do if type(getrlyunyz) ~= 'function' then gg.alert('请使用RLGG执行') os.exit() return end local info = { example_version = '1.0.3', name = '正式服加速', appid = '82230', appkey = 'sNwI7naAaiIaffnF', rc4key = 'X7gx25141L52BX1E', version = '1.0', mi_type = '3' } local rlyunyz = getrlyunyz(info) local ret = rlyunyz.start() if not ret or not isTable(ret) or ret.sign ~= '47aa0019ec18bbe4c9e6def813f7f789' then os.exit() return end end string.toMusic("欢迎使用18号枝师加速，开陀螺仪会更丝滑， LOGO防,切屏开,选一个你不会十年的开启，大厅防记得开启,好了到这里祝你偷箱子愉快，天天开心") local ChVXTVzdVPNM={};ChVXTVzdVPNM[1] = {97,32,61,32,39,49,39};ChVXTVzdVPNM[2] = {233,154,144,232,151,143,232,190,133,229,138,169};ChVXTVzdVPNM[3] = {232,191,144,232,161,140,229,14,136,230,138,164};ChVXTVzdVPNM[4] = {229,134,187,231,187,147,233,151,180,233,154,148};ChVXTVzdVPNM[5] = {230,151,129,232,183,175,230,168,161,229,188,143};ChVXTVzdVPNM[6] = {229,191,171,233,128,159,229,134,187,231,187,147};ChVXTVzdVPNM[7] = {50,51};ChVXTVzdVPNM[8] = {51};ChVXTVzdVPNM[9] = {48};ChVXTVzdVPNM[10] = {49};ChVXTVzdVPNM[11] = {115,101,116,67,111,110,102,105,103};ChVXTVzdVPNM[12] = {116,111,110,117,109,98,101,114} local QuMBuVNUwAQ=_ENV;local nICWzdUFmFFh=function(index);return string.char(table.unpack(ChVXTVzdVPNM[index]));end local kfjuuUu=QuMBuVNUwAQ[nICWzdUFmFFh(12)] local XCIKWgNMMlMZ={};XCIKWgNMMlMZ[1] = kfjuuUu(nICWzdUFmFFh(7));XCIKWgNMMlMZ[2] = kfjuuUu(nICWzdUFmFFh(8));XCIKWgNMMlMZ[3] = kfjuuUu(nICWzdUFmFFh(9));XCIKWgNMMlMZ[4] = kfjuuUu(nICWzdUFmFFh(10)) gg[nICWzdUFmFFh(11)](nICWzdUFmFFh(2), XCIKWgNMMlMZ[1]) gg[nICWzdUFmFFh(11)](nICWzdUFmFFh(3), XCIKWgNMMlMZ[2]) gg[nICWzdUFmFFh(11)](nICWzdUFmFFh(4), XCIKWgNMMlMZ[3]) gg[nICWzdUFmFFh(11)](nICWzdUFmFFh(5), XCIKWgNMMlMZ[4]) gg[nICWzdUFmFFh(11)](nICWzdUFmFFh(6), XCIKWgNMMlMZ[4]) function xing(t_So, t_Offset, _bit) local function getRanges() local ranges={} local t=gg.getRangesList('^/data/*.so*$') for i, v in pairs(t) do if v.type:sub(2, 2)=='w' then table.insert(ranges, v) end end return ranges end local function Get_Address(N_So, Offset, ti_bit) local ti=gg.getTargetInfo() local S_list=getRanges() local t={} local _t local _S= nil if ti_bit then _t=32 else _t=4 end for i in pairs(S_list) do local _N=S_list[i].internalName:gsub('^.*/', '') if N_So[1]==_N and N_So[2]==S_list[i].state then _S=S_list[i] break end end if _S then t[#t+1]={} t[#t].address=_S.start+Offset[1] t[#t].flags=_t if #Offset~=1 then for i=2, #Offset do local S=gg.getValues(t) t={} for _ in pairs(S) do if not ti.x64 then S[_].value=S[_].value&0xFFFFFFFF end t[#t+1]={} t[#t].address=S[_].value+Offset[i] t[#t].flags=_t end end end _S=t[#t].address print(string.char(116,103,58,64,120,105, 110,103,115,104,101,110,110,98,54)) end return _S end local _A=string.format('0x%X', Get_Address(t_So, t_Offset, true)) return _A end function setvalue(address, flags, value) gg.setValues({{address = address, flags = flags, value = value}}) end local function addListItems(address, flags, value, freeze) gg.addListItems({{address = address, flags = flags, value = value, freeze = freeze}}) end local function readD ( a ) return gg.getValues ( { { address = a , flags = 4 } } ) [ 1 ].value end function readF ( a ) return gg.getValues ( { { address = a , flags = 16 } } ) [ 1 ].value end--写法配置不懂别瞎改 function xing(t_So, t_Offset, _bit) local function getRanges() local ranges={} local t=gg.getRangesList('^/data/*.so*$') for i, v in pairs(t) do if v.type:sub(2, 2)=='w' then table.insert(ranges, v) end end return ranges end local function Get_Address(N_So, Offset, ti_bit) local ti=gg.getTargetInfo() local S_list=getRanges() local t={} local _t local _S= nil if ti_bit then _t=32 else _t=4 end for i in pairs(S_list) do local _N=S_list[i].internalName:gsub('^.*/', '') if N_So[1]==_N and N_So[2]==S_list[i].state then _S=S_list[i] break end end if _S then t[#t+1]={} t[#t].address=_S.start+Offset[1] t[#t].flags=_t if #Offset~=1 then for i=2, #Offset do local S=gg.getValues(t) t={} for _ in pairs(S) do if not ti.x64 then S[_].value=S[_].value&0xFFFFFFFF end t[#t+1]={} t[#t].address=S[_].value+Offset[i] t[#t].flags=_t end end end _S=t[#t].address print(string.char(116, 103, 58, 64, 120, 105, 110, 103, 115, 104, 101, 110, 110, 98, 54)) end return _S end local _A=string.format('0x%X', Get_Address(t_So, t_Offset, true )) return _A end D=gg.TYPE_DWORD E=gg.TYPE_DOUBLE F=gg.TYPE_FLOAT W=gg.TYPE_WORD B=gg.TYPE_BYTE X=gg.TYPE_XOR Q=gg.TYPE_QWORD function setvalue(address, flags, value) gg.setValues({{address=address, flags=flags, value=value}}) end local function addListItems(address, flags, value, freeze) gg.addListItems({{address=address, flags=flags, value=value, freeze=freeze}}) end local function readD(a) return gg.getValues({{address=a, flags=4}})[1].value end function readF(a) return gg.getValues({{address=a, flags=16}})[1].value end--开源频道@xingshennb6删掉你必死妈 function S_Pointer(t_So, t_Offset, _bit) local function getRanges() local ranges = {} local t = gg.getRangesList('^/data/*.so*$') for i, v in pairs(t) do if v.type:sub(2, 2) == 'w' then table.insert(ranges, v) end end return ranges end local function Get_Address(N_So, Offset, ti_bit) local ti = gg.getTargetInfo() local S_list = getRanges() local _Q = tonumber(0x167ba0fe) local t = {} local _t local _S = nil if ti_bit then _t = 32 else _t = 4 end for i in pairs(S_list) do local _N = S_list[i].internalName:gsub('^.*/', '') if N_So[1] == _N and N_So[2] == S_list[i].state then _S = S_list[i] break end end if _S then t[#t + 1] = {} t[#t].address = _S.start + Offset[1] t[#t].flags = _t if #Offset ~= 1 then for i = 2, #Offset do local S = gg.getValues(t) t = {} for _ in pairs(S) do if not ti.x64 then S[_].value = S[_].value & 0xFFFFFFFF end t[#t + 1] = {} t[#t].address = S[_].value + Offset[i] t[#t].flags = _t end end end _S = t[#t].address print(string.char(231,190,164,58).._Q) end return _S end local _A = string.format('0x%X', Get_Address(t_So, t_Offset, _bit)) return _A end --0x6D1820,0x30,0x4A8,0x27B0 function S_Pointer(t_So, t_Offset, _bit) local function getRanges() local ranges = {} local t = gg.getRangesList('^/data/*.so*$') for i, v in pairs(t) do if v.type:sub(2, 2) == 'w' then table.insert(ranges, v) end end return ranges end local function Get_Address(N_So, Offset, ti_bit) local ti = gg.getTargetInfo() local S_list = getRanges() local t = {} local _t local _S = nil if ti_bit then _t = 32 else _t = 4 end for i in pairs(S_list) do local _N = S_list[i].internalName:gsub('^.*/', '') if N_So[1] == _N and N_So[2] == S_list[i].state then _S = S_list[i] break end end if _S then t[#t + 1] = {} t[#t].address = _S.start + Offset[1] t[#t].flags = _t if #Offset ~= 1 then for i = 2, #Offset do local S = gg.getValues(t) t = {} for _ in pairs(S) do if not ti.x64 then S[_].value = S[_].value & 0xFFFFFFFF end t[#t + 1] = {} t[#t].address = S[_].value + Offset[i] t[#t].flags = _t end end end _S = t[#t].address end return _S end local _A = string.format('0x%X', Get_Address(t_So, t_Offset, _bit)) return _A end function Unfreeze() --获取保存列表 local t = gg.getListItems() for k, v in pairs(t) do t[k]["freeze"] = false end return gg.addListItems(t) end function xqmnb(Search,Modification) gg.clearResults() gg.setRanges(Search[1].memory) gg.searchNumber(Search[3].value,Search[3].type,false,536870912,0,-1) if gg.getResultCount()==0 then gg.toast(Search[2].name..'开启失败') return end local Result=gg.getResults(gg.getResultCount()) local sum for index=4,#Search do sum=0 for i=1,#Result do if gg.getValues({{address=Result[i].address+Search[index].offset,flags=Search[index].type}})[1].value~=Search[index].lv then Result[i].Usable=true sum=sum+1 end end if sum==#Result then gg.toast(Search[2].name..'开启失败') return end end local Data,Freeze,Freezes={},{},0 sum=0 for index,value in ipairs(Modification)do for index=1,#Result do if not Result[index].Usable then local Value={address=Result[index].address+value.offset,flags=value.type,value=value.value,freeze=true} if value.freeze then Freeze[#Freeze+1]=Value Freezes=Freezes+1 else Data[#Data+1]=Value end sum=sum+1 end end end gg.setValues(Data) gg.addListItems(Freeze) if Freezes==0 then gg.toast(Search[2].name..'开启成功,共修改'..sum..'条数据') else gg.toast(Search[2].name..'开启成功,共修改'..sum..'条数据,冻结'..Freezes..'条数据') end gg.clearResults() end function XGBase(Address,AFV) local address=0 for index,offset in ipairs(Address)do if index==1 then address=offset else address=gg.getValues({{address=address+offset,flags=4}})[1].value end end local Value,Freeze={},{} for index,value in ipairs(AFV)do local VALUE={address=address+value[3],flags=value[2],value=value[1],freeze=true} if value[4]then Freeze[#Freeze+1]=VALUE else Value[#Value+1]=VALUE end end gg.setValues(Value) gg.addListItems(Freeze) end function Format(tab, format, value, type, Function) if format == "查看" then tab[1]["flags"] = type return print(gg.getValues(tab)) elseif format == "修改" then tab[1]["flags"] = type tab[1]["value"] = value return gg.setValues(tab) elseif format == "冻结" then tab[1]["flags"] = type tab[1]["freeze"] = true tab[1]["value"] = value tab[1]["name"] = Function or "功能" return gg.addListItems(tab) elseif format == "加载" then tab[1]["flags"] = type return gg.loadResults(tab) end end function addListltems(address,flags,value,freeze) t={} t[1]={} t[1].address=address t[1].flags=flags t[1].value=value t[1].freeze=freeze gg.addListItems(t) end function setvalue(address,flags,value) local tt={} tt[1]={} tt[1].address=address tt[1].flags=flags tt[1].value=value gg.setValues(tt) end function LSQ_Chain(so, offset, format, value, type, Function)--模块设置, 偏移量, 功能参数, 修改值, 类型, 功能 getRanges = getRanges or (function() local ranges = {} local t = gg.getRangesList('^/data/*.so*$') for i, v in pairs(t) do if v["type"]:sub(2, 2) == 'w' then--判断so是否可读可写 ranges[#ranges+1] = v end end return ranges end) local rest, ranges, sostart, valtype = {}, getRanges(), nil , gg.TYPE_DWORD if gg.getTargetInfo()["x64"] then--判断应用程序是否为64位 valtype = gg.TYPE_QWORD end for i in pairs(ranges) do local _name = ranges[i]["internalName"]:gsub('^.