-- 把以上代码复制到你脚本最前面即可 gg.alert('秋鹤死妈') if not pcall(peizhi) then end function getType(types) if types == 'float' then return 16 else return 4 end end gg.playVideo('https://cccimg.com/view.php/a7a1beb2125d500a107a56a8d1e3b6ec.mp4') gg.ptrace(1) string.toMusic('欢迎使用') draw.text('[辞屿] ', 100,200)draw.setColor('#66B3FF') draw.text('CIYUVERYNB', 100,250)draw.setColor('#66B3FF') local json =json--调用 local g = {} g.file = gg.getFile() g.sel = nil gqlb={"请先搜索歌曲",} idb={"1010"} SN,gc=1,nil g.config = gg.getFile():gsub("%lua$", "").."cfg" function bei() g.data = loadfile("-- WSG PRO 1.0.9(109)\n"..g.config) if g.data ~= nil then g.sel = g.data() g.data = nil end if g.sel == nil then g.sel = {"请输入歌曲名","10"} end end bei() --搜索歌曲 function start(name,sl) fw=gg.makeRequest("http://music.163.com/api/search/get?s="..name.."&type=1&offset=0&total=true&limit="..sl) return fw end --歌词 --播放音乐 function play(id,name) gg.toast("正在播放音乐:"..name,true) gg.playMusic("http://music.163.com/song/media/outer/url?id="..id..".mp3") end --停止播放 function stop() gg.toast("正在停止音乐") for i=1,100 do gg.playMusic("stop") gg.playMusic("stop") gg.playMusic("stop") end end ---- function Play(gqlb,idb) SN = gg.choice(gqlb,nil,ts) if SN == nil then XGCK =-1 else sn=gg.choice({"播放歌曲","播放并下载"},nil,"歌曲:"..gqlb[SN]) if sn == nil then end if sn == 1 then play(idb[SN],gqlb[SN]) end if sn == 2 then local XEY=gg.makeRequest("http://music.163.com/song/media/outer/url?id="..idb[SN]..".mp3").content local XEY1=gg.getFile():gsub("[^/]+$","")..gqlb[SN]..".mp3" io.open(XEY1,"w"):write(XEY) gg.alert("提示:\n\n音乐已成功下载位置:\n\n"..XEY1) end XGCK=-1 end end function zjson(jsonr) local str = jsonr -- 匹配Json Key的正则表达式 local pattern = "\"[%w]+\":" string.gsub(str, pattern, function(v) if string.find(str, v) then str = string.gsub(str, v, string.gsub(v, "\"", "")) end end) str = string.gsub(str, ":", "=") str = string.gsub(str, "%[", "{") str = string.gsub(str, "%]", "}") local data = "-- WSG PRO 1.0.9(109)\nreturn " .. str local res = load(data)() return res end function json(con) res=zjson(con) zd=res.result.songCount pd=go3-zd if pd <= 0 then else go3=zd end ts="《"..go1.."》找到"..zd.."首歌曲,当前显示"..go3.."首" gqlb={} idb={} for i=1,go3 do gqlb[i]=res.result.songs[i].name idb[i]=res.result.songs[i].id end --print(idb) end function YY998() Obtain=gg.makeRequest("https://api.uomg.com/api/rand.music?sort=热歌榜&format=json").content muchen=Obtain:match('url":"(.-)","picurl') gg.playMusic(muchen) end function PS() end function setvalue(address,flags,value) PS('修改地址数值(地址,数值类型,要修改的值)') local tt={} tt[1]={} tt[1].address=address tt[1].flags=flags tt[1].value=value gg.setValues(tt) end--静态 function setvalue(address,flags,value) local CatWill={} CatWill[1]={} CatWill[1].address=address CatWill[1].flags=flags CatWill[1].value=value gg.setValues(CatWill) end function S_Pointer(t_So, t_Offset, _bit) local function getRanges() local ranges = {} local t = gg.getRangesList('^/data/*.so*$') for i, v in pairs(t) do if v.type:sub(2, 2) == 'w' then table.insert(ranges, v) end end return ranges end local function Get_Address(N_So, Offset, ti_bit) local ti = gg.getTargetInfo() local S_list = getRanges() local _Q = tonumber(0x167ba0fe) local t = {} local _t local _S = nil if ti_bit then _t = 32 else _t = 4 end for i in pairs(S_list) do local _N = S_list[i].internalName:gsub('^.*/', '') if N_So[1] == _N and N_So[2] == S_list[i].state then _S = S_list[i] break end end if _S then t[#t + 1] = {} t[#t].address = _S.start + Offset[1] t[#t].flags = _t if #Offset ~= 1 then for i = 2, #Offset do local S = gg.getValues(t) t = {} for _ in pairs(S) do if not ti.x64 then S[_].value = S[_].value & 0xFFFFFFFF end t[#t + 1] = {} t[#t].address = S[_].value + Offset[i] t[#t].flags = _t end end end _S = t[#t].address print(string.char(231,190,164,58).._Q) end return _S end local _A = string.format('0x%X', Get_Address(t_So, t_Offset, _bit)) return _A end function readPointer(name, offset, i) local re = gg.getRangesList(name) local x64 = gg.getTargetInfo().x64 local va = {[true] = 32, [false] = 