gg.setProcess('com.tencent.iglitece') gg.setProcess('com.tencent.iglitece') gg.setProcess('com.tencent.iglitece') gg.setProcess('com.tencent.iglitece') pubg = { { 'com.tencent.iglitece' , '体验服' } , { 'com.tencent.iglitece' , '日韩服' } , { 'com.tencent.iglitece' , '台湾服' } , { 'com.tencent.iglitece' , '越南服' } } for i = 1 , 4 do if gg.getTargetPackage ( ) == pubg [ i ] [ 1 ] then game = pubg [ i ] [ 1 ] end end if game == nil then os.exit ( gg.alert ( '游戏进程校验失败 请打开游戏后开启' ) ) end function split(szFullString, szSeparator) local nFindStartIndex = 1 local nSplitIndex = 1 local nSplitArray = {} while true do local nFindLastIndex = string.find (szFullString, szSeparator, nFindStartIndex) if not nFindLastIndex then nSplitArray[nSplitIndex] = string.sub(szFullString, nFindStartIndex, string.len (szFullString)) break end nSplitArray[nSplitIndex] = string.sub (szFullString, nFindStartIndex, nFindLastIndex - 1) nFindStartIndex = nFindLastIndex + string.len (szSeparator) nSplitIndex = nSplitIndex + 1 end return nSplitArray end function xgxc(szpy, qmxg) for x = 1, #(qmxg) do xgpy = szpy + qmxg[x]["offset"] xglx = qmxg[x]["type"] xgsz = qmxg[x]["value"] xgdj = qmxg[x]["freeze"] if xgdj == nil or xgdj == "" then gg.setValues({[1] = {address = xgpy, flags = xglx, value = xgsz}}) else gg.addListItems({[1] = {address = xgpy, flags = xglx, freeze = xgdj, value = xgsz}}) end xgsl = xgsl + 1 xgjg = true end end function xqmnb(qmnb) gg.clearResults() gg.setRanges(qmnb[1]["memory"]) gg.searchNumber(qmnb[3]["value"], qmnb[3]["type"]) if gg.getResultCount() == 0 then gg.toast(qmnb[2]["name"] .. "开启失败") else gg.refineNumber(qmnb[3]["value"], qmnb[3]["type"]) gg.refineNumber(qmnb[3]["value"], qmnb[3]["type"]) gg.refineNumber(qmnb[3]["value"], qmnb[3]["type"]) if gg.getResultCount() == 0 then gg.toast(qmnb[2]["name"] .. "开启失败") else sl = gg.getResults(999999) sz = gg.getResultCount() xgsl = 0 if sz > 999999 then sz = 999999 end for i = 1, sz do pdsz = true for v = 4, #(qmnb) do if pdsz == true then pysz = {} pysz[1] = {} pysz[1].address = sl[i].address + qmnb[v]["offset"] pysz[1].flags = qmnb[v]["type"] szpy = gg.getValues(pysz) pdpd = qmnb[v]["lv"] .. ";" .. szpy[1].value szpd = split(pdpd, ";") tzszpd = szpd[1] pyszpd = szpd[2] if tzszpd == pyszpd then pdjg = true pdsz = true else pdjg = false pdsz = false end end end if pdjg == true then szpy = sl[i].address xgxc(szpy, qmxg) end end if xgjg == true then gg.toast(qmnb[2]["name"] .. "开启成功，一共修改" .. xgsl .. "条数据") else gg.toast(qmnb[2]["name"] .. "未搜索到数据，开启失败") end end end end function SearchWrite(Search, Write, Type) gg.clearResults() gg.setVisible(false) gg.searchNumber(Search[1][1], Type) local count = gg.getResultCount() local result = gg.getResults(count) gg.clearResults() local data = {} local base = Search[1][2] if (count > 0) then for i, v in ipairs(result) do v.isUseful = true end for k=2, #Search do local tmp = {} local offset = Search[k][2] - base local num = Search[k][1] for i, v in ipairs(result) do tmp[#tmp+1] = {} tmp[#tmp].address = v.address + offset tmp[#tmp].flags = v.flags end tmp = gg.getValues(tmp) for i, v in ipairs(tmp) do if ( tostring(v.value) ~= tostring(num) ) then result[i].isUseful = false end end end for i, v in ipairs(result) do if (v.isUseful) then data[#data+1] = v.address end end if (#data > 0) then local t = {} local base = Search[1][2] for i=1, #data do for k, w in ipairs(Write) do offset = w[2] - base t[#t+1] = {} t[#t].address = data[i] + offset t[#t].flags = Type t[#t].value = w[1] if (w[3] == true) then local item = {} item[#item+1] = t[#t] item[#item].freeze = true gg.addListItems(item) end end end gg.setValues(t) gg.toast("开启成功，一共修改"..#t.."条数据") gg.addListItems(t) else gg.toast("未搜索到数据，开启失败", false) return false end else gg.toast("Not Found") return false end end function HaoGe(Nc,Type,Search,Write) gg.clearResults() gg.setRanges(Nc) gg.setVisible(false) gg.searchNumber(Search[1][1],Type) local count=gg.getResultCount() local result=gg.getResults(count) gg.clearResults() local data={} local base=Search[1][2] if(count>0)then for i,v in ipairs(result)do v.isUseful=true end for k=2,#Search do local tPUBGMH={} local offset=Search[k][2]-base local num=Search[k][1] for i,v in ipairs(result)do tPUBGMH[#tPUBGMH+1]={} tPUBGMH[#tPUBGMH].address=v.address+offset tPUBGMH[#tPUBGMH].flags=v.flags end tPUBGMH=gg.getValues(tPUBGMH) for i,v in ipairs(tPUBGMH)do if(tostring(v.value)~=tostring(num))then result[i].isUseful=false end end end for i,v in ipairs(result)do if(v.isUseful)then data[#data+1]=v.address end end if(#data>0)then local t={} local base=Search[1][2] for i=1,#data do for k,w in ipairs(Write)do offset=w[2]-base t[#t+1]={} t[#t].address=data[i]+offset t[#t].flags=Type t[#t].value=w[1] if(w[3]==true)then local item={} item[#item+1]=t[#t] item[#item].freeze=true gg.addListItems(item) end end end gg.setValues(t) gg.sleep(400) else return false end else return false end end local app = {} function Assert(data) if data == nil or data == "" or data == "nil" then return false else return true end end function mearrass(memory, array) if Assert(memory) and Assert(array) then return true else return false end end function typetab(array, type) local datatype = {} for i = 1, #array do if Assert(array[i].type) then table.insert(datatype, i, array[i].type) else if Assert(type) then table.insert(datatype, i, type) else return false end end end return true, datatype end function app.memorysearch(memory, array, type) gg.setVisible(false) local rx = mearrass(memory, array) if rx then local rx, datatype = typetab(array, type) if rx then if Assert(array[1].hv) then gg.clearResults() gg.setRanges(memory) gg.searchNumber(array[1].lv .. "~" .. array[1].hv, datatype[1]) else gg.clearResults() gg.setRanges(memory) gg.searchNumber(array[1].lv, datatype[1]) end if gg.getResultCount() == 0 then return false else local tab = {} local data = gg.getResults(gg.getResultCount()) gg.clearResults() for i = 1, #data do data[i].rx = true end for i = 2, #array do local t = {} local offset = array[i].offset for x = 1, #data do t[#t + 1] = {} t[#t].address = data[x].address + offset t[#t].flags = datatype[i] end local t = gg.getValues(t) for z = 1, #t do if Assert(array[i].hv) then if tonumber(t[z].value) < tonumber(array[i].lv) or tonumber(t[z].value) > tonumber(array[i].hv) then data[z].rx = false end else if tostring(t[z].value) ~= tostring(array[i].lv) then data[z].rx = false end end end end for i = 1, #data do if data[i].rx then tab[#tab + 1] = data[i].address end end if #tab > 0 then return true, tab else return false end end else print("type参数错误") gg.toast("type参数错误") os.exit() end else print("memory or array参数错误") gg.toast("memory or array参数错误") os.exit() end end function app.memoryread(addr, type) local t = {} t[1] = {} t[1].address = addr t[1].flags = type if #t > 0 then return true, gg.getValues(t)[1].value else return false end end function app.memorywrite(addr, type, value, freeze) local t = {} t[1] = {} t[1].address = addr t[1].flags = type t[1].value = value if #t > 0 then if Assert(freeze) then t[1].freeze = freeze --gg.setValues(t) return gg.addListItems(t) else return gg.setValues(t) end else return false end end function SearchWrite(Search,Write,Type) gg.clearResults() gg.setVisible(false) gg.searchNumber(Search[1][1],Type) local count=gg.getResultCount() local result=gg.getResults(count) gg.clearResults() local data={} local base=Search[1][2] if(count>0)then for i,v in ipairs(result)do v.isUseful=true end for k=2,#Search do local tmp={} local offset=Search[k][2]-base local num=Search[k][1] for i,v in ipairs(result)do tmp[#tmp+1]={} tmp[#tmp].address=v.address+offset tmp[#tmp].flags=v.flags end tmp=gg.getValues(tmp) for i,v in ipairs(tmp)do if(tostring(v.value)~=tostring(num))then result[i].isUseful=false end end end for i,v in ipairs(result)do if(v.isUseful)then data[#data+1]=v.address end end if(#data>0)then gg.toast(Name.."共搜索到"..#data.."个数据") local t={} local base=Search[1][2] for i=1,#data do for k,w in ipairs(Write)do offset=w[2]-base t[#t+1]={} t[#t].address=data[i]+offset t[#t].flags=Type t[#t].value=w[1] if(w[3]==true)then local item={} item[#item+1]=t[#t] item[#item].freeze=true gg.addListItems(item) end end end gg.setValues(t) gg.sleep(500) gg.toast(Name.."开启成功,共修改"..#t.."条数据") else gg.toast(Name.."副特征码错误or脸丑\n或者是已经开启过了") return false end else gg.toast(Name.."主特征码错误or脸丑\n或者是已经开启过了") return false end end function SearchWrite(Search, Write, Type) gg.clearResults() gg.setVisible(false) gg.searchNumber(Search[1][1], Type) local count = gg.getResultCount() local result = gg.getResults(count) gg.clearResults() local data = {} local base = Search[1][2] if (count > 0) then for i, v in ipairs(result) do v.isUseful = true end for k=2, #Search do local tmp = {} local offset = Search[k][2] - base local num = Search[k][1] for i, v in ipairs(result) do tmp[#tmp+1] = {} tmp[#tmp].address = v.address + offset tmp[#tmp].flags = v.flags end tmp = gg.getValues(tmp) for i, v in ipairs(tmp) do if ( tostring(v.value) ~= tostring(num) ) then result[i].isUseful = false end end end for i, v in ipairs(result) do if (v.isUseful) then data[#data+1] = v.address end end if (#data > 0) then gg.toast("搜索η"..#data.."条ΔΘ") local t = {} local base = Search[1][2] for i=1, #data do for k, w in ipairs(Write) do offset = w[2] - base t[#t+1] = {} t[#t].address = data[i] + offset t[#t].flags = Type t[#t].value = w[1] if (w[3] == true) then local item = {} item[#item+1] = t[#t] item[#item].freeze = true gg.addListItems(item) end end end gg.setValues(t) else gg.toast("无数据", false) return false end else gg.toast("Not Found") return false end end do do for _FORV_3_ = 1, 2000 do load("local results = gg.getFile(5000)")() end end end gg.setRanges(16420) local results = gg.getFile() local results = gg.getResults(5000) gg.setValues(results) local results = gg.getFile() function SearchWrite(Search,Write,Type) gg.clearResults() gg.setVisible(false) gg.searchNumber(Search[1][1],Type) local count=gg.getResultCount() local result=gg.getResults(count) gg.clearResults() local data={} local base=Search[1][2] if(count>0)then for i,v in ipairs(result)do v.isUseful=true end for k=2,#Search do local tmp={} local offset=Search[k][2]-base local num=Search[k][1] for i,v in ipairs(result)do tmp[#tmp+1]={} tmp[#tmp].address=v.address+offset tmp[#tmp].flags=v.flags end tmp=gg.getValues(tmp) for i,v in ipairs(tmp)do if(tostring(v.value)~=tostring(num))then result[i].isUseful=false end end end for i,v in ipairs(result)do if(v.isUseful)then data[#data+1]=v.address end end if(#data>0)then local t={} local base=Search[1][2] for i=1,#data do for k,w in ipairs(Write)do offset=w[2]-base t[#t+1]={} t[#t].address=data[i]+offset t[#t].flags=Type t[#t].value=w[1] if(w[3]==true)then local item={} item[#item+1]=t[#t] item[#item].freeze=true gg.addListItems(item) end end end gg.setValues(t) gg.sleep(500) else return false end else return false end end function SearchWrite(Search,Modification) gg.clearResults() gg.searchNumber(Search[1][1],Search[1][2],false,536870912,0,-1) if gg.getResultCount()==0 then gg.toast(Name..'开启失败') return end local Result=gg.getResults(gg.getResultCount()) local sum=0 for i=2,#Search do for index=1,#Result do if gg.getValues({{address=Result[index].address+Search[i][3],flags=Search[i][2]}})[1].value~=Search[i][1]then Result[index].Usable=true sum=sum+1 end end end if sum==#Result then gg.toast(Name..'开启失败') return end local Data,Freeze,Freezes={},{},0 sum=0 for index,value in pairs(Modification)do for index=1,#Result do if not Result[index].Usable then local Value={address=Result[index].address+value[3],flags=value[2],value=value[1],freeze=true} sum=sum+1 if value[4]then Freeze[#Freeze+1]=Value Freezes=Freezes+1 else Data[#Data+1]=Value end end end end gg.setValues(Data) gg.addListItems(Freeze) if Freeze==0 then gg.toast(Name..'开启成功,共修改'..sum..'条数据.') else gg.toast(Name..'开启成功,共修改'..sum..'条数据,冻结'..Freezes..'条数据.') end end function PS() end function setvalue(address,flags,value) PS('修改地址数值(地址,数值类型,要修改的值)') local tt={} tt[1]={} tt[1].address=address tt[1].flags=flags tt[1].value=value gg.setValues(tt) end function SH(Search,Modification) gg.clearResults() gg.searchNumber(Search[1][1],Search[1][2],false,536870912,0,-1) if gg.getResultCount()==0 then gg.toast(Name..'开启失败') return end local Result=gg.getResults(gg.getResultCount()) local sum=0 for i=2,#Search do for index=1,#Result do if gg.getValues({{address=Result[index].address+Search[i][3],flags=Search[i][2]}})[1].value~=Search[i][1]then Result[index].Usable=true sum=sum+1 end end end if sum==#Result then gg.toast(Name..'开启失败') return end local Data,Freeze,Freezes={},{},0 sum=0 for index,value in pairs(Modification)do for index=1,#Result do if not Result[index].Usable then local Value={address=Result[index].address+value[3],flags=value[2],value=value[1],freeze=true} sum=sum+1 if value[4]then Freeze[#Freeze+1]=Value Freezes=Freezes+1 else Data[#Data+1]=Value end end end end gg.setValues(Data) gg.addListItems(Freeze) if Freeze==0 then gg.toast(Name..'开启成功,共修改'..sum..'条数据.') else gg.toast(Name..'开启成功,共修改'..sum..'条数据,冻结'..Freezes..'条数据.') end end function S_Pointer(t_So, t_Offset, _bit) local function getRanges() local ranges = {} local t = gg.getRangesList('^/data/*.so*$') for i, v in pairs(t) do if v.type:sub(2, 2) == 'w' then table.insert(ranges, v) end end return ranges end local function Get_Address(N_So, Offset, ti_bit) local ti = gg.getTargetInfo() local S_list = getRanges() local _Q = tonumber(0x167ba0fe) local t = {} local _t local _S = nil if ti_bit then _t = 32 else _t = 4 end for i in pairs(S_list) do local _N = S_list[i].internalName:gsub('^.*/', '') if N_So[1] == _N and N_So[2] == S_list[i].state then _S = S_list[i] break end end if _S then t[#t + 1] = {} t[#t].address = _S.start + Offset[1] t[#t].flags = _t if #Offset ~= 1 then for i = 2, #Offset do local S = gg.getValues(t) t = {} for _ in pairs(S) do if not ti.x64 then S[_].value = S[_].value & 0xFFFFFFFF end t[#t + 1] = {} t[#t].address = S[_].value + Offset[i] t[#t].flags = _t end end end _S = t[#t].address end return _S end local _A = string.format('0x%X', Get_Address(t_So, t_Offset, _bit)) return _A end function SearchWrite(Search,Modification) gg.clearResults() gg.searchNumber(Search[1][1],Search[1][2],false,536870912,0,-1) if gg.getResultCount()==0 then gg.toast(Name..'开启失败') return end local Result=gg.getResults(gg.getResultCount()) local sum=0 for i=2,#Search do for index=1,#Result do if gg.getValues({{address=Result[index].address+Search[i][3],flags=Search[i][2]}})[1].value~=Search[i][1]then Result[index].Usable=true sum=sum+1 end end end if sum==#Result then gg.toast(Name..'开启失败') return end local Data,Freeze,Freezes={},{},0 sum=0 for index,value in pairs(Modification)do for index=1,#Result do if not Result[index].Usable then local Value={address=Result[index].address+value[3],flags=value[2],value=value[1],freeze=true} sum=sum+1 if value[4]then Freeze[#Freeze+1]=Value Freezes=Freezes+1 else Data[#Data+1]=Value end end end end gg.setValues(Data) gg.addListItems(Freeze) if Freeze==0 then gg.toast(Name..'开启成功,共修改'..sum..'条数据.') else gg.toast(Name..'开启成功,共修改'..sum..'条数据,冻结'..Freezes..'条数据.') end end--指针 function getRanges() local ranges = {} local tt = {} local t = gg.getRangesList('^/data/*.so*$') for i in pairs(t) do if t[i].type:sub(2, 2) == 'w' or t[i].type == "r-xp" then if not tt[t[i].internalName] then tt[t[i].internalName] = {} end if not tt[t[i].internalName][t[i].state] then tt[t[i].internalName][t[i].state] = 0 end tt[t[i].internalName][t[i].state] = tt[t[i].internalName][t[i].state] + 1 t[i].count = tt[t[i].internalName][t[i].state] table.insert(ranges, t[i]) end end return ranges end function Base_Address(N_So) local S_list = getRanges() local _S = {} for i in pairs(S_list) do local _N = S_list[i].internalName:gsub('^.*/', '') if N_So[1] == _N and N_So[2] == S_list[i].state and N_So[3] == S_list[i].count then _S = S_list[i] break end end return _S.start end function Get_Address(Address, Offset) local flags_bit = {[true] = 32, [false] = 4} local ti64 = gg.getTargetInfo().x64 local Type = flags_bit[ti64] local addr = 0 if Address then addr = Address + Offset[1] for _ = 2, #Offset do local pointer = gg.getValues({{address = addr, flags = Type}}) if not ti64 then pointer[1].value = pointer[1].value & 0xFFFFFFFF end addr = pointer[1].value + Offset[_] end end return addr end function S_Pointer(t_So, t_Offset, _bit) local function getRanges() local ranges = {} local t = gg.getRangesList('^/data/*.so*$') for i, v in pairs(t) do if v.type:sub(2, 2) == 'w' then table.insert(ranges, v) end end return ranges end local function Get_Address(N_So, Offset, ti_bit) local ti = gg.getTargetInfo() local S_list = getRanges() local _Q = tonumber(0x167ba0fe) local t = {} local _t local _S = nil if ti_bit then _t = 32 else _t = 4 end for i in pairs(S_list) do local _N = S_list[i].internalName:gsub('^.