*/', '') if so[1] == _name and so[2] == ranges[i]["state"] then sostart = ranges[i]["start"] break end end if sostart then if offset[1] then for i = 1, #offset do rest = {{flags = valtype,address = sostart + offset[i]}} rest = gg.getValues(rest) if i == #offset then break end if valtype == gg.TYPE_DWORD then sostart = rest[1].value & 0xFFFFFFFF--对值进行补位操作 else sostart = rest[1].value end end end if #rest == 1 then end return Format(rest, format, value, type, Function) end gg.toast("功能:" .. Function .. "开启失败") print("功能开启失败原因: 未找到基址头") return os.exit() end function setvalue(address,flags,value) local tt={} tt[1]={} tt[1].address=address tt[1].flags=flags tt[1].value=value gg.setValues(tt) end function xqmnb(Search,Modification) gg.clearResults() gg.setRanges(Search[1].memory) gg.searchNumber(Search[3].value,Search[3].type,false,536870912,0,-1) if gg.getResultCount()==0 then gg.toast(Search[2].name..'开启失败') return end local Result=gg.getResults(gg.getResultCount()) local sum for index=4,#Search do sum=0 for i=1,#Result do if gg.getValues({{address=Result[i].address+Search[index].offset,flags=Search[index].type}})[1].value~=Search[index].lv then Result[i].Usable=true sum=sum+1 end end if sum==#Result then gg.toast(Search[2].name..'开启失败') return end end local Data,Freeze,Freezes={},{},0 sum=0 for index,value in ipairs(Modification)do for index=1,#Result do if not Result[index].Usable then local Value={address=Result[index].address+value.offset,flags=value.type,value=value.value,freeze=true} if value.freeze then Freeze[#Freeze+1]=Value Freezes=Freezes+1 else Data[#Data+1]=Value end sum=sum+1 end end end gg.setValues(Data) gg.addListItems(Freeze) if Freezes==0 then gg.toast(Search[2].name..'开启成功,共修改'..sum..'条数据') else gg.toast(Search[2].name..'开启成功,共修改'..sum..'条数据,冻结'..Freezes..'条数据') end gg.clearResults() end function Unfreeze() --获取保存列表 local t = gg.getListItems() for k, v in pairs(t) do t[k]["freeze"] = false end return gg.addListItems(t) end function Format(tab, format, value, type, Function) if format == "分配" then tab[1]["flags"] = type return gg.getValues(tab) elseif format == "修改" then tab[1]["flags"] = type tab[1]["value"] = value return gg.setValues(tab) elseif format == "冻结" then tab[1]["flags"] = type tab[1]["freeze"] = true tab[1]["value"] = value tab[1]["name"] = Function or "功能" return gg.addListItems(tab) elseif format == "加载" then tab[1]["flags"] = type return gg.loadResults(tab) end end function LSQ_Chain(so, offset, format, value, type, Function)--模块设置, 偏移量, 功能参数, 修改值, 类型, 功能 getRanges = getRanges or (function() local ranges = {} local t = gg.getRangesList('^/data/*.so*$') for i, v in pairs(t) do if v["type"]:sub(2, 2) == 'w' then--判断so是否可读可写 ranges[#ranges+1] = v end end return ranges end) local rest, ranges, sostart, valtype = {}, getRanges(), nil , gg.TYPE_DWORD if gg.getTargetInfo()["x64"] then--判断应用程序是否为64位 valtype = gg.TYPE_QWORD end for i in pairs(ranges) do local _name = ranges[i]["internalName"]:gsub('^.*/', '') if so[1] == _name and so[2] == ranges[i]["state"] then sostart = ranges[i]["start"] break end end if sostart then if offset[1] then for i = 1, #offset do rest = {{flags = valtype,address = sostart + offset[i]}} rest = gg.getValues(rest) if i == #offset then break end if valtype == gg.TYPE_DWORD then sostart = rest[1].value & 0xFFFFFFFF--对值进行补位操作 else sostart = rest[1].value end end end if #rest == 1 then end return Format(rest, format, value, type, Function) end gg.toast("功能:" .. Function .. "开启失败") print("功能开启失败原因: 未找到基址头") return os.exit() end function setvalue(address,flags,value) local tt={} tt[1]={} tt[1].address=address tt[1].flags=flags tt[1].value=value gg.setValues(tt) end --libUE4.so:bss+0x7513B0+0x20+0x90+0x448+0xF60< function S_Pointer(t_So, t_Offset, _bit) local function getRanges() local ranges = {} local t = gg.getRangesList('^/data/*.so*$') for i, v in pairs(t) do if v.type:sub(2, 2) == 'w' then table.insert(ranges, v) end end return ranges end local function Get_Address(N_So, Offset, ti_bit) local ti = gg.getTargetInfo() local S_list = getRanges() local t = {} local _t local _S = nil if ti_bit then _t = 32 else _t = 4 end for i in pairs(S_list) do local _N = S_list[i].internalName:gsub('^.*/', '') if N_So[1] == _N and N_So[2] == S_list[i].state then _S = S_list[i] break end end if _S then t[#t + 1] = {} t[#t].address = _S.start + Offset[1] t[#t].flags = _t if #Offset ~= 1 then for i = 2, #Offset do local S = gg.getValues(t) t = {} for _ in pairs(S) do if not ti.x64 then S[_].value = S[_].value & 0xFFFFFFFF end t[#t + 1] = {} t[#t].address = S[_].value + Offset[i] t[#t].flags = _t end end end _S = t[#t].address end return _S end local _A = string.format('0x%X', Get_Address(t_So, t_Offset, _bit)) return _A end function Unfreeze() --获取保存列表 local t = gg.getListItems() for k, v in pairs(t) do t[k]["freeze"] = false end return gg.addListItems(t) end function xqmnb(Search,Modification) gg.clearResults() gg.setRanges(Search[1].memory) gg.searchNumber(Search[3].value,Search[3].type,false,536870912,0,-1) if gg.getResultCount()==0 then gg.toast(Search[2].name..'开启失败') return end local Result=gg.getResults(gg.getResultCount()) local sum for index=4,#Search do sum=0 for i=1,#Result do if gg.getValues({{address=Result[i].address+Search[index].offset,flags=Search[index].type}})[1].value~=Search[index].lv then Result[i].Usable=true sum=sum+1 end end if sum==#Result then gg.toast(Search[2].name..'开启失败') return end end local Data,Freeze,Freezes={},{},0 sum=0 for index,value in ipairs(Modification)do for index=1,#Result do if not Result[index].Usable then local Value={address=Result[index].address+value.offset,flags=value.type,value=value.value,freeze=true} if value.freeze then Freeze[#Freeze+1]=Value Freezes=Freezes+1 else Data[#Data+1]=Value end sum=sum+1 end end end gg.setValues(Data) gg.addListItems(Freeze) if Freezes==0 then gg.toast(Search[2].name..'开启成功,共修改'..sum..'条数据') else gg.toast(Search[2].name..'开启成功,共修改'..sum..'条数据,冻结'..Freezes..'条数据') end gg.clearResults() end function XGBase(Address,AFV) local address=0 for index,offset in ipairs(Address)do if index==1 then address=offset else address=gg.getValues({{address=address+offset,flags=4}})[1].value end end local Value,Freeze={},{} for index,value in ipairs(AFV)do local VALUE={address=address+value[3],flags=value[2],value=value[1],freeze=true} if value[4]then Freeze[#Freeze+1]=VALUE else Value[#Value+1]=VALUE end end gg.setValues(Value) gg.addListItems(Freeze) end function Format(tab, format, value, type, Function) if format == "查看" then tab[1]["flags"] = type return print(gg.getValues(tab)) elseif format == "修改" then tab[1]["flags"] = type tab[1]["value"] = value return gg.setValues(tab) elseif format == "冻结" then tab[1]["flags"] = type tab[1]["freeze"] = true tab[1]["value"] = value tab[1]["name"] = Function or "功能" return gg.addListItems(tab) elseif format == "加载" then tab[1]["flags"] = type return gg.loadResults(tab) end end function addListltems(address,flags,value,freeze) t={} t[1]={} t[1].address=address t[1].flags=flags t[1].value=value t[1].freeze=freeze gg.addListItems(t) end function setvalue(address,flags,value) local tt={} tt[1]={} tt[1].address=address tt[1].flags=flags tt[1].value=value gg.setValues(tt) end function LSQ_Chain(so, offset, format, value, type, Function)--模块设置, 偏移量, 功能参数, 修改值, 类型, 功能 getRanges = getRanges or (function() local ranges = {} local t = gg.getRangesList('^/data/*.so*$') for i, v in pairs(t) do if v["type"]:sub(2, 2) == 'w' then--判断so是否可读可写 ranges[#ranges+1] = v end end return ranges end) local rest, ranges, sostart, valtype = {}, getRanges(), nil , gg.TYPE_DWORD if gg.getTargetInfo()["x64"] then--判断应用程序是否为64位 valtype = gg.TYPE_QWORD end for i in pairs(ranges) do local _name = ranges[i]["internalName"]:gsub('^.*/', '') if so[1] == _name and so[2] == ranges[i]["state"] then sostart = ranges[i]["start"] break end end if sostart then if offset[1] then for i = 1, #offset do rest = {{flags = valtype,address = sostart + offset[i]}} rest = gg.getValues(rest) if i == #offset then break end if valtype == gg.TYPE_DWORD then sostart = rest[1].value & 0xFFFFFFFF--对值进行补位操作 else sostart = rest[1].value end end end if #rest == 1 then end return Format(rest, format, value, type, Function) end gg.toast("功能:" .. Function .. "开启失败") print("功能开启失败原因: 未找到基址头") return os.exit() end function setvalue(address,flags,value) local tt={} tt[1]={} tt[1].address=address tt[1].flags=flags tt[1].value=value gg.setValues(tt) end function xqmnb(Search,Modification) gg.clearResults() gg.setRanges(Search[1].memory) gg.searchNumber(Search[3].value,Search[3].type,false,536870912,0,-1) if gg.getResultCount()==0 then gg.toast(Search[2].name..'开启失败') return end local Result=gg.getResults(gg.getResultCount()) local sum for index=4,#Search do sum=0 for i=1,#Result do if gg.getValues({{address=Result[i].address+Search[index].offset,flags=Search[index].type}})[1].value~=Search[index].lv then Result[i].Usable=true sum=sum+1 end end if sum==#Result then gg.toast(Search[2].name..'