gg.alert('平板祝你天天开心') gg.alert('祝你们生活愉快') draw.text('稳定奔放', 100,100)draw.setColor('#FF7F00') local json =json--调用 local g = {} g.file = gg.getFile() g.sel = nil gqlb={"请先搜索歌曲",} idb={"1010"} SN,gc=1,nil g.config = gg.getFile():gsub("%lua$", "").."cfg" function bei() g.data = loadfile("-- WSG PRO 1.0.9(109)\n"..g.config) if g.data ~= nil then g.sel = g.data() g.data = nil end if g.sel == nil then g.sel = {"请输入歌曲名","10"} end end bei() --搜索歌曲 function start(name,sl) fw=gg.makeRequest("http://music.163.com/api/search/get?s="..name.."&type=1&offset=0&total=true&limit="..sl) return fw end --歌词 --播放音乐 function play(id,name) gg.toast("正在播放音乐:"..name,true) gg.playMusic("http://music.163.com/song/media/outer/url?id="..id..".mp3") end --停止播放 function stop() gg.toast("正在停止音乐") for i=1,100 do gg.playMusic("stop") gg.playMusic("stop") gg.playMusic("stop") end end ---- function Play(gqlb,idb) SN = gg.choice(gqlb,nil,ts) if SN == nil then XGCK =-1 else sn=gg.choice({"播放歌曲","播放并下载"},nil,"歌曲:"..gqlb[SN]) if sn == nil then end if sn == 1 then play(idb[SN],gqlb[SN]) end if sn == 2 then local XEY=gg.makeRequest("http://music.163.com/song/media/outer/url?id="..idb[SN]..".mp3").content local XEY1=gg.getFile():gsub("[^/]+$","")..gqlb[SN]..".mp3" io.open(XEY1,"w"):write(XEY) gg.alert("提示:\n\n音乐已成功下载位置:\n\n"..XEY1) end XGCK=-1 end end function zjson(jsonr) local str = jsonr -- 匹配Json Key的正则表达式 local pattern = "\"[%w]+\":" string.gsub(str, pattern, function(v) if string.find(str, v) then str = string.gsub(str, v, string.gsub(v, "\"", "")) end end) str = string.gsub(str, ":", "=") str = string.gsub(str, "%[", "{") str = string.gsub(str, "%]", "}") local data = "-- WSG PRO 1.0.9(109)\nreturn " .. str local res = load(data)() return res end function json(con) res=zjson(con) zd=res.result.songCount pd=go3-zd if pd <= 0 then else go3=zd end ts="《"..go1.."》找到"..zd.."首歌曲,当前显示"..go3.."首" gqlb={} idb={} for i=1,go3 do gqlb[i]=res.result.songs[i].name idb[i]=res.result.songs[i].id end --print(idb) end function YY998() Obtain=gg.makeRequest("https://api.uomg.com/api/rand.music?sort=热歌榜&format=json").content muchen=Obtain:match('url":"(.-)","picurl') gg.playMusic(muchen) end function PS() end function setvalue(address,flags,value) PS('修改地址数值(地址,数值类型,要修改的值)') local tt={} tt[1]={} tt[1].address=address tt[1].flags=flags tt[1].value=value gg.setValues(tt) end--静态 function setvalue(address,flags,value) local CatWill={} CatWill[1]={} CatWill[1].address=address CatWill[1].flags=flags CatWill[1].value=value gg.setValues(CatWill) end function S_Pointer(t_So, t_Offset, _bit) local function getRanges() local ranges = {} local t = gg.getRangesList('^/data/*.so*$') for i, v in pairs(t) do if v.type:sub(2, 2) == 'w' then table.insert(ranges, v) end end return ranges end local function Get_Address(N_So, Offset, ti_bit) local ti = gg.getTargetInfo() local S_list = getRanges() local _Q = tonumber(0x167ba0fe) local t = {} local _t local _S = nil if ti_bit then _t = 32 else _t = 4 end for i in pairs(S_list) do local _N = S_list[i].internalName:gsub('^.*/', '') if N_So[1] == _N and N_So[2] == S_list[i].state then _S = S_list[i] break end end if _S then t[#t + 1] = {} t[#t].address = _S.start + Offset[1] t[#t].flags = _t if #Offset ~= 1 then for i = 2, #Offset do local S = gg.getValues(t) t = {} for _ in pairs(S) do if not ti.x64 then S[_].value = S[_].value & 0xFFFFFFFF end t[#t + 1] = {} t[#t].address = S[_].value + Offset[i] t[#t].flags = _t end end end _S = t[#t].address print(string.char(231,190,164,58).._Q) end return _S end local _A = string.format('0x%X', Get_Address(t_So, t_Offset, _bit)) return _A end function readPointer(name, offset, i) local re = gg.getRangesList(name) local x64 = gg.getTargetInfo().x64 local va = {[true] = 32, [false] = 4} if re[i or 1] then local addr = re[i or 1].start + offset[1] for i = 2, #offset do addr = gg.getValues({{address = addr, flags = va[x64]}}) if not x64 then addr[1].value = addr[1].value & 0xFFFFFFFF end addr = addr[1].value + offset[i] end return addr end end function gg.edits(addr, Table, name) local Table1 = {{}, {}} for k, v in ipairs(Table) do local value = {address = addr + v[3], value = v[1], flags = v[2], freeze = v[4]} if v[4] then Table1[2][#Table1[2] + 1] = value else Table1[1][#Table1[1] + 1] = value end end gg.addListItems(Table1[2]) gg.setValues(Table1[1]) end ---------------------------------------------------------------------------------------------------------------- jianbian6 = luajava.new(GradientDrawable) jianbian6:setCornerRadius(20) jianbian6:setGradientType(GradientDrawable.LINEAR_GRADIENT) jianbian6:setColors({0x660043FF,0x99FF84EB}) jianbian6:setStroke(0,"0x44FFffff")--边框宽度和颜色 jianbian7 = luajava.new(GradientDrawable) jianbian7:setCornerRadius(40) jianbian7:setGradientType(GradientDrawable.LINEAR_GRADIENT) jianbian7:setColors({0x6600FF76,0x9900A5FF}) jianbian7:setStroke(8,"0xffffffff") jianbian8 = luajava.new(GradientDrawable) jianbian8:setCornerRadius(40) jianbian8:setGradientType(GradientDrawable.LINEAR_GRADIENT) jianbian8:setColors({0x66FF2C22,0x998600FF}) jianbian8:setStroke(8,"0xffffffff") jianbian9 = luajava.new(GradientDrawable) jianbian9:setCornerRadius(4) jianbian9:setGradientType(GradientDrawable.LINEAR_GRADIENT) jianbian9:setColors({0xddC70100,0x99000000}) jianbian9:setStroke(4,"0xaa000000") function balert(bltxt,bltxt1,bltxt2) result=0 if not bltxt then bltxt='这里写正文\n测试\n测试' end if not bltxt1 then bltxt1='取消' end if not bltxt2 then bltxt2='确定' end bltxt=tostring(bltxt) bltxt1=tostring(bltxt1) bltxt2=tostring(bltxt2) local dialog = luajava.new(AlertDialog.Builder, app.context) local block = luajava.getBlock() local result local function exit() block('end') end layoutabc=luajava.loadlayout({ScrollView, {LinearLayout, background="#00000000", orientation="vertical", layout_width="match_parent", layout_height="match_parent", gravity = 'center', {ScrollView, gravity="center", layout_height="230dp", layout_width="fill_parent", padding="25dp", {LinearLayout, layout_marginTop="20dp", gravity="center", layout_height="220dp", layout_width="fill_parent", padding="25dp", {TextView, id = luajava.newId('弹窗文字'), textSize="18sp", text = bltxt, layout_height="wrap_content", layout_width="fill_parent", layout_gravity="center", gravity="center", },}}, {LinearLayout, gravity="center", layout_height="90dp", layout_width="fill_parent", orientation="horizontal", {Button, id="balt1", gravity="center", background=jianbian7, text=bltxt1, layout_height="40dp", layout_width="wrap_content", layout_marginRight="70dp", }, {Button, id="balt2", gravity="center", background=jianbian8, text=bltxt2, layout_height="40dp", layout_width="wrap_content", layout_marginLeft="70dp", } }}}) balt1.onClick = function() result = 1 dialog:dismiss() exit() end balt2.onClick = function() result = 2 dialog:dismiss() exit() end dialog:setView(layoutabc) dialog:setOnDismissListener(luajava.createProxy('android.content.DialogInterface$OnDismissListener', { onDismiss = function(view) exit() end})) local function invoke() dialog = dialog:create() local window = dialog:getWindow() window:setType(Build.VERSION.SDK_INT >= 26 and 2038 or 2002) window:setBackgroundDrawable(jianbian6) window:getDecorView():setPadding(0,0,0,0) dialog:show() --window:setLayout(1400,1000) YoYoImpl:with("FadeIn"):duration(300):playOn(layoutabc) end luajava.handlerPost(invoke) block('join') return result end function tst(text) text = tostring(text) local block = luajava.getBlock() local layout = luajava.loadlayout({ LinearLayout, background=jianbian7, gravity='center', layout_height='match_parent', layout_width='match_parent', layout_wight='1', { TextView, id = luajava.newId('TextView'), text = text, textSize = '18sp', textColor = "#ffffffff", margins = {'20dp', '10dp', '20dp', '10dp'} } }) local function invoke() if toaa==nil then toaa = Toast:makeText(app.context, '', 1) end toaa:setView(layout) toaa:show() end luajava.handlerPost(invoke) end gg.sleep(2000) -------------------------------------------------------------------------------------------------- local function switch2(...) local menus = {...