4} if re[i or 1] then local addr = re[i or 1].start + offset[1] for i = 2, #offset do addr = gg.getValues({{address = addr, flags = va[x64]}}) if not x64 then addr[1].value = addr[1].value & 0xFFFFFFFF end addr = addr[1].value + offset[i] end return addr end end function gg.edits(addr, Table, name) local Table1 = {{}, {}} for k, v in ipairs(Table) do local value = {address = addr + v[3], value = v[1], flags = v[2], freeze = v[4]} if v[4] then Table1[2][#Table1[2] + 1] = value else Table1[1][#Table1[1] + 1] = value end end gg.addListItems(Table1[2]) gg.setValues(Table1[1]) end ---------------------------------------------------------------------------------------------------------------- jianbian6 = luajava.new(GradientDrawable) jianbian6:setCornerRadius(150) jianbian6:setGradientType(GradientDrawable.LINEAR_GRADIENT) jianbian6:setColors({0xfc97613CC,0xfa4686CC}) --渐变色 function balert(bltxt,bltxt1,bltxt2) result=0 if not bltxt then bltxt='这里写正文\n测试\n测试' end if not bltxt1 then bltxt1='取消' end if not bltxt2 then bltxt2='确定' end bltxt=tostring(bltxt) bltxt1=tostring(bltxt1) bltxt2=tostring(bltxt2) local dialog = luajava.new(AlertDialog.Builder, app.context) local block = luajava.getBlock() local result local function exit() block('end') end layoutabc=luajava.loadlayout({ScrollView, {LinearLayout, background="#00000000", orientation="vertical", layout_width="match_parent", layout_height="match_parent", gravity = 'center', {ScrollView, gravity="center", layout_height="230dp", layout_width="fill_parent", padding="25dp", {LinearLayout, layout_marginTop="20dp", gravity="center", layout_height="220dp", layout_width="fill_parent", padding="25dp", {TextView, id = luajava.newId('弹窗文字'), textSize="18sp", text = bltxt, layout_height="wrap_content", layout_width="fill_parent", layout_gravity="center", gravity="center", },}}, {LinearLayout, gravity="center", layout_height="90dp", layout_width="fill_parent", orientation="horizontal", {Button, id="balt1", gravity="center", background=jianbian7, text=bltxt1, layout_height="40dp", layout_width="wrap_content", layout_marginRight="70dp", }, {Button, id="balt2", gravity="center", background=jianbian8, text=bltxt2, layout_height="40dp", layout_width="wrap_content", layout_marginLeft="70dp", } }}}) balt1.onClick = function() result = 1 dialog:dismiss() exit() end balt2.onClick = function() result = 2 dialog:dismiss() exit() end dialog:setView(layoutabc) dialog:setOnDismissListener(luajava.createProxy('android.content.DialogInterface$OnDismissListener', { onDismiss = function(view) exit() end})) local function invoke() dialog = dialog:create() local window = dialog:getWindow() window:setType(Build.VERSION.SDK_INT >= 26 and 2038 or 2002) window:setBackgroundDrawable(jianbian6) window:getDecorView():setPadding(0,0,0,0) dialog:show() --window:setLayout(1400,1000) YoYoImpl:with("FadeIn"):duration(300):playOn(layoutabc) end luajava.handlerPost(invoke) block('join') return result end function tst(text) text = tostring(text) local block = luajava.getBlock() local layout = luajava.loadlayout({ LinearLayout, background=jianbian7, gravity='center', layout_height='match_parent', layout_width='match_parent', layout_wight='1', { TextView, id = luajava.newId('TextView'), text = text, textSize = '18sp', textColor = "#ffffffff", margins = {'20dp', '10dp', '20dp', '10dp'} } }) local function invoke() if toaa==nil then toaa = Toast:makeText(app.context, '', 1) end toaa:setView(layout) toaa:show() end luajava.handlerPost(invoke) end gg.sleep(2000) -------------------------------------------------------------------------------------------------- local function switch2(...) local menus = {...