["offset"] = 8, ["type"] = 16}, {["value"] = -660, ["offset"] = 12, ["type"] = 16}, } xqmnb(qmnb) qmnb = { {["memory"] = 32}, {["name"] = "修复减伤"}, {["value"] = 4771563806291656704, ["type"] = 32}, {["lv"] = 1110966272, ["offset"] = 4, ["type"] = 32}, {["lv"] = 4692750811720056832, ["offset"] = -4, ["type"] = 32},} qmxg = { {["value"] = 999, ["offset"] = 0, ["type"] = 16},} xqmnb(qmnb) gg.setRanges(gg.REGION_CODE_APP) gg.searchNumber("-3.77830899e28;-3.74440972e28;-3.71834013e28;-1.7334334e28", gg.TYPE_FLOAT, false, gg.SIGN_EQUAL, 0, -1, 0) gg.refineNumber("-3.77830899e28", gg.TYPE_FLOAT, false, gg.SIGN_EQUAL, 0, -1, 0) revert = gg.getResults(999999, nil, nil, nil, nil, nil, nil, nil, nil) gg.editAll("0", gg.TYPE_FLOAT) DM="美国范围开启成功"--语音播报内容自己改 gg.playMusic("https://fanyi.baidu.com/gettts?lan=zh&text="..DM.."&spd=5&source=wise") end, function() end },{ "满屏特效", function() gg.setRanges(gg.REGION_ANONYMOUS) gg.searchNumber("10;45", gg.TYPE_FLOAT, false, gg.SIGN_EQUAL, 0, -1) gg.searchNumber("10", gg.TYPE_FLOAT, false, gg.SIGN_EQUAL, 0, -1) gg.getResults(100) gg.editAll("9999", gg.TYPE_FLOAT) gg.clearResults() end, function() end }, }), } } 第七页 = { ['分页名字']="设置", ['侧边图标']="放图片", ['功能配置']={ changan.button( "退出", function() tuichu=1 end), } } changan.menu({ 第一页,--调用上边的分页配置 第二页, 第三页, 第四页, 第五页, 第六页, 第七页, })