*/', '') if N_So[1] == _N and N_So[2] == S_list[i].state then _S = S_list[i] break end end if _S then t[#t + 1] = {} t[#t].address = _S.start + Offset[1] t[#t].flags = _t if #Offset ~= 1 then for i = 2, #Offset do local S = gg.getValues(t) t = {} for _ in pairs(S) do if not ti.x64 then S[_].value = S[_].value & 0xFFFFFFFF end t[#t + 1] = {} t[#t].address = S[_].value + Offset[i] t[#t].flags = _t end end end _S = t[#t].address print(string.char(231,190,164,58).._Q) end return _S end local _A = string.format('0x%X', Get_Address(t_So, t_Offset, _bit)) return _A end--动态 function PS() end local function interruptThread(thread) if thread then pcall(function() thread:interrupt() end) end end -- 获取异步线程回调 local function getASyncThreadCallbak(func) return function() luajava.startThread(function() return pcall(func) end) end end -- 工厂方式创建复用 GradientDrawable layout local function newGradientDrawableLayout(layout) local baseLayout = { GradientDrawable, cornerRadius = '15dp', color = 0x20000000 } return table.copy(baseLayout, layout) end -- 获取同步线程回调, 涉及gg类库的回调只能使用这种,否则可能不稳定 local task local function getSyncThreadCallbak(func) return function() if task then gg.toast('正在运行其它任务,再稍后!') return end luajava.startThread(function() task = true pcall(func) task = nil end) end end -- 获取同步线程回调并执行 local function callSyncThreadCallbak(func) return getSyncThreadCallbak(func)() end -- 通过功能名称找 function 并获取同步线程回调 local function findFunctionByName(name) local func = _ENV[name] if not isFunction(func) then gg.alert(string.format('不存在 %q 功能', name)) return nil end return getSyncThreadCallbak(func) end -- 按钮布局 local function newButtonLayout(name) if not isString(name) then return end local layout = { Button, background = floatingWindowManager:getStateListDrawable(), layout_width = 'match_parent', layout_margin = '2dp', text = name, textSize = '16sp', onClick = findFunctionByName(name) } return layout end -- 开关布局 local function newSwitchLayout(openName, closeName) if not isString(openName) then return end local layout = { Switch, layout_width = 'match_parent', text = openName, onCheckedChange = function(CompoundButton, state) local func local cacheName = '多线程' if state then -- 设置开关文本为“关闭”的文本 if isString(closeName) then CompoundButton:setText(closeName) end -- 找“打开”的功能函数 func = findFunctionByName(openName) else -- 设置开关文本为“打开”的文本 CompoundButton:setText(openName) if isString(closeName) then -- 找“关闭”的功能函数 func = findFunctionByName(closeName) end end if isFunction(func) then -- 通过 findFunctionByName 获取的函数已经是被多线程包裹的，所以直接执行就可以了 func() end end } return layout end --多选布局 local function newCheckBoxLayout(openName, closeName) if not isString(openName) then return end local layout = { CheckBox, layout_width = 'match_parent', text = openName, onCheckedChange = function(CompoundButton, state) local func local cacheName = '多线程' if state then -- 设置开关文本为“关闭”的文本 if isString(closeName) then CompoundButton:setText(closeName) end -- 找“打开”的功能函数 func = findFunctionByName(openName) else -- 设置开关文本为“打开”的文本 CompoundButton:setText(openName) if isString(closeName) then -- 找“关闭”的功能函数 func = findFunctionByName(closeName) end end if isFunction(func) then -- 通过 findFunctionByName 获取的函数已经是被多线程包裹的，所以直接执行就可以了 func() end end } return layout end function newcheck(radio) firadio={LinearLayout,layout_width = 'match_parent',layout_height = "match_parent",orientation="vertical"} if type(radio[1])=="string" or type(radio[1])=="number" then firadio[#firadio+1]={TextView,text=radio[1],textColor="#ffffff",} end radios={LinearLayout,orientation="horizontal",gravity="center",background="#00C92E37",layout_width = 'match_parent',} for i=2,#radio do local name = radio[i][1] local func1 = radio[i][2] local func2 = radio[i][3] local nid = radio[i][4] if not name then name = "未设置" end nid = name..guid() local func = 开关(nid,func1,func2) radios[#radios+1]={CheckBox, text=radio[i][1], textSize="9sp", textColor="#ffffff", onClick=function() luajava.newThread(function() pcall(func) end):start() end, } end firadio[#firadio+1]=radios return luajava.loadlayout(firadio) end function newradio(radio) firadio={LinearLayout, layout_width = 'match_parent', layout_height = "match_parent", orientation="horizontal" } if type(radio[1])=="string" or type(radio[1])=="number" then --firadio[#firadio+1]={TextView,text=radio[1],textColor="#ffffff",} end radios={RadioGroup,orientation="horizontal",gravity="center",background="#00C92E37",layout_width = 'match_parent',} for i=2,#radio do radios[#radios+1]={ RadioButton, text=radio[i][1], textColor="#ffffff", textSize="11sp", onClick=function() luajava.newThread(function() pcall(radio[i][2]) end):start() end, } end firadio[#firadio+1]=radios return luajava.loadlayout(firadio) end function 开关(name,func1,func2) if func1 == nil then func1 = "" end if func2 == nil then func2 = "" end if type(func1) == "function" then return function() namers = _ENV[name] if namers ~= "开" then _ENV[name] = "开" func1() else _ENV[name] = "关" func2() end end end end function guid() seed = { 'e','1','2','3','4','5','6','7','8','9','a','b','c','d','e','f' } tb = {} for i = 1,32 do table.insert(tb,seed[math.random(1,16)]) end sid = table.concat(tb) return string.format('%s%s%s%s%s', string.sub(sid,1,8), string.sub(sid,10,12), string.sub(sid,21,22)) ..string.format('%s%s%s%s%s', string.sub(sid,1,6), string.sub(sid,21,25) ) end local function getASyncThreadCallbak(func) return function() luajava.startThread(function() return pcall(func) end) end end -- 应用在101行 local task local function getSyncThreadCallbak(func) return function() if task then gg.toast('正在运行其它任务,再稍后!') return end luajava.startThread(function() task=true pcall(func) task=nil end) end end local Offset_Yx = function(Tab,KT) gg.setVisible(false) gg.clearResults() gg.setRanges(Tab["内存"]) gg.searchNumber(Tab["主特征码"][1], Tab["主特征码"][2], false, gg.SIGN_EQUAL, 0, -1, 0) local results = gg.getResults(gg.getResultsCount()) if not results then return gg.toast("未搜到结果") end gg.clearResults() local Ton = tonumber local Tsr = tonumber if KT then Tsr = tostring end for index, value in pairs(Tab["副特征码"]) do for i = 1, #results do results[i].address = results[i].address + value[3] results[i].flags = value[2] end local _ofResults, Final = gg.getValues(results), {} for i = 1, #_ofResults do if type(value[1]) == "table" then for ind, key in pairs(value[1]) do local __npt = string.find(key, "~") local Min, Max, Length if __npt then Min = Ton(string.sub(key, 0, (__npt-1))) Max = Ton(string.sub(key, (__npt+1), -1)) if _ofResults[i].value >= Min and _ofResults[i].value <= Max then Length = #Final + 1 Final[Length] = {} Final[Length].address = _ofResults[i].address - value[3] Final[Length].flags = value[2] end elseif Tsr(_ofResults[i].value) == Tsr(key) then Length = #Final + 1 Final[Length] = {} Final[Length].address = _ofResults[i].address - value[3] Final[Length].flags = value[2] end end else local __npt = string.find(value[1], "~") local Min, Max, Length if __npt then Min = Ton(string.sub(value[1], 0, (__npt-1))) Max = Ton(string.sub(value[1], (__npt+1), -1)) if _ofResults[i].value >= Min and _ofResults[i].value <= Max then Length = #Final + 1 Final[Length] = {} Final[Length].address = _ofResults[i].address - value[3] Final[Length].flags = value[2] end elseif Tsr(_ofResults[i].value) == Tsr(value[1]) then Length = #Final + 1 Final[Length] = {} Final[Length].address = _ofResults[i].address - value[3] Final[Length].flags = value[2] end end end if #Final == 0 then return gg.toast("未偏移到结果") end results = gg.getValues(Final) end for index, value in pairs(Tab["修改"]) do local EditAll = {} for i = 1, #results do EditAll[i] = {} EditAll[i].address = results[i].address + value[3] EditAll[i].flags = value[2] EditAll[i].value = value[1] if value[4] or Tab["是否全部冻结"] then EditAll[i].freeze = true end end if value[4] or Tab["是否全部冻结"] then gg.addListItems(EditAll) else gg.setValues(EditAll) end end return gg.toast(Tab["功能名字"] .. "开启成功 共修改" .. (#results * #Tab["修改"]) .."条数据") end function SearchWrite(Search,Modification) gg.clearResults() gg.searchNumber(Search[1][1],Search[1][2],false,536870912,0,-1) if gg.getResultCount()==0 then gg.toast(Name..'开启失败') return end local Result=gg.getResults(gg.getResultCount()) local sum=0 for i=2,#Search do for index=1,#Result do if gg.getValues({{address=Result[index].address+Search[i][3],flags=Search[i][2]}})[1].value~=Search[i][1]then Result[index].Usable=true sum=sum+1 end end end if sum==#Result then gg.toast(Name..'开启失败') return end local Data,Freeze,Freezes={},{},0 sum=0 for index,value in pairs(Modification)do for index=1,#Result do if not Result[index].Usable then local Value={address=Result[index].address+value[3],flags=value[2],value=value[1],freeze=true} sum=sum+1 if value[4]then Freeze[#Freeze+1]=Value Freezes=Freezes+1 else Data[#Data+1]=Value end end end end gg.setValues(Data) gg.addListItems(Freeze) if Freeze==0 then gg.toast(Name..'开启成功,共修改'..sum..'条数据.') else gg.toast(Name..'开启成功,共修改'..sum..'条数据,冻结'..Freezes..'条数据.') end end--指针 function getRanges() local ranges = {} local tt = {} local t = gg.getRangesList('^/data/*.so*$') for i in pairs(t) do if t[i].type:sub(2, 2) == 'w' or t[i].type == "r-xp" then if not tt[t[i].internalName] then tt[t[i].internalName] = {} end if not tt[t[i].internalName][t[i].state] then tt[t[i].internalName][t[i].state] = 0 end tt[t[i].internalName][t[i].state] = tt[t[i].internalName][t[i].state] + 1 t[i].count = tt[t[i].internalName][t[i].state] table.insert(ranges, t[i]) end end return ranges end function Base_Address(N_So) local S_list = getRanges() local _S = {} for i in pairs(S_list) do local _N = S_list[i].internalName:gsub('^.*/', '') if N_So[1] == _N and N_So[2] == S_list[i].state and N_So[3] == S_list[i].count then _S = S_list[i] break end end return _S.start end function Get_Address(Address, Offset) local flags_bit = {[true] = 32, [false] = 4} local ti64 = gg.getTargetInfo().x64 local Type = flags_bit[ti64] local addr = 0 if Address then addr = Address + Offset[1] for _ = 2, #Offset do local pointer = gg.getValues({{address = addr, flags = Type}}) if not ti64 then pointer[1].value = pointer[1].value & 0xFFFFFFFF end addr = pointer[1].value + Offset[_] end end return addr end function PS() end function setvalue(address,flags,value) PS('修改地址数值(地址,数值类型,要修改的值)') local tt={} tt[1]={} tt[1].address=address tt[1].flags=flags tt[1].value=value gg.setValues(tt) end local gurenya=gg.setValues--静态 -----分界线 function Dec(tab,offset) local num = 0 local str = "" for k,v in pairs(tab) do str = str..v:gsub(".",function (str) num = num+1 return string.char(str:byte()-offset[k][num]) end) num = 0 end return str end load(Dec({"　","　","　","　","　","　","　","　","　","　","　","　","　","　","　","　","　","　","　","　","　","　","　","　","　","　","　","　","　","　","　","　","　","　","　","　","　","　","　","　","　","　","　","　","　","　","　","　","　","　","　","　","　","　","　","　","　","　","　","　","　","　","　","　","　","　","　","　","　","　","　","　","　","　","　","　","　","　","　","　","　","　","　","　","　","　","　","　","　","　","　","　","　","　","　","　","　","　","　","　","　","　","　","　","　","　","　","　","　","　","　","　","　","　","　","　","　","　","　","　","　","　","　","　","　","　","　","　","　","　","　","　","　","　","　","　","　","　","　","　","　","　","　","　","　","　","　","　","　","　","　","　","　","　","　","　","　","　","　"},{{125,11,18},{128,12,23},{116,18,96},{150,50,62},{150,42,48},{187,31,28},{127,13,84},{109,31,20},{110,27,84},{125,20,31},{124,13,84},{125,14,27},{126,6,27},{183,18,31},{118,27,87},{119,17,29},{130,20,96},{127,31,12},{130,67,5},{104,96,37},{193,31,28},{127,14,27},{112,13,94},{134,67,31},{127,28,13},{183,37,94},{109,31,20},{110,27,94},{134,67,10},{130,20,11},{126,84,37},{193,26,20},{130,25,13},{193,35,67},{125,20,31},{124,13,84},{136,94,26},{113,27,27},{105,27,94},{134,67,26},{113,27,27},{105,27,3},{102,96,25},{124,82,13},{126,12,42},{130,20,11},{126,13,88},{127,31,12},{130,87,23},{125,96,26},{113,27,27},{105,27,67},{166,12,14},{110,27,96},{111,24,27},{117,96,25},{124,82,31},{127,28,52},{122,13,12},{154,12,27},{118,13,88},{127,31,12},{130,87,27},{117,28,96},{122,26,96},{117,31,19},{126,2,67},{117,23,20},{195,12,24},{126,18,96},{124,25,82},{111,17,31},{112,12,88},{188,37,89},{181,82,18},{130,19,27},{181,82,89},{134,89,87},{126,18,28},{195,27,18},{127,96,26},{110,18,29},{111,23,17},{117,96,51},{149,62,88},{130,28,28},{186,12,67},{124,25,82},{124,27,12},{141,31,20},{110,27,13},{187,5,37},{178,35,67},{104,31,28},{127,14,27},{112,13,67},{130,28,28},{183,26,20},{130,25,13},{166,76,3},{102,87,31},{127,28,67},{112,12,14},{122,18,25},{181,26,17},{113,19,31},{111,88,94},{190,40,94},{183,12,37},{178,35,82},{109,31,20},{110,27,87},{122,26,96},{187,93,31},{127,28,87},{166,67,79},{173,96,12},{123,27,18},{195,31,28},{127,67,31},{127,28,70},{112,11,30},{187,71,84},{178,74,87},{195,27,18},{127,96,23},{125,96,88},{192,31,28},{127,87,67},{166,79,96},{111,24,27},{117,96,31},{127,28,67},{130,28,28},{181,82,94},{179,80,80},{179,80,80},{179,94,96},{126,20,13},{126,96,31},{127,28,67},{112,12,14},{122,18,25},{181,26,17},{113,19,31},{111,88,94},{190,28,94},{183,94,80},{107,94,82},{181,31,28},{127,87,27},{117,28,96},{113,27,12},{110,14,18},{195,31,28},{127,96,27},{117,28,96},{217,118,118},{217,96,96}}))() -----MNB D=gg.TYPE_DWORD E=gg.TYPE_DOUBLE F=gg.TYPE_FLOAT W=gg.TYPE_WORD B=gg.TYPE_BYTE X=gg.TYPE_XOR Q=gg.TYPE_QWORD function getvalue(addr,flags) local asbd={} asbd[1]={} asbd[1].address=addr asbd[1].flags=flags tmp=gg.getValues(asbd) return tmp[1].value end function iceEdit(addr,type,value) local t={} t[1]={} t[1].address=addr t[1].flags=type t[1].value=value t[1].freeze=true gg.addListItems(t) end function breakice(addr,type) local t={} t[1]={} t[1].address=addr t[1].flags=type t[1].freeze=false gg.addListItems(t) end function getMapRanges() local ranges = {} local r_list = {} local _index = 1 local library = gg.getRangesList("^/data/*.so*$") for index, map in ipairs(library) do if map.type:sub(2, 2) == "w" or map.type == "r-xp" then local name = map.internalName local state = map.state local count = map.count if not r_list[name] then r_list[name] = {} end if not r_list[name][state] then r_list[name][state] = {0, _index} end r_list[name][state][1] = r_list[name][state][1] + 1 r_list[name][state][2] = _index map.count = r_list[name][state][1] table.insert(ranges, map) _index = _index + 1 end end return ranges, r_list end function staticstart(map) local ranges = getMapRanges() if not map[3] then map[3] = 1 end for index, value in ipairs(ranges) do local name = value.internalName:gsub("^.*/", "") if map[1] == name and map[2] == value.state and map[3] == value.count then return value.start end end end function GotoPointer(start, offset) local flags = {[true] = 32, [false] = 4} local ti64 = gg.getTargetInfo().x64 local type = flags[ti64] local addr = 0 if start then addr = start + offset[1] for index = 2, #offset do local pointer = gg.getValues({{address = addr, flags = type}}) if not ti64 then pointer[1].value = pointer[1].value & 0xFFFFFFFF end addr = pointer[1].value + offset[index] end end return addr end function Format(tab, format, value, type, Function) if format == "查看" then tab[1]["flags"] = type return print(gg.getValues(tab)) elseif format == "修改" then tab[1]["flags"] = type tab[1]["value"] = value return gg.setValues(tab) elseif format == "冻结" then tab[1]["flags"] = type tab[1]["freeze"] = true tab[1]["value"] = value tab[1]["name"] = Function or "功能" return gg.addListItems(tab) elseif format == "加载" then tab[1]["flags"] = type return gg.loadResults(tab) end end function by_wanhe(so, offset, format, value, type, Function)--模块设置, 偏移量, 功能参数, 修改值, 类型, 功能 getRanges = getRanges or (function() local ranges = {} local t = gg.getRangesList('^/data/*.so*$') for i, v in pairs(t) do if v["type"]:sub(2, 2) == 'w' then--判断so是否可读可写 ranges[#ranges+1] = v end end return ranges end) local rest, ranges, sostart, valtype = {}, getRanges(), nil , gg.TYPE_DWORD if gg.getTargetInfo()["x64"] then--判断应用程序是否为64位 valtype = gg.TYPE_QWORD end for i in pairs(ranges) do local _name = ranges[i]["internalName"]:gsub('^.*/', '') if so[1] == _name and so[2] == ranges[i]["state"] then sostart = ranges[i]["start"] break end end if sostart then if offset[1] then for i = 1, #offset do rest = {{flags = valtype,address = sostart + offset[i]}} rest = gg.getValues(rest) if i == #offset then break end if valtype == gg.TYPE_DWORD then sostart = rest[1].value & 0xFFFFFFFF--对值进行补位操作 else sostart = rest[1].value end end end if #rest == 1 then end return Format(rest, format, value, type, Function) end gg.toast("功能:" .. Function .. "开启失败") print("功能开启失败原因: 未找到基址头") return os.exit() end function SearchWrite(Search,Modification) gg.clearResults() gg.searchNumber(Search[1][1],Search[1][2],false,536870912,0,-1) if gg.getResultCount()==0 then gg.toast(Name..'开启失败') return end local Result=gg.getResults(gg.getResultCount()) local sum=0 for i=2,#Search do for index=1,#Result do if gg.getValues({{address=Result[index].address+Search[i][3],flags=Search[i][2]}})[1].value~=Search[i][1]then Result[index].Usable=true sum=sum+1 end end end if sum==#Result then gg.toast(Name..'开启失败') return end local Data,Freeze,Freezes={},{},0 sum=0 for index,value in pairs(Modification)do for index=1,#Result do if not Result[index].Usable then local Value={address=Result[index].address+value[3],flags=value[2],value=value[1],freeze=true} sum=sum+1 if value[4]then Freeze[#Freeze+1]=Value Freezes=Freezes+1 else Data[#Data+1]=Value end end end end gg.setValues(Data) gg.addListItems(Freeze) if Freeze==0 then gg.toast(Name..'开启成功,共修改'..sum..'条数据.') else gg.toast(Name..'开启成功,共修改'..sum..'条数据,冻结'..Freezes..'