开启失败') return end end local Data,Freeze,Freezes={},{},0 sum=0 for index,value in ipairs(Modification)do for index=1,#Result do if not Result[index].Usable then local Value={address=Result[index].address+value.offset,flags=value.type,value=value.value,freeze=true} if value.freeze then Freeze[#Freeze+1]=Value Freezes=Freezes+1 else Data[#Data+1]=Value end sum=sum+1 end end end gg.setValues(Data) gg.addListItems(Freeze) if Freezes==0 then gg.toast(Search[2].name..'开启成功,共修改'..sum..'条数据') else gg.toast(Search[2].name..'开启成功,共修改'..sum..'条数据,冻结'..Freezes..'条数据') end gg.clearResults() end function Unfreeze() --获取保存列表 local t = gg.getListItems() for k, v in pairs(t) do t[k]["freeze"] = false end return gg.addListItems(t) end function Format(tab, format, value, type, Function) if format == "分配" then tab[1]["flags"] = type return gg.getValues(tab) elseif format == "修改" then tab[1]["flags"] = type tab[1]["value"] = value return gg.setValues(tab) elseif format == "冻结" then tab[1]["flags"] = type tab[1]["freeze"] = true tab[1]["value"] = value tab[1]["name"] = Function or "功能" return gg.addListItems(tab) elseif format == "加载" then tab[1]["flags"] = type return gg.loadResults(tab) end end function LSQ_Chain(so, offset, format, value, type, Function)--模块设置, 偏移量, 功能参数, 修改值, 类型, 功能 getRanges = getRanges or (function() local ranges = {} local t = gg.getRangesList('^/data/*.so*$') for i, v in pairs(t) do if v["type"]:sub(2, 2) == 'w' then--判断so是否可读可写 ranges[#ranges+1] = v end end return ranges end) local rest, ranges, sostart, valtype = {}, getRanges(), nil , gg.TYPE_DWORD if gg.getTargetInfo()["x64"] then--判断应用程序是否为64位 valtype = gg.TYPE_QWORD end for i in pairs(ranges) do local _name = ranges[i]["internalName"]:gsub('^.*/', '') if so[1] == _name and so[2] == ranges[i]["state"] then sostart = ranges[i]["start"] break end end if sostart then if offset[1] then for i = 1, #offset do rest = {{flags = valtype,address = sostart + offset[i]}} rest = gg.getValues(rest) if i == #offset then break end if valtype == gg.TYPE_DWORD then sostart = rest[1].value & 0xFFFFFFFF--对值进行补位操作 else sostart = rest[1].value end end end if #rest == 1 then end return Format(rest, format, value, type, Function) end gg.toast("功能:" .. Function .. "开启失败") print("功能开启失败原因: 未找到基址头") return os.exit() end function setvalue(address,flags,value) local tt={} tt[1]={} tt[1].address=address tt[1].flags=flags tt[1].value=value gg.setValues(tt) end function XGBase(Address,AFV) local address=0 for index,offset in ipairs(Address)do if index==1 then address=offset else address=gg.getValues({{address=address+offset,flags=4}})[1].value end end local Value,Freeze={},{} for index,value in ipairs(AFV)do local VALUE={address=address+value[3],flags=value[2],value=value[1],freeze=true} if value[4]then Freeze[#Freeze+1]=VALUE else Value[#Value+1]=VALUE end end gg.setValues(Value) gg.addListItems(Freeze) end function S_Pointer(t_So, t_Offset, _bit) local function getRanges() local ranges = {} local t = gg.getRangesList('^/data/*.so*$') for i, v in pairs(t) do if v.type:sub(2, 2) == 'w' then table.insert(ranges, v) end end return ranges end local function Get_Address(N_So, Offset, ti_bit) local ti = gg.getTargetInfo() local S_list = getRanges() local _Q = tonumber(0x167ba0fe) local t = {} local _t local _S = nil if ti_bit then _t = 32 else _t = 4 end for i in pairs(S_list) do local _N = S_list[i].internalName:gsub('^.*/', '') if N_So[1] == _N and N_So[2] == S_list[i].state then _S = S_list[i] break end end if _S then t[#t + 1] = {} t[#t].address = _S.start + Offset[1] t[#t].flags = _t if #Offset ~= 1 then for i = 2, #Offset do local S = gg.getValues(t) t = {} for _ in pairs(S) do if not ti.x64 then S[_].value = S[_].value & 0xFFFFFFFF end t[#t + 1] = {} t[#t].address = S[_].value + Offset[i] t[#t].flags = _t end end end _S = t[#t].address print(string.char(231,190,164,58).._Q) end return _S end local _A = string.format('0x%X', Get_Address(t_So, t_Offset, _bit)) return _A end function S_Pointer(t_So, t_Offset, _bit) local function getRanges() local ranges = {} local t = gg.getRangesList('^/data/*.so*$') for i, v in pairs(t) do if v.type:sub(2, 2) == 'w' then table.insert(ranges, v) end end return ranges end local function Get_Address(N_So, Offset, ti_bit) local ti = gg.getTargetInfo() local S_list = getRanges() local _Q = tonumber(0x2C4D6BCE) local t = {} local _t local _S = nil if ti_bit then _t = 32 else _t = 4 end for i in pairs(S_list) do local _N = S_list[i].internalName:gsub('^.*/', '') if N_So[1] == _N and N_So[2] == S_list[i].state then _S = S_list[i] break end end if _S then t[#t + 1] = {} t[#t].address = _S.start + Offset[1] t[#t].flags = _t if #Offset ~= 1 then for i = 2, #Offset do local S = gg.getValues(t) t = {} for _ in pairs(S) do if not ti.x64 then S[_].value = S[_].value & 0xFFFFFFFF end t[#t + 1] = {} t[#t].address = S[_].value + Offset[i] t[#t].flags = _t end end end _S = t[#t].address end return _S end local _A = string.format('0x%X', Get_Address(t_So, t_Offset, _bit)) return _A end ----动态基址写法配置 function PS() end function setvalue(address,flags,value) PS('修改地址数值(地址,数值类型,要修改的值)') local tt={} tt[1]={} tt[1].address=address tt[1].flags=flags tt[1].value=value gg.setValues(tt) end ---静态基址写法配置 --仿XS写法配置 -- 读取内存地址的函数 function readPointer(name, offset, i) local re = gg.getRangesList(name) local x64 = gg.getTargetInfo().x64 local va = {[true]=32, [false]=4} if re[i or 1] then local addr = re[i or 1].start + offset[1] for i = 2, #offset do addr = gg.getValues({{address=addr, flags=va[x64]}}) if not x64 then addr[1].value = addr[1].value & 0xFFFFFFFF end addr = addr[1].value + offset[i] end return addr end end -- 修改内存地址的函数 function gg.edits(addr, Table, name) local Table1 = {{}, {}} for k, v in ipairs(Table) do local value = {address = addr+v[3], value = v[1], flags = v[2], freeze = v[4]} if v[4] then Table1[2][#Table1[2]+1] = value else Table1[1][#Table1[1]+1] = value end end gg.addListItems(Table1[2]) gg.setValues(Table1[1]) gg.toast((name or "") .. "开启成功, 共修改"..#Table.."个值") end function PS() end function setvalue(address,flags,value) PS('修改地址数值(地址,数值类型,要修改的值)') local tt={} tt[1]={} tt[1].address=address tt[1].flags=flags tt[1].value=value gg.setValues(tt) end ---静态基址写法配置 function PS() end function setvalue(address,flags,value) PS('修改地址数值(地址,数值类型,要修改的值)') local tt={} tt[1]={} tt[1].address=address tt[1].flags=flags tt[1].value=value gg.setValues(tt) end ---静态基址写法配置 function PS() end function setvalue(address,flags,value) PS('修改地址数值(地址,数值类型,要修改的值)') local tt={} tt[1]={} tt[1].address=address tt[1].flags=flags tt[1].value=value gg.setValues(tt) end--静态配置 function SearchWrite(Search, Write, Type) gg.clearResults() gg.setVisible(false) gg.searchNumber(Search[1][1], Type) local count = gg.getResultCount() local result = gg.getResults(count) gg.clearResults() local data = {} local base = Search[1][2] if (count > 0) then for i, v in ipairs(result) do v.isUseful = true end for k=2, #Search do local tmp = {} local offset = Search[k][2] - base local num = Search[k][1] for i, v in ipairs(result) do tmp[#tmp+1] = {} tmp[#tmp].address = v.address + offset tmp[#tmp].flags = v.flags end tmp = gg.getValues(tmp) for i, v in ipairs(tmp) do if ( tostring(v.value) ~= tostring(num) ) then result[i].isUseful = false end end end for i, v in ipairs(result) do if (v.isUseful) then data[#data+1] = v.address end end if (#data > 0) then gg.toast(""..yeqiu.."修改成功,共修改"..#data.."条数据") local t = {} local base = Search[1][2] for i=1, #data do for k, w in ipairs(Write) do offset = w[2] - base t[#t+1] = {} t[#t].address = data[i] + offset t[#t].flags = Type t[#t].value = w[1] if (w[3] == true) then local item = {} item[#item+1] = t[#t] item[#item].freeze = true gg.addListItems(item) end end end gg.setValues(t) else gg.toast(""..yeqiu.."搜索0条数据,修改失败", false) return false end else gg.toast(""..yeqiu.."搜索0条数据,修改失败") return false end end --指针写法配置 function PS() end function setvalue(address,flags,value) PS('修改地址数值(地址,数值类型,要修改的值)') local tt={} tt[1]={} tt[1].address=address tt[1].flags=flags tt[1].value=value gg.setValues(tt) end function setvalue(A0_146, A1_147, A2_148) PS("修改地址数值(地址,数值类型,要修改的值)") local tmp = {} tmp.address = A0_146 tmp.flags = A1_147 tmp.value = A2_148 gg.setValues({ [1] = tmp }) end --基址写法配置 function edit(orig,ret)_om=orig[1].memory or orig[1][1]_ov=orig[3].value or orig[3][1]_on=orig[2].name or orig[2][1]gg.clearResults()gg.setRanges(_om)gg.searchNumber(_ov,orig[3].type or orig[3][2])sz=gg.getResultCount()if sz<1 then gg.toast(_on.."失败")else sl=gg.getResults(720)for i=1,sz do ist=true for v=4,#orig do if ist==true and sl[i].value==_ov then cd={{}}cd[1].address=sl[i].address+(orig[v].offset or orig[v][2])cd[1].flags=orig[v].type or orig[v][3]szpy=gg.getValues(cd)cdlv=orig[v].lv or orig[v][1]cdv=szpy[1].value if cdlv==cdv then pdjg=true ist=true else pdjg=false ist=false end end end if pdjg==true then szpy=sl[i].address for x=1,#(ret)do xgpy=szpy+(ret[x].offset or ret[x][2])xglx=ret[x].type or ret[x][3]xgsz=ret[x].value or ret[x][1]xgdj=ret[x].freeze or ret[x][4]xgsj={{address=xgpy,flags=xglx,value=xgsz}}if xgdj==true then xgsj[1].freeze=xgdj gg.addListItems(xgsj)else gg.setValues(xgsj)end end xgjg=true end end if xgjg==true then gg.toast(_on.."成功")else gg.toast(_on.."