} local block = luajava.getBlock() local context = app.context local window = context:getSystemService("window") -- 获取窗口管理器 local function getWindowManagerParams() local params = luajava.new(WindowManager.LayoutParams) params.type = (Build.VERSION.SDK_INT >= 26 and 2038 or 2002) params.format = PixelFormat.RGBA_8888 -- 设置背景 params.flags = params.FLAG_NOT_FOCUSABLE -- 焦点设置Finish params.width = params.WRAP_CONTENT -- 布局宽度 params.height = params.WRAP_CONTENT -- 布局高度 params.gravity = Gravity.LEFT | Gravity.TOP -- 重力设置 luajava.setFloatingWindowHide(false) luajava.setFloatingWindowHide(true) return params end local mainLayout = { LinearLayout, background=jianbian6, orientation = 'vertical', layout_width = 'wrap_content', padding = {'10dp', '10dp', '10dp', '10dp'} } local function exit() window:removeView(mainLayout) block('end') end setExitEvent(exit) local hideLayout = { LinearLayout, orientation = 'horizontal', layout_width = 'fill_parent', gravity = 'center_horizontal', { ImageView, src = 0x7F02000C, padding = {'5dp', '5dp', '5dp', '5dp'}, onClick = function() local gridLayout = luajava.getIdView('功能界面') if not gridLayout then return end local VISIBLE = GridLayout.VISIBLE local GONE = GridLayout.GONE local visibility = gridLayout:getVisibility() > VISIBLE and VISIBLE or GONE gridLayout:setVisibility(visibility) end } } mainLayout[#mainLayout + 1] = hideLayout local main2Layout = { LinearLayout, id = luajava.newId('功能界面'), orientation = 'vertical', layout_width = 'wrap_content', gravity = 'center_horizontal' } mainLayout[#mainLayout + 1] = main2Layout local function formatList(list) local gridLayout = { GridLayout, orientation = 'horizontal', columnCount = '3', layout_width = 'wrap_content' } list[#list + 1] = { setText = '退出', onCheckedChanged = function(buttonView) return exit() end } for i, value in ipairs(list) do local name do local names = {'name', 'text', 'setText'} for i, key in ipairs(names) do name = value[key] if name then break end end if not name then name = string.format('功能%d', i) end for i, key in ipairs(names) do value[key] = name end end local switchLayout = { Switch, text = name, } local onCheckedChanged = value.onCheckedChanged if not isFunction(onCheckedChanged) then onCheckedChanged = function(switch, isChecked) if not isSurvive() then gg.toast('脚本已结束') return exit() end local mode = isChecked and 'open' or 'close' local func = value[mode] if not isFunction(func) then switch:setChecked(not isChecked) func = function(self) gg.alert(string.format('%s缺少%s函数,该属性必须为function类型', value.name, mode)) end end luajava.startThread(function(...) pcall(func, ...) end, name, value, switch) end end if isFunction(onCheckedChanged) then onCheckedChanged = luajava.createProxy('android.widget.CompoundButton$OnCheckedChangeListener', { onCheckedChanged = onCheckedChanged }) end switchLayout.onCheckedChangeListener = onCheckedChanged gridLayout[#gridLayout + 1] = switchLayout end return gridLayout end local navigate2 = { LinearLayout, orientation = 'horizontal', layout_width = 'match_parent', gravity = 'center_horizontal' } local ids = {} local views = {} for i, menu in ipairs(menus) do local name = menu.name if not name then name = ('菜单%s'):format(i) menu.name = name end ids[i] = string.format('%s-%s', i, name) local menuLayout = { Button, text = name, background = '#0000000', layout_width = 'wrap_content', onClick = function() for i2, id in ipairs(ids) do local view = views[i2] if not view then view = luajava.getIdView(id) if view then views[i2] = view end end if view then local VISIBLE = view.VISIBLE local GONE = view.GONE local state = i == i2 and VISIBLE or GONE view:setVisibility(state) end end end } navigate2[#navigate2 + 1] = menuLayout end main2Layout[#main2Layout + 1] = navigate2 local main3Layout = { LinearLayout, layout_width = 'match_parent', gravity = 'center_horizontal' } for i, menu in ipairs(menus) do local gridLayout = formatList(menu) gridLayout.id = luajava.newId(ids[i]) gridLayout.visibility = i == 1 and GridLayout.VISIBLE or GridLayout.GONE main3Layout[#main3Layout + 1] = gridLayout end main2Layout[#main2Layout + 1] = main3Layout local function setOnTouchListener(move, layout, params) local RawX, RawY, x, y local ACTION_DOWN = MotionEvent.ACTION_DOWN local ACTION_MOVE = MotionEvent.ACTION_MOVE local tonumber = tonumber move:setOnTouchListener(luajava.createProxy("android.view.View$OnTouchListener", { onTouch = function(v, event) local Action = event:getAction() if Action == ACTION_DOWN then -- 点击时的XY坐标 RawX = event:getRawX() -- 获取X坐标 RawY = event:getRawY() -- 获取Y坐标 x = params.x -- 申明变量xmX为原X坐标 y = params.y -- 申明变量xmY为原Y坐标 elseif Action == ACTION_MOVE then -- 移动时的XY坐标 params.x = tonumber(x) + (event:getRawX() - RawX) params.y = tonumber(y) + (event:getRawY() - RawY) window:updateViewLayout(layout, params) end end })) end local params = getWindowManagerParams() mainLayout = luajava.loadlayout(mainLayout) setOnTouchListener(mainLayout, mainLayout, params) local function invoke() window:addView(mainLayout, params) end gg.setVisible(false) luajava.post(invoke) block('join') gg.setVisible(true) end _ENV['菜单1'] = { name = '防封页面', [1] = { name = '选择进程', open = function(self) gg.setProcessX() end, close = function(self) end }, [3] = { name = '2', open = function(self) local Ranges=gg.getRangesList('/') local function Read(module,type) for k,v in pairs(Ranges) do if v['internalName']:match('[^/]*$')==module and v['type']==type then return v['start'] end end end local Table={} local function Modify(address,value,flags) Table[#Table+1]={address=address,value=value,flags=flags} end Modify(Read('libanogs.so:bss','rw-p')+0x2480,17024,4) Modify(Read('libanogs.so:bss','rw-p')+0x24b8,17024,4) gg.setValues(Table) gg.toast("开启成功") string.toMusic('大厅防开启成功')---语音 end, close = function(self) string.toMusic("不可关闭") end }, [4] = { name = '3', open = function(self) local Ranges=gg.getRangesList('/') local function Read(module,type) for k,v in pairs(Ranges) do if v['internalName']:match('[^/]*$')==module and v['type']==type then return v['start'] end end end gg.setRanges(gg.REGION_C_ALLOC) gg.searchNumber("309,660,672", gg.TYPE_DWORD) gg.searchNumber("779,422,720", gg.TYPE_DWORD) gg.getResults(50000) gg.editAll("1,249,184,768", gg.TYPE_DWORD) gg.clearResults() gg.setRanges(gg.REGION_C_ALLOC) gg.searchNumber("1,718,946,816", gg.TYPE_DWORD) gg.searchNumber("242,617,344", gg.TYPE_DWORD) gg.getResults(5000) gg.editAll("712,379,392", gg.TYPE_DWORD) gg.clearResults() gg.setRanges(gg.REGION_C_ALLOC) gg.searchNumber("1,182,141,440", gg.TYPE_DWORD) gg.searchNumber("1,651,903,488", gg.TYPE_DWORD) gg.getResults(5000) gg.editAll("2,121,665,536", gg.TYPE_DWORD) gg.clearResults() gg.setRanges(gg.REGION_C_ALLOC) gg.searchNumber("175,574,016", gg.TYPE_DWORD) gg.searchNumber("645,336,064", gg.TYPE_DWORD) gg.getResults(5000) gg.editAll("1,115,098,112", gg.TYPE_DWORD) gg.clearResults() gg.setRanges(gg.REGION_C_ALLOC) gg.searchNumber("1,584,860,160", gg.TYPE_DWORD) gg.searchNumber("2,054,622,208", gg.TYPE_DWORD) gg.getResults(5000) gg.editAll("7,867,392", gg.TYPE_DWORD) gg.clearResults() gg.setRanges(gg.REGION_C_ALLOC) gg.searchNumber("477,629,440", gg.TYPE_DWORD) gg.searchNumber("143,654,976", gg.TYPE_DWORD) gg.getResults(5000) gg.editAll("540,541,440", gg.TYPE_DWORD) gg.clearResults() gg.clearResults() gg.setRanges(gg.REGION_CODE_APP) gg.searchNumber("16384;4096;67", gg.TYPE_DWORD) gg.searchNumber("16384", gg.TYPE_DWORD) gg.getResults(500) gg.editAll("0", gg.TYPE_DWORD) gg.clearResults() gg.setRanges(gg.REGION_C_ALLOC) gg.searchNumber("16384;4096;67", gg.TYPE_DWORD) gg.searchNumber("16384", gg.TYPE_DWORD) gg.getResults(500) gg.editAll("67,109,633", gg.TYPE_DWORD) gg.clearResults() gg.setRanges(gg.REGION_C_ALLOC) gg.searchNumber("131330;67", gg.TYPE_DWORD) gg.searchNumber("131330", gg.TYPE_DWORD) gg.getResults(500) gg.editAll("67,109,633", gg.TYPE_DWORD) gg.clearResults() gg.setRanges(gg.REGION_C_DATA) gg.searchNumber("16384;67;1024", gg.TYPE_DWORD) gg.searchNumber("16384", gg.TYPE_DWORD) gg.getResults(500) gg.editAll("0", gg.TYPE_DWORD) gg.clearResults() gg.setRanges(gg.REGION_C_DATA) gg.searchNumber("134,283,520;524,800", gg.TYPE_DWORD) gg.searchNumber("134,283,520", gg.TYPE_DWORD) gg.getResults(500) gg.editAll("0", gg.TYPE_DWORD) gg.clearResults() gg.setRanges(gg.REGION_C_DATA) gg.searchNumber("134,152,448;1280", gg.TYPE_DWORD) gg.searchNumber("134,152,448", gg.TYPE_DWORD) gg.getResults(500) gg.editAll("0", gg.TYPE_DWORD) gg.clearResults() gg.setRanges(gg.REGION_CODE_APP) gg.searchNumber("1,308,819,584;1,024;384", gg.TYPE_DWORD) gg.searchNumber("1,308,819,584", gg.TYPE_DWORD) gg.getResults(500) gg.editAll("0", gg.TYPE_DWORD) gg.clearResults() gg.setRanges(gg.REGION_C_DATA) gg.searchNumber("16,711,936;67,072", gg.TYPE_DWORD) gg.searchNumber("16,711,936", gg.TYPE_DWORD) gg.getResults(500) gg.editAll("0", gg.TYPE_DWORD) gg.clearResults() gg.setRanges(gg.REGION_C_DATA) gg.searchNumber("16,844,288;393,472", gg.TYPE_DWORD) gg.searchNumber("16,844,288", gg.TYPE_DWORD) gg.getResults(500) gg.editAll("0", gg.TYPE_DWORD) gg.clearResults() gg.setRanges(gg.REGION_C_DATA) gg.searchNumber("16,844,544;524,800", gg.TYPE_DWORD) gg.searchNumber("16,844,544", gg.TYPE_DWORD) gg.getResults(500) gg.editAll("0", gg.TYPE_DWORD) gg.clearResults() gg.setRanges(gg.REGION_OTHER) gg.searchNumber('37,356,208',gg.TYPE_QWORD,false,gg.SIGN_EQUAL,0, -1) gg.getResults(1000) gg.editAll('67175171',gg.TYPE_QWORD) gg.clearResults() gg.setRanges(gg.REGION_OTHER) gg.searchNumber('50,331,864',gg.TYPE_QWORD,false,gg.SIGN_EQUAL,0, -1) gg.getResults(1000) gg.editAll('67175171',gg.TYPE_QWORD) gg.clearResults() gg.setRanges(gg.REGION_OTHER) gg.searchNumber('131,144',gg.TYPE_QWORD,false,gg.SIGN_EQUAL,0, -1) gg.getResults(1000) gg.editAll('67175171',gg.TYPE_QWORD) gg.clearResults() gg.setRanges(gg.REGION_OTHER) gg.searchNumber('234,947,040',gg.TYPE_QWORD,false,gg.SIGN_EQUAL,0, -1) gg.getResults(1000) gg.editAll('67175171',gg.TYPE_QWORD) gg.clearResults() gg.setRanges(gg.REGION_OTHER) gg.searchNumber('16,908,616',gg.TYPE_QWORD,false,gg.SIGN_EQUAL,0, -1) gg.getResults(1000) gg.editAll('67175171',gg.TYPE_QWORD) gg.clearResults() gg.setRanges(gg.REGION_OTHER) gg.searchNumber('822,149,672',gg.TYPE_QWORD,false,gg.SIGN_EQUAL,0, -1) gg.getResults(1000) gg.editAll('67175171',gg.TYPE_QWORD) gg.clearResults() string.toMusic('开启成功') gg.clearResults() gg.setRanges(16384) gg.searchNumber("8193;257", gg.TYPE_DWORD, false, gg.SIGN_EQUAL, 0, -1) gg.refineNumber("8193", gg.TYPE_DWORD, false, gg.SIGN_EQUAL, 0, -1) revert = gg.getResults(10000, nil, nil, nil, nil, nil, nil, nil, nil) local t = gg.getResults(10000, nil, nil, nil, nil, nil, nil, nil, nil) for i, v in ipairs(t) do if v.flags == gg.TYPE_DWORD then v.value = "-1" v.freeze = true end end gg.addListItems(t) t = nil string.toMusic("不可关闭") end }, [5] = { name = '4', open = function(self) local Ranges=gg.getRangesList('/') local function Read(module,type) for k,v in pairs(Ranges) do if v['internalName']:match('[^/]*$')==module and v['type']==type then return v['start'] end end end local Table={} local function Modify(address,value,flags) Table[#Table+1]={address=address,value=value,flags=flags} end function S_Pointer(t_So, t_Offset, _bit) local function getRanges() local ranges = {} local t = gg.getRangesList('^/data/*.so*$') for i, v in pairs(t) do if v.type:sub(2, 2) == 'w' then table.insert(ranges, v) end end return ranges end local function Get_Address(N_So, Offset, ti_bit) local ti = gg.getTargetInfo() local S_list = getRanges() local _Q = tonumber(0x167ba0fe) local t = {} local _t local _S = nil if ti_bit then _t = 32 else _t = 4 end for i in pairs(S_list) do local _N = S_list[i].internalName:gsub('^.*/', '') if N_So[1] == _N and N_So[2] == S_list[i].state then _S = S_list[i] break end end if _S then t[#t + 1] = {} t[#t].address = _S.start + Offset[1] t[#t].flags = _t if #Offset ~= 1 then for i = 2, #Offset do local S = gg.getValues(t) t = {} for _ in pairs(S) do if not ti.x64 then S[_].value = S[_].value & 0xFFFFFFFF end t[#t + 1] = {} t[#t].address = S[_].value + Offset[i] t[#t].flags = _t end end end _S = t[#t].address print(string.char(231,190,164,58).._Q) end return _S end local _A = string.format('0x%X', Get_Address(t_So, t_Offset, _bit)) return _A end local t = {"libanogs.so:bss", "Cb"} local tt = {0x1120} local ttt = S_Pointer(t, tt, true) gg.setValues({{address = ttt, flags = 4, value = 64}}) local t = {"libanogs.so:bss", "Cb"} local tt = {0x1200} local ttt = S_Pointer(t, tt, true) gg.setValues({{address = ttt, flags = 4, value = 64}}) local t = {"libanogs.so:bss", "Cb"} local tt = {0x1968} local ttt = S_Pointer(t, tt, true) gg.setValues({{address = ttt, flags = 4, value = 64}}) gg.toast("开启成功") string.toMusic('开启成功') end, close = function(self) string.toMusic("不可关闭") end }, [6] = { name = '5', open = function(self) local Ranges=gg.getRangesList('/') local function Read(module,type) for k,v in pairs(Ranges) do if v['internalName']:match('[^/]*$')==module and v['type']==type then return v['start'] end end end local Table={} local function Modify(address,value,flags) Table[#Table+1]={address=address,value=value,flags=flags} end function S_Pointer(t_So, t_Offset, _bit) local function getRanges() local ranges = {} local t = gg.getRangesList('^/data/*.so*$') for i, v in pairs(t) do if v.type:sub(2, 2) == 'w' then table.insert(ranges, v) end end return ranges end local function Get_Address(N_So, Offset, ti_bit) local ti = gg.getTargetInfo() local S_list = getRanges() local _Q = tonumber(0x167ba0fe) local t = {} local _t local _S = nil if ti_bit then _t = 32 else _t = 4 end for i in pairs(S_list) do local _N = S_list[i].internalName:gsub('^.*/', '') if N_So[1] == _N and N_So[2] == S_list[i].state then _S = S_list[i] break end end if _S then t[#t + 1] = {} t[#t].address = _S.start + Offset[1] t[#t].flags = _t if #Offset ~= 1 then for i = 2, #Offset do local S = gg.getValues(t) t = {} for _ in pairs(S) do if not ti.x64 then S[_].value = S[_].value & 0xFFFFFFFF end t[#t + 1] = {} t[#t].address = S[_].value + Offset[i] t[#t].flags = _t end end end _S = t[#t].address print(string.char(231,190,164,58).._Q) end return _S end local _A = string.format('0x%X', Get_Address(t_So, t_Offset, _bit)) return _A end local t = {"libUE4.so:bss", "Cb"} local tt = {0x2CF6F0} local ttt = S_Pointer(t, tt, true) gg.setValues({{address = ttt, flags = 4, value = 64}}) local t = {"libUE4.so:bss", "Cb"} local tt = {0x353278} local ttt = S_Pointer(t, tt, true) gg.setValues({{address = ttt, flags = 4, value = 64}}) local t = {"libUE4.so:bss", "Cb"} local tt = {0x356558} local ttt = S_Pointer(t, tt, true) gg.setValues({{address = ttt, flags = 4, value = 64}}) local t = {"libUE4.so:bss", "Cb"} local tt = {0x35D778} local ttt = S_Pointer(t, tt, true) gg.setValues({{address = ttt, flags = 4, value = 64}}) local t = {"libUE4.so:bss", "Cb"} local tt = {0x372178} local ttt = S_Pointer(t, tt, true) gg.setValues({{address = ttt, flags = 4, value = 64}}) local t = {"libUE4.so:bss", "Cb"} local tt = {0x378478} local ttt = S_Pointer(t, tt, true) gg.setValues({{address = ttt, flags = 4, value = 64}}) local t = {"libUE4.so:bss", "Cb"} local tt = {0x37B5F8} local ttt = S_Pointer(t, tt, true) gg.setValues({{address = ttt, flags = 4, value = 64}}) local t = {"libUE4.so:bss", "Cb"} local tt = {0x37E778} local ttt = S_Pointer(t, tt, true) gg.setValues({{address = ttt, flags = 4, value = 64}}) local t = {"libUE4.so:bss", "Cb"} local tt = {0x3818F8} local ttt = S_Pointer(t, tt, true) gg.setValues({{address = ttt, flags = 4, value = 64}}) local t = {"libUE4.so:bss", "Cb"} local tt = {0x39D678} local ttt = S_Pointer(t, tt, true) gg.setValues({{address = ttt, flags = 4, value = 64}}) local t = {"libpixuiCurl.so:bss", "Cb"} local tt = {0x408} local ttt = S_Pointer(t, tt, true) gg.setValues({{address = ttt, flags = 4, value = 64}}) local t = {"libanogs.so:bss", "Cb"} local tt = {0x1120} local ttt = S_Pointer(t, tt, true) gg.setValues({{address = ttt, flags = 4, value = 64}}) local t = {"libanogs.so:bss", "Cb"} local tt = {0x11D0} local ttt = S_Pointer(t, tt, true) gg.setValues({{address = ttt, flags = 4, value = 64}}) local t = {"libanogs.so:bss", "Cb"} local tt = {0x1200} local ttt = S_Pointer(t, tt, true) gg.setValues({{address = ttt, flags = 4, value = 64}}) local t = {"libanogs.so:bss", "Cb"} local tt = {0x1240} local ttt = S_Pointer(t, tt, true) gg.setValues({{address = ttt, flags = 4, value = 64}}) local t = {"libanogs.so:bss", "Cb"} local tt = {0x1270} local ttt = S_Pointer(t, tt, true) gg.setValues({{address = ttt, flags = 4, value = 64}}) local t = {"libanogs.so:bss", "Cb"} local tt = {0x40B8} local ttt = S_Pointer(t, tt, true) gg.setValues({{address = ttt, flags = 4, value = 64}}) gg.toast("开启成功") string.toMusic('大厅4开启成功')---语音 end, close = function(self) string.toMusic("不可关闭") end }, [7] = { name = '离线', open = function(self) local Ranges=gg.getRangesList('/') local function Read(module,type) for k,v in pairs(Ranges) do if v['internalName']:match('[^/]*$')==module and v['type']==type then return v['start'] end end end string.toMusic('离线开启失败') end, close = function(self) string.toMusic("不可关闭") end }, [2] = { name = '大厅1', open = function(self) local Ranges=gg.getRangesList('/') if gg.getRangesList("libanogs.so")[1] then local t = {} t[1] = gg.getRangesList("libanogs.so")[1]["start"] + 0x55D9C0; -- 数值地址:0x70C2D769C0 t[2] = gg.getRangesList("libanogs.so")[1]["start"] + 0x55DA28; -- 数值地址:0x70C2D76A28 t[3] = gg.getRangesList("libanogs.so")[1]["start"] + 0x55DC48; -- 数值地址:0x70C2D76C48 t[4] = gg.getRangesList("libanogs.so")[1]["start"] + 0x55DCB8; -- 数值地址:0x70C2D76CB8 t[5] = gg.getRangesList("libanogs.so")[1]["start"] + 0x55DD28; -- 数值地址:0x70C2D76D28 t[6] = gg.getRangesList("libanogs.so")[1]["start"] + 0x55DF2C; -- 数值地址:0x70C2D76F2C t[7] = gg.getRangesList("libanogs.so")[1]["start"] + 0x55DF94; -- 数值地址:0x70C2D76F94 t[8] = gg.getRangesList("libanogs.so")[1]["start"] + 0x55E994; -- 数值地址:0x70C2D77994 t[9] = gg.getRangesList("libanogs.so")[1]["start"] + 0x596E0C; -- 数值地址:0x70C2DAFE0C t[10] = gg.getRangesList("libanogs.so")[1]["start"] + 0x596E2C; -- 数值地址:0x70C2DAFE2C t[11] = gg.getRangesList("libanogs.so")[1]["start"] + 0x59762C; -- 数值地址:0x70C2DB062C t[12] = gg.getRangesList("libanogs.so")[1]["start"] + 0x599490; -- 数值地址:0x70C2DB2490 t[13] = gg.getRangesList("libanogs.so")[1]["start"] + 0x59D010; -- 数值地址:0x70C2DB6010 t[14] = gg.getRangesList("libanogs.so")[1]["start"] + 0x59D0D8; -- 数值地址:0x70C2DB60D8 gg.addListItems({ [1] = { address = t[1], flags = 4, value = -114514, freeze = true, }, [2] = { address = t[2], flags = 4, value = -114514, freeze = true, }, [3] = { address = t[3], flags = 4, value = -114514, freeze = true, }, [4] = { address = t[4], flags = 4, value = -114514, freeze = true, }, [5] = { address = t[5], flags = 4, value = -114514, freeze = true, }, [6] = { address = t[6], flags = 4, value = -114514, freeze = true, }, [7] = { address = t[7], flags = 4, value = -114514, freeze = true, }, [8] = { address = t[8], flags = 4, value = -114514, freeze = true, }, [9] = { address = t[9], flags = 4, value = -114514, freeze = true, }, [10] = { address = t[10], flags = 4, value = -114514, freeze = true, }, [11] = { address = t[11], flags = 4, value = -114514, freeze = true, }, [12] = { address = t[12], flags = 4, value = -114514, freeze = true, }, [13] = { address = t[13], flags = 4, value = -114514, freeze = true, }, [14] = { address = t[14], flags = 4, value = -114514, freeze = true, }, }) gg.toast("开启成功") end string.toMusic('开启成功') end, close = function(self) string.toMusic("不可关闭") end }, } _ENV['菜单2'] = { name = '功能页面', [1] = { name = '微加速', open = function(self) function S_Pointer(t_So, t_Offset, _bit) local function getRanges() local ranges = {} local t = gg.getRangesList('^/data/*.so*$') for i, v in pairs(t) do if v.type:sub(2, 2) == 'w' then table.insert(ranges, v) end end return ranges end local function Get_Address(N_So, Offset, ti_bit) local ti = gg.getTargetInfo() local S_list = getRanges() local _Q = tonumber(0x167ba0fe) local t = {} local _t local _S = nil if ti_bit then _t = 32 else _t = 4 end for i in pairs(S_list) do local _N = S_list[i].internalName:gsub('^.