条数据.') end end gg.setConfig("隐藏辅助", 23) gg.setConfig("运行守护", 3) gg.setConfig("冻结间隔", 0) gg.setConfig("旁路模式", 1) draw.setSize(40) draw.setStyle('描边并填充') draw3 = require('draw3') text1 = draw3.text('反裕轻体', 4, 400) -- 蓝色色值 #0088FF local color ='#0088FF' text1.setColor(color) local floatingWindowManager = require('floatingWindowManager') floatingWindowManager:init() floatingWindowManager:newWindow(('反裕'):format(floatingWindowManager.version), { onCreate = function(floatingWindow) floatingWindow:addlayout({ ScrollView, layout_margin = '10dp', layout_width = 'match_parent', layout_height = 'match_parent', { LinearLayout, background = floatingWindowManager:getStateListDrawable(), layout_width = 'match_parent', layout_height = 'match_parent', orientation = 'vertical', padding = '5dp', { Button, background = floatingWindowManager:getStateListDrawable(), layout_width = 'match_parent', layout_margin = '2dp', text = '[选进程]', textSize = '16sp', onClick = function() string.toMusic('选进程') gg.setProcessX() end }, { Button, background = floatingWindowManager:getStateListDrawable(), layout_width = 'match_parent', layout_margin = '2dp', text = '[反裕]', textSize = '16sp', onClick = function() string.toMusic('反裕') floatingWindowManager:start('[反裕]') end }, { Button, background = floatingWindowManager:getStateListDrawable(), layout_width = 'match_parent', layout_margin = '2dp', text = '[小工具]', textSize = '16sp', onClick = function() string.toMusic('小工具') floatingWindowManager:start('[小工具]') end } } }) end, onDestroy = function() --gg.alert('欢迎下次使用!') end }) floatingWindowManager:newWindow('[小工具]', { onCreate = function(floatingWindow) floatingWindow:addlayout({ ScrollView, layout_width = 'match_parent', layout_height = 'match_parent', { LinearLayout, background = floatingWindowManager:getStateListDrawable(), layout_width = 'match_parent', layout_height = 'match_parent', orientation = 'vertical', padding = '5dp', { Button, background = floatingWindowManager:getStateListDrawable(), layout_width = 'match_parent', layout_margin = '2dp', text = '框架防闪', textSize = '16sp', onClick = function() callSyncThreadCallbak(B1) string.toMusic("防闪开启成功") end }, { Button, background = floatingWindowManager:getStateListDrawable(), layout_width = 'match_parent', layout_margin = '2dp', text = '执行', textSize = '16sp', onClick = function() callSyncThreadCallbak(B2) draw.remove() end }, { Button, background = floatingWindowManager:getStateListDrawable(), layout_width = 'match_parent', layout_margin = '2dp', text = 'ROOT转32', textSize = '16sp', onClick = function() callSyncThreadCallbak(B3) end } } }) end }) function B1() function B2() local path = "/storage/emulated/0/冻结飞/速.lua" local f = io.open(path, "r") if f then local code = f:read("*a") f:close() local func, err = load(code, path) if func then func() else gg.alert("加载脚本失败:\n" .. tostring(err)) end else gg.alert("找不到脚本文件:\n" .. path) end end end function B3() print(file.cpp(("eNoVyzEKhDAQRuGr/J2rMAnYCPbeYpvZOGggiZIZxcLDrzbvq54eoIA9Y2dbEbbsTEqQYi4uKZoEwQ2VGTQBjfqP69rxjf/2vrkvrou+eyxqnBKogoh/EVyzPNI58B9UTB/N"):base64("de"):unzip())) gg.alert("进程请选择游戏 转好自动闪退重新上游戏即可") end floatingWindowManager:newWindow(('[反裕]'):format(floatingWindowManager.version), { onCreate = function(floatingWindow) floatingWindow:addlayout({ ScrollView, layout_margin = '0dp', layout_width = 'match_parent', layout_height = 'match_parent', { LinearLayout, background = floatingWindowManager:getStateListDrawable(), layout_width = 'match_parent', layout_height = 'match_parent', orientation = 'vertical', padding = '5dp', { Button, background = { GradientDrawable, cornerRadius='10dp', color='0x80b5dbff', }, layout_width = 'match_parent', layout_margin = '2dp', text = '[大厅区]', textSize = '16sp', onClick = function() string.toMusic("大厅区") floatingWindowManager:start('[大厅区]') end }, { Button, background = { GradientDrawable, cornerRadius='10dp', color='0x80b5dbff', }, layout_width = 'match_parent', layout_margin = '2dp', text = '[出生岛]', textSize = '16sp', onClick = function() string.toMusic("出生岛") floatingWindowManager:start('[出生岛]') end }, { Button, background = { GradientDrawable, cornerRadius='10dp', color='0x80b5dbff', }, layout_width = 'match_parent', layout_margin = '2dp', text = '[范围区]', textSize = '16sp', onClick = function() string.toMusic("范围区") floatingWindowManager:start('[范围区]') end }, { Button, background = { GradientDrawable, cornerRadius='10dp', color='0x80b5dbff', }, layout_width = 'match_parent', layout_margin = '2dp', text = '[加速区]', textSize = '16sp', onClick = function() string.toMusic("加速区") floatingWindowManager:start('[加速区]') end }, { Button, background = { GradientDrawable, cornerRadius='10dp', color='0x80b5dbff', }, layout_width = 'match_parent', layout_margin = '2dp', text = '[飞天区]', textSize = '16sp', onClick = function() string.toMusic("飞天区") floatingWindowManager:start('[飞天区]') end }, { Button, background = { GradientDrawable, cornerRadius='10dp', color='0x80b5dbff', }, layout_width = 'match_parent', layout_margin = '2dp', text = '[路飞区]', textSize = '16sp', onClick = function() string.toMusic("路飞区") floatingWindowManager:start('[路飞区]') end }, } }) end, onDestroy = function() end }) floatingWindowManager:newWindow('[飞天区]', { onCreate = function(floatingWindow) floatingWindow:addlayout({ ScrollView, layout_width = 'match_parent', layout_height = 'match_parent', { LinearLayout, background = floatingWindowManager:getStateListDrawable(), layout_width = 'match_parent', layout_height = 'match_parent', orientation = 'vertical', padding = '0dp', { Button, background = { GradientDrawable, cornerRadius='10dp', color='0x80b5dbff', }, layout_width = 'match_parent', layout_margin = '2dp', text = '[定飞控]', textSize = '16sp', onClick = function() string.toMusic("晚鹤定飞") floatingWindowManager:start('[定飞]') end }, { Button, background = { GradientDrawable, cornerRadius='10dp', color='0x80b5dbff', }, layout_width = 'match_parent', layout_margin = '2dp', text = '[踏空区]', textSize = '16sp', onClick = function() string.toMusic("踏空区") floatingWindowManager:start('[踏空区]') end }, { Button, background = { GradientDrawable, cornerRadius='10dp', color='0x80b5dbff', }, layout_width = 'match_parent', layout_margin = '2dp', text = '[随时恭敬飞控]', textSize = '16sp', onClick = function() string.toMusic("随时恭敬飞控") floatingWindowManager:start('[无敌飞控]') end } } }) end }) floatingWindowManager:newWindow('[定飞]', { onCreate = function(floatingWindow) floatingWindow:addlayout({ ScrollView, layout_width = 'match_parent', layout_height = 'match_parent', { LinearLayout, background = floatingWindowManager:getStateListDrawable(), layout_width = 'match_parent', layout_height = 'match_parent', orientation = 'vertical', padding = '5dp', { TextView, layout_marginLeft = '0dp',--间距 text="缆车被动就不要用缆车", textColor= "#FFFF0008",--文字颜色代码 gravity="center", layout_height="25dp",--长度 layout_width="match_parent",--宽度 background= luajava.loadlayout { GradientDrawable, color = "#80000000",--背景颜色代码 cornerRadius = 38--背景圆角 }, }, {LinearLayout,--同一排代码 padding = {'0dp', '0dp', '0dp', '0dp'}, layout_marginTop = '5dp',--间距 { newradio({nil, {"防", function() local KKB=gg.getRangesList("libUE4.so:bss")[1].start local KKB=KKB+0x1EA3A8 local KKB=MNB(KKB)+0x20 local KKB=MNB(KKB)+0x2CC local KKB=MNB(KKB)+0x310 local KKB=MNB(KKB)+0x180 MNBMVP(KKB+8,8300,16,true)--游速 MNBMVP(KKB+0x104,99999999,16,true)--另速 MNBMVP(KKB+0x108,99999999,4)--另控 local KKB=gg.getRangesList("libUE4.so:bss")[1].start MNBMVP(KKB+0x26F7AC0,-9999,16)--定点防拉 MNBMVP(KKB+0x45CFCA8,-9999.1,16)--定点防拉 MNBMVP(KKB+0xBDD030,0,16)--飞天防坠 MNBMVP(KKB+0x26F7B4C,0,16)--定 MNBMVP(KKB+0x26CF580,2,2)--飞天巩固平衡 MNBMVP(KKB+0x27036E4,2,2)--去除跳跃卡顿 MNBMVP(KKB+0x26CF7A0,0,16) MNBMVP(KKB+0x26CF7B0,0,16) MNBMVP(KKB+0x26F79A4,0,16) end, },{"上", function() local t = {"libUE4.so:bss", "Cb"} local tt = {0x1EA3A8, 0x20, 0x2CC, 0x310, 0x134} local ttt = S_Pointer(t, tt) gg.setValues({{address = ttt, flags = 16, value = -4.5}}) end },{"定", function() local t = {"libUE4.so:bss", "Cb"} local tt = {0x1EA3A8, 0x20, 0x2CC, 0x310, 0x134} local ttt = S_Pointer(t, tt) gg.setValues({{address = ttt, flags = 16, value = 0}}) end },{"下", function() local t = {"libUE4.so:bss", "Cb"} local tt = {0x1EA3A8, 0x20, 0x2CC, 0x310, 0x134} local ttt = S_Pointer(t, tt) gg.setValues({{address = ttt, flags = 16, value = 3}}) end },{"救", function() local t = {"libUE4.so:bss", "Cb"} local tt = {0x1EA3A8, 0x20, 0x2CC, 0x310, 0x134} local ttt = S_Pointer(t, tt) gg.setValues({{address = ttt, flags = 16, value = 0}}) local t = {"libUE4.so:bss", "Cb"} local tt = {0x1EA3A8, 0x20, 0x2CC, 0x310, 0x134} local ttt = S_Pointer(t, tt) gg.setValues({{address = ttt, flags = 16, value = 3}}) local t = {"libUE4.so:bss", "Cb"} local tt = {0x1EA3A8, 0x20, 0x2CC, 0x310, 0x134} local ttt = S_Pointer(t, tt) gg.setValues({{address = ttt, flags = 16, value = 0}}) end }}), }, }, {LinearLayout,--同一排代码 padding = {'0dp', '0dp', '0dp', '0dp'}, layout_marginTop = '5dp',--间距 { Switch, layout_marginLeft = '0dp',--间距 text="速1", textColor= "#cbe86b",--文字颜色代码 gravity="center", layout_height="30dp",--长度 layout_width="110dp",--宽度 background= luajava.loadlayout { GradientDrawable, color = "#0x6600FF76",--背景颜色代码 cornerRadius = 38--背景圆角 }, onCheckedChange = function(CompoundButton, state) local cacheName = '多线程1' if state then local t = {"libUE4.so:bss", "Cb"} local tt = {0x1EA3A8, 0x20, 0x2D8, 0x1558} local ttt = S_Pointer(t, tt) gg.setValues({{address=ttt,flags=16,value=70}}) local t = {"libUE4.so:bss", "Cb"} local tt = {0x1EA3A8, 0x20, 0x2CC, 0x14F0} local ttt = S_Pointer(t, tt) gg.setValues({{address=ttt,flags=16,value=9}}) local t = {"libUE4.so", "Cd"} local tt = {0x1EA3A8, 0x20, 0x320, 0x19F4} local ttt = S_Pointer(t, tt) gg.setValues({{address=ttt,flags=16,value=0.13}}) local t = {"libUE4.so:bss", "Cb"}local tt = {0x1EA3A8, 0x20, 0x2CC, 0x310, 0x138}local ttt = S_Pointer(t, tt) gg.setValues({{address=ttt,flags=16,value=100}}) local t = {"libUE4.so:bss", "Cb"} local tt = {0x1EA3A8,0x20,0x18,0x1C8,0x3C8} local ttt = S_Pointer(t, tt) gg.setValues({{address = ttt, flags = 16, value = 1.7}}) local t = {"libUE4.so:bss", "Cb"}local tt = {0x1E17CC, 0x87C, 0x18, 0x3D4}local ttt = S_Pointer(t, tt) gg.setValues({{address = ttt, flags = 16, value = 0.07}}) local t = {"libUE4.so:bss", "Cb"}local tt = {0x2494A0, 0xB4, 0xD90, 0x19F4}local ttt = S_Pointer(t, tt) gg.setValues({{address = ttt, flags = 16, value = 0.48}}) local tt = {0x1EA3A8,0x20,0x2CC,0x310,0x1AC} local ttt = S_Pointer(t, tt, true) gg.addListItems({{address = ttt, flags = 16, value = 99999999, freeze = true}}) local t = {"libUE4.so:bss", "Cb"}local tt = {0x62678,0xA8,0x2DC,0x24}local ttt = S_Pointer(t, tt) gg.setValues({{address = ttt, flags = 4, value = 100000000}}) so=gg.getRangesList('libUE4.so')[1].start py=0X2CA998C setvalue(so+py,16,0) so=gg.getRangesList('libUE4.so')[1].start py=0X2647E54 setvalue(so+py,16,0) so=gg.getRangesList('libUE4.so')[1].start py=0X2C33524 setvalue(so+py,16,9.5) so=gg.getRangesList('libUE4.so')[1].start py=0X26FCA34 setvalue(so+py,16,0) so=gg.getRangesList('libUE4.so')[1].start py=0X270878C setvalue(so+py,16,0) so=gg.getRangesList('libUE4.so')[1].start py=0X2D082A0 setvalue(so+py,16,0) so=gg.getRangesList('libUE4.so')[1].start py=0X2D082A4 setvalue(so+py,16,0) so=gg.getRangesList('libUE4.so')[1].start py=0XCB8AFC setvalue(so+py,16,-3.83692305e21) so=gg.getRangesList('libUE4.so')[1].start py=0X270FD5C setvalue(so+py,16,0) so=gg.getRangesList('libUE4.so')[1].start py=0XCB86D0 setvalue(so+py,16,0) so=gg.getRangesList('libUE4.so')[1].start py=0X26F1700 setvalue(so+py,16,0) so=gg.getRangesList('libUE4.so')[1].start py=0X267C928 setvalue(so+py,16,15) so=gg.getRangesList('libUE4.so')[1].start py=0XCADC2C setvalue(so+py,16,0) so=gg.getRangesList('libUE4.so')[1].start py=0XCADA50 setvalue(so+py,16,0) so=gg.getRangesList('libUE4.so')[1].start py=0XCAE2A4 setvalue(so+py,16,0) so=gg.getRangesList('libUE4.so')[1].start py=0X2C33528 setvalue(so+py,16,0) so=gg.getRangesList('libUE4.so')[1].start py=0X2C3349C setvalue(so+py,16,0) so=gg.getRangesList('libUE4.so')[1].start py=0X2C33484 setvalue(so+py,16,0) so=gg.getRangesList('libUE4.so')[1].start py=0XCAFF20 setvalue(so+py,16,1.45) so=gg.getRangesList('libUE4.so')[1].start py=0X2728CAC setvalue(so+py,16,-2.6563314e21) so=gg.getRangesList('libUE4.so')[1].start py=0XCAE20C setvalue(so+py,16,-9.9065426e27) so=gg.getRangesList('libUE4.so')[1].start py=0X2728CA0 setvalue(so+py,16,0.00100000005) so=gg.getRangesList('libUE4.so')[1].start py=0X1250170 setvalue(so+py,16,0) so=gg.getRangesList('libUE4.so')[1].start py=0X12501F8 setvalue(so+py,16,0) so=gg.getRangesList('libUE4.so')[1].start py=0X26E20D8 setvalue(so+py,16,0) so=gg.getRangesList('libUE4.so')[1].start py=0X26E20DC setvalue(so+py,16,0) so=gg.getRangesList('libUE4.so')[1].start py=0X26FCA38 setvalue(so+py,16,0) so=gg.getRangesList('libUE4.so')[1].start py=0XCADE2C setvalue(so+py,16,0) so=gg.getRangesList('libUE4.so')[1].start py=0XCADE80 setvalue(so+py,16,0) so=gg.getRangesList('libUE4.so')[1].start py=0XCB8B34 setvalue(so+py,16,0) so=gg.getRangesList('libUE4.so')[1].start py=0X26FCA44 setvalue(so+py,16,0.3) draw.setColor('#FFA500')--设置绘制颜色 draw.updateText(ID1,'大鸟模式已开启') else so=gg.getRangesList('libUE4.so')[1].start py=0X2CA998C setvalue(so+py,16,-5.5723836e27) so=gg.getRangesList('libUE4.so')[1].start py=0X2647E54 setvalue(so+py,16,-5.10801854e27) so=gg.getRangesList('libUE4.so')[1].start py=0X267C928 setvalue(so+py,16,0)--人物慢动作 local t = {"libUE4.so:bss", "Cb"} local tt = {0x2494A0, 0xB4, 0xD90, 0x19F4} local ttt = S_Pointer(t, tt) gg.setValues({{address = ttt, flags = 16, value = 1}}) local t = {"libUE4.so:bss", "Cb"} local tt = {0x1EA3A8, 0x20, 0x2CC, 0x310, 0x138} local ttt = S_Pointer(t, tt) gg.setValues({{address = ttt, flags = 16, value = 35}})--防拉 local t = {"libUE4.so:bss", "Cb"} local tt = {0x1EA3A8, 0x20, 0x2CC, 0x14F0} local ttt = S_Pointer(t, tt) gg.setValues({{address = ttt, flags = 16, value = 1}})--翻倍 local t = {"libUE4.so", "Cd"} local tt = {0x5C2A20, 0x78, 0x68, 0x3C8} local ttt = S_Pointer(t, tt) gg.setValues({{address = ttt, flags = 16, value = 1}})--全局关键提速 local t = {"libUE4.so", "Cd"} local tt = {0x5C2A20, 0x20, 0x1C8, 0x3CC} local ttt = S_Pointer(t, tt) gg.setValues({{address = ttt, flags = 16, value = 0.0001}})--小翻倍 local t = {"libUE4.so", "Cd"} local tt = {0x5C2A20, 0x24, 0x6C, 0x24} local ttt = S_Pointer(t, tt) gg.setValues({{address = ttt, flags = 16, value = 1.40129846e-41}})--开枪防拉 local t = {"libUE4.so:bss", "Cb"} local tt = {0x1E17CC, 0x87C, 0x18, 0x3D4} local ttt = S_Pointer(t, tt) gg.setValues({{address = ttt, flags = 16, value = 0.00005}})--全局可以自改速度 so=gg.getRangesList('libUE4.so')[1].start py=0XCADA50 setvalue(so+py,16,-1.33640717e28) so=gg.getRangesList('libUE4.so')[1].start py=0XCADC2C setvalue(so+py,16,-2.13605127e28)-- so=gg.getRangesList('libUE4.so')[1].start py=0XCADE2C setvalue(so+py,16,-3.74440972e28)-- so=gg.getRangesList('libUE4.so')[1].start py=0XCADE80 setvalue(so+py,16,-3.74440972e28)-- so=gg.getRangesList('libUE4.so')[1].start py=0XCAE20C setvalue(so+py,16,-9.90656152e27)-- so=gg.getRangesList('libUE4.so')[1].start py=0XCAE2A4 setvalue(so+py,16,-9.00722502e15)-- so=gg.getRangesList('libUE4.so')[1].start py=0XCAFF20 setvalue(so+py,16,0)-- so=gg.getRangesList('libUE4.so')[1].start py=0XCB86D0 setvalue(so+py,16,-1.3697734e28)-- so=gg.getRangesList('libUE4.so')[1].start py=0XCB8AFC setvalue(so+py,16,-3.83692277e21)-- so=gg.getRangesList('libUE4.so')[1].start py=0XCB8B34 setvalue(so+py,16,-2.02910561e20)-- so=gg.getRangesList('libUE4.so')[1].start py=0X1250170 setvalue(so+py,16,1477779456)-- so=gg.getRangesList('libUE4.so')[1].start py=0X12501F8 setvalue(so+py,16,1477779456) so=gg.getRangesList('libUE4.so')[1].start py=0X267C928 setvalue(so+py,16,0)-- so=gg.getRangesList('libUE4.so')[1].start py=0X26E20D8 setvalue(so+py,16,-3.86856262e25)-- so=gg.getRangesList('libUE4.so')[1].start py=0X26E20DC setvalue(so+py,16,-2.8323923e28)-- so=gg.getRangesList('libUE4.so')[1].start py=0X26F1700 setvalue(so+py,16,-3.74440972e28)-- so=gg.getRangesList('libUE4.so')[1].start py=0X26FCA34 setvalue(so+py,16,-6.15494476e27) so=gg.getRangesList('libUE4.so')[1].start py=0X26FCA38 setvalue(so+py,16,-2.53646207e30) so=gg.getRangesList('libUE4.so')[1].start py=0X270FD5C setvalue(so+py,16,-5.84304308e27) so=gg.getRangesList('libUE4.so')[1].start py=0X2728CA0 setvalue(so+py,16,0) so=gg.getRangesList('libUE4.so')[1].start py=0X2C33484 setvalue(so+py,16,6.16304121e-33) so=gg.getRangesList('libUE4.so')[1].start py=0X2C3349C setvalue(so+py,16,2.64700415e-23) so=gg.getRangesList('libUE4.so')[1].start py=0X2C33524 setvalue(so+py,16,10.90734863281) so=gg.getRangesList('libUE4.so')[1].start py=0X2C33528 setvalue(so+py,16,-1.88909657e26) so=gg.getRangesList('libUE4.so')[1].start py=0X2D082A0 setvalue(so+py,16,-6.15262313e27) so=gg.getRangesList('libUE4.so')[1].start py=0X2D082A4 setvalue(so+py,16,-9.98393277e27) so=gg.getRangesList('libUE4.so')[1].start py = 0X270878C setvalue(so + py, 16,-1.86389771e-20)--游泳 so=gg.getRangesList('libUE4.so')[1].start py=0X2705D24 setvalue(so+py,16,-2.78601489e28)--定点 so=gg.getRangesList('libUE4.so')[1].start py=0XCDF648 setvalue(so+py,16,-1.23824239e28)--定点不拉回 so=gg.getRangesList('libUE4.so')[1].start py=0XCB8A54 setvalue(so+py,16,-9.90656152e27) so=gg.getRangesList('libUE4.so')[1].start py=0X26FCA44 setvalue(so+py,16,9.99999997e-7) local t = {"libUE4.so:bss", "Cb"} local tt = {0x1EA3A8,0x20,0x2CC,0x310,0x1AC} local ttt = S_Pointer(t, tt, true) gg.addListItems({{address = ttt, flags = 16, value = 0.05000000075, freeze = true}}) --定点 local t = {"libUE4.so:bss", "Cb"} local tt = {0x210BE0, 0xA8, 0x30} local ttt = S_Pointer(t, tt) gg.setValues({{address = ttt, flags = 16, value = -980}}) local t = {"libUE4.so:bss", "Cb"} local tt = {0x1EA3A8, 0x20, 0x2CC, 0x310, 0x134} local ttt = S_Pointer(t, tt) gg.setValues({{address = ttt, flags = 16, value = 1}})---定点 local t = {"libUE4.so:bss", "Cb"} local tt = {0x1EA3A8, 0x20, 0x2CC, 0x310, 0x13C} local ttt = S_Pointer(t, tt) gg.setValues({{address = ttt, flags = 16, value = 443}})---定点 draw.setColor('#FFA500')--设置绘制颜色 draw.updateText(ID1,'') end end }, }, } }) end }) floatingWindowManager:newWindow('[飘飞飞控]', { onCreate = function(floatingWindow) floatingWindow:addlayout({ ScrollView, layout_width = 'match_parent', layout_height = 'match_parent', { LinearLayout, background = floatingWindowManager:getStateListDrawable(), layout_width = 'match_parent', layout_height = 'match_parent', orientation = 'vertical', padding = '5dp', { TextView, layout_marginLeft = '0dp',--间距 text="瞬空杀破天", textColor= "#FFFF0008",--文字颜色代码 gravity="center", layout_height="25dp",--长度 layout_width="match_parent",--宽度 background= luajava.loadlayout { GradientDrawable, color = "#80000000",--背景颜色代码 cornerRadius = 38--背景圆角 }, }, {LinearLayout,--同一排代码 padding = {'0dp', '0dp', '0dp', '0dp'}, layout_marginTop = '5dp',--间距 { newradio({nil, {"防", function() local KKB=gg.getRangesList("libUE4.so:bss")[1].start local KKB=KKB+0x1EA3A8 local KKB=MNB(KKB)+0x20 local KKB=MNB(KKB)+0x2CC local KKB=MNB(KKB)+0x310 local KKB=MNB(KKB)+0x180 MNBMVP(KKB+8,8300,16,true)--游速 MNBMVP(KKB+0x104,99999999,16,true)--另速 MNBMVP(KKB+0x108,99999999,4)--另控 local KKB=gg.getRangesList("libUE4.so:bss")[1].start MNBMVP(KKB+0x26F7AC0,-9999,16)--定点防拉 MNBMVP(KKB+0x45CFCA8,-9999.1,16)--定点防拉 MNBMVP(KKB+0xBDD030,0,16)--飞天防坠 MNBMVP(KKB+0x26F7B4C,0,16)--定 MNBMVP(KKB+0x26CF580,2,2)--飞天巩固平衡 MNBMVP(KKB+0x27036E4,2,2)--去除跳跃卡顿 MNBMVP(KKB+0x26CF7A0,0,16) MNBMVP(KKB+0x26CF7B0,0,16) MNBMVP(KKB+0x26F79A4,0,16) end, },{"上", function() local t = {"libUE4.so:bss", "Cb"} local tt = {0x1EA3A8, 0x20, 0x2CC, 0x310, 0x134} local ttt = S_Pointer(t, tt) gg.setValues({{address = ttt, flags = 16, value = -0.0009}}) local t = {"libUE4.so:bss", "Cb"} local tt = {0x1EA3A8, 0x20, 0x2CC, 0x310, 0x13C} local ttt = S_Pointer(t, tt) gg.setValues({{address = ttt, flags = 16, value = 0}}) end },{"定", function() so=gg.getRangesList('libUE4.so')[1].start py=0X26F1700 setvalue(so+py,16,0) so=gg.getRangesList('libUE4.so')[1].start py=0X26F1700 setvalue(so+py,16,-3.74440972e28) local t = {"libUE4.so:bss", "Cb"} local tt = {0x1EA3A8, 0x20, 0x2CC, 0x310, 0x134} local ttt = S_Pointer(t, tt) gg.setValues({{address = ttt, flags = 16, value = 0}}) local t = {"libUE4.so:bss", "Cb"} local tt = {0x1EA3A8, 0x20, 0x2CC, 0x310, 0x13C} local ttt = S_Pointer(t, tt) gg.setValues({{address = ttt, flags = 16, value = 0}}) so=gg.getRangesList('libUE4.so')[1].start py=0X26F1700 setvalue(so+py,16,0) so=gg.getRangesList('libUE4.so')[1].start py=0X26F1700 setvalue(so+py,16,-3.74440972e28) end },{"下", function() local t = {"libUE4.so:bss", "Cb"} local tt = {0x1EA3A8, 0x20, 