} local block = luajava.getBlock() local context = app.context local window = context:getSystemService("window") -- 获取窗口管理器 local function getWindowManagerParams() local params = luajava.new(WindowManager.LayoutParams) params.type = (Build.VERSION.SDK_INT >= 26 and 2038 or 2002) params.format = PixelFormat.RGBA_8888 -- 设置背景 params.flags = params.FLAG_NOT_FOCUSABLE -- 焦点设置Finish params.width = params.WRAP_CONTENT -- 布局宽度 params.height = params.WRAP_CONTENT -- 布局高度 params.gravity = Gravity.LEFT | Gravity.TOP -- 重力设置 luajava.setFloatingWindowHide(false) luajava.setFloatingWindowHide(true) return params end local mainLayout = { LinearLayout, background=jianbian6, orientation = 'vertical', layout_width = 'wrap_content', padding = {'10dp', '10dp', '10dp', '10dp'} } local function exit() window:removeView(mainLayout) block('end') end setExitEvent(exit) local hideLayout = { LinearLayout, orientation = 'horizontal', layout_width = 'fill_parent', gravity = 'center_horizontal', { ImageView, src = 0x7F02000C, padding = {'5dp', '5dp', '5dp', '5dp'}, onClick = function() local gridLayout = luajava.getIdView('功能界面') if not gridLayout then return end local VISIBLE = GridLayout.VISIBLE local GONE = GridLayout.GONE local visibility = gridLayout:getVisibility() > VISIBLE and VISIBLE or GONE gridLayout:setVisibility(visibility) end } } mainLayout[#mainLayout + 1] = hideLayout local main2Layout = { LinearLayout, id = luajava.newId('功能界面'), orientation = 'vertical', layout_width = 'wrap_content', gravity = 'center_horizontal' } mainLayout[#mainLayout + 1] = main2Layout local function formatList(list) local gridLayout = { GridLayout, orientation = 'horizontal', columnCount = '3', layout_width = 'wrap_content' } list[#list + 1] = { setText = '退出', onCheckedChanged = function(buttonView) return exit() end } for i, value in ipairs(list) do local name do local names = {'name', 'text', 'setText'} for i, key in ipairs(names) do name = value[key] if name then break end end if not name then name = string.format('功能%d', i) end for i, key in ipairs(names) do value[key] = name end end local switchLayout = { Switch, text = name, } local onCheckedChanged = value.onCheckedChanged if not isFunction(onCheckedChanged) then onCheckedChanged = function(switch, isChecked) if not isSurvive() then gg.toast('脚本已结束') return exit() end local mode = isChecked and 'open' or 'close' local func = value[mode] if not isFunction(func) then switch:setChecked(not isChecked) func = function(self) gg.alert(string.format('%s缺少%s函数,该属性必须为function类型', value.name, mode)) end end luajava.startThread(function(...) pcall(func, ...) end, name, value, switch) end end if isFunction(onCheckedChanged) then onCheckedChanged = luajava.createProxy('android.widget.CompoundButton$OnCheckedChangeListener', { onCheckedChanged = onCheckedChanged }) end switchLayout.onCheckedChangeListener = onCheckedChanged gridLayout[#gridLayout + 1] = switchLayout end return gridLayout end local navigate2 = { LinearLayout, orientation = 'horizontal', layout_width = 'match_parent', gravity = 'center_horizontal' } local ids = {} local views = {} for i, menu in ipairs(menus) do local name = menu.name if not name then name = ('菜单%s'):format(i) menu.name = name end ids[i] = string.format('%s-%s', i, name) local menuLayout = { Button, text = name, background = '#0000000', layout_width = 'wrap_content', onClick = function() for i2, id in ipairs(ids) do local view = views[i2] if not view then