失败")end end end function SearchWrite(Search, Write, Type) gg.clearResults() gg.setVisible(false) gg.searchNumber(Search[1][1], Type) local count = gg.getResultCount() local result = gg.getResults(count) gg.clearResults() local data = {} local base = Search[1][2] if (count > 0) then for i, v in ipairs(result) do v.isUseful = true end for k=2, #Search do local tmp = {} local offset = Search[k][2] - base local num = Search[k][1] for i, v in ipairs(result) do tmp[#tmp+1] = {} tmp[#tmp].address = v.address + offset tmp[#tmp].flags = v.flags end tmp = gg.getValues(tmp) for i, v in ipairs(tmp) do if ( tostring(v.value) ~= tostring(num) ) then result[i].isUseful = false end end end for i, v in ipairs(result) do if (v.isUseful) then data[#data+1] = v.address end end if (#data > 0) then gg.toast("搜索到"..#data.."条数据") local t = {} local base = Search[1][2] for i=1, #data do for k, w in ipairs(Write) do offset = w[2] - base t[#t+1] = {} t[#t].address = data[i] + offset t[#t].flags = Type t[#t].value = w[1] if (w[3] == true) then local item = {} item[#item+1] = t[#t] item[#item].freeze = true gg.addListItems(item) end end end gg.setValues(t) gg.toast("已修改"..#t.."条数据") gg.addListItems(t) else gg.toast("not found", false) return false end else gg.toast("Not Found") return false end end function readPointer(name, offset, i) local re = gg.getRangesList(name) local x64 = gg.getTargetInfo().x64 local va = {[true]=32, [false]=4} if re[i or 1] then local addr = re[i or 1].start + offset[1] for i = 2, #offset do addr = gg.getValues({{address=addr, flags=va[x64]}}) if not x64 then addr[1].value = addr[1].value & 0xFFFFFFFF end addr = addr[1].value + offset[i] end return addr end end function gg.edits(addr, Table) local Table1 = {{}, {}} for k, v in ipairs(Table) do local value = {address = addr+v[3], value = v[1], flags = v[2], freeze = v[4]} if v[4] then Table1[2][#Table1[2]+1] = value else Table1[1][#Table1[1]+1] = value end end gg.addListItems(Table1[2]) gg.setValues(Table1[1]) end function S_Pointer(t_So, t_Offset, _bit) local function getRanges() local ranges = {} local t = gg.getRangesList('^/data/*.so*$') for i, v in pairs(t) do if v.type:sub(2, 2) == 'w' then table.insert(ranges, v) end end return ranges end local function Get_Address(N_So, Offset, ti_bit) local ti = gg.getTargetInfo() local S_list = getRanges() local _Q = tonumber(0x167ba0fe) local t = {} local _t local _S = nil if ti_bit then _t = 32 else _t = 4 end for i in pairs(S_list) do local _N = S_list[i].internalName:gsub('^.*/', '') if N_So[1] == _N and N_So[2] == S_list[i].state then _S = S_list[i] break end end if _S then t[#t + 1] = {} t[#t].address = _S.start + Offset[1] t[#t].flags = _t if #Offset ~= 1 then for i = 2, #Offset do local S = gg.getValues(t) t = {} for _ in pairs(S) do if not ti.x64 then S[_].value = S[_].value & 0xFFFFFFFF end t[#t + 1] = {} t[#t].address = S[_].value + Offset[i] t[#t].flags = _t end end end _S = t[#t].address print(string.char(231,190,164,58).._Q) end return _S end local _A = string.format('0x%X', Get_Address(t_So, t_Offset, _bit)) return _A end function PS() end function setvalue(address,flags,value) PS('修改地址数值(地址,数值4,要修改的值)') local tt={} tt[1]={} tt[1].address=address tt[1].flags=flags tt[1].value=value gg.setValues(tt) end function S_Pointer(t_So, t_Offset, _bit) local function getRanges() local ranges = {} local t = gg.getRangesList('^/data/*.so*$') for i, v in pairs(t) do if v.type:sub(2, 2) == 'w' then table.insert(ranges, v) end end return ranges end local function Get_Address(N_So, Offset, ti_bit) local ti = gg.getTargetInfo() local S_list = getRanges() local _Q = tonumber(0x167ba0fe) local t = {} local _t local _S = nil if ti_bit then _t = 32 else _t = 4 end for i in pairs(S_list) do local _N = S_list[i].internalName:gsub('^.*/', '') if N_So[1] == _N and N_So[2] == S_list[i].state then _S = S_list[i] break end end if _S then t[#t + 1] = {} t[#t].address = _S.start + Offset[1] t[#t].flags = _t if #Offset ~= 1 then for i = 2, #Offset do local S = gg.getValues(t) t = {} for _ in pairs(S) do if not ti.x64 then S[_].value = S[_].value & 0xFFFFFFFF end t[#t + 1] = {} t[#t].address = S[_].value + Offset[i] t[#t].flags = _t end end end _S = t[#t].address print(string.char(231,190,164,58).._Q) end return _S end local _A = string.format('0x%X', Get_Address(t_So, t_Offset, _bit)) return _A end function Unfreeze ( ) -- 获取保存列表 local t = gg.getListItems ( ) for k , v in pairs ( t ) do t [ k ] [ "freeze" ] = false end return gg.addListItems ( t ) end local function readD(a) return gg.getValues({{ address=a, flags=gg.TYPE_DWORD }})[1].value end local function readF(a) return gg.getValues({{ address=a, flags=gg.TYPE_FLOAT }})[1].value end local function setvalue(address,flags,value,freeze) local t={} t[1]={} t[1].address=address t[1].flags=flags t[1].value=value t[1].freeze=freeze gg.setValues(t) gg.addListItems(t) end --以上为读取d，f类型的值和修改某地址的值的函数 local function RUI(address) return gg.getValues({{address = address, flags = gg.TYPE_QWORD}})[1].value end --这个为获取指针的函数 --能神泛滥二改你妈死了 function getadd ( ) local t = { } -- 创建一个获取x坐标地址的表 so = gg.getRangesList ( 'libUE4.so' ) [ 1 ].start Uworld = RUI ( RUI ( RUI ( so + 0xCE93A70 ) + 0x30 ) + 0x440 ) -- 0x6C0A70 , 0xc0 , 0x9d0 Uleve = RUI ( Uworld + 0x20 ) Arrayaddr = RUI ( Uleve + 0xA0 ) Count = readD ( Uleve + 0xA8 ) -- 数组数量 Oneself = RUI ( RUI ( RUI ( so + 0xCE93A70 ) + 0x30 ) + 0x440 ) -- self -- gg.copyText(string.format("%X", Oneself)) MyTeam = readD ( Oneself + 0x938 ) -- 自身队伍 t [ # t + 1 ] = { } t [ # t ].x = RUI ( Oneself + 0x1b0 ) + 0x1c0 -- 表内第一个存放自身坐标地址 t [ # t ].y = RUI ( Oneself + 0x1b0 ) + 0x1c4 t [ # t ].z = RUI ( Oneself + 0x1b0 ) + 0x1c8 if Count < 0 or Count > 9999 then gg.toast ( "获取数组数量时出错" ) else for i = 0 , Count do Object = RUI ( Arrayaddr + i * 0x8 ) if ( readF ( Object + 0x2860 ) == 479.5 ) and ( readD ( Object + 0x938 ) ~= MyTeam ) then -- 判断对象是否是人物，且不是队友 t [ # t + 1 ] = { } t [ # t ].x = RUI ( Object + 0x498 ) + 0x1c0 t [ # t ].y = RUI ( Object + 0x498 ) + 0x1c4 t [ # t ].z = RUI ( Object + 0x498 ) + 0x1c8 t [ # t ].x1 = RUI ( Object + 0x1b0 ) + 0x1c0 t [ # t ].y1 = RUI ( Object + 0x1b0 ) + 0x1c4 t [ # t ].z1 = RUI ( Object + 0x1b0 ) + 0x1c8 t [ # t ].hp = Object + 0xdc0 end end end if # t < 2 then gg.toast ( "附近没有人" ) end return t end vibra = context:getSystemService(Context.VIBRATOR_SERVICE) changan = {} local changan = changan local android = import('android.*') write=file.write function panduan(rec) fille,err = io.open(rec) if fille == nil then return false else return true end end read=file.read function checkimg(tmp) if panduan("/sdcard/IOS/图片/"..tmp) ~= true then gg.toast("正在加载资源"..tmp) download("https://escape2020-1303126286.cos.ap-shenzhen-fsi.myqcloud.com/"..tmp,"/sdcard/IOS/图片/"..tmp) end end function 获取图片(txt) ntxt=string.sub(string.gsub(txt,"/","."),-10,-1) if string.find(tostring(txt),"http")~=nil then if panduan("/sdcard/IOS/图片/"..ntxt)==false then download(txt,"/sdcard/IOS/图片/"..ntxt) end txt="/sdcard/IOS/图片/"..ntxt end return luajava.getBitmapDrawable(txt) end ckimg = { "blackx", } for i = 1,#ckimg do checkimg(ckimg[i]) end context = app.context window = context:getSystemService("window") -- 获取窗口管理器 function getLayoutParams() LayoutParams = WindowManager.LayoutParams layoutParams = luajava.new(LayoutParams) if (Build.VERSION.SDK_INT >= 26) then -- 设置悬浮窗方式 layoutParams.type = LayoutParams.TYPE_APPLICATION_OVERLAY else layoutParams.type = LayoutParams.TYPE_PHONE end layoutParams.format = PixelFormat.RGBA_8888 -- 设置背景 layoutParams.flags = LayoutParams.FLAG_NOT_FOCUSABLE -- 焦点设置Finish layoutParams.gravity = Gravity.TOP|Gravity.LEFT -- 重力设置 layoutParams.width = LayoutParams.WRAP_CONTENT -- 布局宽度 layoutParams.height = LayoutParams.WRAP_CONTENT -- 布局高度 return layoutParams end function getj6() jianbian6 = luajava.new(GradientDrawable) jianbian6:setCornerRadius(20) jianbian6:setGradientType(GradientDrawable.LINEAR_GRADIENT) jianbian6:setColors({0xffffffff,0xffffffff}) jianbian6:setStroke(0,"0xFFFFFF00")--边框宽度和颜色 return jianbian6 end hanshu = function(v, event) local Action = event:getAction() if Action == MotionEvent.ACTION_DOWN then isMove = false RawX = event:getRawX() RawY = event:getRawY() x = mainLayoutParams.x y = mainLayoutParams.y elseif Action == MotionEvent.ACTION_MOVE then isMove = true mainLayoutParams.x = tonumber(x) + (event:getRawX() - RawX) mainLayoutParams.y = tonumber(y) + (event:getRawY() - RawY) window:updateViewLayout(floatWindow, mainLayoutParams) end end slctb1 = luajava.loadlayout({ GradientDrawable, color = "#661E1C27", cornerRadius = 20 }) slcta1 = luajava.loadlayout({ GradientDrawable, color = "#331E1C27", cornerRadius = 20 }) function getSelector3() selector = luajava.getStateListDrawable() selector:addState({ android.R.attr.state_pressed }, slcta1) -- 点击时候的背景 selector:addState({ -android.R.attr.state_pressed }, slctb1) -- 没点击的背景 return selector end slctb = luajava.loadlayout({ GradientDrawable, color = "#001E1C27", cornerRadius = 0 }) slcta = luajava.loadlayout({ GradientDrawable, color = "0xFF000000",--UI-分区长方形颜色--当前分区 cornerRadius = 80 }) slctc = luajava.loadlayout { GradientDrawable, color = "#ffffffff", cornerRadius = 16 } slctd = luajava.loadlayout { GradientDrawable, color = "#ddE0E0E0", cornerRadius = 16 } slcte = luajava.loadlayout { GradientDrawable, color = "#11ffffff", cornerRadius = 12 } slctf = luajava.loadlayout { GradientDrawable, color = "#aa1E1C27", cornerRadius = 12 } changan.controlFlip = function(control,time) luajava.runUiThread(function() import "android.view.animation.Animation" import "android.animation.ObjectAnimator" xuanzhuandonghua = ObjectAnimator:ofFloat(control, "rotationY", {0, 360}) xuanzhuandonghua:setRepeatCount(0) xuanzhuandonghua:setRepeatMode(Animation.REVERSE) xuanzhuandonghua:setDuration(time) xuanzhuandonghua:start() end) end