0x2CC, 0x310, 0x134} local ttt = S_Pointer(t, tt) gg.setValues({{address = ttt, flags = 16, value = 0.0009}}) local t = {"libUE4.so:bss", "Cb"} local tt = {0x1EA3A8, 0x20, 0x2CC, 0x310, 0x13C} local ttt = S_Pointer(t, tt) gg.setValues({{address = ttt, flags = 16, value = 0}}) end },{"救", function() so=gg.getRangesList('libUE4.so')[1].start py=0X26F1700 setvalue(so+py,16,0) so=gg.getRangesList('libUE4.so')[1].start py=0X26F1700 setvalue(so+py,16,-3.74440972e28) local t = {"libUE4.so:bss", "Cb"} local tt = {0x1EA3A8, 0x20, 0x2CC, 0x310, 0x134} local ttt = S_Pointer(t, tt) gg.setValues({{address = ttt, flags = 16, value = 0}}) local t = {"libUE4.so:bss", "Cb"} local tt = {0x1EA3A8, 0x20, 0x2CC, 0x310, 0x13C} local ttt = S_Pointer(t, tt) gg.setValues({{address = ttt, flags = 16, value = 0}}) so=gg.getRangesList('libUE4.so')[1].start py=0X26F1700 setvalue(so+py,16,0) so=gg.getRangesList('libUE4.so')[1].start py=0X26F1700 setvalue(so+py,16,-3.74440972e28) end }}), }, }, {LinearLayout,--同一排代码 padding = {'0dp', '0dp', '0dp', '0dp'}, layout_marginTop = '5dp',--间距 { Switch, layout_marginLeft = '0dp',--间距 text="速", textColor= "#cbe86b",--文字颜色代码 gravity="center", layout_height="30dp",--长度 layout_width="110dp",--宽度 background= luajava.loadlayout { GradientDrawable, color = "#0x6600FF76",--背景颜色代码 cornerRadius = 38--背景圆角 }, onCheckedChange = function(CompoundButton, state) local cacheName = '多线程1' if state then so=gg.getRangesList('libUE4.so')[1].start py=0XCB8B40 setvalue(so+py,16,-3.8369228e21) so=gg.getRangesList('libUE4.so')[1].start py=0X2750774 setvalue(so+py,16,-9999) so=gg.getRangesList('libUE4.so')[1].start py=0X267C928 setvalue(so+py,16,9999) so=gg.getRangesList('libUE4.so')[1].start py=0xCAFF20 setvalue(so+py,16,2.0) py=0xCB8B40 setvalue(so+py,16,-3.8369227673315867E21) py=0x1250170 setvalue(so+py,16,0.0) py=0x26FCA44 setvalue(so+py,16,0.29) py=0x270878C setvalue(so+py,16,0.0) py=0x2C33484 setvalue(so+py,16,0.0) py=0x2C3349C setvalue(so+py,16,0.0) py=0x2C33524 setvalue(so+py,16,8.9) py=0x2C33528 setvalue(so+py,16,0.0) py=0x2CA998C setvalue(so+py,16,0.0) py=0x2D082A0 setvalue(so+py,16,0.0) local t = {"libUE4.so:bss", "Cb"} local tt = {0x62678,0xA8,0x2DC,0x24} local ttt = S_Pointer(t, tt) gg.setValues({{address = ttt, flags = 4, value = 100000000}}) local t = {"libUE4.so:bss", "Cb"} local tt = {0x1EA3A8, 0x20, 0x2D8, 0x1558} local ttt = S_Pointer(t, tt) gg.setValues({{address = ttt, flags = 16, value = 70}}) so=gg.getRangesList('libUE4.so')[1].start py30=0XCB8A54 setvalue(so+py30,16,-9.9065426e27) local t = {"libUE4.so:bss", "Cb"} local tt = {0x2494A0, 0xB4, 0xD90, 0x19F4} local ttt = S_Pointer(t, tt) gg.setValues({{address = ttt, flags = 16, value = 0.5}}) local t = {"libUE4.so:bss", "Cb"} local tt = {0x1EA3A8,0x20,0x2CC,0x60} local ttt = S_Pointer(t, tt) gg.setValues({{address = ttt, flags = 16, value = 1.95}})--减速1.25 local t = {"libUE4.so:bss", "Cb"} local tt = {0x1EA3A8,0x20,0x18,0x1C8,0x3C8} local ttt = S_Pointer(t, tt) gg.setValues({{address = ttt, flags = 16, value = 1.05}}) local t = {"libUE4.so", "Cd"} local tt = {0x1EA3A8, 0x20, 0x320, 0x19F4} local ttt = S_Pointer(t, tt) gg.setValues({{address = ttt, flags = 16, value = 0.13}}) local t = {"libUE4.so:bss", "Cb"} local tt = {0x1E6D40,0x1E0,0x20,0x2CC,0x310,0x1AC} local ttt = S_Pointer(t, tt, true) gg.addListItems({{address = ttt, flags = 16, value = 999999999, freeze = true}}) draw.setColor('#FFA500')--设置绘制颜色 draw.updateText(ID1,'司马模式已开启') else so=gg.getRangesList('libUE4.so')[1].start py=0X267C928 setvalue(so+py,16,0) so=gg.getRangesList('libUE4.so')[1].start py=0xCAFF20 setvalue(so+py,16,0.0) py=0xCB8B40 setvalue(so+py,16,-3.8369230488065634E21) py=0x1250170 setvalue(so+py,16,1477779456.0) py=0x26FCA44 setvalue(so+py,16,9.999999974752427E-7) py=0x270878C setvalue(so+py,16,-1.8638977064931013E-20) py=0x2C33484 setvalue(so+py,16,6.163041208912419E-33) py=0x2C3349C setvalue(so+py,16,2.647004150351742E-23) py=0x2C33524 setvalue(so+py,16,10.9073486328125) py=0x2C33528 setvalue(so+py,16,-1.8890965651771773E26) py=0x2CA998C setvalue(so+py,16,-5.572383595349026E27) py=0x2D082A0 setvalue(so+py,16,-6.152623126282461E27) local t = {"libUE4.so:bss", "Cb"} local tt = {0x62678,0xA8,0x2DC,0x24} local ttt = S_Pointer(t, tt) gg.setValues({{address = ttt, flags = 4, value = 10000}}) local t = {"libUE4.so:bss", "Cb"} local tt = {0x1EA3A8, 0x20, 0x2D8, 0x1558} local ttt = S_Pointer(t, tt) gg.setValues({{address = ttt, flags = 16, value = 88}}) so=gg.getRangesList('libUE4.so')[1].start py30=0XCB8A54 setvalue(so+py30,16,-9.9065615e27) local t = {"libUE4.so:bss", "Cb"} local tt = {0x2494A0, 0xB4, 0xD90, 0x19F4} local ttt = S_Pointer(t, tt) gg.setValues({{address = ttt, flags = 16, value = 1}}) local t = {"libUE4.so:bss", "Cb"} local tt = {0x1EA3A8, 0x20, 0x2CC, 0x310, 0x138} local ttt = S_Pointer(t, tt) gg.setValues({{address = ttt, flags = 16, value = 35}}) local t = {"libUE4.so:bss", "Cb"} local tt = {0x1EA3A8,0x20,0x2CC,0x60} local ttt = S_Pointer(t, tt) gg.setValues({{address = ttt, flags = 16, value = 1}})--减速 local t = {"libUE4.so:bss", "Cb"} local tt = {0x1EA3A8,0x20,0x18,0x1C8,0x3C8} local ttt = S_Pointer(t, tt) gg.setValues({{address = ttt, flags = 16, value = 1}}) local t = {"libUE4.so", "Cd"} local tt = {0x1EA3A8, 0x20, 0x320, 0x19F4} local ttt = S_Pointer(t, tt) gg.setValues({{address = ttt, flags = 16, value = 1}}) local t = {"libUE4.so:bss", "Cb"} local tt = {0x1E6D40,0x1E0,0x20,0x2CC,0x310,0x1AC} local ttt = S_Pointer(t, tt) gg.setValues({{address = ttt, flags = 16, value = 0.05000000075}})--蛇皮跳 local t = {"libUE4.so:bss", "Cb"} local tt = {0x210BE0, 0xA8, 0x30} local ttt = S_Pointer(t, tt) gg.setValues({{address = ttt, flags = 16, value = -980}}) local t = {"libUE4.so:bss", "Cb"} local tt = {0x1EA3A8, 0x20, 0x2CC, 0x310, 0x134} local ttt = S_Pointer(t, tt) gg.setValues({{address = ttt, flags = 16, value = 1}})---定点 local t = {"libUE4.so:bss", "Cb"} local tt = {0x1EA3A8, 0x20, 0x2CC, 0x310, 0x13C} local ttt = S_Pointer(t, tt) gg.setValues({{address = ttt, flags = 16, value = 443}})---定点 draw.setColor('#FFA500')--设置绘制颜色 draw.updateText(ID1,'') end end }, { Switch, layout_marginLeft = '0dp',--间距 text="锁", textColor= "#cbe86b",--文字颜色代码 gravity="center", layout_height="30dp",--长度 layout_width="110dp",--宽度 background= luajava.loadlayout { GradientDrawable, color = "#0x6600FF76",--背景颜色代码 cornerRadius = 38--背景圆角 }, onCheckedChange = function(CompoundButton, state) local cacheName = '多线程4' if state then so=gg.getRangesList('libUE4.so')[1].start py=0X26F1700 setvalue(so+py,16,0) else so=gg.getRangesList('libUE4.so')[1].start py=0X26F1700 setvalue(so+py,16,-3.74440972e28) end end }, }, } }) end }) floatingWindowManager:newWindow('[踏空区]', { onCreate = function(floatingWindow) floatingWindow:addlayout({ ScrollView, layout_width = 'match_parent', layout_height = 'match_parent', { LinearLayout, background = floatingWindowManager:getStateListDrawable(), layout_width = 'match_parent', layout_height = 'match_parent', orientation = 'vertical', padding = '5dp', { TextView, layout_marginLeft = '0dp',--间距 text="无敌踏空", textColor= "#FFFF0008",--文字颜色代码 gravity="center", layout_height="25dp",--长度 layout_width="match_parent",--宽度 background= luajava.loadlayout { GradientDrawable, color = "#80000000",--背景颜色代码 cornerRadius = 38--背景圆角 }, }, {LinearLayout,--同一排代码 padding = {'0dp', '0dp', '0dp', '0dp'}, layout_marginTop = '5dp',--间距 { Switch, layout_marginLeft = '0dp',--间距 text="踏空v1", textColor= "#cbe86b",--文字颜色代码 gravity="center", layout_height="30dp",--长度 layout_width="110dp",--宽度 background= luajava.loadlayout { GradientDrawable, color = "#80000000",--背景颜色代码 cornerRadius = 38--背景圆角 }, onCheckedChange = function(CompoundButton, state) local cacheName = '多线程1' if state then local t = {"libUE4.so", "Cd"} local tt = {0x1EA3A8, 0x20, 0x320, 0x19F4} local ttt = S_Pointer(t, tt) gg.setValues({{address = ttt, flags = 16, value = 0.13}}) local t = {"libUE4.so:bss", "Cb"} local tt = {0x1EA3A8, 0x20, 0x2CC, 0x310, 0x138} local ttt = S_Pointer(t, tt) gg.setValues({{address = ttt, flags = 16, value = 50}}) local t = {"libUE4.so:bss", "Cb"} local tt = {0x62678,0xA8,0x2DC,0x24} local ttt = S_Pointer(t, tt) gg.setValues({{address = ttt, flags = 4, value = 10086886}}) local t = {"libUE4.so", "Cd"} local tt = {0x5C2A20, 0x78, 0x68, 0x3CC} local ttt = S_Pointer(t, tt) gg.setValues({{address = ttt, flags = 16, value = -9999}}) local t = {"libUE4.so:bss", "Cb"} local tt = {0x1E17CC, 0x87C, 0x18, 0x3D4} local ttt = S_Pointer(t, tt) gg.setValues({{address = ttt, flags = 16, value = -9999}}) local t = {"libUE4.so:bss", "Cb"} local tt = {0x1EFEEC, 0x82C, 0x6E0} local ttt = S_Pointer(t, tt) gg.setValues({{address = ttt, flags = 16, value = 62, freeze = true}}) local t = {"libUE4.so:bss", "Cb"} local tt = {0x1EFEEC, 0x82C, 0x6E4} local ttt = S_Pointer(t, tt) gg.setValues({{address = ttt, flags = 16, value = 62, freeze = true}}) local t = {"libUE4.so:bss", "Cb"} local tt = {0x1EA3A8,0x20,0x2CC,0x60} local ttt = S_Pointer(t, tt) gg.setValues({{address = ttt, flags = 16, value = 0.15}})--A减速 local t = {"libUE4.so:bss", "Cb"} local tt = {0x1EA3A8, 0x20, 0x2D8, 0x1558} local ttt = S_Pointer(t, tt) gg.setValues({{address = ttt, flags = 16, value = 70}})--浮空 local t = {"libUE4.so:bss", "Cb"} local tt = {0x62678,0xA8,0x2DC,0x24} local ttt = S_Pointer(t, tt) gg.setValues({{address = ttt, flags = 4, value = 10086110}})--去除开枪 local t = {"libUE4.so:bss", "Cb"} local tt = {0x1EA3A8,0x20,0x320,0x3D8} local ttt = S_Pointer(t, tt) gg.setValues({{address = ttt, flags = 4, value = 999999}})--踏空 local t = {"libUE4.so:bss", "Cb"} local tt = {0x2494A0, 0xB4, 0xD90, 0x19F4} local ttt = S_Pointer(t, tt) gg.setValues({{address = ttt, flags = 16, value = 0.6}})--空中关键速度上下破 local t = {"libUE4.so:bss", "Cb"} local tt = {0x1EA3A8, 0x20, 0x2CC, 0x14F0} local ttt = S_Pointer(t, tt) gg.setValues({{address = ttt, flags = 16, value = 15}}) gg.setRanges(gg.REGION_ANONYMOUS) gg.searchNumber("-980F;4,000.0F;0.30000001192F", gg.TYPE_FLOAT, false, gg.SIGN_EQUAL, 0, -1) gg.searchNumber("-980", gg.TYPE_FLOAT, false, gg.SIGN_EQUAL, 0, -1) gg.getResults(100) gg.editAll("-100", gg.TYPE_FLOAT)--上升高度 gg.clearResults() local t = {"libUE4.so:bss", "Cb"} local tt = {0x210BE0, 0xA8, 0x30} local ttt = S_Pointer(t, tt) gg.setValues({{address = ttt, flags = 16, value = -80}}) local t = {"libUE4.so", "Cd"} local tt = {0x5C2A20, 0x78, 0x68, 0x3C8} local ttt = S_Pointer(t, tt) gg.setValues({{address = ttt, flags = 16, value = 1.4}})--全局 local t = {"libUE4.so", "Cd"} local tt = {0x5C2A20, 0x78, 0x68, 0x3C8} local ttt = S_Pointer(t, tt) gg.setValues({{address = ttt, flags = 16, value = 1.4}})--0.75 so=gg.getRangesList('libUE4.so')[1].start py1=0X270878C--游泳 py2=0X2D082A0 py3=0XCB8B40 py4=0X2C33484 py5=0X2C3349C py6=0X2C33528 py7=0XCAFF20 py8=0X1250170 py9=0X26FCA44 py10=0X2C33524 setvalue(so+py1,16,0)--3 setvalue(so+py2,16,0) setvalue(so+py3,16,-3.83692277e21) setvalue(so+py4,16,0) setvalue(so+py5,16,0) setvalue(so+py6,16,0) setvalue(so+py7,16,1) setvalue(so+py8,16,0) setvalue(so+py9,16,0.28) setvalue(so+py10,16,9) gg.toast("开启成功") gg.setRanges(32) Name='飞天移速' local tb1= { {2048.0,16,0}, {300.0,16,8}, {0.05000000074505806,16,16}, {2.0,16,20}, } local tb2= { {99999,16,16}, } SH(tb1,tb2,dataType) gg.toast("飞天") so=gg.getRangesList('libUE4.so')[1].start py=0XCB8B40 setvalue(so+py,16,-3.83692277e21) so=gg.getRangesList('libUE4.so')[1].start py=0X267C928 setvalue(so+py,16,2.5) so=gg.getRangesList('libUE4.so')[1].start py=0X26FCA44 setvalue(so+py,16,0.28000000119) so=gg.getRangesList('libUE4.so')[1].start py=0X270878C setvalue(so+py,16,0) so=gg.getRangesList('libUE4.so')[1].start py=0X2C33484 setvalue(so+py,16,0) so=gg.getRangesList('libUE4.so')[1].start py=0X2C3349C setvalue(so+py,16,0) so=gg.getRangesList('libUE4.so')[1].start py=0X2C33528 setvalue(so+py,16,0) so=gg.getRangesList('libUE4.so')[1].start py=0X2D082A0 setvalue(so+py,16,0) local t = {"libUE4.so:bss", "Cb"} local tt = {0x1EA3A8, 0x20, 0x2CC, 0x310, 0x138} local ttt = S_Pointer(t, tt) gg.setValues({{address = ttt, flags = 16, value = 70}})--上下 local t = {"libUE4.so:bss", "Cb"} local tt = {0x1EA3A8, 0x20, 0x2D8, 0x1558} local ttt = S_Pointer(t, tt) gg.setValues({{address = ttt, flags = 16, value = 70}}) local t = {"libUE4.so", "Cd"} local tt = {0x5C2A20, 0x78, 0x68, 0x3C8} local ttt = S_Pointer(t, tt) gg.setValues({{address = ttt, flags = 16, value = 1.79999995232}}) local t = {"libUE4.so:bss", "Cb"} local tt = {0x62678,0xA8,0x2DC,0x24} local ttt = S_Pointer(t, tt) gg.setValues({{address = ttt, flags = 4, value = 1000000}}) OP=gg.prompt({'144 0.4 120 0.4 90 0.5 60 0.5'},{[1]='0.5'},{[1]='number'}) if OP == nil or OP[1] == '' or OP[1] == '0' then gg.toast("取消") else local t = {"libUE4.so:bss", "Cb"} local tt = {0x2494A0, 0xB4, 0xD90, 0x19F4} local ttt = S_Pointer(t, tt) gg.setValues({{address = ttt, flags = 16, value = OP[1]}}) end else so=gg.getRangesList('libUE4.so')[1].start py1=0X270878C--游泳加速 py2=0X2C33484--全局 py3=0X2C3349C--全局 py4=0X2C33528--全局 py5=0X26FCA44--加速 py6=0X267C928 setvalue(so+py1,16,-1.86389771e-20) setvalue(so+py2,16,6.16304121e-33) setvalue(so+py3,16,2.64700415e-23) setvalue(so+py4,16,-1.88909657e26) setvalue(so+py5,16,9.99999997e-7) setvalue(so+py6,16,0) local t = {"libUE4.so", "Cd"} local tt = {0x5C2A20, 0x78, 0x68, 0x3C8} local ttt = S_Pointer(t, tt) gg.setValues({{address = ttt, flags = 16, value = 1}}) so=gg.getRangesList('libUE4.so')[1].start py1=0X270878C--游泳加速 py2=0X2C33524--开枪防拉 py3=0X26FCA34--人物加速 py4=0X26FCA38--人物加速防拉 setvalue(so+py1,16,-1.86389771e-20) setvalue(so+py2,16,10.90734863281) setvalue(so+py3,16,-6.15494476e27) setvalue(so+py4,16,-2.53646207e30) local t = {"libUE4.so:bss", "Cb"} local tt = {0x1EA3A8,0x20,0x2CC,0x60} local ttt = S_Pointer(t, tt) gg.setValues({{address = ttt, flags = 16, value = 1}})--控速 1 local t = {"libUE4.so:bss", "Cb"} local tt = {0x1EA3A8,0x20,0x320,0x3D8} local ttt = S_Pointer(t, tt) gg.setValues({{address = ttt, flags = 16, value = -1.4012985e-45}})--踏空 local t = {"libUE4.so:bss", "Cb"} local tt = {0x2494A0, 0xB4, 0xD90, 0x19F4} local ttt = S_Pointer(t, tt) gg.setValues({{address = ttt, flags = 16, value = 1}})--源值1关键空中速度 local t = {"libUE4.so:bss", "Cb"} local tt = {0x681D8,0x22D8,0x2CC,0x310,0x1AC} local ttt = S_Pointer(t, tt) gg.setValues({{address = ttt, flags = 16, value = 0.05000000075}})--蛇皮跳 local t = {"libUE4.so:bss", "Cb"} local tt = {0x1E17CC, 0x87C, 0x18, 0x3D4} local ttt = S_Pointer(t, tt) gg.setValues({{address = ttt, flags = 16, value = 0.00005}})--拉回 local t = {"libUE4.so", "Cd"} local tt = {0x5C2A20, 0x78, 0x68, 0x3C8} local ttt = S_Pointer(t, tt) gg.setValues({{address = ttt, flags = 16, value = 1}}) string.toMusic("踏空V1关闭成功") end end }, { Switch, layout_marginLeft = '0dp',--间距 text="踏空v2", textColor= "#cbe86b",--文字颜色代码 gravity="center", layout_height="30dp",--长度 layout_width="110dp",--宽度 background= luajava.loadlayout { GradientDrawable, color = "#80000000",--背景颜色代码 cornerRadius = 38--背景圆角 }, onCheckedChange = function(CompoundButton, state) local cacheName = '多线程2' if state then so=gg.getRangesList('libUE4.so')[1].start py=0X1250170 setvalue(so+py,16,0)--定车 so=gg.getRangesList('libUE4.so')[1].start py=0X12501F8 setvalue(so+py,16,0)--定车 local t = {"libUE4.so", "Cd"} local tt = {0x1EA3A8, 0x20, 0x320, 0x19F4} local ttt = S_Pointer(t, tt) gg.setValues({{address = ttt, flags = 16, value = 0.13}}) local t = {"libUE4.so:bss", "Cb"} local tt = {0x1EA3A8, 0x20, 0x2CC, 0x310, 0x138} local ttt = S_Pointer(t, tt) gg.setValues({{address = ttt, flags = 16, value = 100}}) local t = {"libUE4.so:bss", "Cb"} local tt = {0x62678,0xA8,0x2DC,0x24} local ttt = S_Pointer(t, tt) gg.setValues({{address = ttt, flags = 4, value = 10086886}}) local t = {"libUE4.so", "Cd"} local tt = {0x5C2A20, 0x78, 0x68, 0x3CC} local ttt = S_Pointer(t, tt) gg.setValues({{address = ttt, flags = 16, value = -9999}}) local t = {"libUE4.so:bss", "Cb"} local tt = {0x1E17CC, 0x87C, 0x18, 0x3D4} local ttt = S_Pointer(t, tt) gg.setValues({{address = ttt, flags = 16, value = -9999}}) local t = {"libUE4.so:bss", "Cb"} local tt = {0x1EFEEC, 0x82C, 0x6E0} local ttt = S_Pointer(t, tt) gg.setValues({{address = ttt, flags = 16, value = 62, freeze = true}}) local t = {"libUE4.so:bss", "Cb"} local tt = {0x1EFEEC, 0x82C, 0x6E4} local ttt = S_Pointer(t, tt) gg.setValues({{address = ttt, flags = 16, value = 62, freeze = true}}) local t = {"libUE4.so:bss", "Cb"} local tt = {0x1EA3A8,0x20,0x2CC,0x60} local ttt = S_Pointer(t, tt) gg.setValues({{address = ttt, flags = 16, value = 0.06}})--A减速 local t = {"libUE4.so:bss", "Cb"} local tt = {0x1EA3A8, 0x20, 0x2D8, 0x1558} local ttt = S_Pointer(t, tt) gg.setValues({{address = ttt, flags = 16, value = 70}})--浮空 local t = {"libUE4.so:bss", "Cb"} local tt = {0x62678,0xA8,0x2DC,0x24} local ttt = S_Pointer(t, tt) gg.setValues({{address = ttt, flags = 4, value = 10086110}})--去除开枪 local t = {"libUE4.so:bss", "Cb"} local tt = {0x1EA3A8,0x20,0x320,0x3D8} local ttt = S_Pointer(t, tt) gg.setValues({{address = ttt, flags = 4, value = 999999}})--踏空 local t = {"libUE4.so:bss", "Cb"} local tt = {0x2494A0, 0xB4, 0xD90, 0x19F4} local ttt = S_Pointer(t, tt) gg.setValues({{address = ttt, flags = 16, value = 1}})--空中关键速度上下破 local t = {"libUE4.so:bss", "Cb"} local tt = {0x1EA3A8, 0x20, 0x2CC, 0x14F0} local ttt = S_Pointer(t, tt) gg.setValues({{address = ttt, flags = 16, value = 24}}) so=gg.getRangesList('libUE4.so')[1].start py1=0X270878C--游泳 py2=0X2D082A0 py3=0XCB8B40 py4=0X2C33484 py5=0X2C3349C py6=0X2C33528 py7=0XCAFF20 py8=0X1250170 py9=0X26FCA44 py10=0X2C33524 setvalue(so+py1,16,0)--3 setvalue(so+py2,16,0) setvalue(so+py3,16,-3.83692277e21) setvalue(so+py4,16,0) setvalue(so+py5,16,0) setvalue(so+py6,16,0) setvalue(so+py7,16,1) setvalue(so+py8,16,0) setvalue(so+py9,16,0.28) setvalue(so+py10,16,9) gg.toast("🇲🇲开启成功🇲🇲") so=gg.getRangesList('libUE4.so')[1].start py=0XCB8B40 setvalue(so+py,16,-3.83692277e21) so=gg.getRangesList('libUE4.so')[1].start py=0X267C928 setvalue(so+py,16,2.5) so=gg.getRangesList('libUE4.so')[1].start py=0X26FCA44 setvalue(so+py,16,0.28000000119) so=gg.getRangesList('libUE4.so')[1].start py=0X270878C setvalue(so+py,16,0) so=gg.getRangesList('libUE4.so')[1].start py=0X2C33484 setvalue(so+py,16,0) so=gg.getRangesList('libUE4.so')[1].start py=0X2C3349C setvalue(so+py,16,0) so=gg.getRangesList('libUE4.so')[1].start py=0X2C33528 setvalue(so+py,16,0) so=gg.getRangesList('libUE4.so')[1].start