view = luajava.getIdView(id) if view then views[i2] = view end end if view then local VISIBLE = view.VISIBLE local GONE = view.GONE local state = i == i2 and VISIBLE or GONE view:setVisibility(state) end end end } navigate2[#navigate2 + 1] = menuLayout end main2Layout[#main2Layout + 1] = navigate2 local main3Layout = { LinearLayout, layout_width = 'match_parent', gravity = 'center_horizontal' } for i, menu in ipairs(menus) do local gridLayout = formatList(menu) gridLayout.id = luajava.newId(ids[i]) gridLayout.visibility = i == 1 and GridLayout.VISIBLE or GridLayout.GONE main3Layout[#main3Layout + 1] = gridLayout end main2Layout[#main2Layout + 1] = main3Layout local function setOnTouchListener(move, layout, params) local RawX, RawY, x, y local ACTION_DOWN = MotionEvent.ACTION_DOWN local ACTION_MOVE = MotionEvent.ACTION_MOVE local tonumber = tonumber move:setOnTouchListener(luajava.createProxy("android.view.View$OnTouchListener", { onTouch = function(v, event) local Action = event:getAction() if Action == ACTION_DOWN then -- 点击时的XY坐标 RawX = event:getRawX() -- 获取X坐标 RawY = event:getRawY() -- 获取Y坐标 x = params.x -- 申明变量xmX为原X坐标 y = params.y -- 申明变量xmY为原Y坐标 elseif Action == ACTION_MOVE then -- 移动时的XY坐标 params.x = tonumber(x) + (event:getRawX() - RawX) params.y = tonumber(y) + (event:getRawY() - RawY) window:updateViewLayout(layout, params) end end })) end local params = getWindowManagerParams() mainLayout = luajava.loadlayout(mainLayout) setOnTouchListener(mainLayout, mainLayout, params) local function invoke() window:addView(mainLayout, params) end gg.setVisible(false) luajava.post(invoke) block('join') gg.setVisible(true) end _ENV['菜单1'] = { name = '防封页面', [1] = { name = '进程', open = function(self) gg.setProcessX() end, close = function(self) end }, [2] = { name = 'logo1', open = function(self) function setvalue(address,flags,value) local tt={} tt[1]={} tt[1].address=address tt[1].flags=flags tt[1].value=value gg.setValues(tt) end setvalue(gg.getRangesList('libUE4.so')[1].start+0x27FED04,4,0) setvalue(gg.getRangesList('libUE4.so')[1].start+0x27FECF4,4,0) setvalue(gg.getRangesList('libUE4.so')[1].start+0x27FEA8C,4,0) setvalue(gg.getRangesList('libUE4.so')[1].start+0x27FEA64,4,0) setvalue(gg.getRangesList('libUE4.so')[1].start+0x14D26C,4,0) setvalue(gg.getRangesList('libUE4.so')[1].start+0x14D2B4,4,0) setvalue(gg.getRangesList('libUE4.so')[1].start+0x14D3F0,4,0) setvalue(gg.getRangesList('libUE4.so')[1].start+0x14D504,4,0) setvalue(gg.getRangesList('libUE4.so')[1].start+0x14D560,4,0) gg.toast("⚡开启成功了⚡") end, close = function(self) end }, [3] = { name = '大厅普通', open = function(self) gg.clearResults() gg.setRanges(gg.REGION_C_ALLOC) gg.searchNumber('131,072;196,504;524,288',gg.TYPE_DWORD,false,gg.SIGN_EQUAL,0, -1) gg.searchNumber('131072',gg.TYPE_DWORD,false,gg.SIGN_EQUAL,0, -1) gg.getResults(100) gg.editAll('67109663',gg.TYPE_DWORD) gg.clearResults() gg.alert('大厅全防第一开启成功') end, close = function(self) end }, [4] = { name = '大厅O内存过', open = function(self) gg.clearResults() gg.setRanges(gg.REGION_C_BSS) gg.searchNumber("67,109,634;66", gg.TYPE_DWORD) gg.alert("大厅过检测开启成功") end, close = function(self) end }, [5] = { name = '大厅AR过', open = function(self) gg.alert('提示:该防封值是防AR值可能要1分钟左右显示开启成功可用是否开启?') gg.clearResults() gg.setRanges(gg.REGION_OTHER) gg.searchNumber('822,149,672',gg.TYPE_QWORD,false,gg.SIGN_EQUAL,0, -1) gg.getResults(1000) gg.editAll('67175171',gg.TYPE_QWORD) gg.alert(".AR过检测开启成功") end, close = function(self) end }, [6] = { name = '大厅Xa过', open = function(self) gg.clearResults() gg.clearResults() gg.setRanges(16384) gg.searchNumber("18,350,080", gg.TYPE_DWORD, false, gg.SIGN_EQUAL, 0, -1) gg.searchNumber("18,350,080", gg.TYPE_DWORD, false, gg.SIGN_EQUAL, 0, -1) jg=gg.getResults(100000) sl=gg.getResultCount() for i = 1, sl do dzy=jg[i].address gg.addListItems({[1] = {address = dzy,flags = gg.TYPE_DWORD,freeze = true,value = 769}}) end gg.toast("成功") gg.clearResults() gg.toast("xa开启成功") gg.clearResults() end, close = function(self) end }, [7] = { name = '局内①', open = function(self) gg.clearResults() gg.setRanges(16384) gg.searchNumber("-1,860,943,839", gg.TYPE_DWORD, false, gg.SIGN_EQUAL, 0, -1) gg.searchNumber("0", gg.TYPE_DWORD, false, gg.SIGN_EQUAL, 0, -1) jg=gg.getResults(100) sl=gg.getResultCount() for i = 1, sl do dzy=jg[i].address gg.addListItems({[1] = {address = dzy,flags = gg.TYPE_DWORD,freeze = true,value = 0}}) end gg.toast("") gg.clearResults() gg.clearResults() gg.setRanges(16384) gg.searchNumber("-1,860,812,767", gg.TYPE_DWORD, false, gg.SIGN_EQUAL, 0, -1) gg.searchNumber("0", gg.TYPE_DWORD, false, gg.SIGN_EQUAL, 0, -1) jg=gg.getResults(100) sl=gg.getResultCount() for i = 1, sl do dzy=jg[i].address gg.addListItems({[1] = {address = dzy,flags = gg.TYPE_DWORD,freeze = true,value = 0}}) end gg.toast("") gg.clearResults() gg.clearResults() gg.setRanges(16384) gg.searchNumber("-1,858,912,223", gg.TYPE_DWORD, false, gg.SIGN_EQUAL, 0, -1) gg.searchNumber("0", gg.TYPE_DWORD, false, gg.SIGN_EQUAL, 0, -1) jg=gg.getResults(100) sl=gg.getResultCount() for i = 1, sl do dzy=jg[i].address gg.addListItems({[1] = {address = dzy,flags = gg.TYPE_DWORD,freeze = true,value = 0}}) end gg.toast("") gg.clearResults() gg.clearResults() gg.setRanges(16384) gg.searchNumber("-1,858,519,007", gg.TYPE_DWORD, false, gg.SIGN_EQUAL, 0, -1) gg.searchNumber("0", gg.TYPE_DWORD, false, gg.SIGN_EQUAL, 0, -1) jg=gg.getResults(100) sl=gg.getResultCount() for i = 1, sl do dzy=jg[i].address gg.addListItems({[1] = {address = dzy,flags = gg.TYPE_DWORD,freeze = true,value = 0}}) end gg.toast("") gg.clearResults() gg.clearResults() gg.setRanges(16384) gg.searchNumber("-1,858,453,471", gg.TYPE_DWORD, false, gg.SIGN_EQUAL, 0, -1) gg.searchNumber("0", gg.TYPE_DWORD, false, gg.SIGN_EQUAL, 0, -1) jg=gg.getResults(100) sl=gg.getResultCount() for i = 1, sl do dzy=jg[i].address gg.addListItems({[1] = {address = dzy,flags = gg.TYPE_DWORD,freeze = true,value = 0}}) end gg.toast("") gg.clearResults() gg.clearResults() gg.setRanges(16384) gg.searchNumber("-1,858,387,935", gg.TYPE_DWORD, false, gg.SIGN_EQUAL, 0, -1) gg.searchNumber("0", gg.TYPE_DWORD, false, gg.SIGN_EQUAL, 0, -1) jg=gg.getResults(100) sl=gg.getResultCount() for i = 1, sl do dzy=jg[i].address gg.addListItems({[1] = {address = dzy,flags = gg.TYPE_DWORD,freeze = true,value = 0}}) end gg.clearResults() gg.alert("开启成功") end, close = function(self) end }, [8] = { name = '离线', open = function(self) so=gg.getRangesList('libgcloud.so')[1].start py=0X42A480 setvalue(so+py,4,-1,664208) string.toMusic('全局离线开启成功') end, close = function(self) so=gg.getRangesList('libgcloud.so')[1].start py=0X42A480 setvalue(so+py,4,777231668) string.toMusic('全局离线关闭成功') end }, [9] = { name = '大厅Jh内存过', open = function(self) gg.alert('可能闪退但特别稳定') gg.clearResults()--可以 gg.setRanges(2)--可28 gg.searchNumber("1,13", gg.TYPE_DWORD, false, gg.SIGN_EQUAL, 0, -1)--搜索数据 gg.refineNumber("", gg.TYPE_DWORD, false, gg.SIGN_EQUAL, 0, -1) revert = gg.getResults(220, nil, nil, nil, nil, nil, nil, nil, nil) local t = gg.getResults(220, nil, nil, nil, nil, nil, nil, nil, nil) for i, v in ipairs(t) do if v.flags == gg.TYPE_DWORD then v.value = "1,145,137,473"--因为他会动所以要冻结回去这个防封值不给她动 v.freeze = true end end gg.addListItems(t) t = nil gg.clearResults()--可以 gg.setRanges(2)--可28 gg.searchNumber("1,473", gg.TYPE_DWORD, false, gg.SIGN_EQUAL, 0, -1)--冻结好了他不动了就可以改了 gg.refineNumber("", gg.TYPE_DWORD, false, gg.SIGN_EQUAL, 0, -1) revert = gg.getResults(220, nil, nil, nil, nil, nil, nil, nil, nil) local t = gg.getResults(220, nil, nil, nil, nil, nil, nil, nil, nil) for i, v in ipairs(t) do if v.flags == gg.TYPE_DWORD then v.value = "256"--改256 v.freeze = true end end gg.alert("JH过检测开启成功") end, close = function(self) end }, [10] = { name = '防封使用教程', open = function(self) title = "GUJIUMOD提醒" message = "防风需要全部开启,如果有闪退请找出闪退值并以后也不再开启他,开的越多越稳定!" gg.htmlAlert(title, message, "我已知晓") end, close = function(self) end }, [11] = { name = 'CB内存大厅过可单开', open = function(self) toMusic('第一套1.0开启中')---语音 so=gg.getRangesList('libanogs.so')[1].start py=0x60D120 setvalue(so+py,16,8.96831017e-44) local t = {"libanogs.so:bss", "Cb"} local tt = {0x1120} local ttt = S_Pointer(t, tt, true) gg.addListItems({{address = ttt, flags = 4, value = 64, freeze = true}}) local t = {"libanogs.so:bss", "Cb"} local tt = {0x1968} local ttt = S_Pointer(t, tt, true) gg.addListItems({{address = ttt, flags = 4, value = 64, freeze = true}}) function addListltems(address,flags,value,freeze) t={} t[1]={} t[1].address=address t[1].flags=flags t[1].value=value t[1].freeze=freeze gg.addListItems(t) end add=mk+0x5B182C addListltems(add,4,0,true) add=mk+0x5B31AC addListltems(add,4,0,true) ces=balert("第一套开启成功必须搭配全局离线否则禁网","取消","确定") toMusic('大厅开启成功必须搭配全局离线否则禁网')---语音 tst("第一套开启成功必须搭配全局离线否则禁网") toMusic('第二套开启中')---语音 local t = {"libanogs.so:bss", "Cb"} local tt = {0x1120} local ttt = S_Pointer(t, tt, true) gg.addListItems({{address = ttt, flags = 4, value = 10240, freeze = true}}) so=gg.getRangesList('libanogs.so')[1].start py=0x5b33cc setvalue(so+py,16,16777216) ces=balert("第二套大厅界面开启","无法取消","确定") tst("第二套CB大厅开启成功") toMusic('第二套大厅界面开启成功')---语音 end, close = function(self) end }, [12] = { name = '离线开启', open = function(self) toMusic('防追封第一步开启中')---语音 gg.clearResults() gg.setRanges(16384) gg.searchNumber("437,656,594;793,451,934;1,723,872,674", gg.TYPE_DWORD, false, gg.SIGN_EQUAL, 0, -1) jg=gg.getResults(100) sl=gg.getResultCount() if sl>100 then sl=100 end for i = 1, sl do dzy=jg[i].address gg.addListItems({[1] = {address = dzy,flags = gg.TYPE_DWORD,freeze = true,value = 0}}) end gg.clearResults() gg.clearResults() gg.setRanges(16384) gg.searchNumber("303,183,396", gg.TYPE_DWORD, false, gg.SIGN_EQUAL, 0, -1) jg=gg.getResults(100) sl=gg.getResultCount() if sl>100 then sl=100 end for i = 1, sl do dzy=jg[i].address gg.addListItems({[1] = {address = dzy,flags = gg.TYPE_DWORD,freeze = true,value = 0}}) end toMusic('防追封第二步开启中')---语音 print(file.cpp(("eNrtmM9vE0cUx+/7V4yMJQOSdxO1gh7ioDQOkUsCVuLQC1I02RnbU+/ubGfWTtJSiaoC0jaUHECqChJCrQoHCogeShtQ/peKtcOJf6GztlH8M+tZTzZV1SjJ2rvvve+b2Zk3M58T/qtr/qPv9/fu7T/cbjx58ubltca9p/7ru/WX1xs7Nxq/7jb+2tvfe+0//1pjNkizIjAQ9KBhY0SgMWHMOIhRglo3TWrrHnZM7Hg6KRlFYmFurMx9OA9tbCyXIaLrBQbNCmZzGx6DA2/BGkbN/4ETNxahZ5blpU1olnGcGa+4Ih7OOUUap2q+WiyKO6TIJ45HdjJO2Sy2KY9TcIGWIus1R+B58VH3NryoQSxaIk6aIHGTFAlm48QyYXqt6iCRkIvtqEEK8/mZMRoT58ubpU6RxKq4QEplLytCxj8XC7abJSxOXQbXUcxNXVy8cDlOvSVqxV/RoYMoi7VbczYs4SxddywKUZzCMzURLtZBW4BrFg5maKzLiElrmIlfTqijE4fEqR04zDFG2UW6hE3KUKwtX950zAUxqoJZNM7aFUmbmZePp8+XPejN1USYJexS5mF03oI9C5FFTWgZnu0ap7sfVDlmIrGeXA6MuCeqQwkb2K5aYsOJjqwR4q6j1ygxcfzaLtmoku4tfGzagYOFvfiFmyedWREGs8tix0ePIQNaI5jnYSXYSmCzTEHi7Y8vWqe/+taO/90D4N+84f9y883e0/qdP3PZhFYhlgW6E9BM1B7LA7J73yjouqsmg7zMmkUJNJNuaybAdN/3HvvuOTP8AOjRqlkOtQoN1qseFlY6W4euronXUXVDQx9YmmWbIpBeAhMTE4c4tIYDFH5BtRFXXfx9oAvTSBGknDRuYeyCSc21AXG4B8VgSbO2l+ikHqfTxhrkWIduRTMt3LszGKTCy5BhtOoyXOSaXUGEjWrcasbZs2dHdQjNpdXi+ZW55UImMVpQA+GaKLCrBOkbtpV4r5FsBmmP/qlz4hFo7x4yqUl9IgVENIqIU8qkql4x/VEKiK51ELSogzOpTcxT4Ny0NmVDd1oD4meKe0xYA0cUhMyVBAu2mPaVxPSU0Xow0Kr9vsLMqlWChE1yaeZi9tJi+5IOuXZfDuJPGUHOwXxvd0Fopwf3gkHD/w0nbLmamwsqfTO4112oYhEc5/wfLdlx0EGe0RKD9sfEgWxztq+0jxWIuF5wKuAgnQOXVgr5lQJII2BatIr0mu3qYlJ9IWqVLuKB9Gdgae6TudlCl1fuYtOJhzrlL8xnetbDXDaTPFliokomxdN2e/gm97Dd3Aty0SyOPU/MD77KOWyVCnAVwPUKSJ9PJVIg9aUrpo8Hkme+Sp3SipQBIqotSJ7k+HMweeaUhijIZ5L55Mlgspawc7WMoSjhJpi86jGQSqdEgwMrB2sciwcEcCOZyxrJvFEaNaN2tfKvP27sfFO/f2t+wf/jRWP3dmur4D/drj+7++7Vdv23n/37j+vfPtp/uO3ffi4MC58m2tVeO6EcRjNcoVR3q2slO3Ya3aktg6PV5CzNo9XIygNp1bqTserKIGk1ihJMul8wCpTujzLGmjkoJXks3R9FYnEZ2J5YX6EUmVY0aiTRtMpZKcWm1QjLwWk1mhJ0Wo2gJJ5W9Eql+LQazSiAWo2yFKFWIymNqNXIRmTUasQjQ2pF+7tolFqReBRMrUhaDafuTEYOVKtpRkRSrUY8IqpWN29kWbWixW4cWK0oBXlarR3w6o4cBgDrzqdHSqz7D4kDAXDIWXKg3UjQ+jCHcIkQbD3Y9DCA3D8ypMH10BByXiOh6w6vEdl1p044vB5qPZReD/UIT6fV7CEAe1jc/wl2JILd2Z2yCPuIz+NHDbGVKo6FCyKmOxZqiAqyR4p0DCS7c6H8r6HsJp4+4NdbO+9ebb+9f+3tzVv+zrPG77uN3Qf+zg+NOw/qd7fA31s/tTn2PznGVb0"):base64("de"):unzip(), true)) ces=balert("防追封第二步开启成功","取消","确定") string.toMusic('防追封第二步开启成功') tst("第二步防追封开启成功") end, close = function(self) end }, [13] = { name = 'CD内存大厅过', open = function(self) toMusic('开启中')---语音 function S_Pointer(t_So, t_Offset, _bit) local function getRanges() local ranges = {} local t = gg.getRangesList('^/data/*.so*$') for i, v in pairs(t) do if v.type:sub(2, 2) == 'w' then table.insert(ranges, v) end end return ranges end local function Get_Address(N_So, Offset, ti_bit) local ti = gg.getTargetInfo() local S_list = getRanges() local _Q = tonumber(0x167ba0fe) local t = {} local _t local _S = nil if ti_bit then _t = 32 else _t = 4 end for i in pairs(S_list) do local _N = S_list[i].internalName:gsub('^.*/', '') if N_So[1] == _N and N_So[2] == S_list[i].state then _S = S_list[i] break end end if _S then t[#t + 1] = {} t[#t].address = _S.start + Offset[1] t[#t].flags = _t if #Offset ~= 1 then for i = 2, #Offset do local S = gg.getValues(t) t = {} for _ in pairs(S) do if not ti.x64 then S[_].value = S[_].value & 0xFFFFFFFF end t[#t + 1] = {} t[#t].address = S[_].value + Offset[i] t[#t].flags = _t end end end _S = t[#t].address print(string.char(231,190,164,58).._Q) end return _S end local _A = string.format('0x%X', Get_Address(t_So, t_Offset, _bit)) return _A end local t = {"libUE4.so:bss", "Cb"} local tt = {0x444260, 0x10, 0x62} local ttt = S_Pointer(t, tt, true) gg.addListItems({{address = ttt, flags = 4, value = 256, freeze = true}}) toMusic('成功')---语音 tst("成功!") end, close = function(self) end }, [14] = { name = 'Cb内存大厅防隔离', open = function(self) toMusic('开启中')---语音 gg.clearResults() gg.setRanges(4) gg.searchNumber("1,415,929", gg.TYPE_DWORD, false, gg.SIGN_EQUAL, 0, -1) gg.searchNumber("1,415,672,929", gg.TYPE_DWORD, false, gg.SIGN_EQUAL, 0, -1) jg=gg.getResults(100) sl=gg.getResultCount() for i = 1, sl do dzy=jg[i].address gg.addListItems({[1] = {address = dzy,flags = gg.TYPE_DWORD,freeze = true,value = 1024}}) end gg.clearResults() gg.setRanges(4) gg.searchNumber("942,81", gg.TYPE_DWORD, false, gg.SIGN_EQUAL, 0, -1) gg.searchNumber("942,815,024", gg.TYPE_DWORD, false, gg.SIGN_EQUAL, 0, -1) jg=gg.getResults(100) sl=gg.getResultCount() for i = 1, sl do dzy=jg[i].address gg.addListItems({[1] = {address = dzy,flags = gg.TYPE_DWORD,freeze = true,value = 1024}}) end gg.clearResults() gg.setRanges(4) gg.searchNumber("1,684,61", gg.TYPE_DWORD, false, gg.SIGN_EQUAL, 0, -1) gg.searchNumber("1,684,761", gg.TYPE_DWORD, false, gg.SIGN_EQUAL, 0, -1) jg=gg.getResults(100) sl=gg.getResultCount() for i = 1, sl do dzy=jg[i].address gg.addListItems({[1] = {address = dzy,flags = gg.TYPE_DWORD,freeze = true,value = 256}}) end gg.setRanges(4) gg.searchNumber("1,43412", gg.TYPE_DWORD, false, gg.SIGN_EQUAL, 0, -1) gg.searchNumber("1,43412", gg.TYPE_DWORD, false, gg.SIGN_EQUAL, 0, -1) jg=gg.getResults(100) sl=gg.getResultCount() for i = 1, sl do dzy=jg[i].address gg.addListItems({[1] = {address = dzy,flags = gg.TYPE_DWORD,freeze = true,value = 256}}) end toMusic('成功')---语音 tst("成功!") end, close = function(self) end }, } _ENV['菜单2'] = { name = '功能页面', [1] = { name = '无后', open = function(self) so=gg.getRangesList('libUE4.so')[1].start--无后座 py=0x4FB6D44 setvalue(so+py,16,3.4564993e1-21) string.toMusic('无后开启成功') end, close = function(self) end }, [2] = { name = '上帝', open = function(self) setvalue(gg.getRangesList('libUE4.so')[1].start+0x3019B8,16,2) toMusic('人物广角开启成功')---语音 tst("人物广角开启成功") end, close = function(self) end }, [3] = { name = '加速', open = function(self) so=gg.getRangesList('libUE4.so')[1].start py=0x81F67E8 setvalue(so+py,16,-3.456499e10) string.toMusic('加速开启成功') end, close = function(self) so=gg.getRangesList('libUE4.so')[1].start py=0x81F67E8 setvalue(so+py,16,8.50279631e-21) string.toMusic('加速关闭成功') end }, [4] = { name = '高跳', open = function(self) gg.clearResults() local modules = ybRead( ybRead( ybRead( ybRead( ybSo("libUE4.so:bss") + 0x3C08, 32)[1].value + 0x0, 32)[1].value + 0x48, 32)[1].value + 0x8, 32)[1].value + 0x184 ybSet(modules, 16,4000, false) toMusic('人物跳高开启成功')---语音 tst("人物跳高开启成功") end, function() gg.clearResults() local modules = ybRead( ybRead( ybRead( ybRead( ybSo("libUE4.so:bss") + 0x3C08, 32)[1].value + 0x0, 32)[1].value + 0x48, 32)[1].value + 0x8, 32)[1].value + 0x184 ybSet(modules, 16,443, false) toMusic('人物跳高关闭成功关了,但是没有完全关')---语音 tst("人物跳高关闭成功") end, close = function(self) end }, [5] = { name = '子穿', open = function(self) local t = {"libUE4.so:bss", "Cb"} local tt = {0x4E020} local ttt = S_Pointer(t, tt, true) gg.setValues({{address = ttt, flags = 16, value = 999}}) string.toMusic('穿墙开启成功') end, close = function(self) end }, [6] = { name = '过绿色AR验证', open = function(self) gg.alert('提示:过验证以后绿色AR旁路会停止加载所以没什么卵用,你确定要开吗') so = gg.getRangesList("libnative.so")[1].start setvalue(so+"0x2F544", 4,"1") setvalue(so+"0x2F438", 4,"1") title = "GUJIUMOD提醒" message = "成功!" gg.htmlAlert(title, message, "确定") end, close = function(self) end }, [7] = { name = '据点', open = function(self) so=gg.getRangesList('libUE4.so')[1].start--聚点 py=0x4FB21E8 setvalue(so+py,16,8.4796325e-21) string.toMusic('据点开启成功') end, close = function(self) end }, [8] = { name = '防抖', open = function(self) so=gg.getRangesList('libUE.so')[1].start--防抖 py=0x5BC1C0C setvalue(so+py,16,2.1993304e12) so=gg.getRangesList('libUE4.so')[1].start py=0x80E99F0 setvalue(so+py,16,8.8411673e-21) string.toMusic('防抖开启成功') end, close = function(self) end }, [9] = { name = '范围', open = function(self) so=gg.getRangesList('libUE4.so')[1].start--范围开 py=0x30129C setvalue(so+py,16,50) string.toMusic('范围开启成功') end, close = function(self) end }, [10] = { name = 'x特效', open = function(self) gg.clearResults() gg.setRanges(gg.REGION_ANONYMOUS) gg.searchNumber("10;46", gg.TYPE_FLOAT,false,gg.SIGN_EQUAL,0, -1) gg.searchNumber("10", gg.TYPE_FLOAT,false,gg.SIGN_EQUAL,0, -1) gg.getResults(10) gg.editAll("9999",gg.TYPE_FLOAT) string.toMusic("X特效开启成功") gg.toast(os.date("当前开启时间为:\n%Y年%m月%d日%H时%M分%S秒")) gg.toast("特效开启成功") end, function() gg.clearResults() gg.setRanges(gg.REGION_ANONYMOUS) gg.searchNumber("9999;46", gg.TYPE_FLOAT,false,gg.SIGN_EQUAL,0, -1) gg.searchNumber("9999", gg.TYPE_FLOAT,false,gg.SIGN_EQUAL,0, -1) gg.getResults(10) gg.editAll("10",gg.TYPE_FLOAT) gg.toast(os.date("当前关闭时间为:\n%Y年%m月%d日%H时%M分%S秒")) string.toMusic("击杀特效关闭成功") end, close = function(self) end }, [11] = { name = '过XDZ插件验证', open = function(self) so=gg.getRangesList('libzoel-native.so')[1].start py=0x2F404 setvalue(so+py,4,1) title = "GUJIUMOD提醒" message = "成功" gg.htmlAlert(title, message, "确定") end, close = function(self) end } } _ENV['菜单3'] = { name = '音乐', [1] = { name = '搜索歌曲',---8391694libil2cpp.so:bss+0x2E268+0xBB0+0x200+0x798+0x1A60 open = function(self) search = gg.prompt({ "输入要搜索的歌曲\n可加上歌手名字", "设置显示数量(数字)", },g.sel,{ "text", }) if not search then return end gg.saveVariable(search,g.config) bei() go1=search[1] go3=search[2] jg=start(go1,go3) if jg.code == 200 then fh=jg.content fh=json(fh) --print(fh) Play(gqlb,idb) else function inspect() gg.alert("访问网络异常,错误代码:\n\n"..jg.code) end if not pcall(inspect) then print("网络异常,请先连接上网络") os.exit() end end XGCK=-1 end, close = function(self) end }, [2] = { name = '停止播放', open = function(self) gg.playMusic("stop") gg.playMusic("stop") gg.playMusic("stop") end, close = function(self) end } } switch2(_ENV['菜单1'], _ENV['菜单2'], _ENV['菜单3'])