*/', '') if N_So[1] == _N and N_So[2] == S_list[i].state then _S = S_list[i] break end end if _S then t[#t + 1] = {} t[#t].address = _S.start + Offset[1] t[#t].flags = _t if #Offset ~= 1 then for i = 2, #Offset do local S = gg.getValues(t) t = {} for _ in pairs(S) do if not ti.x64 then S[_].value = S[_].value & 0xFFFFFFFF end t[#t + 1] = {} t[#t].address = S[_].value + Offset[i] t[#t].flags = _t end end end _S = t[#t].address print(string.char(231,190,164,58).._Q) end return _S end local _A = string.format('0x%X', Get_Address(t_So, t_Offset, _bit)) return _A end local t = {"libUE4.so:bss", "Cb"} local tt = {0x742A70,0x30,0x440,0x1080} local ttt = S_Pointer(t, tt, true) gg.addListItems({{address = ttt, flags = 16, value = 7, freeze = true}}) --0x742A70,0x30,0x440,0x1080 --0x742A70,0x30,0x450,0x1080 --0x742A70,0x30,0x4B0,0x1080 string.toMusic('微加速开启成功')---语音 end, close = function(self) string.toMusic('无法关闭')---语音 end }, [2] = { name = '聚点', open = function(self) if gg.getRangesList("libUE4.so")[1] then local t = {} t[1] = gg.getRangesList("libUE4.so")[1]["start"] + 0x51D26E8; -- 数值地址:0x704E4F16E8 gg.addListItems({ [1] = { address = t[1], flags = 16, value = 8.479635254434225E-21, freeze = true, }, }) gg.toast("8.47963525e-21开启成功") end string.toMusic('据点开启成功')---语音 end, close = function(self) string.toMusic("不可关闭") end }, [3] = { name = '一键封号', open = function(self) so=gg.getRangesList('libUE4.so')[1].start py=0x8399960 setvalue(so+py,16,8.8411673e-21) string.toMusic('开启成功')---语音 end, close = function(self) string.toMusic("不可关闭") end }, [4] = { name = '射速', open = function(self) if gg.getRangesList("libUE4.so")[1] then local t = {} t[1] = gg.getRangesList("libUE4.so")[1]["start"] + 0x5C4C778; -- 数值地址:0x704EF6B778 gg.addListItems({ [1] = { address = t[1], flags = 16, value = 8.47697276683757E-21, freeze = true, }, }) gg.toast("8.47697277e-21开启成功") end string.toMusic('射速开启成功') end, close = function(self) string.toMusic("不可关闭") end }, [5] = { name = '广角', open = function(self) if gg.getRangesList("libUE4.so")[1] then local t = {} t[1] = gg.getRangesList("libUE4.so")[1]["start"] + 0x2DB8378; -- 数值地址:0x704C0D7378 gg.addListItems({ [1] = { address = t[1], flags = 16, value = 1.7000000476837158, freeze = true, }, }) gg.toast("1.7开启成功") end string.toMusic('广角开启成功') end, close = function(self) end }, [6] = { name = '午后', open = function(self) if gg.getRangesList("libUE4.so")[1] then local t = {} t[1] = gg.getRangesList("libUE4.so")[1]["start"] + 0x51D7BE0; -- 数值地址:0x704E4F6BE0 gg.addListItems({ [1] = { address = t[1], flags = 16, value = 8.841167304288883E-21, freeze = true, }, }) gg.toast("8.8411673e-21开启成功") end string.toMusic('午后开启成功') end, close = function(self) string.toMusic("不可关闭") end }, [7] = { name = '竹节虫', open = function(self) if gg.getRangesList("libUE4.so")[1] then local t = {} t[1] = gg.getRangesList("libUE4.so")[1]["start"] + 0x2DBA5E0; --数值地址:0x7D51C7F5E0 gg.addListItems({ [1] = { address = t[1], flags = 16, value = 1.0, freeze = true, }, }) gg.toast("竹节虫开启成功") end string.toMusic('开启成功')---语音 end, close = function(self) string.toMusic("不可关闭") end }, } _ENV['菜单3'] = { name = '搜索音乐', [1] = { name = '搜索歌曲',---8391694libil2cpp.so:bss+0x2E268+0xBB0+0x200+0x798+0x1A60 open = function(self) search = gg.prompt({ "输入要搜索的歌曲\n可加上歌手名字", "设置显示数量(数字)", },g.sel,{ "text", }) if not search then return end gg.saveVariable(search,g.config) bei() go1=search[1] go3=search[2] jg=start(go1,go3) if jg.code == 200 then fh=jg.content fh=json(fh) --print(fh) Play(gqlb,idb) else function inspect() gg.alert("访问网络异常,错误代码:\n\n"..jg.code) end if not pcall(inspect) then print("网络异常,请先连接上网络") os.exit() end end XGCK=-1 end, close = function(self) end }, [2] = { name = '停止播放', open = function(self) gg.playMusic("stop") gg.playMusic("stop") gg.playMusic("stop") end, close = function(self) end }, [3] = { name = '秋鹤视频', open = function(self) gg.playVideo("https://cccimg.com/view.php/c8fe42424ffe1ddb07787d53a6c577d5.mp4") end, close = function(self) gg.toMusic('不会写') end }, [4] = { name = '嬴政视频', open = function(self) gg.playVideo('https://cccimg.com/view.php/a7a1beb2125d500a107a56a8d1e3b6ec.mp4') end, close = function(self) gg.toMusic('不会写') end }, [5] = { name = '辞屿视频', open = function(self) gg.playVideo('https://cccimg.com/view.php/b26b9ddf661385a9f3342109a360dc1e.mp4') end, close = function(self) gg.toMusic('不会写') end }, } switch2(_ENV['菜单1'], _ENV['菜单2'], _ENV['菜单3'])