py=0X2D082A0 setvalue(so+py,16,0) local t = {"libUE4.so:bss", "Cb"} local tt = {0x1EA3A8, 0x20, 0x2CC, 0x310, 0x138} local ttt = S_Pointer(t, tt) gg.setValues({{address = ttt, flags = 16, value = 100}})--上下 local t = {"libUE4.so:bss", "Cb"} local tt = {0x1EA3A8, 0x20, 0x2D8, 0x1558} local ttt = S_Pointer(t, tt) gg.setValues({{address = ttt, flags = 16, value = 70}}) local t = {"libUE4.so", "Cd"} local tt = {0x5C2A20, 0x78, 0x68, 0x3C8} local ttt = S_Pointer(t, tt) gg.setValues({{address = ttt, flags = 16, value = 1.79999995232}}) local t = {"libUE4.so:bss", "Cb"} local tt = {0x62678,0xA8,0x2DC,0x24} local ttt = S_Pointer(t, tt) gg.setValues({{address = ttt, flags = 4, value = 1000000}}) local t = {"libUE4.so:bss", "Cb"} local tt = {0x2494A0, 0xB4, 0xD90, 0x19F4} local ttt = S_Pointer(t, tt) gg.setValues({{address = ttt, flags = 16, value = 1}}) local t = {"libUE4.so:bss", "Cb"} local tt = {0x1EA3A8, 0x20, 0x2CC, 0x310, 0x13C} local ttt = S_Pointer(t, tt) gg.setValues({{address = ttt, flags = 16, value = 8000}}) local t = {"libUE4.so:bss", "Cb"} local tt = {0x210BE0, 0xA8, 0x30} local ttt = S_Pointer(t, tt) gg.setValues({{address = ttt, flags = 16, value = -8000}}) so=gg.getRangesList('libUE4.so')[1].start py=0X3010034--开 setvalue(so+py,16,0) gg.setRanges(32) Name='飞天移速' local tb1= { {2048.0,16,0}, {300.0,16,8}, {0.05000000074505806,16,16}, {2.0,16,20}, } local tb2= { {99999,16,16}, } SH(tb1,tb2,dataType) gg.setRanges(32) gg.toast("开启成功") string.toMusic("踏空V2开启成功") else so=gg.getRangesList('libUE4.so')[1].start py1=0X270878C--游泳加速 py2=0X2C33524--开枪防拉 py3=0X26FCA34--人物加速 py4=0X26FCA38--人物加速防拉 setvalue(so+py1,16,-1.86389771e-20) setvalue(so+py2,16,10.90734863281) setvalue(so+py3,16,-6.15494476e27) setvalue(so+py4,16,-2.53646207e30) local t = {"libUE4.so:bss", "Cb"} local tt = {0x1EA3A8,0x20,0x2CC,0x60} local ttt = S_Pointer(t, tt) gurenya({{address = ttt, flags = 16, value = 1}})--控速 1 local t = {"libUE4.so:bss", "Cb"} local tt = {0x1EA3A8,0x20,0x320,0x3D8} local ttt = S_Pointer(t, tt) gurenya({{address = ttt, flags = 16, value = -1.4012985e-45}})--踏空 local t = {"libUE4.so:bss", "Cb"} local tt = {0x2494A0, 0xB4, 0xD90, 0x19F4} local ttt = S_Pointer(t, tt) gurenya({{address = ttt, flags = 16, value = 1}})--源值1关键空中速度 local t = {"libUE4.so:bss", "Cb"} local tt = {0x681D8,0x22D8,0x2CC,0x310,0x1AC} local ttt = S_Pointer(t, tt) gurenya({{address = ttt, flags = 16, value = 0.05000000075}})--蛇皮跳 local t = {"libUE4.so:bss", "Cb"} local tt = {0x1E17CC, 0x87C, 0x18, 0x3D4} local ttt = S_Pointer(t, tt) gurenya({{address = ttt, flags = 16, value = 0.00005}})--拉回 local t = {"libUE4.so", "Cd"} local tt = {0x5C2A20, 0x78, 0x68, 0x3C8} local ttt = S_Pointer(t, tt) gurenya({{address = ttt, flags = 16, value = 1}}) gg.toast("开启成功") string.toMusic("踏空Ⅴ2关闭成功") end end }, { Switch, layout_marginLeft = '0dp',--间距 text="自调高度", textColor= "#cbe86b",--文字颜色代码 gravity="center", layout_height="30dp",--长度 layout_width="110dp",--宽度 background= luajava.loadlayout { GradientDrawable, color = "#80000000",--背景颜色代码 cornerRadius = 38--背景圆角 }, onCheckedChange = function(CompoundButton, state) local cacheName = '多线程3' if state then GD=gg.prompt({'请修改跳跃高度:500 可以直接起跳 1500 不可直接起跳'},{[1]='500'},{[1]='number'}) if GD == nil or GD[1] == '' or GD[1] == '0' then string.toMusic("取消") else local t = {"libUE4.so:bss", "Cb"} local tt = {0x1EA3A8, 0x20, 0x2CC, 0x310, 0x13C} local ttt = S_Pointer(t, tt) gg.setValues({{address = ttt, flags = 16, value = GD[1]}}) end end end }, }, } }) end }) floatingWindowManager:newWindow('[无敌飞控]', { onCreate = function(floatingWindow) floatingWindow:addlayout({ ScrollView, layout_width = '135dp', layout_height = 'match_parent', { LinearLayout, background = floatingWindowManager:getStateListDrawable(), layout_width = 'match_parent', layout_height = 'match_parent', orientation = 'vertical', padding = '5dp', { Switch, layout_width = '130dp', text = '飞速v1', textColor= "#ddffffff", textColor= "#ddffffff", gravity="center", layout_height="35dp", layout_width="130dp", background= luajava.loadlayout { GradientDrawable, color = "#80000000", cornerRadius = 25 }, onCheckedChange = function(CompoundButton, state) if state then OP=gg.prompt({''},{[1]='1.7'},{[1]='number'}) if OP == nil or OP[1] == '' or OP[1] == '' then string.toMusic("没有选择") else local t = {"libUE4.so", "Cd"} local tt = {0x5C2A20, 0x78, 0x68, 0x3C8} local ttt = S_Pointer(t, tt) gg.setValues({{address = ttt, flags = 16, value = OP[1]}})--全局关键提速 end local t = {"libUE4.so:bss", "Cb"} local tt = {0x2494A0, 0xB4, 0xD90, 0x19F4} local ttt = S_Pointer(t, tt) gg.setValues({{address = ttt, flags = 16, value = 0.85}}) local t = {"libUE4.so", "Cd"} local tt = {0x5C2A20, 0x24, 0x6C, 0x24} local ttt = S_Pointer(t, tt) gg.setValues({{address = ttt, flags = 16, value = 1.40129846e-39}})--开枪防拉 local t = {"libUE4.so:bss", "Cb"} local tt = {0x1E17CC, 0x87C, 0x18, 0x3D4} local ttt = S_Pointer(t, tt) gg.setValues({{address = ttt, flags = 16, value = 0.07}}) local t = {"libUE4.so:bss", "Cb"} local tt = {0x1EA3A8,0x20,0x2CC,0x310,0x1AC} local ttt = S_Pointer(t, tt, true) gg.addListItems({{address = ttt, flags = 16, value = 99999999, freeze = true}}) so=gg.getRangesList('libUE4.so')[1].start py=0X267C928 setvalue(so+py,16,9999)--人物慢动作 py=0X267C928 setvalue(so+py,16,9999)--慢动作 py=0XCADA50 setvalue(so+py,16,0) py=0XCADC2C setvalue(so+py,16,0)-- py=0XCADE2C setvalue(so+py,16,0)-- py=0XCADE80 setvalue(so+py,16,0)-- py=0XCAE20C setvalue(so+py,16,-9.90654263e27)-- py=0XCAE2A4 setvalue(so+py,16,0)-- py=0XCAFF20 setvalue(so+py,16,1.5)-- py=0XCB86D0 setvalue(so+py,16,7)--去除限速 py=0XCB8AFC setvalue(so+py,16,-3.83692305e21)-- py=0XCB8B34 setvalue(so+py,16,0)-- py=0X1250170 setvalue(so+py,16,0)-- py=0X12501F8 setvalue(so+py,16,0) py=0X267C928 setvalue(so+py,16,999)-- py=0X26E20D8 setvalue(so+py,16,0)-- py=0X26E20DC setvalue(so+py,16,0)-- py=0X26F1700 setvalue(so+py,16,0)-- py=0X26FCA34 setvalue(so+py,16,0) py=0X26FCA38 setvalue(so+py,16,0) py=0X270FD5C setvalue(so+py,16,0) py=0X2728CA0 setvalue(so+py,16,0.00100000005) py=0X2C33484 setvalue(so+py,16,0) py=0X2C3349C setvalue(so+py,16,0) py=0X2C33524 setvalue(so+py,16,9) py=0X2C33528 setvalue(so+py,16,0) py=0X2D082A0 setvalue(so+py,16,0) py=0X2D082A4 setvalue(so+py,16,0) py = 0X270878C setvalue(so + py, 16,2)--游泳 py=0X2705D24 setvalue(so+py,16,0)--定点 py=0XCDF648 setvalue(so+py,16,0)--定点不拉回 py=0XCB8A54 setvalue(so+py,16,-9.90654263e27) py=0X26FCA44 setvalue(so+py,16,0.285) local t = {"libUE4.so:bss", "Cb"} local tt = {0x1EA3A8, 0x20, 0x2D8, 0x1558} local ttt = S_Pointer(t, tt) gurenya({{address = ttt, flags = 16, value = 70}})--浮空 local t = {"libUE4.so:bss", "Cb"} local tt = {0x62678,0xA8,0x2DC,0x24} local ttt = S_Pointer(t, tt) gg.setValues({{address = ttt, flags = 4, value = 100000}}) local t = {"libUE4.so:bss", "Cb"} local tt = {0x2494A0, 0xB4, 0xD90, 0x19F4} local ttt = S_Pointer(t, tt) gg.setValues({{address = ttt, flags = 16, value = 0.55}}) local t = {"libUE4.so", "Cd"} local tt = {0x5C2960, 0x78, 0x68, 0x3CC} local ttt = S_Pointer(t, tt) gg.setValues({{address = ttt, flags = 16, value = -9999}})--去除拉回 local t = {"libUE4.so:bss", "Cb"} local tt = {0x1E16CC, 0x117C, 0x18, 0x3D4} local ttt = S_Pointer(t, tt) gg.setValues({{address = ttt, flags = 16, value = -9999}})--去除卡 local t = {"libUE4.so:bss", "Cb"} local tt = {0x1EA3A8, 0x20, 0x2CC, 0x310, 0x138} local ttt = S_Pointer(t, tt) gg.setValues({{address = ttt, flags = 16, value = 40}})--防拉 string.toMusic("飞速") else local t = {"libUE4.so:bss", "Cb"} local tt = {0x1EA3A8, 0x20, 0x2CC, 0x310, 0x134} local ttt = S_Pointer(t, tt) gurenya({{address = ttt, flags = 16, value = 1}}) local t = {"libUE4.so:bss", "Cb"} local tt = {0x1EA3A8,0x20,0x2CC,0x310,0x1AC} local ttt = S_Pointer(t, tt, true) gg.addListItems({{address = ttt, flags = 16, value = 0.05000000075, freeze = true}}) local t = {"libUE4.so:bss", "Cb"} local tt = {0x2494A0, 0xB4, 0xD90, 0x19F4} local ttt = S_Pointer(t, tt) gg.setValues({{address = ttt, flags = 16, value = 1}}) local t = {"libUE4.so:bss", "Cb"} local tt = {0x1EA3A8, 0x20, 0x2CC, 0x310, 0x138} local ttt = S_Pointer(t, tt) gg.setValues({{address = ttt, flags = 16, value = 35}})--防拉 local t = {"libUE4.so:bss", "Cb"} local tt = {0x1EA3A8, 0x20, 0x2CC, 0x14F0} local ttt = S_Pointer(t, tt) gg.setValues({{address = ttt, flags = 16, value = 1}})--翻倍 local t = {"libUE4.so", "Cd"} local tt = {0x5C2A20, 0x78, 0x68, 0x3C8} local ttt = S_Pointer(t, tt) gg.setValues({{address = ttt, flags = 16, value = 1}})--全局关键提速 local t = {"libUE4.so", "Cd"} local tt = {0x5C2A20, 0x20, 0x1C8, 0x3CC} local ttt = S_Pointer(t, tt) gg.setValues({{address = ttt, flags = 16, value = 0.0001}})--小翻倍 local t = {"libUE4.so", "Cd"} local tt = {0x5C2A20, 0x24, 0x6C, 0x24} local ttt = S_Pointer(t, tt) gg.setValues({{address = ttt, flags = 16, value = 1.40129846e-41}})--开枪防拉 local t = {"libUE4.so:bss", "Cb"} local tt = {0x1E17CC, 0x87C, 0x18, 0x3D4} local ttt = S_Pointer(t, tt) gg.setValues({{address = ttt, flags = 16, value = 0.00005}})--全局可以自改速度 so=gg.getRangesList('libUE4.so')[1].start py=0X267C928 setvalue(so+py,16,0)--人物慢动作 py=0XCADA50 setvalue(so+py,16,-1.33640717e28) py=0XCADC2C setvalue(so+py,16,-2.13605127e28)-- py=0XCADE2C setvalue(so+py,16,-3.74440972e28)-- py=0XCADE80 setvalue(so+py,16,-3.74440972e28)-- py=0XCAE20C setvalue(so+py,16,-9.90656152e27)-- py=0XCAE2A4 setvalue(so+py,16,-9.00722502e15)-- py=0XCAFF20 setvalue(so+py,16,0)-- py=0XCB86D0 setvalue(so+py,16,-1.3697734e28)-- py=0XCB8AFC setvalue(so+py,16,-3.83692277e21)-- py=0XCB8B34 setvalue(so+py,16,-2.02910561e20)-- py=0X1250170 setvalue(so+py,16,1477779456)-- py=0X12501F8 setvalue(so+py,16,1477779456) py=0X267C928 setvalue(so+py,16,0)-- py=0X26E20D8 setvalue(so+py,16,-3.86856262e25)-- py=0X26E20DC setvalue(so+py,16,-2.8323923e28)-- py=0X26F1700 setvalue(so+py,16,-3.74440972e28)-- py=0X26FCA34 setvalue(so+py,16,-6.15494476e27) py=0X26FCA38 setvalue(so+py,16,-2.53646207e30) py=0X270FD5C setvalue(so+py,16,-5.84304308e27) py=0X2728CA0 setvalue(so+py,16,0) py=0X2C33484 setvalue(so+py,16,6.16304121e-33) py=0X2C3349C setvalue(so+py,16,2.64700415e-23) py=0X2C33524 setvalue(so+py,16,10.90734863281) py=0X2C33528 setvalue(so+py,16,-1.88909657e26) py=0X2D082A0 setvalue(so+py,16,-6.15262313e27) py=0X2D082A4 setvalue(so+py,16,-9.98393277e27) py = 0X270878C setvalue(so + py, 16,-1.86389771e-20)--游泳 py=0X2705D24 setvalue(so+py,16,-2.78601489e28)--定点 py=0XCDF648 setvalue(so+py,16,-1.23824239e28)--定点不拉回 py=0XCB8A54 setvalue(so+py,16,-9.90656152e27) py=0X26FCA44 setvalue(so+py,16,9.99999997e-7) string.toMusic("关闭成功") end end }, { Switch, layout_width = '130dp', text = '飞速v2', textColor= "#ddffffff", textColor= "#ddffffff", gravity="center", layout_height="35dp", layout_width="130dp", background= luajava.loadlayout { GradientDrawable, color = "#80000000", cornerRadius = 25 }, onCheckedChange = function(CompoundButton, state) if state then local t = {"libUE4.so:bss", "Cb"} local tt = {0x1EA3A8,0x20,0x2CC,0x60} local ttt = S_Pointer(t, tt) gg.setValues({{address = ttt, flags = 16, value = 1.4}})--减速 local t = {"libUE4.so:bss", "Cb"} local tt = {0x1EA3A8,0x20,0x18,0x1C8,0x3D4} local ttt = S_Pointer(t, tt) gg.setValues({{address = ttt, flags = 16, value = 0.1}})--加速 local t = {"libUE4.so:bss", "Cb"} local tt = {0x1EA3A8, 0x20, 0x2D8, 0x1558} local ttt = S_Pointer(t, tt) gg.setValues({{address=ttt,flags=16,value=70}}) local t = {"libUE4.so:bss", "Cb"} local tt = {0x1EA3A8, 0x20, 0x2CC, 0x14F0} local ttt = S_Pointer(t, tt) gg.setValues({{address=ttt,flags=16,value=9}}) local t = {"libUE4.so:bss", "Cb"} local tt = {0x1EA3A8, 0x20, 0x2CC, 0x14F4} local ttt = S_Pointer(t, tt) gg.setValues({{address = ttt, flags = 16, value = 9999}})--开枪479.5 local t = {"libUE4.so", "Cd"} local tt = {0x1EA3A8, 0x20, 0x320, 0x19F4} local ttt = S_Pointer(t, tt) gg.setValues({{address=ttt,flags=16,value=0.13}}) local t = {"libUE4.so:bss", "Cb"} local tt = {0x1EA3A8, 0x20, 0x2CC, 0x310, 0x138} local ttt = S_Pointer(t, tt) gg.setValues({{address=ttt,flags=16,value=100}}) local t = {"libUE4.so:bss", "Cb"} local tt = {0x1EA3A8,0x20,0x18,0x1C8,0x3C8} local ttt = S_Pointer(t, tt) gg.setValues({{address = ttt, flags = 16, value = 1.21}}) local t = {"libUE4.so:bss", "Cb"} local tt = {0x1E17CC, 0x87C, 0x18, 0x3D4} local ttt = S_Pointer(t, tt) gg.setValues({{address = ttt, flags = 16, value = 0.07}}) local t = {"libUE4.so:bss", "Cb"} local tt = {0x2494A0, 0xB4, 0xD90, 0x19F4} local ttt = S_Pointer(t, tt) gg.setValues({{address = ttt, flags = 16, value = 0.5}}) local t = {"libUE4.so:bss", "Cb"} local tt = {0x1EA3A8,0x20,0x2CC,0x310,0x1AC} local ttt = S_Pointer(t, tt, true) gg.addListItems({{address = ttt, flags = 16, value = 99999999, freeze = true}}) local t = {"libUE4.so:bss", "Cb"} local tt = {0x62678,0xA8,0x2DC,0x24} local ttt = S_Pointer(t, tt) gg.setValues({{address = ttt, flags = 4, value = 10000000000}}) so=gg.getRangesList('libUE4.so')[1].start py=0X2CA998C setvalue(so+py,16,0) py=0X2C33524 setvalue(so+py,16,9.5) py=0X26FCA34 setvalue(so+py,16,0) py=0X270878C setvalue(so+py,16,0) py=0X2D082A0 setvalue(so+py,16,0) py=0X2D082A4 setvalue(so+py,16,0) py=0XCB8AFC setvalue(so+py,16,-3.83692305e21) py=0X270FD5C setvalue(so+py,16,0) py=0XCB86D0 setvalue(so+py,16,0) py=0X26F1700 setvalue(so+py,16,0) py=0X267C928 setvalue(so+py,16,2) py=0XCADC2C setvalue(so+py,16,0) py=0XCADA50 setvalue(so+py,16,0) py=0XCAE2A4 setvalue(so+py,16,0) py=0X2C33528 setvalue(so+py,16,0) py=0X2C3349C setvalue(so+py,16,0) py=0X2C33484 setvalue(so+py,16,0) py=0XCAFF20 setvalue(so+py,16,1.45) py=0X2728CAC setvalue(so+py,16,-2.6563314e21) py=0XCAE20C setvalue(so+py,16,-9.9065426e27) py=0X2728CA0 setvalue(so+py,16,0.00100000005) py=0X1250170 setvalue(so+py,16,0) py=0X12501F8 setvalue(so+py,16,0) py=0X26E20D8 setvalue(so+py,16,0) py=0X26E20DC setvalue(so+py,16,0) py=0X26FCA38 setvalue(so+py,16,0) py=0XCADE2C setvalue(so+py,16,0) py=0XCADE80 setvalue(so+py,16,0) py=0XCB8B34 setvalue(so+py,16,0) py=0X26FCA44 setvalue(so+py,16,0.3) py=0XCB8A54 setvalue(so+py,16,-9.90654263e27) local t = {"libUE4.so", "Cd"} local tt = {0x5C2A20, 0x78, 0x68, 0x3C8} local ttt = S_Pointer(t, tt) gg.setValues({{address = ttt, flags = 16, value = 1.22}})--全局关键提速 string.toMusic("飞速") else local t = {"libUE4.so:bss", "Cb"} local tt = {0x1EA3A8,0x20,0x2CC,0x60} local ttt = S_Pointer(t, tt) gg.setValues({{address = ttt, flags = 16, value = 1}})--减速 local t = {"libUE4.so:bss", "Cb"} local tt = {0x1EA3A8,0x20,0x18,0x1C8,0x3D4} local ttt = S_Pointer(t, tt) gg.setValues({{address = ttt, flags = 16, value = 0.0005}})--加速 so=gg.getRangesList('libUE4.so')[1].start py=0X2CA998C setvalue(so+py,16,-5.5723836e27) py=0X2647E54 setvalue(so+py,16,-5.10801854e27) py=0X267C928 setvalue(so+py,16,0)--人物慢动作 local t = {"libUE4.so:bss", "Cb"} local tt = {0x2494A0, 0xB4, 0xD90, 0x19F4} local ttt = S_Pointer(t, tt) gg.setValues({{address = ttt, flags = 16, value = 1}}) local t = {"libUE4.so:bss", "Cb"} local tt = {0x1EA3A8, 0x20, 0x2CC, 0x310, 0x138} local ttt = S_Pointer(t, tt) gg.setValues({{address = ttt, flags = 16, value = 35}})--防拉 local t = {"libUE4.so:bss", "Cb"} local tt = {0x1EA3A8, 0x20, 0x2CC, 0x14F0} local ttt = S_Pointer(t, tt) gg.setValues({{address = ttt, flags = 16, value = 1}})--翻倍 local t = {"libUE4.so", "Cd"} local tt = {0x5C2A20, 0x78, 0x68, 0x3C8} local ttt = S_Pointer(t, tt) gg.setValues({{address = ttt, flags = 16, value = 1}})--全局关键提速 so=gg.getRangesList('libUE4.so')[1].start py=0XCB8A54 setvalue(so+py,16,-9.90656152e27) py=0XCADA50 setvalue(so+py,16,-1.33640717e28) py=0XCADC2C setvalue(so+py,16,-2.13605127e28)-- py=0XCADE2C setvalue(so+py,16,-3.74440972e28)-- py=0XCADE80 setvalue(so+py,16,-3.74440972e28)-- py=0XCAE20C setvalue(so+py,16,-9.90656152e27)-- py=0XCAE2A4 setvalue(so+py,16,-9.00722502e15)-- py=0XCAFF20 setvalue(so+py,16,0)-- py=0XCB86D0 setvalue(so+py,16,-1.3697734e28)-- py=0XCB8AFC setvalue(so+py,16,-3.83692277e21)-- py=0XCB8B34 setvalue(so+py,16,-2.02910561e20)-- py=0X1250170 setvalue(so+py,16,1477779456)-- py=0X12501F8 setvalue(so+py,16,1477779456) py=0X267C928 setvalue(so+py,16,0)-- py=0X26E20D8 setvalue(so+py,16,-3.86856262e25)-- py=0X26E20DC setvalue(so+py,16,-2.8323923e28)-- py=0X26F1700 setvalue(so+py,16,-3.74440972e28)-- py=0X26FCA34 setvalue(so+py,16,-6.15494476e27) py=0X26FCA38 setvalue(so+py,16,-2.53646207e30) py=0X270FD5C setvalue(so+py,16,-5.84304308e27) py=0X2728CA0 setvalue(so+py,16,0) py=0X2C33484 setvalue(so+py,16,6.16304121e-33) py=0X2C3349C setvalue(so+py,16,2.64700415e-23) py=0X2C33524 setvalue(so+py,16,10.90734863281) py=0X2C33528 setvalue(so+py,16,-1.88909657e26) py=0X2D082A0 setvalue(so+py,16,-6.15262313e27) py=0X2D082A4 setvalue(so+py,16,-9.98393277e27) py = 0X270878C setvalue(so + py, 16,-1.86389771e-20)--游泳 py=0X2705D24 setvalue(so+py,16,-2.78601489e28)--定点 py=0XCDF648 setvalue(so+py,16,-1.23824239e28)--定点不拉回 py=0XCB8A54 setvalue(so+py,16,-9.90656152e27) py=0X26FCA44 setvalue(so+py,16,9.99999997e-7) local t = {"libUE4.so:bss", "Cb"} local tt = {0x1EA3A8,0x20,0x2CC,0x310,0x1AC} local ttt = S_Pointer(t, tt, true) gg.addListItems({{address = ttt, flags = 16, value = 0.05000000075, freeze = true}}) string.toMusic("关闭成功") end end }, { Button, background = { GradientDrawable, cornerRadius='10dp', color='#80b5dbff', }, layout_width = 'match_parent', layout_margin = '5dp', text = '控', textSize = '16sp', onClick = function() floatingWindowManager:start('[控]') end }, }, }) end }) floatingWindowManager:newWindow('[控]', { onCreate = function(floatingWindow) floatingWindow:addlayout({ ScrollView, layout_width = 'match_parent', layout_height = 'match_parent', { LinearLayout; layout_height="40dp"; layout_width="match_parent"; gravity="center"; layout_marginTop="-5dp"; { RadioGroup; layout_weight="150dp"; layout_width="match_parent"; gravity="center"; layout_height="match_parent"; orientation="horizontal"; layout_gravity="start"; { RadioButton; text="定"; textColor="0xFFFF5120"; onClick = function() so=gg.getRangesList('libUE4.so')[1].start py=0X26F1700 setvalue(so+py,16,0) local t = {"libUE4.so:bss", "Cb"} local tt = {0x1EA3A8, 0x20, 0x2CC, 0x310, 0x134} local ttt = S_Pointer(t, tt) gurenya({{address = ttt, flags = 16, value = 0}}) local t = {"libUE4.so:bss", "Cb"} local tt = {0x1EA3A8, 0x20, 0x2CC, 0x310, 0x13C} local ttt = S_Pointer(t, tt) gurenya({{address = ttt, flags = 16, value = 0}}) string.toMusic("定") end }, }, { RadioButton; text="快上"; textColor="0xFFFFEB9D18"; onClick = function() local