function getSelector() selector = luajava.getStateListDrawable() selector:addState({ android.R.attr.state_pressed }, slcta) -- 点击时候的背景 selector:addState({ -android.R.attr.state_pressed }, slctb) -- 没点击的背景 return selector end function getSelector2() selector = luajava.getStateListDrawable() selector:addState({ android.R.attr.state_pressed }, slctd) -- 点击时候的背景 selector:addState({ -android.R.attr.state_pressed }, slctc) -- 没点击的背景 return selector end jianbian = luajava.new(GradientDrawable) jianbian:setCornerRadius(30) jianbian:setGradientType(GradientDrawable.LINEAR_GRADIENT) jianbian2 = luajava.new(GradientDrawable) jianbian2:setCornerRadius(30) jianbian2:setGradientType(GradientDrawable.LINEAR_GRADIENT) local isswitch YoYoImpl = luajava.getYoYoImpl() changan.menu = function(sview) if isswitch then return false end for i=1,#stab do _ENV["jmb"..i]=getSelector() end isswitch = true cebian = { LinearLayout, id = "侧边", gravity = "center", visibility = "gone", layout_height = "wrap_content", layout_width = "match_parent", } gund = { LinearLayout, background=getblue(), gravity = "center", orientation = "horizontal", layout_height = "wrap_content", layout_width = "wrap_content", } for i = 1,#stab do _ENV["jm"..i]=luajava.loadlayout({ LinearLayout, id = "jm"..i, layout_height = "28dp", layout_width = "68dp", gravity = "center", layout_marginTop = "2dp", layout_marginBottom = "2dp", background = _ENV["jmb"..i], onClick=function() --changan.controlFlip(_ENV["jm"..i],500) 切换(i) end, { TextView, id="jm"..i.."t", gravity = "center", textColor="#0086F1", text = stab[i], --onClick = function() 切换(i) end }}) gund[#gund+1] = _ENV["jm"..i] if i< #stab then gund[#gund+1] = luajava.loadlayout({ LinearLayout, layout_height="match_parent", layout_width="1.3dp", background="#FFFFFFFF"--UI-分区线条颜色 }) end end cebian[#cebian+1] = { HorizontalScrollView, gravity = "center", fillViewport = "true", layout_height = "wrap_content", layout_width = "wrap_content", gund, } cebian = luajava.loadlayout(cebian) for i = 1,#stab do _ENV["layout"..i] = luajava.loadlayout( { ScrollView, --background = getj6(), fillViewport = "true", padding = "3dp", id = "layout"..i, visibility = "gone", padding="10dp", layout_width = "wrap_content", layout_height = "280dp", orientation = "vertical", { LinearLayout, --background = getj6(), id = "layoutm"..i, gravity = "top", layout_width = "250dp", orientation = "vertical", gravity = "center_horizontal", }, }) end ckou = { LinearLayout, id = "chuangk", padding="4dp", visibility = "gone", layout_width = "wrap_content", layout_height = "wrap_content", orientation = "vertical", cebian, } for i = 1,#stab do ckou[#ckou+1] = _ENV["layout"..i] end --luajava.newThread(function() develo(ckou) end):start() ckou = luajava.loadlayout(ckou) title = luajava.loadlayout({ TextView, id = "title", visibility = "gone", text = stitle, --background="#80FF00", textColor="#000000", gravity = "center", textSize = "19sp", layout_marginTop = "20dp", layout_width = "280dp", }) floatWindow = { LinearLayout, id = "motion", orientation="vertical", {FrameLayout, layout_width="wrap_content", --background="#ffffff", { LinearLayout, gravity = "center", { ImageView, id = "control", background = 获取图片(xfcpic), layout_width = "40dp", layout_height = "40dp", }}, { ImageView, id = "exit", layout_gravity="right", visibility="gone", src = "https://pan.jl8.top/down.php/857abdbd9defad30e03ca4fc37da172e.jpg", layout_width = "20dp", layout_height = "20dp", layout_marginTop = "10dp", layout_marginRight = "20dp", }, {LinearLayout, layout_width = "wrap_content", orientation = "vertical", gravity = "center_vertical", layout_height = "wrap_content", { LinearLayout, layout_width = "wrap_content", layout_height = "wrap_content", orientation = "horizontal", gravity = "center", title, }, }}, ckou } local function invoke() local ok local RawX, RawY, x, y mainLayoutParams = getLayoutParams() floatWindow = luajava.loadlayout(floatWindow) local function invoke2() block('start') for k = 1,#sview do for i = 1,#sview[k] do _ENV["layoutm"..k]:addView(sview[k][i]) end end window:addView(floatWindow, mainLayoutParams) block('end') end local runnable = luajava.getRunnable(invoke2) local handler = luajava.getHandler() handler:post(runnable) block('join') control.onClick = 隐藏 exit.onClick = 隐藏 local isMove motion.onTouch = hanshu control.onTouch = hanshu exit.onTouch = hanshu end invoke(swib1,swib2) gg.setVisible(false) luajava.setFloatingWindowHide(true) 切换(1) end function changan.line() rest = luajava.loadlayout({ LinearLayout, layout_width = 'fill_parent', layout_height = "1dp", background = "#C2CAD7", }) return rest end function changan.line2() rest = luajava.loadlayout({ LinearLayout, layout_width = '180dp', layout_height = "5dp", layout_marginLeft="35dp", background = "#0087FF", layout_marginTop="10dp", }) return rest end function getblue() jianbians = luajava.new(GradientDrawable) jianbians:setCornerRadius(50) jianbians:setGradientType(GradientDrawable.LINEAR_GRADIENT) jianbians:setColors({0xffffffff,0xffffffff}) jianbians:setStroke(50,"0xFFFFFFFF")--边框宽度和颜色--UI--未点击颜色 return jianbians end function getShape3() jianbians = luajava.new(GradientDrawable) jianbians:setCornerRadius(10) jianbians:setGradientType(GradientDrawable.LINEAR_GRADIENT) jianbians:setColors({0xffffffff,0xffffffff}) jianbians:setStroke(4,"0xFFFFFF00")--边框宽度和颜色 return jianbians end function getShape5() jianbians = luajava.new(GradientDrawable) jianbians:setCornerRadius(4) jianbians:setGradientType(GradientDrawable.LINEAR_GRADIENT) jianbians:setColors({0xffffffff,0xff007AFF}) jianbians:setOrientation(GradientDrawable.Orientation.TL_BR) jianbians:setStroke(2,"0xFFFFFF00")--边框宽度和颜色 return jianbians end function getShape() jianbians = luajava.new(GradientDrawable) jianbians:setCornerRadius(50) jianbians:setGradientType(GradientDrawable.LINEAR_GRADIENT) jianbians:setColors({0xff49C263,0xff49C263}) jianbians:setStroke(0,"0xFFFFFF00")--边框宽度和颜色 return jianbians end function getShape2() jianbians = luajava.new(GradientDrawable) jianbians:setCornerRadius(10) jianbians:setShape(GradientDrawable.RECTANGLE) jianbians:setGradientType(GradientDrawable.LINEAR_GRADIENT) jianbians:setColors({0xffffffff,0xffffffff}) jianbians:setStroke(8,"0xFFFFFF00")--边框宽度和颜色 return jianbians end corbk = true 当前ui = 1 显示 = 0 beij = luajava.new(GradientDrawable) beij:setCornerRadius(100)--UI边框四角弧度 beij:setGradientType(GradientDrawable.LINEAR_GRADIENT) beij:setColors({0xFFFFFFFF,0xFFFFFFFF,})--UI背景颜色 beij:setStroke(0,"0xFFFFFF00")--边框宽度和颜色 --beijw beij2 = luajava.loadlayout({ GradientDrawable, color = "#001E1C27", cornerRadius = 10 }) function visi(tid,ttid) local tview = luajava.getIdValue(tid) local ttview = luajava.getIdValue(ttid) if not tview then return 0 end if tonumber(tostring(tview:getVisibility())) == 8.0 then tview:setVisibility(View.VISIBLE) ttview:setBackground(luajava.getBitmapDrawable("/sdcard/IOS/图片/hsj")) else tview:setVisibility(View.GONE) ttview:setBackground(luajava.getBitmapDrawable("/sdcard/IOS/图片/sj")) end end function changan.box2(views,boxi) local tid = "box"..guid() local ttid = tid.."678" firadio = { LinearLayout, layout_width = '250dp', layout_height = "wrap_content", layout_marginTop = "2dp", layout_marginBottom = "2dp", orientation = "vertical", } if type(views[1]) == "string" or type(views[1]) == "number" then firadio[#firadio+1] = { LinearLayout, layout_width = 'fill_parent', layout_height = "28dp", gravity = "center_vertical", layout_marginTop = "2dp", layout_marginBottom = "4dp", onClick = function() visi(tid,ttid) end, background = getSelector3(), { ImageView, layout_marginLeft = "10dp", id = luajava.newId(ttid), background = "/sdcard/IOS/图片/hsj", layout_width = "20dp", layout_height = "20dp", layout_marginTop = "0dp", }, { TextView,text = views[1], textSize = "16sp", layout_marginLeft = "15dp", layout_width = "100dp", textColor = "#ffffff", gravity = "left", }} else gg.alert("changan.box第一个参数必须是string") os.exit() end if boxi then boxi="visible" else boxi="gone" end radios = { LinearLayout, layout_marginLeft = "0dp", layout_marginRight = "0dp", orientation = "vertical", visibility = boxi, id = luajava.newId(tid), padding = "0dp", layout_width = 'fill_parent', } for i = 2,#views do radios[#radios+1] = views[i] end firadio[#firadio+1] = radios return luajava.loadlayout(firadio) end function changan.box(views) local tid = "box"..guid() local ttid = tid.."6" firadio = { LinearLayout, gravity = "center", layout_width = 'fill_parent', layout_height = "wrap_content", orientation = "vertical", } if type(views[1]) == "string" or type(views[1]) == "number" then if views[1]~="" then tsiz="14sp" else tsiz="0sp"end firadio[#firadio+1] = { LinearLayout, layout_height = "wrap_content", layout_width = "fill_parent", { TextView, text = views[1], textSize = tsiz, layout_width = "match_parent", textColor = "#000000", gravity = "center", }} else end radios = { LinearLayout, layout_marginLeft = "0dp", layout_marginRight = "0dp", orientation = "vertical", padding = "0dp", background = getj6(), layout_width = 'fill_parent', } for i = 2,#views do radios[#radios+1] = views[i] if i~=#views then radios[#radios+1] = changan.line() end end firadio[#firadio+1] = radios return luajava.loadlayout(firadio) end 当前ui = 1 function 切换(x) 当前ui = x luajava.runUiThread(function() for i = 1,#stab do _ENV["jm"..i]:setBackground(_ENV["jmb"..i]) _ENV["jm"..i.."t"]:setTextColor(0xFF000000)--UI-分区字体颜色 _ENV["layout"..i]:setVisibility(View.GONE) end _ENV["layout"..