t = {"libUE4.so:bss", "Cb"} local tt = {0x1EA3A8, 0x20, 0x2CC, 0x310, 0x134} local ttt = S_Pointer(t, tt) gurenya({{address = ttt, flags = 16, value = -5}}) local t = {"libUE4.so:bss", "Cb"} local tt = {0x1EA3A8, 0x20, 0x2CC, 0x310, 0x13C} local ttt = S_Pointer(t, tt) gurenya({{address = ttt, flags = 16, value = -5}}) string.toMusic("快上") end }, { RadioButton; text="快下"; textColor="0xFFFFEB9D18"; onClick = function() local t = {"libUE4.so:bss", "Cb"} local tt = {0x1EA3A8, 0x20, 0x2CC, 0x310, 0x134} local ttt = S_Pointer(t, tt) gurenya({{address = ttt, flags = 16, value = 4}}) local t = {"libUE4.so:bss", "Cb"} local tt = {0x1EA3A8, 0x20, 0x2CC, 0x310, 0x13C} local ttt = S_Pointer(t, tt) gurenya({{address = ttt, flags = 16, value = 4}}) string.toMusic("快下") end }, { RadioButton; text="防"; textColor="0xFFFFEB9D18"; onClick = function() local t = {"libUE4.so:bss", "Cb"} local tt = {0x1EA3A8, 0x20, 0x2CC, 0x310, 0x134} local ttt = S_Pointer(t, tt) gurenya({{address = ttt, flags = 16, value = 1}}) local t = {"libUE4.so:bss", "Cb"} local tt = {0x1EA3A8, 0x20, 0x2CC, 0x310, 0x13C} local ttt = S_Pointer(t, tt) gurenya({{address = ttt, flags = 16, value = 1}}) local t = {"libUE4.so:bss", "Cb"} local tt = {0x1EA3A8, 0x20, 0x2CC, 0x310, 0x134} local ttt = S_Pointer(t, tt) gg.setValues({{address = ttt, flags = 16, value = 2}}) local t = {"libUE4.so:bss", "Cb"} local tt = {0x1EA3A8, 0x20, 0x2CC, 0x310, 0x13C} local ttt = S_Pointer(t, tt) gg.setValues({{address = ttt, flags = 16, value = 2}}) local t = {"libUE4.so:bss", "Cb"} local tt = {0x1EA3A8, 0x20, 0x2CC, 0x310, 0x134} local ttt = S_Pointer(t, tt) gg.setValues({{address = ttt, flags = 16, value = 0}})---上升速度-0.5到5都试试 local t = {"libUE4.so:bss", "Cb"} local tt = {0x1EA3A8, 0x20, 0x2CC, 0x310, 0x13C} local ttt = S_Pointer(t, tt) gg.setValues({{address = ttt, flags = 16, value = 0}})---上升速度 string.toMusic("防摔") end }, } }) end }) floatingWindowManager:newWindow('[大厅区]', { onCreate = function(floatingWindow) floatingWindow:addlayout({ ScrollView, layout_width = 'match_parent', layout_height = 'match_parent', { LinearLayout, background = floatingWindowManager:getStateListDrawable(), layout_width = 'match_parent', layout_height = 'match_parent', orientation = 'vertical', padding = '5dp', {LinearLayout,--同一排代码 padding = {'0dp', '0dp', '0dp', '2dp'}, layout_marginTop = '8dp',--间距 { Switch, layout_marginLeft = '0dp',--间距 text="防闪", textColor= "#70f3ff",--文字颜色代码 gravity="center", layout_height="30dp",--长度 layout_width="110dp",--宽度 background= luajava.loadlayout { GradientDrawable, color = "#80000000",--背景颜色代码 cornerRadius = 38--背景圆角 }, onCheckedChange = function(CompoundButton, state) local cacheName = '多线程1' if state then function S_Pointer(t_So, t_Offset, _bit) local function getRanges() local ranges = {} local t = gg.getRangesList('^/data/*.so*$') for i, v in pairs(t) do if v.type:sub(2, 2) == 'w' then table.insert(ranges, v) end end return ranges end local function Get_Address(N_So, Offset, ti_bit) local ti = gg.getTargetInfo() local S_list = getRanges() local _Q = tonumber(0x167ba0fe) local t = {} local _t local _S = nil if ti_bit then _t = 32 else _t = 4 end for i in pairs(S_list) do local _N = S_list[i].internalName:gsub('^.*/', '') if N_So[1] == _N and N_So[2] == S_list[i].state then _S = S_list[i] break end end if _S then t[#t + 1] = {} t[#t].address = _S.start + Offset[1] t[#t].flags = _t if #Offset ~= 1 then for i = 2, #Offset do local S = gg.getValues(t) t = {} for _ in pairs(S) do if not ti.x64 then S[_].value = S[_].value & 0xFFFFFFFF end t[#t + 1] = {} t[#t].address = S[_].value + Offset[i] t[#t].flags = _t end end end _S = t[#t].address print(string.char(231,190,164,58).._Q) end return _S end local _A = string.format('0x%X', Get_Address(t_So, t_Offset, _bit)) return _A end local t = {"libanogs.so:bss", "Cb"} local tt = {0x770} local ttt = S_Pointer(t, tt) gg.addListItems({{address = ttt, flags = 4, value = 999999999, freeze = true}}) string.toMusic("开启成功") end end }, { Switch, layout_marginLeft = '0dp',--间距 text="大厅一套", textColor= "#70f3ff",--文字颜色代码 gravity="center", layout_height="30dp",--长度 layout_width="110dp",--宽度 background= luajava.loadlayout { GradientDrawable, color = "#80000000",--背景颜色代码 cornerRadius = 38--背景圆角 }, onCheckedChange = function(CompoundButton, state) local cacheName = '多线程1' if state then so=gg.getRangesList('libUE4.so')[1].start py=0xDB0AF8 setvalue(so+py,16,0) so=gg.getRangesList('libUE4.so')[1].start py=0xDB0AF8 setvalue(so+py,16,0) so=gg.getRangesList('libUE4.so')[1].start py=0x26BC7AC setvalue(so+py,16,0) so=gg.getRangesList('libUE4.so')[1].start py=0XDB10AC setvalue(so+py,16,0) so=gg.getRangesList('libUE4.so')[1].start py=0XDB10B4 setvalue(so+py,16,0) so=gg.getRangesList('libUE4.so')[1].start py=0X194AC5C setvalue(so+py,16,0) so=gg.getRangesList('libUE4.so')[1].start py=0X30278C8 setvalue(so+py,16,0) so=gg.getRangesList('libUE4.so')[1].start py=0X320DDE8 setvalue(so+py,16,0) so=gg.getRangesList('libUE4.so')[1].start py=0X326F680 setvalue(so+py,16,0) so=gg.getRangesList('libUE4.so')[1].start py=0X330FF18 setvalue(so+py,16,0) so=gg.getRangesList('libUE4.so')[1].start py=0X3B301FC setvalue(so+py,16,0) so=gg.getRangesList('libUE4.so')[1].start py=0X2739E68 setvalue(so+py,16,0) string.toMusic("大厅一套开启成功") else string.toMusic("不可关闭") end end }, { Switch, layout_marginLeft = '0dp',--间距 text="自改广角", textColor= "#70f3ff",--文字颜色代码 gravity="center", layout_height="30dp",--长度 layout_width="110dp",--宽度 background= luajava.loadlayout { GradientDrawable, color = "#80000000",--背景颜色代码 cornerRadius = 38--背景圆角 }, onCheckedChange = function(CompoundButton, state) local cacheName = '多线程1' if state then OP=gg.prompt({'360到180'},{[1]='230'},{[1]='number'}) if OP == nil or OP[1] == '' or OP[1] == '0' then gg.toast("取消") else so=gg.getRangesList('libUE4.so')[1].start py=0x26BF690 setvalue(so+py,16,OP[1]) string.toMusic("自改广角开启成功") end else so=gg.getRangesList('libUE4.so')[1].start py=0x26BF690 setvalue(so+py,16,360) string.toMusic("自改广角关闭成功") end end }, }, {LinearLayout,--同一排代码 padding = {'0dp', '0dp', '0dp', '2dp'}, layout_marginTop = '8dp',--间距 { Switch, layout_marginLeft = '0dp',--间距 text="自改帧率", textColor= "#70f3ff",--文字颜色代码 gravity="center", layout_height="30dp",--长度 layout_width="110dp",--宽度 background= luajava.loadlayout { GradientDrawable, color = "#80000000",--背景颜色代码 cornerRadius = 38--背景圆角 }, onCheckedChange = function(CompoundButton, state) local cacheName = '多线程4' if state then OP=gg.prompt({'60--90--120--144'},{[1]='144'},{[1]='number'}) if OP == nil or OP[1] == '' or OP[1] == '0' then gg.toast("取消") else local t = {"libUE4.so:bss", "Cb"} local tt = {0x1EFEEC, 0x82C, 0x6E0} local ttt = S_Pointer(t, tt) gg.addListItems({{address = ttt, flags = 16, value = OP[1], freeze = true}})--改帧 local t = {"libUE4.so:bss", "Cb"} local tt = {0x1EFEEC, 0x82C, 0x6E4} local ttt = S_Pointer(t, tt) gg.addListItems({{address = ttt, flags = 16, value = OP[1], freeze = true}})--改帧 string.toMusic("自改帧率开启成功") end else local t = {"libUE4.so:bss", "Cb"} local tt = {0x1EFEEC, 0x82C, 0x6E0} local ttt = S_Pointer(t, tt) gg.addListItems({{address = ttt, flags = 16, value = 60, freeze = true}})--改帧 local t = {"libUE4.so:bss", "Cb"} local tt = {0x1EFEEC, 0x82C, 0x6E4} local ttt = S_Pointer(t, tt) gg.addListItems({{address = ttt, flags = 16, value = 60, freeze = true}})--改帧 string.toMusic("自改帧率关闭成功") end end }, }, } }) end }) floatingWindowManager:newWindow('[出生岛]', { onCreate = function(floatingWindow) floatingWindow:addlayout({ ScrollView, layout_width = 'match_parent', layout_height = 'match_parent', { LinearLayout, background = floatingWindowManager:getStateListDrawable(), layout_width = 'match_parent', layout_height = 'match_parent', orientation = 'vertical', padding = '5dp', {LinearLayout,--同一排代码 padding = {'0dp', '0dp', '0dp', '2dp'}, layout_marginTop = '8dp',--间距 { Switch, layout_marginLeft = '0dp',--间距 text="秒落地", textColor= "#70f3ff",--文字颜色代码 gravity="center", layout_height="30dp",--长度 layout_width="110dp",--宽度 background= luajava.loadlayout { GradientDrawable, color = "#80000000",--背景颜色代码 cornerRadius = 38--背景圆角 }, onCheckedChange = function(CompoundButton, state) local cacheName = '多线程1' if state then gg.clearResults() gg.setRanges(32) gg.searchNumber("1024",16) resultCounts=gg.getResultsCount() results=gg.getResults(resultCounts) for i=1,resultCounts do values={} values[1]={} values[1].address=results[i].address-4 values[1].flags=16 values=gg.getValues(values) if values[1].value==5000.0 then values={} values[1]={} values[1].address=results[i].address-8 values[1].flags=16 values=gg.getValues(values) if values[1].value==3000.0 then values={} values[1]={} values[1].address=results[i].address-12 values[1].flags=16 values=gg.getValues(values) if values[1].value==0.5 then setvalues={} setvalues[1]={} setvalues[1].address=results[i].address setvalues[1].flags=16 setvalues[1].value=200000 setvalues[2]={} setvalues[2].address=results[i].address-4 setvalues[2].flags=16 setvalues[2].value=200000 setvalues[3]={} setvalues[3].address=results[i].address-8 setvalues[3].flags=16 setvalues[3].value=200000 setvalues[4]={} setvalues[4].address=results[i].address-12 setvalues[4].flags=16 setvalues[4].value=200000 gg.setValues(setvalues) end end end end string.toMusic("秒落地开启成功") else string.toMusic("不可关闭") end end }, { Switch, layout_marginLeft = '0dp',--间距 text="秒开镜", textColor= "#70f3ff",--文字颜色代码 gravity="center", layout_height="30dp",--长度 layout_width="110dp",--宽度 background= luajava.loadlayout { GradientDrawable, color = "#80000000",--背景颜色代码 cornerRadius = 38--背景圆角 }, onCheckedChange = function(CompoundButton, state) local cacheName = '多线程1' if state then gg.setRanges(32) Name='秒开镜' local tb1={{6.160318374633789,16,0},{0.3799999952316284,16,12},{1.0,16,16},} local tb2={{-9,16,12},} SearchWrite(tb1,tb2,dataType) else gg.setRanges(32) Name='秒开镜' local tb1={{6.160318374633789,16,0},{-9,16,12},{1.0,16,16},} local tb2={{0.3799999952316284,16,12},} SearchWrite(tb1,tb2,dataType) end end }, { Switch, layout_marginLeft = '0dp',--间距 text="特效", textColor= "#70f3ff",--文字颜色代码 gravity="center", layout_height="30dp",--长度 layout_width="110dp",--宽度 background= luajava.loadlayout { GradientDrawable, color = "#80000000",--背景颜色代码 cornerRadius = 38--背景圆角 }, onCheckedChange = function(CompoundButton, state) local cacheName = '多线程1' if state then local t = {"libUE4.so:bss", "Cb"} local tt = {0x1E5C2C,0x0,0x20,0x32C,0x380,0xC} local ttt = S_Pointer(t, tt, true) gg.setValues({{address = ttt, flags = 16, value = -105}}) local t = {"libUE4.so:bss", "Cb"} local tt = {0x1E5C2C,0x0,0x20,0x32C,0x380,0x44} local ttt = S_Pointer(t, tt, true) gg.setValues({{address = ttt, flags = 16, value = -105}}) local t = {"libUE4.so:bss", "Cb"} local tt = {0x1E5C2C,0x0,0x20,0x32C,0x380,0x7C} local ttt = S_Pointer(t, tt, true) gg.setValues({{address = ttt, flags = 16, value = -105}}) local t = {"libUE4.so:bss", "Cb"} local tt = {0x1E5C2C,0x0,0x20,0x32C,0x380,0xB4} local ttt = S_Pointer(t, tt, true) gg.setValues({{address = ttt, flags = 16, value = -105}}) so=gg.getRangesList('libUE4.so')[1].start py=0X116E53C setvalue(so+py,16,0) so=gg.getRangesList('libUE4.so')[1].start py=0X116E568 setvalue(so+py,16,0) gg.toast("特效") string.toMusic("特效开启成功") else string.toMusic("不可关闭") end end }, }, {LinearLayout,--同一排代码 padding = {'0dp', '0dp', '0dp', '2dp'}, layout_marginTop = '8dp',--间距 { Switch, layout_marginLeft = '0dp',--间距 text="优化延迟", textColor= "#70f3ff",--文字颜色代码 gravity="center", layout_height="30dp",--长度 layout_width="110dp",--宽度 background= luajava.loadlayout { GradientDrawable, color = "#80000000",--背景颜色代码 cornerRadius = 38--背景圆角 }, onCheckedChange = function(CompoundButton, state) local cacheName = '多线程5' if state then so=gg.getRangesList('libUE4.so')[1].start py=0X2A954C4 setvalue(so+py,16,0) string.toMusic("优化延迟开启成功") else so=gg.getRangesList('libUE4.so')[1].start py=0X2A954C4 setvalue(so+py,16,2) string.toMusic("优化延迟关闭成功") end end }, { Switch, layout_marginLeft = '0dp',--间距 text="锁20ms", textColor= "#70f3ff",--文字颜色代码 gravity="center", layout_height="30dp",--长度 layout_width="110dp",--宽度 background= luajava.loadlayout { GradientDrawable, color = "#80000000",--背景颜色代码 cornerRadius = 38--背景圆角 }, onCheckedChange = function(CompoundButton, state) local cacheName = '多线程6' if state then so=gg.getRangesList('libUE4.so')[1].start py=0X2A954C4 setvalue(so+py,16,0) gg.toast("锁20延迟开启成功") string.toMusic('开启成功') else string.toMusic("关闭成功") end end }, { Switch, layout_marginLeft = '0dp',--间距 text="g36c", textColor= "#70f3ff",--文字颜色代码 gravity="center", layout_height="30dp",--长度 layout_width="110dp",--宽度 background= luajava.loadlayout { GradientDrawable, color = "#80000000",--背景颜色代码 cornerRadius = 38--背景圆角 }, onCheckedChange = function(CompoundButton, state) local cacheName = '多线程6' if state then gg.searchNumber("10101000", gg.TYPE_DWORD, false, gg.SIGN_EQUAL, 0, -1, 0) gg.processResume() revert = gg.getResults(100, nil, nil, nil, nil, nil, nil, nil, nil) gg.editAll("10700100", gg.TYPE_DWORD) string.toMusic("g36c开启成功") else string.toMusic("关闭失败") end end }, }, } }) end }) floatingWindowManager:newWindow('[范围区]', { onCreate = function(floatingWindow) floatingWindow:addlayout({ ScrollView, layout_width = 'match_parent', layout_height = 'match_parent', { LinearLayout, background = floatingWindowManager:getStateListDrawable(), layout_width = 'match_parent', layout_height = 'match_parent', orientation = 'vertical', padding = '5dp', {LinearLayout,--同一排代码 padding = {'0dp', '0dp', '0dp', '2dp'}, layout_marginTop = '8dp',--间距 { Switch, layout_marginLeft = '0dp',--间距 text="实战范围", textColor= "#70f3ff",--文字颜色代码 gravity="center", layout_height="30dp",--长度 layout_width="110dp",--宽度 background= luajava.loadlayout { GradientDrawable, color = "#80000000",--背景颜色代码 cornerRadius = 38--背景圆角 }, onCheckedChange = function(CompoundButton, state) local cacheName = '多线程1' if state then so=gg.getRangesList("libUE4.so")[1].start--头 py=0x2739E34--爆头 setvalue(so+py,16,3.1415926) py=0xDc7580 setvalue(so+py,4,0) py=0xDC760C setvalue(so+py,4,0) py=0xDC7778 setvalue(so+py,4,0) local t = {"libUE4.so:bss", "Cb"} local tt = {0x1E5C2C,0x0,0x20,0x32C,0x380,0xC} local ttt = S_Pointer(t, tt, true) gg.setValues({{address = ttt, flags = 16, value = -105}}) local t = {"libUE4.so:bss", "Cb"} local tt = {0x1E5C2C,0x0,0x20,0x32C,0x380,0x44} local ttt = S_Pointer(t, tt, true) gg.setValues({{address = ttt, flags = 16, value = -105}}) local t = {"libUE4.so:bss", "Cb"} local tt = {0x1E5C2C,0x0,0x20,0x32C,0x380,0x7C} local ttt = S_Pointer(t, tt, true) gg.setValues({{address = ttt, flags = 16, value = -105}}) local t = {"libUE4.so:bss", "Cb"} local tt = {0x1E5C2C,0x0,0x20,0x32C,0x380,0xB4} local ttt = S_Pointer(t, tt, true) gg.setValues({{address = ttt, flags = 16, value = -105}}) so=gg.getRangesList('libUE4.so')[1].start py=0X116E53C setvalue(so+py,16,0) so=gg.getRangesList('libUE4.so')[1].start py=0X116E568 setvalue(so+py,16,0) string.toMusic("开启成功") end end }, }, } }) end }) floatingWindowManager:newWindow('[加速区]', { onCreate = function(floatingWindow) floatingWindow:addlayout({ ScrollView, layout_width = 'match_parent', layout_height = 'match_parent', { LinearLayout, background = floatingWindowManager:getStateListDrawable(), layout_width = 'match_parent', layout_height = 'match_parent', orientation = 'vertical', padding = '5dp', {LinearLayout,--同一排代码 padding = {'0dp', '0dp', '0dp', '2dp'}, layout_marginTop = '8dp',--间距 { Switch, layout_marginLeft = '0dp',--间距 text="裕绘", textColor= "#70f3ff",--文字颜色代码 gravity="center", layout_height="30dp",--长度 layout_width="110dp",--宽度 background= luajava.loadlayout { GradientDrawable, color = "#80000000",--背景颜色代码 cornerRadius = 38--背景圆角 }, onCheckedChange = function(CompoundButton, state) local cacheName = '多线程1' if state then so=gg.getRangesList('libUE4.so')[1].start py1=0X267C928 py2=0X270878C py3=0X2D082A0 py4=0XCB8B40 py5=0X2C33484 py6=0X2C3349C py7=0X2C33528 py8=0XCAFF20 py9=0X1250170 py10=0X26FCA44 py11=0XCCFAC0 py12=0XCB8A54 py13=0x2738EA4 py14=0x267C928 setvalue(so+py1,16,0.35) setvalue(so+py2,16,0) setvalue(so+py3,16,0) setvalue(so+py4,16,-3.83692277e21) setvalue(so+py5,16,0) setvalue(so+py6,16,0) setvalue(so+py7,16,0) setvalue(so+py8,16,2.5) setvalue(so+py9,16,0) setvalue(so+py10,16,0.28) setvalue(so+py11,16,70) setvalue(so+py12,16,-9.9065426e27) setvalue(so+py13,16,99999) setvalue(so+py14,16,5.6) local t = {"libUE4.so:bss", "Cb"} local tt = {0x1EA3A8, 0x20, 0x2D8, 0x1558} local ttt = S_Pointer(t, tt) gg.setValues({{address = ttt, flags = 16, value = 70}}) local t = {"libUE4.so:bss", "Cb"} local tt = {0x1EA3A8, 0x20, 0x2CC, 0x310, 0x134} local ttt = S_Pointer(t, tt) gg.setValues({{address = ttt, flags = 16, value = 0.52}}) local t = {"libUE4.so:bss", "Cb"} local tt = {0x1EA3A8, 0x20, 0x2CC, 0x310, 0x13C} local ttt = S_Pointer(t, tt) gg.setValues({{address = ttt, flags = 16, value = 0.52}}) local t = {"libUE4.so:bss", "Cb"} local tt = {0x1E16CC, 0x117C, 0x18, 0x3D4} local ttt = S_Pointer(t, tt) gg.setValues({{address = ttt, flags = 16, value = -9999}})--去除卡 local t = {"libUE4.so:bss", "Cb"} local tt = {0x1EA3A8, 0x20, 0x2CC, 0x14F0} local ttt = S_Pointer(t, tt) gg.setValues({{address = ttt, flags = 16, value = 9999}}) local t = {"libUE4.so:bss", "Cb"} local tt = {0x1EA3A8, 0x20, 0x2CC, 0x310, 0x138} local ttt = S_Pointer(t, tt) gg.setValues({{address = ttt, flags = 16, value = 100}})--翻墙 local t = {"libUE4.so", "Cd"} local tt = {0x19744, 0x434} local ttt = S_Pointer(t, tt) gg.setValues({{address = ttt, flags = 16, value = 0}}) local t = {"libUE4.so", "Cd"} local tt = {0x4776F0, 0x88C} local ttt = S_Pointer(t, tt) gg.setValues({{address = ttt, flags = 16, value = 0}}) local t = {"libUE4.so:bss", "Cb"} local tt = {0x1EA3A8, 0x20, 0x2CC, 0x310, 0x138} local ttt = S_Pointer(t, tt) gg.setValues({{address = ttt, flags = 16, value = 50}})--防拉 local t = {"libUE4.so", "Cd"} local tt = {0x5C2960, 0x78, 0x68, 0x3CC} local ttt = S_Pointer(t, tt) gg.setValues({{address = ttt, flags = 16, value = -9999}})--去除拉回 local t = {"libUE4.so:bss", "Cb"} local tt = {0x62678,0xA8,0x2DC,0x24} local ttt = S_Pointer(t, tt) gg.setValues({{address = ttt, flags = 4, value = 10000000}}) local t = {"libUE4.so:bss", "Cb"} local tt = {0x2494A0, 0xB4, 0xD90, 0x19F4} local ttt = S_Pointer(t, tt) gg.setValues({{address = ttt, flags = 16, value = 1.2}}) local t = {"libUE4.so:bss", "Cb"} local tt = {0x1EA3A8, 0x20, 0x2CC, 