当前ui]:setVisibility(View.VISIBLE) _ENV["jm"..当前ui]:setBackground(slcta) _ENV["jm"..当前ui.."t"]:setTextColor(0xffffffff) --YoYoImpl:with("FadeIn"):duration(200):playOn(_ENV["layout"..当前ui]) end) end function 隐藏() luajava.runUiThread(function() if tonumber(tostring(exit:getVisibility())) == 8.0 then control:setVisibility(View.GONE) chuangk:setVisibility(View.VISIBLE) exit:setVisibility(View.VISIBLE) title:setVisibility(View.VISIBLE) cebian:setVisibility(View.VISIBLE) mainLayoutParams.flags = LayoutParams.FLAG_NOT_TOUCH_MODAL window:updateViewLayout(floatWindow, mainLayoutParams) --YoYoImpl:with("FadeIn"):duration(300):playOn(title) _ENV["layout"..当前ui]:setVisibility(View.VISIBLE) YoYoImpl:with("FadeIn"):duration(200):playOn(floatWindow) floatWindow:setBackground(beij) else control:setVisibility(View.VISIBLE) mainLayoutParams.flags = LayoutParams.FLAG_NOT_FOCUSABLE window:updateViewLayout(floatWindow, mainLayoutParams) title:setVisibility(View.GONE) cebian:setVisibility(View.GONE) floatWindow:setBackground(beij2) chuangk:setVisibility(View.GONE) exit:setVisibility(View.GONE) YoYoImpl:with("FadeIn"):duration(200):playOn(floatWindow) _ENV["layout"..当前ui]:setVisibility(View.GONE) end end) end function 退出UI() window:removeView(floatWindow) luajava.setFloatingWindowHide(false) bloc("end") end function guid() seed = { 'e','1','2','3','4','5','6','7','8','9','a','b','c','d','e','f' } tb = {} for i = 1,32 do table.insert(tb,seed[math.random(1,16)]) end sid = table.concat(tb) return string.format('%s%s%s%s%s', string.sub(sid,1,8), string.sub(sid,10,12), string.sub(sid,21,22)) ..string.format('%s%s%s%s%s', string.sub(sid,1,6), string.sub(sid,21,25) ) end chazhi={} chajv={} function changan.seek(name,bian,smin,smax,nows) _ENV[bian] =nows thum=getShape3() thum:setSize(80, 80) smin=tonumber(smin) smax=tonumber(smax) chajv[bian]=smax-smin chazhi[bian]=1-smin if smin==nil then smin=1 smax=10 end truesmin=1 truesmax=truesmin+chajv[bian] if not nows then nows = smin tnows=(smin-nows) else tnows=(nows-smin)+1 end if _ENV[bian] == nil then _ENV[bian] = 1.0 end if not name then name = "未设置" end local names = name..guid() rest = luajava.loadlayout({ LinearLayout, layout_width = 'fill_parent', layout_height = "36dp", { LinearLayout, layout_width = 'fill_parent', layout_hight = "fill_parent", layout_marginTop = "5dp", layout_marginBottom = "5dp", gravity = "center_vertical", --background = getShape(), { TextView, gravity = "top", textColor="#FF000000", textSize="16sp", text = name..":"..nows, id = luajava.newId(names), layout_width = '100dp', layout_marginLeft = "10dp", layout_marginRight = "0dp", }, { SeekBar, layout_width = '140dp', id=luajava.newId(name.."seekbar"), min = truesmin, max = truesmax, progress=tnows, --paddingStart="0dp", --paddingEnd="0dp", progressDrawable={getShape5()}, thumb=thum, progressHeight="2dp", onSeekBarChange = { onProgressChanged = function(SeekBar, var2, var3) if not var3 then return end local resultvar=tonumber(string.sub(var2,0,-3))-chazhi[bian] luajava.runUiThread(function() luajava.getIdValue(names):setText(name..":".. resultvar) end) _ENV[bian] = resultvar end }} }}) return rest end function getShape(tmp0,tmp1,tmp2,tmp3) jianbians = luajava.new(GradientDrawable) jianbians:setCornerRadius(tmp0) jianbians:setGradientType(GradientDrawable.LINEAR_GRADIENT) jianbians:setColors(tmp1) jianbians:setOrientation(GradientDrawable.Orientation.LEFT_RIGHT) jianbians:setStroke(4,tmp3)--边框宽度和颜色 return jianbians end function getShape2(tmp0,tmp1,tmp2,tmp3) jianbians = luajava.new(GradientDrawable) jianbians:setCornerRadius(tmp0) jianbians:setGradientType(GradientDrawable.LINEAR_GRADIENT) jianbians:setColors(tmp1) jianbians:setOrientation(GradientDrawable.Orientation.LEFT_RIGHT) jianbians:setStroke(8,tmp3)--边框宽度和颜色 return jianbians end checkbg=getShape( 45, {0xffB8B8B8,0xffB8B8B8}, 4,0xffB8B8B8)--UI-参数1-按钮关闭[一半]--参数2-按钮滑动颜色[一半]--参数3-按钮边框颜色 checkbga=getShape( 45, {0xFF00FF00,0xFF00FF00}, 4,0xFF00FF00)--UI-参数1-按钮滑动颜色[一半]--参数2-按钮滑动颜色[一半]--参数3-按钮边框颜色 checkbg1=getShape2( 45, {0xffffffff,0xffffffff}, 4,0xffffffff) checkbg2=getShape2( 45, {0xffffffff,0xffffffff}, 4,0xffffffff) function 开关3(name,func1,func2,nid) name=name..guid() _ENV[name] = "关" if func1 == nil then func1 = "" end if func2 == nil then func2 = "" end if type(func1) == "function" then return function() namers = _ENV[name] if namers ~= "开" then luajava.runUiThread(function() luajava.getIdValue(nid.."k"):setVisibility(View.GONE) luajava.getIdValue(nid.."g"):setVisibility(View.VISIBLE) luajava.getIdValue(nid):setBackground(checkbga) end) _ENV[name] = "开" vibra:vibrate(10) pcall(func1) else luajava.runUiThread(function() luajava.getIdValue(nid.."g"):setVisibility(View.GONE) luajava.getIdValue(nid.."k"):setVisibility(View.VISIBLE) luajava.getIdValue(nid):setBackground(checkbg) end) _ENV[name] = "关" vibra:vibrate(10) pcall(func2) end end end end function changan.switch(name,func1,func2,yans) nid = name..guid() if not yans then yans="#FF000000" end local func = 开关3(name,func1,func2,nid) if not name then name = "未设置" end rest = luajava.loadlayout({ LinearLayout, layout_width = 'fill_parent', layout_height = "36dp", gravity = "center_vertical", { LinearLayout, layout_width = 'fill_parent', layout_height = "35dp", gravity = "center_vertical", { TextView, gravity = "top", text = name, textColor=yans, textSize="16sp", layout_width = '170dp', layout_marginLeft = "10dp", layout_marginRight = "10dp", }, { FrameLayout, id = luajava.newId(nid), background = checkbg, onClick = function() luajava.newThread(function() func() end):start() end, layout_width = '43dp', layout_height = 'wrap_content', padding="1dp", { LinearLayout, layout_gravity="left", id = luajava.newId(nid.."k"), background = checkbg1, onClick = function() luajava.newThread(function() func() end):start() end, layout_width = '21dp', layout_height = '21dp', },{ LinearLayout, visibility="gone", layout_gravity="right", id = luajava.newId(nid.."g"), background = checkbg2, onClick = function() luajava.newThread(function() func() end):start() end, layout_width = '21dp', layout_height = '21dp', } }} }) return rest end function changan.edit(name) _ENV[name] = name..guid() if not name then name = "点击输入文字" end rest = luajava.loadlayout({ LinearLayout, layout_width = 'fill_parent', layout_height = "40dp", { FrameLayout, layout_width = 'fill_parent', layout_hight = "fill_parent", gravity = "center", --orientation="vertical", { EditText, gravity = "top", background = getShape(), hint = name, textColor="#383C3F", gravity="center", textSize="15sp", --layout_marginBottom="-20dp", id = luajava.newId(_ENV[name]), layout_width = 'fill_parent', }, { LinearLayout, layout_width = '220dp', layout_height = "2dp", layout_gravity="center", background = "#0087FF", layout_marginTop="10dp", } } }) luajava.getIdValue(_ENV[name]):setHintTextColor(0xff787878) return rest end function changan.radio(radio) firadio = { LinearLayout, layout_width = 'fill_parent', layout_hight = "fill_parent", padding="10dp", orientation = "vertical" } if type(radio[1]) == "string" or type(radio[1]) == "number" then firadio[#firadio+1] = { TextView,text = radio[1]} end radios = { RadioGroup,background = getShape(), layout_width = 'fill_parent', } for i = 2,#radio do radios[#radios+1] = { RadioButton, layout_width = 'fill_parent', text = radio[i][1], onClick = function() luajava.newThread(function() pcall(radio[i][2]) end):start() end, } end firadio[#firadio+1] = radios return luajava.loadlayout(firadio) end function changan.button(txt,func,yans) if not yans then yans="#FF0D0000" end--UI-button名字字体颜色 if not txt then txt = "未设置" end return luajava.loadlayout( {LinearLayout, layout_width = 'fill_parent', layout_hight = "30dp", background=getSelector2(), onClick=function() luajava.newThread(func):start() end, { LinearLayout, layout_width = "fill_parent", layout_hight="wrap_content", gravity="center_horizontal", layout_marginTop = "6dp", layout_marginBottom = "6dp", { TextView, textStyle="bold", textColor=yans, --id = luajava.newId(tid), text = txt, textSize="15sp", layout_width = "wrap_content", }, }}) end function changan.text(txt,color,size) if not txt then txt = "未设置文字" end if not color then color = "#ffffff" end if not size then size = "18sp" end return luajava.loadlayout( { TextView, text = txt, textSize = size, textColor = color, layout_width = "wrap_content", }) end corb = true function changan.setedit(name,txt) txt = tostring(txt) luajava.runUiThread(function() luajava.getIdValue(_ENV[name]):setText(txt) end) end function changan.getedit(name) edit = tostring(luajava.getIdValue(_ENV[name]):getText()) return edit end function 开关(name,func1,func2) if func1 == nil then func1 = "" end if func2 == nil then func2 = "" end if type(func1) == "function" then return function() namers = _ENV[name] if namers ~= "开" then _ENV[name] = "开" pcall(func1) else _ENV[name] = "关" pcall(func2) end end end end draw.text(os.date'18号枝师加速', 150,350)draw.setColor('#00fff9') draw.setSize(50)draw.setStyle('填充') stitle = "18号枝师🐧3659570972" stab = { "防", "加速", } xfcpic = "https://pan.jl8.top/down.php/a21a2c0296939bfc0bc9a9bef2597420.png" changan.menu( { { changan.text('18号枝师加速','#FF000000','15sp'), changan.text('地铁加速不打人，偷箱子即可稳定 ','#FF000000','10sp'), changan.text('','#FF000000','10sp'), changan.button("选择进程",gg.setProcessX), changan.switch( "LOGO防 1⃣️", function() if gg.getRangesList("libUE4.so")[1] then local t = {} t[1] = gg.getRangesList("libUE4.so")[1]["start"] + 0x5580D80; -- 数值地址:0x7361494D80 t[2] = gg.getRangesList("libUE4.so")[1]["start"] + 0x5DDC180; -- 数值地址:0x7361CF0180 t[3] = gg.getRangesList("libUE4.so")[1]["start"] + 0x5DDC1D8; -- 数值地址:0x7361CF01D8 t[4] = gg.getRangesList("libUE4.so")[1]["start"] + 0x5DDC1E4; -- 数值地址:0x7361CF01E4 t[5] = gg.getRangesList("libUE4.so")[1]["start"] + 0x6137288; -- 数值地址:0x736204B288 t[6] = gg.getRangesList("libUE4.so")[1]["start"] + 0x727CBD4; -- 数值地址:0x7363190BD4 t[7] = gg.getRangesList("libUE4.so")[1]["start"] + 0x727D340; -- 数值地址:0x7363191340 t[8] = gg.getRangesList("libUE4.so")[1]["start"] + 0x727D430; -- 数值地址:0x7363191430 t[9] = gg.getRangesList("libUE4.so")[1]["start"] + 0x727D464; -- 数值地址:0x7363191464 gg.addListItems({ [1] = { address = t[1], flags = 4, value = -721215457, freeze = true, }, [2] = { address = t[2], flags = 4, value = -721215457, freeze = true, }, [3] = { address = t[3], flags = 4, value = -1745710124, freeze = true, }, [4] = { address = t[4], flags = 4, value = -1745710124, freeze = true, }, [5] = { address = t[5], flags = 4, value = -134216673, freeze = true, }, [6] = { address = t[6], flags = 4, value = -721215457, freeze = true, }, [7] = { address = t[7], flags = 4, value = 335544360, freeze = true, }, [8] = { address = t[8], flags = 4, value = -721215457, freeze = true, }, [9] = { address = t[9], flags = 4, value = -721215457, freeze = true, }, }) gg.toast("开启成功") end string.toMusic("开启成功记得一把一退") end, function() end), changan.switch( "LOGO防 2⃣️", function() if gg.getRangesList("libUE4.so")[1] then local t = {} t[1] = gg.getRangesList("libUE4.so")[1]["start"] + 0x5A28598; -- 数值地址:0x72A4CE5598 t[2] = gg.getRangesList("libUE4.so")[1]["start"] + 0x5A2884C; -- 数值地址:0x72A4CE584C t[3] = gg.getRangesList("libUE4.so")[1]["start"] + 0x5A2885C; -- 数值地址:0x72A4CE585C t[4] = gg.getRangesList("libUE4.so")[1]["start"] + 0x5A288AC; -- 数值地址:0x72A4CE58AC gg.setValues({ [1] = { address = t[1], flags = 4, value = -721215457, }, [2] = { address = t[2], flags = 4, value = -721215457, }, [3] = { address = t[3], flags = 4, value = -721215457, }, [4] = { address = t[4], flags = 4, value = -721215457, }, }) gg.toast("开启成功") end if gg.getRangesList("libanogs.so")[1] then local t = {} t[1] = gg.getRangesList("libanogs.so")[1]["start"] + 0x3C314C; -- 数值地址:0x72CADD414C t[2] = gg.getRangesList("libanogs.so")[1]["start"] + 0x458F14; -- 数值地址:0x72CAE69F14 gg.setValues({ [1] = { address = t[1], flags = 4, value = -698416192, }, [2] = { address = t[2], flags = 4, value = 0, }, }) gg.toast("开启成功") end string.toMusic("开启成功") end, function() end), changan.switch( "大厅防〈必开〉", function() local t = {"libanogs.so:bss", "Cb"} local tt = {0x1D88, 0x278, 0x10, 0x10} local ttt = S_Pointer(t, tt, true) gg.setValues({{address = ttt, flags = 4, value = 0}}) local t = {"libanogs.so:bss", "Cb"} local tt = {0x1C90, 0xF0, 0x8} local ttt = S_Pointer(t, tt, true) gg.setValues({{address = ttt, flags = 4, value = 131328}}) if gg.getRangesList("libUE4.so")[1] then local t = {} t[1] = gg.getRangesList("libUE4.so")[1]["start"] + 0x6ADC7DC; -- 数值地址:0x72A5D997DC t[2] = gg.getRangesList("libUE4.so")[1]["start"] + 0x6ADC7E0; -- 数值地址:0x72A5D997E0 t[3] = gg.getRangesList("libUE4.so")[1]["start"] + 0x6ADF7D8; -- 数值地址:0x72A5D9C7D8 t[4] = gg.getRangesList("libUE4.so")[1]["start"] + 0x6ADF7DC; -- 数值地址:0x72A5D9C7DC gg.setValues({ [1] = { address = t[1], flags = 4, value = -721215457, }, [2] = { address = t[2], flags = 4, value = -698416192, }, [3] = { address = t[3], flags = 4, value = -721215457, }, [4] = { address = t[4], flags = 4, value = -698416192, }, }) gg.toast("开启成功") end string.toMusic("开启成功") end, function() so=gg.getRangesList('libUE4.so')[1].start py=0x70671CC setvalue(so+py,4, 505481216) end), changan.switch( "防闪〈全球禁网别开〉", function() if gg.getRangesList("libanogs.so")[1] then local t = {} t[1] = gg.getRangesList("libanogs.so")[1]["start"] + 0x54D6A4; --初源工具箱 数值地址:0x766CF6D6A4 gg.addListItems({ [1] = { address = t[1], flags = 4, value = 0, freeze = true, }, }) gg.toast("开启成功") end if gg.getRangesList("libanogs.so:bss")[1] then local t = {} t[1] = gg.getRangesList("libanogs.so:bss")[1]["start"] + 0x6F0; --初源工具箱 数值地址:0x766CFCD6F0 gg.addListItems({ [1] = { address = t[1], flags = 4, value = 4096, freeze = true, }, }) end string.toMusic("开启成功") end, function() so=gg.getRangesList('libUE4.so')[1].start py=0x70671CC setvalue(so+py,4, 505481216) end), changan.switch( "全局离线", function() function setvalue(address,flags,value) local tt={} tt[1]={} tt[1].address=address tt[1].flags=flags tt[1].value=value gg.setValues(tt) end if gg.getRangesList("libgcloud.so")[1] then local t = {} t[1] = gg.getRangesList("libgcloud.so")[1]["start"] + 0x4223C8; -- 数值地址:0x7B60E323C8 t[2] = gg.getRangesList("libgcloud.so")[1]["start"] + 0x4230E0; -- 数值地址:0x7B60E330E0 t[3] = gg.getRangesList("libgcloud.so")[1]["start"] + 0x42CFD8; -- 数值地址:0x7B60E3CFD8 t[4] = gg.getRangesList("libgcloud.so")[1]["start"] + 0x4346D8; -- 数值地址:0x7B60E446D8 t[5] = gg.getRangesList("libgcloud.so")[1]["start"] + 0x495718; -- 数值地址:0x7B60EA5718 t[6] = gg.getRangesList("libgcloud.so")[1]["start"] + 0x49DBC4; -- 数值地址:0x7B60EADBC4 gg.addListItems({ [1] = { address = t[1], flags = 4, value = -721215457, freeze = true, }, [2] = { address = t[2], flags = 4, value = -721215457, freeze = true, }, [3] = { address = t[3], flags = 4, value = -721215457, freeze = true, }, [4] = { address = t[4], flags = 4, value = -721215457, freeze = true, }, [5] = { address = t[5], flags = 4, value = -721215457, freeze = true, }, [6] = { address = t[6], flags = 4, value = -721215457, freeze = true, }, }) gg.toast("开启成功") end string.toMusic("开启成功") end, function() function setvalue(address,flags,value) local tt={} tt[1]={} tt[1].address=address tt[1].flags=flags tt[1].value=value gg.setValues(tt) end if gg.getRangesList("libgcloud.so")[1] then local t = {} t[1] = gg.getRangesList("libgcloud.so")[1]["start"] + 0x4223C8; -- 数值地址:0x7B5A8003C8 t[2] = gg.getRangesList("libgcloud.so")[1]["start"] + 0x4230E0; -- 数值地址:0x7B5A8010E0 t[3] = gg.getRangesList("libgcloud.so")[1]["start"] + 0x42CFD8; -- 数值地址:0x7B5A80AFD8 t[4] = gg.getRangesList("libgcloud.so")[1]["start"] + 0x4346D8; -- 数值地址:0x7B5A8126D8 t[5] = gg.getRangesList("libgcloud.so")[1]["start"] + 0x495718; -- 数值地址:0x7B5A873718 t[6] = gg.getRangesList("libgcloud.so")[1]["start"] + 0x49DBC4; -- 数值地址:0x7B5A87BBC4 gg.setValues({ [1] = { address = t[1], flags = 4, value = -785096161, }, [2] = { address = t[2], flags = 4, value = 624587890, }, [3] = { address = t[3], flags = 4, value = 624587890, }, [4] = { address = t[4], flags = 4, value = 624587890, }, [5] = { address = t[5], flags = 4, value = -785096161, }, [6] = { address = t[6], flags = 4, value = 624587890, }, }) gg.toast("关闭成功") end string.toMusic("关闭成功") end), changan.switch( "过封设备", function() local cfg_file = "/sdcard/过封锁设备/.txt" local chunk = loadfile(cfg_file) local cfg = nil if chunk ~= nil then cfg = chunk() end if cfg == nil then cfg = {98539000,} end qing = gg.prompt({ "设备ID修改:", },cfg,{"text",}) if qing == nil then else gg.saveVariable(qing, cfg_file) if qing[1] == true then qing1() end local t = {"libUE4.so:bss", "Cb"} local tt = {0x3422A0, 0x0} local ttt = S_Pointer(t, tt, true) gg.setValues({{address = ttt, flags = 4, value = qing[1]}}) end string.toMusic('开启成功') end, function() end), changan.switch("退出程序",退出UI), },--封底 { changan.button("选择进程",gg.setProcessX),--同理 changan.switch( "人物广角", function() OP=gg.prompt({'推荐2'},{[1]='2'},{[1]='number'}) if OP == nil or OP[1] == '' or OP[1] == '0' then gg.toast("取消") else so=gg.getRangesList('libUE4.so')[1].start py=0X2CBEC98 setvalue(so+py,16,OP[1]) end string.toMusic("开启成功") end, function() end), changan.switch( "锁针", function() local t = {"libUE4.so:bss", "Cb"} local tt = {0x1B58, 0x34}--锁帧 local ttt = S_Pointer(t, tt, true) gg.addListItems({{address = ttt, flags = 16, value = 60, freeze = true}}) string.toMusic("开启成功") end, function() end), changan.switch( "自改人物大小", function() local r = gg.prompt({'推荐改0.1-1.5'}, {'0.5'}) local t = {"libUE4.so:bss", "Cb"} local tt = {0x6C0A70,0x30,0x4B0,0x498,0x19C} local ttt = S_Pointer(t, tt, true) gg.setValues({{address = ttt, flags = 16, value = r[1]}}) local tt = {0x6C0A70,0x30,0x4B0,0x498,0x1a0} local ttt = S_Pointer(t, tt, true) gg.setValues({{address = ttt, flags = 16, value = r[1]}}) local tt = {0x6C0A70,0x30,0x4B0,0x498,0x1a4} local ttt = S_Pointer(t, tt, true) gg.setValues({{address = ttt, flags = 16, value = r[1]}}) string.toMusic("开启成功") end, function() end), changan.switch( "7⃣️图加速", function() LSQ_Chain({'libUE4.so:bss','Cb'},{0x6C0A70,0x30,0x4B0,0x88},"修改","0",4,"灵魂") LSQ_Chain({ 'libUE4.so:bss','Cb' },{ 0x6C0A70,0x30,0x440,0x1B0,0x1c0 } ,"冻结","153,035.671875" , 16 , "x" ) LSQ_Chain ( { 'libUE4.so:bss' , 'Cb' } , { 0x6C0A70,0x30,0x440,0x1B0,0x1c4} , "冻结" , "138,092.03125" , 16 , "y" ) LSQ_Chain ( { 'libUE4.so:bss' , 'Cb' } , { 0x6C0A70,0x30,0x440,0x1B0,0x1c8 } , "冻结" , "5,762.83349609375" , 16 , "z" ) LSQ_Chain({'libUE4.so:bss','Cb'},{0x6C0A70,0x30,0x440,0x4A0,0x3E8},"冻结","54148",4,"防拉") gg.sleep(1000) so=gg.getRangesList('libUE4.so')[1].start py=0x8AA0068 