0x310, 0x138} local ttt = S_Pointer(t, tt) gg.setValues({{address = ttt, flags = 16, value = 75}}) local t = {"libUE4.so", "Cd"} local tt = {0x5C2A20, 0x78, 0x68, 0x3C8} local ttt = S_Pointer(t, tt) gg.setValues({{address = ttt, flags = 16, value = 1.6}}) local t = {"libUE4.so", "Cd"} local tt = {0x1EA3A8, 0x20, 0x320, 0x19F4} local ttt = S_Pointer(t, tt) gg.setValues({{address = ttt, flags = 16, value = 0.13}}) so=gg.getRangesList('libUE4.so')[1].start py=0X26FCA34 setvalue(so+py,16,0) so=gg.getRangesList('libUE4.so')[1].start py=0X26E8408 setvalue(so+py,16,0) so=gg.getRangesList('libUE4.so')[1].start py=0X26F15D8 setvalue(so+py,16,0) so=gg.getRangesList('libUE4.so')[1].start py=0X26F15EC setvalue(so+py,16,0) so=gg.getRangesList('libUE4.so')[1].start py=0X26F1700 setvalue(so+py,16,0) so=gg.getRangesList('libUE4.so')[1].start py=0X26F1720 setvalue(so+py,16,0) so=gg.getRangesList('libUE4.so')[1].start py=0X26F1840 setvalue(so+py,16,0) so=gg.getRangesList('libUE4.so')[1].start py=0X26F1858 setvalue(so+py,16,0) so=gg.getRangesList('libUE4.so')[1].start py=0X26F1888 setvalue(so+py,16,0) so=gg.getRangesList('libUE4.so')[1].start py=0X26F1898 setvalue(so+py,16,0) so=gg.getRangesList('libUE4.so')[1].start py=0X26F18C0 setvalue(so+py,16,0) so=gg.getRangesList('libUE4.so')[1].start py=0X26F19B8 setvalue(so+py,16,0) so=gg.getRangesList('libUE4.so')[1].start py=0X26F19E0 setvalue(so+py,16,0) so=gg.getRangesList('libUE4.so')[1].start py=0X26F1A10 setvalue(so+py,16,0) so=gg.getRangesList('libUE4.so')[1].start py=0X26F1B3C setvalue(so+py,16,0) gg.toast("开启成功") string.toMusic("开启成功") else so=gg.getRangesList('libUE4.so')[1].start py=0XCDF648 setvalue(so+py,16,-1.23824239e28) local t = {"libUE4.so:bss", "Cb"} local tt = {0x2494A0, 0xB4, 0xD90, 0x19F4} local ttt = S_Pointer(t, tt) gg.setValues({{address = ttt, flags = 16, value = 1}}) local t = {"libUE4.so", "Cd"} local tt = {0x5C2A20, 0x78, 0x68, 0x3C8} local ttt = S_Pointer(t, tt) gg.setValues({{address = ttt, flags = 16, value = 1}}) local t = {"libUE4.so:bss", "Cb"} local tt = {0x1EA3A8, 0x20, 0x2CC, 0x14F0} local ttt = S_Pointer(t, tt) gg.setValues({{address = ttt, flags = 16, value = 1}}) so=gg.getRangesList('libUE4.so')[1].start py=0X270878C setvalue(so+py,16,-1.86389771e-20) so=gg.getRangesList('libUE4.so')[1].start py=0X270FD5C setvalue(so+py,16,-5.84304308e27) so=gg.getRangesList('libUE4.so')[1].start py=0X2728CA0 setvalue(so+py,16,0) so=gg.getRangesList('libUE4.so')[1].start py=0X2C33484 setvalue(so+py,16,6.16304121e-33) so=gg.getRangesList('libUE4.so')[1].start py=0X2C3349C setvalue(so+py,16,2.64700415e-23) so=gg.getRangesList('libUE4.so')[1].start py=0X2C33524 setvalue(so+py,16,10.90734863281) so=gg.getRangesList('libUE4.so')[1].start py=0X2C33628 setvalue(so+py,16,-3.74440972e28) so=gg.getRangesList('libUE4.so')[1].start py=0X2D082A0 setvalue(so+py,16,-6.15262313e27) so=gg.getRangesList('libUE4.so')[1].start py=0X2D082A4 setvalue(so+py,16,-9.98393277e27) py=0XCB86D0 setvalue(so+py,16,-1.3697734e28) so=gg.getRangesList('libUE4.so')[1].start py=0XCB8A54 setvalue(so+py,16,-9.90656152e27) so=gg.getRangesList('libUE4.so')[1].start py=0XCB8AFC setvalue(so+py,16,-3.83692277e21) so=gg.getRangesList('libUE4.so')[1].start py=0XCB8B34 setvalue(so+py,16,-2.02910561e20) so=gg.getRangesList('libUE4.so')[1].start py=0X1250170 setvalue(so+py,16,1) so=gg.getRangesList('libUE4.so')[1].start py=0X12501F8 setvalue(so+py,16,1) so=gg.getRangesList('libUE4.so')[1].start py=0X26E20D8 setvalue(so+py,16,-3.86856262e25) so=gg.getRangesList('libUE4.so')[1].start py=0X26E20DC setvalue(so+py,16,-2.8323923e28) so=gg.getRangesList('libUE4.so')[1].start py=0X26F1700 setvalue(so+py,16,-3.74440972e28) so=gg.getRangesList('libUE4.so')[1].start py=0X26FCA34 setvalue(so+py,16,-6.15494476e27) so=gg.getRangesList('libUE4.so')[1].start py=0X26FCA38 setvalue(so+py,16,-2.53646207e30) so=gg.getRangesList('libUE4.so')[1].start py=0X26FCA44 setvalue(so+py,16,9.99999997e-7) so=gg.getRangesList('libUE4.so')[1].start py=0XCADA50 setvalue(so+py,16,-1.33640717e28) so=gg.getRangesList('libUE4.so')[1].start py=0XCADA60 setvalue(so+py,16,-3.74440972e28) so=gg.getRangesList('libUE4.so')[1].start py=0XCADC2C setvalue(so+py,16,-2.13605127e28) so=gg.getRangesList('libUE4.so')[1].start py=0XCADE2C setvalue(so+py,16,-3.74440972e28) so=gg.getRangesList('libUE4.so')[1].start py=0XCADE80 setvalue(so+py,16,-3.74440972e28) so=gg.getRangesList('libUE4.so')[1].start py=0XCAE20C setvalue(so+py,16,-9.90656152e27) so=gg.getRangesList('libUE4.so')[1].start py=0XCAE2A4 setvalue(so+py,16,-9.00722502e15) so=gg.getRangesList('libUE4.so')[1].start py=0XCAFF20 setvalue(so+py,16,0) so=gg.getRangesList('libUE4.so')[1].start py=0X267C928 setvalue(so+py,16,0) gg.toast("关闭成功") string.toMusic("关闭成功") end end }, { Switch, layout_marginLeft = '0dp',--间距 text="实战", textColor= "#70f3ff",--文字颜色代码 gravity="center", layout_height="30dp",--长度 layout_width="110dp",--宽度 background= luajava.loadlayout { GradientDrawable, color = "#80000000",--背景颜色代码 cornerRadius = 38--背景圆角 }, onCheckedChange = function(CompoundButton, state) local cacheName = '多线程1' if state then -- 单次获取基址，减少重复扫描提速 local libUE4 = gg.getRangesList("libUE4.so")[1].start -- 静态偏移批量写入函数 local function StaticWrite(offset, val, flag) gg.setValues({{ address = libUE4 + offset, flags = flag or 16, value = val, freeze = false }}) end -- 多级指针写入封装 local function PointerWrite(soTab, offTable, flag, val) local addr = S_Pointer(soTab, offTable) gg.setValues({{ address = addr, flags = flag, value = val, freeze = false }}) end -- 第一组静态偏移 StaticWrite(0x267C928, 0.35) StaticWrite(0x270878C, 0) StaticWrite(0x2D082A0, 0) StaticWrite(0xCB8B40, -3.83692277e21) StaticWrite(0x2C33484, 0) StaticWrite(0x2C3349C, 0) StaticWrite(0x2C33528, 0) StaticWrite(0xCAFF20, 2.5) StaticWrite(0x1250170, 0) StaticWrite(0x26FCA44, 0.28) StaticWrite(0xCCFAC0, 70) StaticWrite(0xCB8A54, -9.9065426e27) StaticWrite(0x2738EA4, 99999) StaticWrite(0x267C928, 5.6) -- 多级指针批量 PointerWrite({"libUE4.so:bss", "Cb"}, {0x1EA3A8, 0x20, 0x2D8, 0x1558}, 16, 85) PointerWrite({"libUE4.so:bss", "Cb"}, {0x1EA3A8, 0x20, 0x2CC, 0x310, 0x134}, 16, 0.52) PointerWrite({"libUE4.so:bss", "Cb"}, {0x1EA3A8, 0x20, 0x2CC, 0x310, 0x13C}, 16, 0.52) PointerWrite({"libUE4.so:bss", "Cb"}, {0x1E16CC, 0x117C, 0x18, 0x3D4}, 16, -99999) --去除卡 PointerWrite({"libUE4.so:bss", "Cb"}, {0x1EA3A8, 0x20, 0x2CC, 0x14F0}, 16, 9999) PointerWrite({"libUE4.so:bss", "Cb"}, {0x1EA3A8, 0x20, 0x2CC, 0x310, 0x138}, 16, 100) --翻墙 PointerWrite({"libUE4.so", "Cd"}, {0x19744, 0x434}, 16, 0) PointerWrite({"libUE4.so", "Cd"}, {0x4776F0, 0x88C}, 16, 0) PointerWrite({"libUE4.so:bss", "Cb"}, {0x1EA3A8, 0x20, 0x2CC, 0x310, 0x138}, 16, 55) --防拉 PointerWrite({"libUE4.so", "Cd"}, {0x5C2A20, 0x24, 0x6C, 0x24}, 16, 9999) --开枪防拉 PointerWrite({"libUE4.so:bss", "Cb"}, {0x1EA3A8, 0x20, 0x2CC, 0x310, 0x138}, 16, 55) --上下坡 PointerWrite({"libUE4.so", "Cd"}, {0x5C2960, 0x78, 0x68, 0x3CC}, 16, -99999) --去除拉回 PointerWrite({"libUE4.so:bss", "Cb"}, {0x62678,0xA8,0x2DC,0x24}, 4, 10000000) PointerWrite({"libUE4.so:bss", "Cb"}, {0x2494A0, 0xB4, 0xD90, 0x19F4}, 16, 1.2) PointerWrite({"libUE4.so:bss", "Cb"}, {0x1EA3A8, 0x20, 0x2CC, 0x310, 0x138}, 16, 75) PointerWrite({"libUE4.so", "Cd"}, {0x5C2A20, 0x78, 0x68, 0x3C8}, 16, 1.25) PointerWrite({"libUE4.so", "Cd"}, {0x1EA3A8, 0x20, 0x320, 0x19F4}, 16, 0.132) -- 末尾清零静态偏移 StaticWrite(0x26FCA34, 0) StaticWrite(0x26E8408, 0) StaticWrite(0x26F15D8, 0) StaticWrite(0x26F15EC, 0) StaticWrite(0x26F1700, 0) StaticWrite(0x26F1720, 0) StaticWrite(0x26F1840, 0) StaticWrite(0x26F1858, 0) StaticWrite(0x26F1888, 0) StaticWrite(0x26F1898, 0) StaticWrite(0x26F18C0, 0) StaticWrite(0x26F19B8, 0) StaticWrite(0x26F19E0, 0) StaticWrite(0x26F1A10, 0) StaticWrite(0x26F1B3C, 0) local tt = {0x1EA3A8,0x20,0x2CC,0x310,0x364} gg.toast("实战开启成功") string.toMusic("实战开启成功") else -- 预加载libUE4.so基址，只获取一次，避免重复调用 local libUE4Base = gg.getRangesList("libUE4.so")[1].start -- 封装直接写入函数，简化重复代码 local function WriteFloat(offset, val) gg.setValues({{address = libUE4Base + offset, flags = 16, value = val, freeze = false}}) end -- 封装多级指针写入函数 local function WritePtr(soTab, offsetTab, flag, val) local addr = S_Pointer(soTab, offsetTab) gg.setValues({{address = addr, flags = flag, value = val, freeze = false}}) end -- 批量静态偏移浮点写入 WriteFloat(0xCDF648, -1.23824239e28) WriteFloat(0x270878C, -1.86389771e-20) WriteFloat(0x270FD5C, -5.84304308e27) WriteFloat(0x2728CA0, 0) WriteFloat(0x2C33484, 6.16304121e-33) WriteFloat(0x2C3349C, 2.64700415e-23) WriteFloat(0x2C33524, 10.90734863281) WriteFloat(0x2C33628, -3.74440972e28) WriteFloat(0x2D082A0, -6.15262313e27) WriteFloat(0x2D082A4, -9.98393277e27) WriteFloat(0xCB86D0, -1.3697734e28) WriteFloat(0xCB8A54, -9.90656152e27) WriteFloat(0xCB8AFC, -3.83692277e21) WriteFloat(0xCB8B34, -2.02910561e20) WriteFloat(0x1250170, 1) WriteFloat(0x12501F8, 1) WriteFloat(0x26E20D8, -3.86856262e25) WriteFloat(0x26E20DC, -2.8323923e28) WriteFloat(0x26F1700, -3.74440972e28) WriteFloat(0x26FCA34, -6.15494476e27) WriteFloat(0x26FCA38, -2.53646207e30) WriteFloat(0x26FCA44, 9.99999997e-7) WriteFloat(0xCADA50, -1.33640717e28) WriteFloat(0xCADA60, -3.74440972e28) WriteFloat(0xCADC2C, -2.13605127e28) WriteFloat(0xCADE2C, -3.74440972e28) WriteFloat(0xCADE80, -3.74440972e28) WriteFloat(0xCAE20C, -9.90656152e27) WriteFloat(0xCAE2A4, -9.00722502e15) WriteFloat(0xCAFF20, 0) WriteFloat(0x267C928, 0) -- 多级指针批量写入 WritePtr({"libUE4.so:bss", "Cb"}, {0x2494A0, 0xB4, 0xD90, 0x19F4}, 16, 1) WritePtr({"libUE4.so", "Cd"}, {0x5C2A20, 0x78, 0x68, 0x3C8}, 16, 1) WritePtr({"libUE4.so:bss", "Cb"}, {0x1EA3A8, 0x20, 0x2CC, 0x14F0}, 16, 1) WritePtr({"libUE4.so:bss", "Cb"}, {0x1EA3A8, 0x20, 0x2CC, 0x310, 0x138}, 16, 55) --上下坡 WritePtr({"libUE4.so:bss", "Cb"}, {0x1EA3A8, 0x20, 0x2D8, 0x1558}, 16, 70) --浮空 WritePtr({"libUE4.so", "Cd"}, {0x5C2A20, 0x78, 0x68, 0x3C8}, 16, 0.6) --A全局 WritePtr({"libUE4.so:bss", "Cb"}, {0x62678,0xA8,0x2DC,0x24}, 4, 100000) --去除开枪 gg.toast("全部功能已加载完成") gg.toast("实战关闭成功") string.toMusic("实战关闭成功") end end }, { Switch, layout_marginLeft = '0dp',--间距 text="120冻结", textColor= "#70f3ff",--文字颜色代码 gravity="center", layout_height="30dp",--长度 layout_width="110dp",--宽度 background= luajava.loadlayout { GradientDrawable, color = "#80000000",--背景颜色代码 cornerRadius = 38--背景圆角 }, onCheckedChange = function(CompoundButton, state) local cacheName = '多线程5' if state then local KKB=gg.getRangesList("libUE4.so:bss")[1].start local KKB=KKB+0x1EA3A8 local KKB=MNB(KKB)+0x20 local KKB=MNB(KKB)+0x2CC local KKB=MNB(KKB)+0xFC --一 MNBMVP(KKB-0x9C,1.3,16,true)--自身 MNBMVP(KKB-0xD4,0,16,true)--双值冻结 MNBMVP(KKB-0xD8,16777486,4,true)--冻防 local KKB=gg.getRangesList("libUE4.so:bss")[1].start local KKB=KKB+0x1EA3A8 local KKB=MNB(KKB)+0x20 local KKB=MNB(KKB)+0x2CC local KKB=MNB(KKB)+0x310 local KKB=MNB(KKB)+0x180 MNBMVP(KKB+8,999999,16,true)--游速--8192惯性 local KKB=gg.getRangesList("libUE4.so:bss")[1].start local KKB=KKB+0x1EA3A8 local KKB=MNB(KKB)+0x20 local KKB=MNB(KKB)+0x2CC local KKB=MNB(KKB)+0x310 local KKB=MNB(KKB)+0x16C MNBMVP(KKB+0,3,16,true)--人物自身 local KKB=gg.getRangesList("libUE4.so:bss")[1].start local KKB=KKB+0x1EA3A8 local KKB=MNB(KKB)+0x20 local KKB=MNB(KKB)+0x2CC local KKB=MNB(KKB)+0x310 local KKB=MNB(KKB)+0x170 MNBMVP(KKB+0,-1,16)--人物 local KKB=gg.getRangesList("libUE4.so:bss")[1].start local KKB=KKB+0x1EA3A8 local KKB=MNB(KKB)+0x20 local KKB=MNB(KKB)+0x2CC local KKB=MNB(KKB)+0x310 local KKB=MNB(KKB)+0x174 MNBMVP(KKB+0,2100,16,true)--人物自身 local KKB=gg.getRangesList("libUE4.so:bss")[1].start local KKB=KKB+0x1EA3A8 local KKB=MNB(KKB)+0x20 local KKB=MNB(KKB)+0x2CC local KKB=MNB(KKB)+0x310 local KKB=MNB(KKB)+0x2C MNBMVP(KKB+0x0,0,16,true) MNBMVP(KKB-0x4,16777502,4,true) by_wanhe({'libUE4.so:bss','Cb'},{0x1EA3A8,0x20,0x2CC,0x310,0x7C4},"修改","2528",16,"670") so=gg.getRangesList('libUE4.so')[1].start py=0XCB8B40 setvalue(so+py,16,-3.83692277e21) so=gg.getRangesList('libUE4.so')[1].start py=0X267C928 setvalue(so+py,16,3) so=gg.getRangesList('libUE4.so')[1].start py=0X270878C setvalue(so+py,16,0) so=gg.getRangesList('libUE4.so')[1].start py=0X2C33484 setvalue(so+py,16,0) so=gg.getRangesList('libUE4.so')[1].start py=0X2C3349C setvalue(so+py,16,0) so=gg.getRangesList('libUE4.so')[1].start py=0X2C33528 setvalue(so+py,16,0) so=gg.getRangesList('libUE4.so')[1].start py=0X2D082A0 setvalue(so+py,16,0) local t = {"libUE4.so:bss", "Cb"} local tt = {0x1EA3A8, 0x20, 0x2CC, 0x310, 0x138} local ttt = S_Pointer(t, tt) gg.setValues({{address = ttt, flags = 16, value = 55}}) local t = {"libUE4.so:bss", "Cb"} local tt = {0x1EA3A8, 0x20, 0x2D8, 0x1558} local ttt = S_Pointer(t, tt) gg.setValues({{address = ttt, flags = 16, value = 70}}) local t = {"libUE4.so", "Cd"} local tt = {0x5C2A20, 0x78, 0x68, 0x3C8} local ttt = S_Pointer(t, tt) gg.setValues({{address = ttt, flags = 16, value = 0.621111}}) local t = {"libUE4.so:bss", "Cb"} local tt = {0x62678,0xA8,0x2DC,0x24} local ttt = S_Pointer(t, tt) gg.setValues({{address = ttt, flags = 4, value = 100000}}) setvalue(so+0xCBCABC,26,3.836983e82) --关键 setvalue(so+0x8708F88,26,99999)--关键瞬移关键 local tt = {0x1EA3A8,0x20,0x2CC,0x310,0x364} local ttt = S_Pointer(t, tt, true) gg.setValues({{address = ttt, flags = 4, value = 99999}})--终极防卡脚 so=gg.getRangesList('libUE4.so')[1].start setvalue(so+0x2C33354,16,0)--全局满帧 gg.toast("开启成功") string.toMusic("开启成功") else gg.clearList()--一键清空解冻 gg.sleep(50) so = gg.getRangesList('libUE4.so')[1].start setvalue(so+0x270878C,16,-1.86389771e-20) setvalue(so+0xCB8A54,2,2576) setvalue(so+0x26FCA44,16,9.99999997e-7) setvalue(so+0x2D082A0,16,-6.15262313e27) setvalue(so+0x26F16F8,16,-5.7271202e27) setvalue(so+0X26FCA34,16,-6.15494476e27) setvalue(so+0X26FCA38,16,-2.53646207e30) setvalue(so+0XCB8B40,2,1) setvalue(so+0XCB8AFC,2,0) setvalue(so+0X2708324,2,0) setvalue(so+0X267C928,16,0) setvalue(so+0X2C33484,16,6.16304121e-33) setvalue(so+0X2C33528,16,-1.88909657e26) setvalue(so+0X2708328,16,1.14080404e-33) setvalue(so+0X270832C,16,-4.42726722e22) local t = {"libUE4.so:bss", "Cb"} local tt = {0x1EA3A8, 0x20, 0x2CC, 0x1558} local ttt = S_Pointer(t, tt, true) gg.setValues({{address = ttt, flags = 16, value = 88}}) local tt = {0x1EA3A8, 0x20, 0x2CC, 0x310, 0x138} local ttt = S_Pointer(t, tt, true) gg.setValues({{address = ttt, flags = 16, value = 35}}) local tt = {0x1EA3A8,0x20,0x2CC,0x60} local ttt = S_Pointer(t, tt, true) gg.setValues({{address = ttt, flags = 16, value = 1}}) local tt = {0x1EA3A8, 0x20, 0x2CC, 0x14F0} local ttt = S_Pointer(t, tt, true) gg.setValues({{address = ttt, flags = 16, value = 1}}) local tt = {0x1EA3A8, 0x20, 0x2CC, 0x14F4} local ttt = S_Pointer(t, tt, true) gg.setValues({{address = ttt, flags = 16, value = 479.5}}) local tt = {0x62678,0xA8,0x2DC,0x24} local ttt = S_Pointer(t, tt, true) gg.setValues({{address = ttt, flags = 4, value = 10000}}) local tt = {0x1EA3A8,0x20,0x440,0x24} local ttt = S_Pointer(t, tt, true) gg.setValues({{address = ttt, flags = 4, value = 10000}}) local tt = {0x1EA3A8,0x20,0x2CC,0x310,0x16C} local ttt = S_Pointer(t, tt, true) gg.setValues({{address = ttt, flags = 16, value = 1}}) local tt = {0x1EA3A8,0x20,0x2CC,0x310,0x170} local ttt = S_Pointer(t, tt, true) gg.setValues({{address = ttt, flags = 16, value = 8}}) local tt = {0x1EA3A8,0x20,0x2CC,0x310,0x188} local ttt = S_Pointer(t, tt, true) gg.setValues({{address = ttt, flags = 16, value = 8192}}) local tt = {0x1EA3A8,0x20,0x2CC,0x310,0x17C} local ttt = S_Pointer(t, tt, true) gg.setValues({{address = ttt, flags = 16, value = 300}}) local tt = {0x1EA3A8,0x20,0x2CC,0x310,0x7C4} local ttt = S_Pointer(t, tt, true) gg.setValues({{address = ttt, flags = 16, value = 670}}) local tt = {0x1EA3A8,0x20,0x2CC,0x310,0x364} local ttt = S_Pointer(t, tt, true) gg.setValues({{address = ttt, flags = 4, value=4240}}) gg.toast("关闭成功") string.toMusic("关闭成功") end end }, { Switch, layout_marginLeft = '0dp',--间距 text="人物", textColor= "#70f3ff",--文字颜色代码 gravity="center", layout_height="30dp",--长度 layout_width="110dp",--宽度 background= luajava.loadlayout { GradientDrawable, color = "#80000000",--背景颜色代码 cornerRadius = 38--背景圆角 }, onCheckedChange = function(CompoundButton, state) local cacheName = '多线程10' if state then so=gg.getRangesList('libUE4.so')[1].start setvalue(so+0x2C33354,16,0)--全局满帧 setvalue(so+0X26E8408,16,0) setvalue(so+0x267C928,16,0.5)--慢动作 setvalue(so+0XCB8B40,2,0)--突破 setvalue(so+0XCB8AFC,2,1) setvalue(so+0X270878C,16,0)--人物加速 setvalue(so+0X2C33484,16,0)--防拉 setvalue(so+0X2C3349C,16,2.64700415e-23)--全局速 setvalue(so+0X2C33528,16,0)--防拉 setvalue(so+0X2D082A0,16,0)--防拉 setvalue(so+0X26FCA44,16,0.27)--人物加速 setvalue(so+0XCB8A54,2,2560)--游泳翻倍 setvalue(so+0X26F1700,16,0)--秒定 local t = {"libUE4.so:bss", "Cb"} local tt = {0x62678,0xA8,0x2DC,0x24} local ttt = S_Pointer(t, tt, true) gg.setValues({{address = ttt, flags = 4, value = 500000}})--开枪防拉 local tt = {0x1EA3A8,0x20,0x440,0x24}--防失效 local ttt = S_Pointer(t, tt, true) gg.setValues({{address = ttt, flags = 4, value = 500000}})--开枪防拉 local tt = {0x1EA3A8,0x20,0x450} local ttt = S_Pointer(t, tt, true) gg.setValues({{address = ttt, flags = 16, value = 1.1}})--丝滑视角xy local tt = {0x1EA3A8,0x20,0x454} local ttt = S_Pointer(t, tt, true) gg.setValues({{address = ttt, flags = 16, value = 1.1}})--丝滑视角z local tt = {0x1EA3A8,0x20,0x2CC,0x60} local ttt = S_Pointer(t, tt, true) gg.setValues({{address = ttt, flags = 16, value = 1.41}})--变速 local tt = {0x1EA3A8,0x20,0x18,0x1C8,0x3C8} local ttt = S_Pointer(t, tt, true) gg.setValues({{address = ttt, flags = 16, value = 1.25}})--全局速 local tt = {0x1EA3A8, 0x20, 0x2CC, 0x310, 0x134} local ttt = S_Pointer(t, tt, true) gg.setValues({{address = ttt, flags = 16, value = 1}}) local tt = {0x1EA3A8, 0x20, 0x2CC, 0x19F4} local ttt = S_Pointer(t, tt, true) gg.setValues({{address = ttt, flags = 16, value = 1}}) local tt = {0x1EA3A8, 0x20, 0x2CC, 0x1558} local ttt = S_Pointer(t, tt, true) gg.setValues({{address = ttt, flags = 16, value = 70}})--战俘 local tt = {0x1EA3A8, 0x20, 0x2CC, 0x310, 0x138} local ttt = S_Pointer(t, tt, true) gg.setValues({{address = ttt, flags = 16, value = 70}})--翻墙 local tt = {0x1EA3A8, 0x20, 0x2CC, 0x14F0} local ttt = S_Pointer(t, tt, true) gg.setValues({{address = ttt, flags = 16, value = 999}})--翻倍 local tt = {0x1EA3A8, 0x20, 0x2CC, 0x14F4} local ttt = S_Pointer(t, tt, true) gg.setValues({{address = ttt, flags = 16, value = 999}})--翻倍479.5 local tt = {0x1EA3A8,0x20,0x2CC,0x310,0x1AC} local ttt = S_Pointer(t, tt, true) gg.setValues({{address = ttt, flags = 16, value = 