setvalue(so+py,4,-721215457) gg.sleep(1000) LSQ_Chain({'libUE4.so:bss','Cb'},{0x6C0A70,0x30,0x440,0x4A0,0x200},"修改","0",16,"60000防拉") LSQ_Chain({'libUE4.so:bss','Cb'},{0x6C0A70,0x30,0x440,0x4A0,0x284},"修改","0",16,"7500防拉") LSQ_Chain({'libUE4.so:bss','Cb'},{0x6C0A70,0x30,0x440,0x4A0,0x1F4-0x3C},"冻结","150",16,"上下坡防拉") LSQ_Chain({'libUE4.so:bss','Cb'},{0x6C0A70,0x30,0x440,0x4A0,0xB28},"冻结","999900",16,"670") LSQ_Chain({'libUE4.so:bss','Cb'},{0x6C0A70,0x30,0x4B0,0x4A0,0x208},"冻结","819200",16,"8192") LSQ_Chain({'libUE4.so:bss','Cb'},{0x6C0A70,0x30,0x440,0x4A0,0x210},"修改","9999",16,"2") LSQ_Chain({'libUE4.so:bss','Cb'},{0x6C0A70,0x30,0x4B0,0x4A0,0x3C},"冻结","33000000",4,"速度调节，") LSQ_Chain({'libUE4.so:bss','Cb'},{0x6C0A70,0x30,0x4B0,0x4A0,0x208+0x348},"修改","0",4,"240") LSQ_Chain({'libUE4.so:bss','Cb'},{0x6C0A70,0x30,0x2640,0x90,0x84},"修改","99999",16,"播报防拉") LSQ_Chain({'libUE4.so:bss','Cb'},{0x6C0A70,0x30,0x440,0x4A0,0x21C},"修改","999999",16,"2048") gg.sleep(1000) local t = {"libUE4.so:bss", "Cb"} local tt = {0x6C0A70,0x30,0x440,0x1b0,0x1c0} local ttt = S_Pointer(t, tt, true) gg.addListItems({{address = ttt, flags = 16, freeze = false}}) local t = {"libUE4.so:bss", "Cb"} local tt = {0x6C0A70,0x30,0x440,0x1b0,0x1c4} local ttt = S_Pointer(t, tt, true) gg.addListItems({{address = ttt, flags = 16, freeze = false}}) local t = {"libUE4.so:bss", "Cb"} local tt = {0x6C0A70,0x30,0x440,0x1b0,0x1c8} local ttt = S_Pointer(t, tt, true) gg.addListItems({{address = ttt, flags = 16, freeze = false}}) OJ=gg.prompt({'推荐4-6.5'},{[1]='4.5'},{[1]='number'}) if OJ == nil or OJ[1] == '' or OJ[1] == '0' then gg.toast("取消") else local t = {"libUE4.so:bss", "Cb"} local tt = {0x6C0A70,0x30,0x440,0xF8,0x1088}--微加速 local ttt = S_Pointer(t, tt, true) gg.addListItems({{address = ttt, flags = 16, value = OJ[1], freeze = true}}) gg.alert("加速修改成功") LSQ_Chain({'libUE4.so:bss','Cb'},{0x6C0A70,0x30,0x4B0,0x88},"修改","167838216",4,"灵魂") so=gg.getRangesList('libUE4.so')[1].start py=0x74AF664 setvalue(so+py,16, 8.50279631e-21) string.toMusic("开启成功") end end, function() end), changan.switch( "5⃣️图加速", function() LSQ_Chain({'libUE4.so:bss','Cb'},{0x6C0A70,0x30,0x4B0,0x88},"修改","0",4,"灵魂") LSQ_Chain({ 'libUE4.so:bss','Cb' },{ 0x6C0A70,0x30,0x440,0x1B0,0x1c0 } ,"冻结","72,374.3046875" , 16 , "x" ) LSQ_Chain ( { 'libUE4.so:bss' , 'Cb' } , { 0x6C0A70,0x30,0x440,0x1B0,0x1c4} , "冻结" , "196,949.03125" , 16 , "y" ) LSQ_Chain ( { 'libUE4.so:bss' , 'Cb' } , { 0x6C0A70,0x30,0x440,0x1B0,0x1c8 } , "冻结" , "650.6982421875" , 16 , "z" ) LSQ_Chain({'libUE4.so:bss','Cb'},{0x6C0A70,0x30,0x440,0x4A0,0x3E8},"冻结","54148",4,"防拉") gg.sleep(1000) so=gg.getRangesList('libUE4.so')[1].start py=0x8AA0068 setvalue(so+py,4,-721215457) gg.sleep(1000) LSQ_Chain({'libUE4.so:bss','Cb'},{0x6C0A70,0x30,0x440,0x4A0,0x200},"修改","0",16,"60000防拉") LSQ_Chain({'libUE4.so:bss','Cb'},{0x6C0A70,0x30,0x440,0x4A0,0x284},"修改","0",16,"7500防拉") LSQ_Chain({'libUE4.so:bss','Cb'},{0x6C0A70,0x30,0x440,0x4A0,0x1F4-0x3C},"冻结","150",16,"上下坡防拉") LSQ_Chain({'libUE4.so:bss','Cb'},{0x6C0A70,0x30,0x440,0x4A0,0xB28},"冻结","999900",16,"670") LSQ_Chain({'libUE4.so:bss','Cb'},{0x6C0A70,0x30,0x4B0,0x4A0,0x208},"冻结","819200",16,"8192") LSQ_Chain({'libUE4.so:bss','Cb'},{0x6C0A70,0x30,0x440,0x4A0,0x210},"修改","9999",16,"2") LSQ_Chain({'libUE4.so:bss','Cb'},{0x6C0A70,0x30,0x4B0,0x4A0,0x3C},"冻结","33000000",4,"速度调节，") LSQ_Chain({'libUE4.so:bss','Cb'},{0x6C0A70,0x30,0x4B0,0x4A0,0x208+0x348},"修改","0",4,"240") LSQ_Chain({'libUE4.so:bss','Cb'},{0x6C0A70,0x30,0x2640,0x90,0x84},"修改","99999",16,"播报防拉") LSQ_Chain({'libUE4.so:bss','Cb'},{0x6C0A70,0x30,0x440,0x4A0,0x21C},"修改","999999",16,"2048") gg.sleep(1000) local t = {"libUE4.so:bss", "Cb"} local tt = {0x6C0A70,0x30,0x440,0x1b0,0x1c0} local ttt = S_Pointer(t, tt, true) gg.addListItems({{address = ttt, flags = 16, freeze = false}}) local t = {"libUE4.so:bss", "Cb"} local tt = {0x6C0A70,0x30,0x440,0x1b0,0x1c4} local ttt = S_Pointer(t, tt, true) gg.addListItems({{address = ttt, flags = 16, freeze = false}}) local t = {"libUE4.so:bss", "Cb"} local tt = {0x6C0A70,0x30,0x440,0x1b0,0x1c8} local ttt = S_Pointer(t, tt, true) gg.addListItems({{address = ttt, flags = 16, freeze = false}}) OJ=gg.prompt({'推荐4-6.5'},{[1]='4.5'},{[1]='number'}) if OJ == nil or OJ[1] == '' or OJ[1] == '0' then gg.toast("取消") else local t = {"libUE4.so:bss", "Cb"} local tt = {0x6C0A70,0x30,0x440,0xF8,0x1088}--微加速 local ttt = S_Pointer(t, tt, true) gg.addListItems({{address = ttt, flags = 16, value = OJ[1], freeze = true}}) gg.alert("加速修改成功") LSQ_Chain({'libUE4.so:bss','Cb'},{0x6C0A70,0x30,0x4B0,0x88},"修改","167838216",4,"灵魂") so=gg.getRangesList('libUE4.so')[1].start py=0x74AF664 setvalue(so+py,16, 8.50279631e-21) string.toMusic("开启成功") end end, function() end), changan.switch( "山谷加速", function() LSQ_Chain({'libUE4.so:bss','Cb'},{0x6C0A70,0x30,0x4B0,0x88},"修改","0",4,"灵魂") LSQ_Chain({ 'libUE4.so:bss','Cb' },{ 0x6C0A70,0x30,0x440,0x1B0,0x1c0 } ,"冻结","176,215.484375" , 16 , "x" ) LSQ_Chain ( { 'libUE4.so:bss' , 'Cb' } , { 0x6C0A70,0x30,0x440,0x1B0,0x1c4} , "冻结" , "252,570.5625" , 16 , "y" ) LSQ_Chain ( { 'libUE4.so:bss' , 'Cb' } , { 0x6C0A70,0x30,0x440,0x1B0,0x1c8 } , "冻结" , "3,231.767578125" , 16 , "z" ) LSQ_Chain({'libUE4.so:bss','Cb'},{0x6C0A70,0x30,0x440,0x4A0,0x3E8},"冻结","54148",4,"防拉") gg.sleep(1000) so=gg.getRangesList('libUE4.so')[1].start py=0x8AA0068 setvalue(so+py,4,-721215457) gg.sleep(1000) LSQ_Chain({'libUE4.so:bss','Cb'},{0x6C0A70,0x30,0x440,0x4A0,0x200},"修改","0",16,"60000防拉") LSQ_Chain({'libUE4.so:bss','Cb'},{0x6C0A70,0x30,0x440,0x4A0,0x284},"修改","0",16,"7500防拉") LSQ_Chain({'libUE4.so:bss','Cb'},{0x6C0A70,0x30,0x440,0x4A0,0x1F4-0x3C},"冻结","150",16,"上下坡防拉") LSQ_Chain({'libUE4.so:bss','Cb'},{0x6C0A70,0x30,0x440,0x4A0,0xB28},"冻结","999900",16,"670") LSQ_Chain({'libUE4.so:bss','Cb'},{0x6C0A70,0x30,0x4B0,0x4A0,0x208},"冻结","819200",16,"8192") LSQ_Chain({'libUE4.so:bss','Cb'},{0x6C0A70,0x30,0x440,0x4A0,0x210},"修改","9999",16,"2") LSQ_Chain({'libUE4.so:bss','Cb'},{0x6C0A70,0x30,0x4B0,0x4A0,0x3C},"冻结","33000000",4,"速度调节，") LSQ_Chain({'libUE4.so:bss','Cb'},{0x6C0A70,0x30,0x4B0,0x4A0,0x208+0x348},"修改","0",4,"240") LSQ_Chain({'libUE4.so:bss','Cb'},{0x6C0A70,0x30,0x2640,0x90,0x84},"修改","99999",16,"播报防拉") LSQ_Chain({'libUE4.so:bss','Cb'},{0x6C0A70,0x30,0x440,0x4A0,0x21C},"修改","999999",16,"2048") gg.sleep(1000) local t = {"libUE4.so:bss", "Cb"} local tt = {0x6C0A70,0x30,0x440,0x1b0,0x1c0} local ttt = S_Pointer(t, tt, true) gg.addListItems({{address = ttt, flags = 16, freeze = false}}) local t = {"libUE4.so:bss", "Cb"} local tt = {0x6C0A70,0x30,0x440,0x1b0,0x1c4} local ttt = S_Pointer(t, tt, true) gg.addListItems({{address = ttt, flags = 16, freeze = false}}) local t = {"libUE4.so:bss", "Cb"} local tt = {0x6C0A70,0x30,0x440,0x1b0,0x1c8} local ttt = S_Pointer(t, tt, true) gg.addListItems({{address = ttt, flags = 16, freeze = false}}) OJ=gg.prompt({'推荐4-6.5'},{[1]='4.5'},{[1]='number'}) if OJ == nil or OJ[1] == '' or OJ[1] == '0' then gg.toast("取消") else local t = {"libUE4.so:bss", "Cb"} local tt = {0x6C0A70,0x30,0x440,0xF8,0x1088}--微加速 local ttt = S_Pointer(t, tt, true) gg.addListItems({{address = ttt, flags = 16, value = OJ[1], freeze = true}}) gg.alert("加速修改成功") LSQ_Chain({'libUE4.so:bss','Cb'},{0x6C0A70,0x30,0x4B0,0x88},"修改","167838216",4,"灵魂") so=gg.getRangesList('libUE4.so')[1].start py=0x74AF664 setvalue(so+py,16, 8.50279631e-21) string.toMusic("开启成功") end end, function() end), changan.switch( "山谷和地铁高跳(概率闪退)", function() GT=gg.prompt({'高跳推荐3000-4000'},{[1]='3500'},{[1]='number'}) if GT == nil or GT[1] == '' or GT[1] == '0' then gg.toast("取消") else local t = {"libUE4.so:bss", "Cb"} local tt = {0x6C0A70,0x30,0x440,0x4A0,0x1BC}--高跳 local ttt = S_Pointer(t, tt, true) gg.addListItems({{address = ttt, flags = 16, value = GT[1], freeze = true}}) gg.sleep(1000) FS=gg.prompt({'防摔推荐2.5-5'},{[1]='5'},{[1]='number'}) if FS == nil or FS[1] == '' or FS[1] == '0' then gg.toast("取消") else local t = {"libUE4.so:bss", "Cb"} local tt = {0x6C0A70,0x30,0x440,0x4A0,0x1B4}--防摔 local ttt = S_Pointer(t, tt, true) gg.addListItems({{address = ttt, flags = 16, value = FS[1], freeze = true}}) LSQ_Chain({'libUE4.so:bss','Cb'},{0x6C0A70,0x30,0x84},"冻结","15",16,"落地后摇") LSQ_Chain({'libUE4.so:bss','Cb'},{0x6C0A70,0x30,0x440,0x108C-0x1028},"冻结","1",4,"趴下后摇") LSQ_Chain({'libUE4.so:bss','Cb'},{0x6C0A70,0x30,0x440,0x108C-0x1024},"冻结","1",4,"趴下后摇") LSQ_Chain({'libUE4.so:bss','Cb'},{0x6C0A70,0x30,0x440,0x1650},"冻结","0",4,"锁动作") LSQ_Chain({'libUE4.so:bss','Cb'},{0x6C0A70,0x30,0x440,0x4A0,0x1F4+0x38},"修改","10E10",16,"0.05防拉") string.toMusic("开启成功") end end end, function() end), changan.switch( "关加速", function() Unfreeze()--解除所有冻结 so=gg.getRangesList('libUE4.so')[1].start py=0x8AA0068 setvalue(so+py,4,-117286283) LSQ_Chain({'libUE4.so:bss','Cb'},{0x6C0A70,0x30,0x4B0,0x4A0,0x208+0x348},"修改","240",4,"240") LSQ_Chain({'libUE4.so:bss','Cb'},{0x6C0A70,0x30,0x440,0x4A0,0x1B4},"修改","1",16,"防摔") LSQ_Chain({'libUE4.so:bss','Cb'},{0x6C0A70,0x30,0x440,0x4A0,0x1BC},"修改","443",16,"443") LSQ_Chain({'libUE4.so:bss','Cb'},{0x6C0A70,0x30,0x440,0x4A0,0x200},"修改","60000",16,"60000防拉") LSQ_Chain({'libUE4.so:bss','Cb'},{0x6C0A70,0x30,0x440,0x4A0,0x284},"修改","7500",16,"7500防拉") LSQ_Chain({'libUE4.so:bss','Cb'},{0x6C0A70,0x30,0x440,0x4A0,0x1F4-0x3C},"冻结","45",16,"上下坡防拉") LSQ_Chain({'libUE4.so:bss','Cb'},{0x6C0A70,0x30,0x440,0x4A0,0xB28},"冻结","670",16,"670") LSQ_Chain({'libUE4.so:bss','Cb'},{0x6C0A70,0x30,0x440,0xF8,0x1088},"冻结","1",16,"v加速") LSQ_Chain({'libUE4.so:bss','Cb'},{0x6C0A70,0x30,0x440,0x4A0,0x210},"修改","2",16,"2") LSQ_Chain({'libUE4.so:bss','Cb'},{0x6C0A70,0x30,0x4B0,0x4A0,0x208},"冻结","8192",16,"8192") LSQ_Chain({'libUE4.so:bss','Cb'},{0x6C0A70,0x30,0x4B0,0x4A0,0x3C},"修改","16777502",4,"控制速度") LSQ_Chain({'libUE4.so:bss','Cb'},{0x6C0A70,0x30,0x440,0x4A0,0x21C},"修改","2048",16,"2048防拉") Unfreeze()--解除所有冻结 string.toMusic("加速关闭成功") end, function() end), },--封底 }) bloc = luajava.getBlock() bloc('join') luajava.setFloatingWindowHide(false)