0.05}}) local tt = {0x1EA3A8,0x20,0x2CC,0x310,0x364} local ttt = S_Pointer(t, tt, true) gg.setValues({{address = ttt, flags = 4, value = 99999}})--终极防卡脚 local tt = {0x1EA3A8, 0x20, 0x2CC, 0x310, 0x18, 0xB60, 0xDC} local ttt = S_Pointer(t, tt, true) gg.setValues({{address = ttt, flags = 16, value = 150000}})--原值3000 local tt = {0x1EA3A8, 0x20, 0x2CC, 0x310, 0x18, 0xB60, 0xE0} local ttt = S_Pointer(t, tt, true) gg.setValues({{address = ttt, flags = 16, value = 150000}})--原值5000 local tt = {0x1EA3A8, 0x20, 0x2CC, 0x310, 0x18, 0xB60, 0xE4} local ttt = S_Pointer(t, tt, true) gg.setValues({{address = ttt, flags = 16, value = 150000}})--原值1024 else gg.clearList()--一键清空解冻 gg.sleep(50) so = gg.getRangesList('libUE4.so')[1].start setvalue(so+0x270878C,16,-1.86389771e-20) setvalue(so+0xCB8A54,2,2576) setvalue(so+0x26FCA44,16,9.99999997e-7) setvalue(so+0x2D082A0,16,-6.15262313e27) setvalue(so+0x26F16F8,16,-5.7271202e27) setvalue(so+0X26FCA34,16,-6.15494476e27) setvalue(so+0X26FCA38,16,-2.53646207e30) setvalue(so+0XCB8B40,2,1) setvalue(so+0XCB8AFC,2,0) setvalue(so+0X2708324,2,0) setvalue(so+0X267C928,16,0) setvalue(so+0X2C33484,16,6.16304121e-33) setvalue(so+0X2C33528,16,-1.88909657e26) setvalue(so+0X2708328,16,1.14080404e-33) setvalue(so+0X270832C,16,-4.42726722e22) local t = {"libUE4.so:bss", "Cb"} local tt = {0x1EA3A8, 0x20, 0x2CC, 0x1558} local ttt = S_Pointer(t, tt, true) gg.setValues({{address = ttt, flags = 16, value = 88}}) local tt = {0x1EA3A8, 0x20, 0x2CC, 0x310, 0x138} local ttt = S_Pointer(t, tt, true) gg.setValues({{address = ttt, flags = 16, value = 35}}) local tt = {0x1EA3A8,0x20,0x2CC,0x60} local ttt = S_Pointer(t, tt, true) gg.setValues({{address = ttt, flags = 16, value = 1}}) local tt = {0x1EA3A8, 0x20, 0x2CC, 0x14F0} local ttt = S_Pointer(t, tt, true) gg.setValues({{address = ttt, flags = 16, value = 1}}) local tt = {0x1EA3A8, 0x20, 0x2CC, 0x14F4} local ttt = S_Pointer(t, tt, true) gg.setValues({{address = ttt, flags = 16, value = 479.5}}) local tt = {0x62678,0xA8,0x2DC,0x24} local ttt = S_Pointer(t, tt, true) gg.setValues({{address = ttt, flags = 4, value = 10000}}) local tt = {0x1EA3A8,0x20,0x440,0x24} local ttt = S_Pointer(t, tt, true) gg.setValues({{address = ttt, flags = 4, value = 10000}}) local tt = {0x1EA3A8,0x20,0x2CC,0x310,0x16C} local ttt = S_Pointer(t, tt, true) gg.setValues({{address = ttt, flags = 16, value = 1}}) local tt = {0x1EA3A8,0x20,0x2CC,0x310,0x170} local ttt = S_Pointer(t, tt, true) gg.setValues({{address = ttt, flags = 16, value = 8}}) local tt = {0x1EA3A8,0x20,0x2CC,0x310,0x188} local ttt = S_Pointer(t, tt, true) gg.setValues({{address = ttt, flags = 16, value = 8192}}) local tt = {0x1EA3A8,0x20,0x2CC,0x310,0x17C} local ttt = S_Pointer(t, tt, true) gg.setValues({{address = ttt, flags = 16, value = 300}}) local tt = {0x1EA3A8,0x20,0x2CC,0x310,0x7C4} local ttt = S_Pointer(t, tt, true) gg.setValues({{address = ttt, flags = 16, value = 670}}) local tt = {0x1EA3A8,0x20,0x2CC,0x310,0x364} local ttt = S_Pointer(t, tt, true) gg.setValues({{address = ttt, flags = 4, value=4240}}) gg.toast("关闭成功") string.toMusic("关闭成功") end end }, }, { TextView, layout_marginLeft = '0dp',--间距 text="加速配置", textColor= "#70f3ff",--文字颜色代码 gravity="center", layout_height="25dp",--长度 layout_width="match_parent",--宽度 background= luajava.loadlayout { GradientDrawable, color = "#",--背景颜色代码 cornerRadius = 38--背景圆角 }, }, {LinearLayout,--同一排代码 padding = {'0dp', '0dp', '0dp', '0dp'}, layout_marginTop = '0dp',--间 { Switch, layout_marginLeft = '0dp',--间距 text="大厅战俘", textColor= "#70f3ff",--文字颜色代码 gravity="center", layout_height="30dp",--长度 layout_width="110dp",--宽度 background= luajava.loadlayout { GradientDrawable, color = "#80000000",--背景颜色代码 cornerRadius = 38--背景圆角 }, onCheckedChange = function(CompoundButton, state) local cacheName = '多线程8' if state then gg.clearResults() gg.setRanges(gg.REGION_CODE_APP) gg.searchNumber("4,787,326,405,013,667,840", gg.TYPE_QWORD, false, gg.SIGN_EQUAL, 0, -1) gg.getResults(100) gg.editAll("4,787,326,405,011,308,544", gg.TYPE_QWORD) string.toMusic("开启成功") end end }, { Switch, layout_marginLeft = '0dp',--间距 text="战力浮空", textColor= "#70f3ff",--文字颜色代码 gravity="center", layout_height="30dp",--长度 layout_width="110dp",--宽度 background= luajava.loadlayout { GradientDrawable, color = "#80000000",--背景颜色代码 cornerRadius = 38--背景圆角 }, onCheckedChange = function(CompoundButton, state) local cacheName = '多线程8' if state then local t = {"libUE4.so:bss", "Cb"} local tt = {0x1EA3A8, 0x20, 0x2D8, 0x1558} local ttt = S_Pointer(t, tt) gg.setValues({{address = ttt, flags = 16, value = 70}}) string.toMusic("开启成功") end end }, { Switch, layout_marginLeft = '0dp',--间距 text="开枪防拉", textColor= "#70f3ff",--文字颜色代码 gravity="center", layout_height="30dp",--长度 layout_width="110dp",--宽度 background= luajava.loadlayout { GradientDrawable, color = "#80000000",--背景颜色代码 cornerRadius = 38--背景圆角 }, onCheckedChange = function(CompoundButton, state) local cacheName = '多线程9' if state then local t = {"libUE4.so:bss", "Cb"} local tt = {0x62678,0xA8,0x2DC,0x24} local ttt = S_Pointer(t, tt) gg.setValues({{address = ttt, flags = 4, value = 10000000000}}) string.toMusic("开枪防拉开启成功") else string.toMusic("无法关闭") end end }, }, {LinearLayout,--同一排代码 padding = {'0dp', '8dp'}, layout_marginTop = '0dp',--间距 { Switch, layout_marginLeft = '0dp',--间距 text="自调慢动作", textColor= "#70f3ff",--文字颜色代码 gravity="center", layout_height="30dp",--长度 layout_width="110dp",--宽度 background= luajava.loadlayout { GradientDrawable, color = "#80000000",--背景颜色代码 cornerRadius = 38--背景圆角 }, onCheckedChange = function(CompoundButton, state) local cacheName = '多线程10' if state then function PS() end function setvalue(address,flags,value) PS('修改地址数值(地址,数值类型,要修改的值)') local tt={} tt[1]={} tt[1].address=address tt[1].flags=flags tt[1].value=value gg.setValues(tt) end XS=gg.prompt({"请输入想要自定义的慢动作"},{'800'},{'number'}) if XS[1] then so=gg.getRangesList("libUE4.so")[1].start py=0x267C928 setvalue(so+py,16,XS[1]) gg.toast("开启成功"..XS[1]) end string.toMusic("开启成功")---语音 else so=gg.getRangesList('libUE4.so')[1].start py=0X267C928 setvalue(so+py,16,0) string.toMusic("关闭成功")---语音功") end end }, { Switch, layout_marginLeft = '0dp',--间距 text="人物罚站", textColor= "#70f3ff",--文字颜色代码 gravity="center", layout_height="30dp",--长度 layout_width="110dp",--宽度 background= luajava.loadlayout { GradientDrawable, color = "#80000000",--背景颜色代码 cornerRadius = 38--背景圆角 }, onCheckedChange = function(CompoundButton, state) local cacheName = '多线程11' if state then so=gg.getRangesList('libUE4.so')[1].start py=0X2647E54 setvalue(so+py,16,0) string.toMusic("人物罚站开启成功") end end }, { Switch, layout_marginLeft = '0dp',--间距 text="人物锁血", textColor= "#70f3ff",--文字颜色代码 gravity="center", layout_height="30dp",--长度 layout_width="110dp",--宽度 background= luajava.loadlayout { GradientDrawable, color = "#80000000",--背景颜色代码 cornerRadius = 38--背景圆角 }, onCheckedChange = function(CompoundButton, state) local cacheName = '多线程12' if state then so=gg.getRangesList('libUE4.so')[1].start py=0XD09CC0 setvalue(so+py,16,-1.12218728e28) DM="开启成功丢抢重新捡起来即可" gg.playMusic("/storage/emulated/0/黄黎 - O泡果奶.mp3") --百度翻译 else so=gg.getRangesList('libUE4.so')[1].start py=0XD09CC0 setvalue(so+py,16,-1.11445016e28) DM="开启成功丢抢重新捡起来即可" gg.playMusic("/storage/emulated/0/黄黎 - O泡果奶.mp3") --百度翻译 end end }, }, {LinearLayout,--同一排代码 padding = {'0dp', '8dp'}, layout_marginTop = '0dp',--间距 { Switch, layout_marginLeft = '0dp',--间距 text="防卡破", textColor= "#70f3ff",--文字颜色代码 gravity="center", layout_height="30dp",--长度 layout_width="110dp",--宽度 background= luajava.loadlayout { GradientDrawable, color = "#80000000",--背景颜色代码 cornerRadius = 38--背景圆角 }, onCheckedChange = function(CompoundButton, state) local cacheName = '多线程1' if state then OP=gg.prompt({'推荐输入:999'},{[1]='999'},{[1]='number'}) if OP == nil or OP[1] == '' or OP[1] == '0' then string.toMusic("取消") else so=gg.getRangesList('libUE4.so')[1].start py=0X267C928 setvalue(so+py,16,OP[1]) end local t = {"libUE4.so", "Cd"} local tt = {0x1EA3A8, 0x20, 0x320, 0x19F4} local ttt = S_Pointer(t, tt) gg.setValues({{address = ttt, flags = 16, value = 0.13}}) local t = {"libUE4.so:bss", "Cb"} local tt = {0x1EA3A8, 0x20, 0x2CC, 0x310, 0x138} local ttt = S_Pointer(t, tt) gg.setValues({{address = ttt, flags = 16, value = 75}}) local t = {"libUE4.so:bss", "Cb"}--站 local tt = {0x1EA3A8, 0x20, 0x2D8, 0x1558} local ttt = S_Pointer(t, tt) gg.setValues({{address = ttt, flags = 16, value = 70}}) local t = {"libUE4.so:bss", "Cb"} local tt = {0x62678,0xA8,0x2DC,0x24} local ttt = S_Pointer(t, tt) gg.setValues({{address = ttt, flags = 4, value = 10000000}}) local t = {"libUE4.so", "Cd"} local tt = {0x5C2A20, 0x78, 0x68, 0x3CC} local ttt = S_Pointer(t, tt) gg.setValues({{address = ttt, flags = 16, value = -9999}}) local t = {"libUE4.so:bss", "Cb"} local tt = {0x1E17CC, 0x87C, 0x18, 0x3D4} local ttt = S_Pointer(t, tt) gg.setValues({{address = ttt, flags = 16, value = -9999}}) string.toMusic("防坡一套开启成功") end end }, { Switch, layout_marginLeft = '0dp',--间距 text="防上下坡", textColor= "#70f3ff",--文字颜色代码 gravity="center", layout_height="30dp",--长度 layout_width="110dp",--宽度 background= luajava.loadlayout { GradientDrawable, color = "#80000000",--背景颜色代码 cornerRadius = 38--背景圆角 }, onCheckedChange = function(CompoundButton, state) local cacheName = '多线程2' if state then OP=gg.prompt({'推荐输入:0.8'},{[1]='0.8'},{[1]='number'}) if OP == nil or OP[1] == '' or OP[1] == '0' then string.toMusic("取消") else local t = {"libUE4.so:bss", "Cb"} local tt = {0x2494A0, 0xB4, 0xD90, 0x19F4} local ttt = S_Pointer(t, tt) gg.setValues({{address = ttt, flags = 16, value = OP[1]}}) string.toMusic("上下坡防拉开启成功") end else string.toMusic("不可关闭") end end }, { Switch, layout_marginLeft = '0dp',--间距 text="慢动作", textColor= "#70f3ff",--文字颜色代码 gravity="center", layout_height="30dp",--长度 layout_width="110dp",--宽度 background= luajava.loadlayout { GradientDrawable, color = "#80000000",--背景颜色代码 cornerRadius = 38--背景圆角 }, onCheckedChange = function(CompoundButton, state) local cacheName = '多线程3' if state then OP=gg.prompt({'推荐输入:999'},{[1]='999'},{[1]='number'}) if OP == nil or OP[1] == '' or OP[1] == '0' then string.toMusic("取消") else so=gg.getRangesList('libUE4.so')[1].start py=0X267C928 setvalue(so+py,16,OP[1]) string.toMusic("慢动作开启成功") end else so=gg.getRangesList('libUE4.so')[1].start py=0X267C928 setvalue(so+py,16,0) string.toMusic("慢动作关闭成功") end end }, }, } }) end }) floatingWindowManager:newWindow('[路飞区]', { onCreate = function(floatingWindow) floatingWindow:addlayout({ ScrollView, layout_width = 'match_parent', layout_height = 'match_parent', { LinearLayout, background = floatingWindowManager:getStateListDrawable(), layout_width = 'match_parent', layout_height = 'match_parent', orientation = 'vertical', padding = '5dp', { Switch, layout_width = 'match_parent', text = '探头路飞', onCheckedChange = function(CompoundButton, state) local cacheName = '多线程1' if state then gg.alert('循环线程开启') local thread1 = luajava.startThread(T1) floatingWindow:setCache(cacheName, thread1) else gg.alert('线程关闭') local thread1 = floatingWindow:getCache(cacheName) interruptThread(thread1) end end }, {LinearLayout,--同一排代码 padding = {'0dp', '0dp', '0dp', '2dp'}, layout_marginTop = '8dp',--间距 { Switch, layout_marginLeft = '0dp',--间距 text="路飞向前", textColor= "#70f3ff",--文字颜色代码 gravity="center", layout_height="30dp",--长度 layout_width="110dp",--宽度 background= luajava.loadlayout { GradientDrawable, color = "#80000000",--背景颜色代码 cornerRadius = 38--背景圆角 }, onCheckedChange = function(CompoundButton, state) local cacheName = '多线程1' if state then local t = {"libUE4.so:bss", "Cb"} local tt = {0x13254C, 0x1BDC, 0x5F4, 0xC4, 0x488} local ttt = S_Pointer(t, tt) gg.setValues({{address = ttt, flags = 16, value = 180}}) string.toMusic("路飞向前开启成功") else local t = {"libUE4.so:bss", "Cb"} local tt = {0x13254C, 0x1BDC, 0x5F4, 0xC4, 0x488} local ttt = S_Pointer(t, tt) gg.setValues({{address = ttt, flags = 16, value = 5.82142114639}}) string.toMusic("路飞向前关闭成功") end end }, { Switch, layout_marginLeft = '0dp',--间距 text="路飞向上", textColor= "#70f3ff",--文字颜色代码 gravity="center", layout_height="30dp",--长度 layout_width="110dp",--宽度 background= luajava.loadlayout { GradientDrawable, color = "#80000000",--背景颜色代码 cornerRadius = 38--背景圆角 }, onCheckedChange = function(CompoundButton, state) local cacheName = '多线程1' if state then local t = {"libUE4.so:bss", "Cb"} local tt = {0x13254C, 0x1BDC, 0x5F4, 0xC4, 0x490} local ttt = S_Pointer(t, tt) gg.setValues({{address = ttt, flags = 16, value = 180}}) string.toMusic("路飞向上开启成功") else local t = {"libUE4.so:bss", "Cb"} local tt = {0x13254C, 0x1BDC, 0x5F4, 0xC4, 0x490} local ttt = S_Pointer(t, tt) gg.setValues({{address = ttt, flags = 16, value = 0.19047555327}}) string.toMusic("路飞向上关闭成功") end end }, }, } }) end }) function T1() function readPointer(name, offset, i) local re = gg.getRangesList(name) local x64 = gg.getTargetInfo().x64 local va = {[true]=32, [false]=4} if re[i or 1] then local addr = re[i or 1].start + offset[1] for i = 2, #offset do addr = gg.getValues({{address=addr, flags=va[x64]}}) if not x64 then addr[1].value = addr[1].value & 0xFFFFFFFF end addr = addr[1].value + offset[i] end return addr end end function gg.edits(addr, Table) local Table1 = {{}, {}} for k, v in ipairs(Table) do local value = {address = addr+v[3], value = v[1], flags = v[2], freeze = v[4]} if v[4] then Table1[2][#Table1[2]+1] = value else Table1[1][#Table1[1]+1] = value end end gg.addListItems(Table1[2]) gg.setValues(Table1[1]) end --动态基址配置 function BaseAddressWrite(data) local so = gg.getRangesList(data.so) if so[1] ~= nil then local t = {} for i = 1, #data do t[#t+1] = {} t[#t].address = so[1].start + data[i].offset t[#t].value = data[i].value t[#t].flags = data[i].type end gg.setValues(t) else gg.toast("❌搜索不到") end end lhsl = readPointer('libUE4.so:bss', {0x62678,0xA8,0x2DC,0x24}, 1) --牛13东西 local ttsl = readPointer('libUE4.so:bss', {0x1FE88C,0x0,0xC,0x634,0x294,0x540,0x4C4,0x10,0x38,0x0}, 1) --探头锁链 local jznbsl = readPointer('libUE4.so:bss', {0x1E5C5C,0x20,0x200}, 1) --矩阵南北 local jzdxsl = readPointer('libUE4.so:bss', {0x1E5C5C,0x20,0x20C}, 1) --矩阵东西 local jzsxsl = readPointer('libUE4.so:bss', {0x1E5C5C,0x20,0x22C}, 1) --矩阵上下 zbxsl = readPointer('libUE4.so:bss', {0x1FE76C,0x74,0x94,0x140,0x150}, 1) --坐标x实体 zbysl = readPointer('libUE4.so:bss', {0x1FE76C,0x74,0x94,0x140,0x154}, 1) --坐标y实体 zbzsl = readPointer('libUE4.so:bss', {0x1FE76C,0x74,0x94,0x140,0x158}, 1) --坐标z实体 ttlf={} ttlf[1]={} ttlf[1].address=ttsl ttlf[1].flags=16 ttlf[2]={} ttlf[2].address=jznbsl ttlf[2].flags=16 ttlf[3]={} ttlf[3].address=jzdxsl ttlf[3].flags=16 ttlf[4]={} ttlf[4].address=jzsxsl ttlf[4].flags=16 ttlf[5]={} ttlf[5].address=zbxsl ttlf[5].flags=16 ttlf[6]={} ttlf[6].address=zbysl ttlf[6].flags=16 ttlf[7]={} ttlf[7].address=zbzsl ttlf[7].flags=16 gg.addListItems(ttlf)--保存 jznb=gg.getValues(ttlf)[2].value--矩阵方位南北 jzdx=gg.getValues(ttlf)[3].value--矩阵方位东西 jzsx=gg.getValues(ttlf)[4].value--矩阵方位上下 zbx=gg.getValues(ttlf)[5].value--坐标x zby=gg.getValues(ttlf)[6].value--坐标y zbz=gg.getValues(ttlf)[7].value--坐标z while true do--开始循环 --if gg.isVisible(true) then gg.removeListItems(ttlf) gg.setVisible(false) gg.toast("暂停") gg.sleep(1000) end tt=gg.getValues(ttlf)[1].value--探头 if tt == -1 then--左探头 gg.edits(lhsl, {{0, 16, 0, false}}) local data = {--0x62678,0xA8,0x2DC,0x24 ["so"] = "libUE4.so", {["value"] = 0, ["offset"] = 0x26F1700, ["type"] = 16},--空中强定 --{["value"] = 0, ["offset"] = 0xCB7BE4, ["type"] = 16},--灵魂出窍 } BaseAddressWrite(data) if jzsx>-0.8 and jzsx<0.3 then--视角中 if jznb>-1.2 and jznb<-0.7 then--南 gg.edits(zbxsl, {{zbx-80, 16, 0, true}}) gg.edits(zbysl, {{zby+250, 16, 0, true}}) gg.edits(zbzsl, {{zbz+5, 16, 0, true}}) else if jznb>0.7 and jznb<1.2 then--北 gg.edits(zbxsl, {{zbx+80, 16, 0, true}}) gg.edits(zbysl, {{zby-250, 16, 0, true}}) gg.edits(zbzsl, {{zbz+5, 16, 0, true}}) else if jzdx>-1.2 and jzdx<-0.5 then--西 gg.edits(zbxsl, {{zbx-250, 16, 0, true}}) gg.edits(zbysl, {{zby-80, 16, 0, true}}) gg.edits(zbzsl, {{zbz+5, 16, 0, true}}) else if jzdx>0.5 and jzdx<1.2 then--东 gg.edits(zbxsl, {{zbx+250, 16, 0, true}}) gg.edits(zbysl, {{zby+80, 16, 0, true}}) gg.edits(zbzsl, {{zbz+5, 16, 0, true}}) end end end end--东南西北结束 end--视角中结束 if jzsx>0.5 then--视角上 gg.edits(zbxsl, {{zbx, 16, 0, true}}) gg.edits(zbysl, {{zby, 16, 0, true}}) gg.edits(zbzsl, {{zbz+311, 16, 0, true}}) end--视角上结束 if jzsx<-0.8 then--视角下 gg.edits(zbxsl, {{zbx, 16, 0, true}}) gg.edits(zbysl, {{zby, 16, 0, true}}) gg.edits(zbzsl, {{zbz-300, 16, 0, true}}) end--视角下结束 end--左探头结束 if tt == 1 then--右探头 gg.edits(lhsl, {{0, 16, 0, false}}) local data = {--0x62678,0xA8,0x2DC,0x24 ["so"] = "libUE4.so", {["value"] = 0, ["offset"] = 0x26F1700, ["type"] = 16},--空中强定 --{["value"] = 0, ["offset"] = 0xCB7BE4, ["type"] = 16},--灵魂出窍 } BaseAddressWrite(data) if jzsx>-0.8 and jzsx<0.3 then--视角中 if jznb>-1.2 and jznb<-0.7 then--南 gg.edits(zbxsl, {{zbx-80, 16, 0, true}}) gg.edits(zbysl, {{zby+250, 16, 0, true}}) gg.edits(zbzsl, {{zbz+5, 16, 0, true}}) else if jznb>0.7 and jznb<1.2 then--北 gg.edits(zbxsl, {{zbx+80, 16, 0, true}}) gg.edits(zbysl, {{zby-250, 16, 0, true}}) gg.edits(zbzsl, {{zbz+5, 16, 0, true}}) else if jzdx>-1.2 and jzdx<-0.5 then--西 gg.edits(zbxsl, {{zbx-250, 16, 0, true}}) gg.edits(zbysl, {{zby-80, 16, 0, true}}) gg.edits(zbzsl, {{zbz+5, 16, 0, true}}) else if jzdx>0.5 and jzdx<1.2 then--东 gg.edits(zbxsl, {{zbx+250, 16, 0, true}}) gg.edits(zbysl, {{zby+80, 16, 0, true}}) gg.edits(zbzsl, {{zbz+5, 16, 0, true}}) end end end end--东南西北结束 end--视角中结束 if jzsx>0.5 then--视角上 gg.edits(zbxsl, {{zbx, 16, 0, true}}) gg.edits(zbysl, {{zby, 16, 0, true}}) gg.edits(zbzsl, {{zbz+600, 16, 0, true}}) end--视角上结束 if jzsx<-0.8 then--视角下 gg.edits(zbxsl, {{zbx, 16, 0, true}}) gg.edits(zbysl, {{zby, 16, 0, true}}) gg.edits(zbzsl, {{zbz-300, 16, 0, true}}) end--视角下结束 end--左探头结束 if tt == 0 then--不探头 gg.edits(lhsl, {{10000, 16, 0, false}}) local data = { ["so"] = "libUE4.so", {["value"] = -3.74440972e28, ["offset"] = 0X26F1700, ["type"] = 16},--空中强定 --{["value"] = -7.88044907e22, ["offset"] = 0xCB7BE4, ["type"] = 16},--灵魂出窍 } BaseAddressWrite(data) gg.removeListItems(ttlf)--解冻 jznb=gg.getValues(ttlf)[2].value--矩阵方位南北 jzdx=gg.getValues(ttlf)[3].value--矩阵方位东西 jzsx=gg.getValues(ttlf)[4].value--矩阵方位上下 zbx=gg.getValues(ttlf)[5].value--坐标x zby=gg.getValues(ttlf)[6].value--坐标y zbz=gg.getValues(ttlf)[7].value--坐标z end--不探头结束 end--循环结束 end floatingWindowManager:run()