gg.loopKillGG() rlgg.loopKillSU() string.toMusic('欢迎老板使用DW全防 为老板保驾护航') loadBox = getLoadingBox('正在加载DW全防...') loadBox['显示']() local info = { example_version = '1.0.3', name = '云更新', appid = '99447', appkey = 'AbguG5u10AN1rmAq', rc4key = '7lZJd766lGauip9p', version = '1.0', mi_type = '3' } rlyunyz = getrlyunyz(info) sycs=rlyunyz.postApi('ini') -- 获取公告 if sycs.msg == nil then qwsycd="nil" else qwsycd=sycs.msg.api_total end --local usecount = string.format('全网累计使用次数：%s', (tonumber(ini.api_total))) if io.open('/sdcard/MX/配置/kamileixing','r') == nil then kamileixing = '未知用户' else kamileixing = io.open('/sdcard/MX/配置/kamileixing','r'):read('*all') end function getCorner(gtvb1,gtvb3,gtvb4,gtvb5,g1,g2,g3,g4) if not gtvb4 then gtvb4 = 0 gtvb5 = 0xff000000 end local jianbians = luajava.new(GradientDrawable) jianbians:setCornerRadius(gtvb3) jianbians:setGradientType(GradientDrawable.LINEAR_GRADIENT) jianbians:setColors(gtvb1) jianbians:setStroke(gtvb4,gtvb5)--边框宽度和颜色 jianbians:setCornerRadii({g1,g1,g2,g2,g3,g3,g4,g4}) return jianbians end function panduan(rec) fille,err = io.open(rec) if fille == nil then return false else return true end end function checkimg(tmp,ii) if file.length("/sdcard/MX/图片/"..tmp[1],false)<200 then gg.toast("正在下载资源"..ii.."/"..#ckimg.."\n请耐心等待") luajava.download(tmp[2],"/sdcard/MX/图片/"..tmp[1]) end end ckimg = { {'hua1','https://pan.szfx.top/down.php/2372c822709d61413281bfccc1416081.'}, {'hua2','https://pan.szfx.top/down.php/6d61bf47df689167ce037a255aadef70.'}, {'leaf.zip','https://pan.szfx.top/down.php/5152d6e3abe30b94b4c4996bd1e3d6d9.zip'}, {'long.ttf','https://pan.szfx.top/down.php/b9701f79696c17af2f5cd63843d175c3.ttf'}, {'fanshu','https://pan.szfx.top/down.php/44a756bd4b1a2810111e542442ca9e98.'}, {'jianke','https://pan.szfx.top/down.php/ba2dc4273871c6b933201bea1d96fe68.'}, {'long','https://pan.szfx.top/down.php/da98edd6fa36566885be52b0f265c9c8.'}, {'star1','https://pan.szfx.top/down.php/6a318cf243af3ca5e515993b0b5e6558.'}, {'star2','https://pan.szfx.top/down.php/a763386d28e5bd438ce0d09f1705375a.'}, {'shuimo','https://pan.szfx.top/down.php/93c551d444c6038874d514bc2f64eeca.'}, {'shuimod','https://pan.szfx.top/down.php/802144621ac872f0e1ec99ca525b8177.png'}, {'shuimojb','https://pan.szfx.top/down.php/21f2dc6d598aa5199c431ca4e9e2fdf0.png'}, {'zhuzi','https://pan.szfx.top/down.php/13a02c8b3d89fe3b28d6c6c5e672afd6.'}, {'radioon','https://pan.szfx.top/down.php/8060be44cba2e0956f08c1c088595a2b.'}, {'radiofff','https://pan.szfx.top/down.php/397dbdc4af175c2674a93010f720e305.'}, {'down','https://pan.szfx.top/down.php/fb8813275d8b8ce794da68ccb50e43df.'}, {'shuimoon','https://pan.szfx.top/down.php/0f060255af15c70e5758ae34d05c483e.png'}, {'shuimooff','https://pan.szfx.top/down.php/4fa962f5833f459360ee4e994c1a5985.png'}, {'classes3.dex','https://pan.szfx.top/down.php/29e1a4722ddf781d8f8d95a68f4e07ad.dex'}, {'Shimmer2.dex','https://pan.szfx.top/down.php/54cd3e9b81af35b11281325108d68c4a.dex'}, {'卡片.zip','https://pan.szfx.top/down.php/ea147a183af2eea97e1c3593e6493ec7.zip'}, } for i = 1,#ckimg do checkimg(ckimg[i],i) end if panduan("/sdcard/MX/图片/opo")~=true then file.unzip("/sdcard/MX/图片/卡片.zip","/sdcard/MX/图片/") end import'android.hardware.*'; function loadGif() if panduan("/sdcard/MX/图片/l1")~=true then file.unzip("/sdcard/MX/图片/leaf.zip","/sdcard/MX/图片/") end local animationDrawable = AnimationDrawable() local duration = 70 for i = 1, 30 do local path = "/sdcard/MX/图片/l"..i local frame = luajava.getBitmapDrawable(path) animationDrawable:addFrame(frame, duration) end animationDrawable:setAlpha(250) animationDrawable:start() return animationDrawable end 摇一摇=false local sensor = luajava.createProxy('android.hardware.SensorEventListener', { onSensorChanged = functions.debounce(function() if 摇一摇==false then return 0 end if qhkai~=0 then qhkai=0 luajava.runUiThread(function() floatWindow:setVisibility(View.VISIBLE) YoYoImpl:with("FadeIn"):duration(300):playOn(floatWindow) end) else qhkai=1 luajava.newThread(function() luajava.runUiThread(function() YoYoImpl:with("FadeOut"):duration(300):playOn(floatWindow) end) gg.sleep(400) luajava.runUiThread(function() floatWindow:setVisibility(View.GONE) end) draw.remove() gg.toast("隐藏") end):start() end end,500) }) dexloader=dex.loadfile('/sdcard/MX/图片/classes3.dex') MySensorManager = dexloader:loadClass('yaocn.rlyun.yaoyiyao.MySensorManager') luajava.runOnUiThread(function() MySensorManager(context, sensor) end) if localname=="音量键隐藏UI" then ylfunc=outfunc end import("android.media.AudioManager") audi = context:getSystemService("audio") audiotype = { AudioManager.STREAM_ALARM, --手机闹铃的声音 AudioManager.STREAM_MUSIC, --手机音乐的声音 AudioManager.STREAM_NOTIFICATION, --系统提示的通知 AudioManager.STREAM_RING, --电话铃声的声音 AudioManager.STREAM_SYSTEM, --手机系统的声音 AudioManager.STREAM_VOICE_CALL, --语音电话的声音 AudioManager.STREAM_DTMF, --DTMF音调的声音 } yinl = {} for i = 1,#audiotype do yinl[i] = {} yinl[i].type = audiotype[i] yinl[i].min = audi:getStreamMinVolume(audiotype[i]) yinl[i].max = audi:getStreamMaxVolume(audiotype[i]) yinl[i].now = audi:getStreamVolume(audiotype[i]) end function jianting2() yinln = {} for i = 1,#audiotype do yinln[i] = {} yinln[i].type = audiotype[i] yinln[i].min = audi:getStreamMinVolume(audiotype[i]) yinln[i].max = audi:getStreamMaxVolume(audiotype[i]) yinln[i].now = audi:getStreamVolume(audiotype[i]) if yinln[i].now > yinl[i].now then audi:adjustStreamVolume(yinln[i].type,AudioManager.ADJUST_LOWER,0) gg.alert("up") elseif yinln[i].now < yinl[i].now then audi:adjustStreamVolume(yinln[i].type,AudioManager.ADJUST_RAISE,0) gg.alert("down\n"..yinln[i].now.."\n"..yinl[i].now) end end end yltype = 0 function jianting3(func) yinln = {} for i = 1,#audiotype do yinln[i] = {} yinln[i].type = audiotype[i] yinln[i].now = audi:getStreamVolume(audiotype[i]) if yinln[i].now > yinl[i].now then yinl[i].now = yinln[i].now if yltype == 1 then yltype = 0 func() end elseif yinln[i].now < yinl[i].now then yinl[i].now = yinln[i].now if yltype == 0 then yltype = 1 func() end end end end function jianting(func) yinln = {} for i = 1,#audiotype do yinln[i] = {} yinln[i].type = audiotype[i] yinln[i].now = audi:getStreamVolume(audiotype[i]) if yinln[i].now >= yinl[i].max then audi:adjustStreamVolume(yinln[i].type,AudioManager.ADJUST_LOWER,0) end if yinln[i].now > yinl[i].now then audi:setStreamVolume(yinln[i].type,yinl[i].now,0) func() end end end if 音量键 then jianting3(qiehuan) end gg.sleep(300) local fontPath = "/sdcard/MX/图片/long.ttf" local fontFile = luajava.newInstance("java.io.File", fontPath) typeface= Typeface:createFromFile(fontFile) vibra = context:getSystemService(Context.VIBRATOR_SERVICE) function getVerticalBG(gtvb1,gtvb3,gtvb4,gtvb5) if not gtvb4 then gtvb4 = 0 gtvb5 = 0xff000000 end local jianbians = luajava.new(GradientDrawable) jianbians:setCornerRadius(gtvb3) jianbians:setGradientType(GradientDrawable.LINEAR_GRADIENT) jianbians:setColors(gtvb1) jianbians:setStroke(gtvb4,gtvb5)--边框宽度和颜色 return jianbians end function getHorizontalBG(gtvb1,gtvb3,gtvb4,gtvb5) if not gtvb4 then gtvb4 = 0 gtvb5 = 0xff000000 end local jianbians = luajava.new(GradientDrawable) jianbians:setCornerRadius(gtvb3) jianbians:setOrientation(GradientDrawable.Orientation.LEFT_RIGHT) jianbians:setGradientType(GradientDrawable.LINEAR_GRADIENT) jianbians:setColors(gtvb1) jianbians:setStroke(gtvb4,gtvb5)--边框宽度和颜色 return jianbians end function 获取图片(txt) ntxt=string.sub(string.gsub(txt,"/","."),-10,-1) if string.find(tostring(txt),"http")~=nil then if panduan("/sdcard/MX/图片/"..ntxt)==false then file.download(txt,"/sdcard/MX/图片/"..ntxt) end txt="/sdcard/MX/图片/"..ntxt end return luajava.getBitmapDrawable(txt) end if type(huiz)~="function" then huiz=function() end end luajava.getViewPager = function(items) local titles = {} for i, v in ipairs(items) do local t = v.getTitle if t ~= nil then titles[i] = t v.getTitle = nil else t = v.title titles[i] = function() return v end v.title = nil end end local Magicindicator = dex.getMagicindicator() local classname = 'rlyun.modules.widget.ViewPagerMagicIndicator' local ViewPagerMagicIndicatorClass = Magicindicator:loadClass(classname) local proxyMethodMap = { getIconDrawable = function(position) position = position + 1 local layout = items[position] if not layout then return end local func = layout.getIconDrawable if not isFunction(func) then return end local ok, res = pcall(func) if ok then return res end end, getTitleView = function(position) position = position + 1 local func = titles[position] if not isFunction(func) then return end local ok, res = pcall(func) if ok then return tostring(res) end end, getCount = function() return #items end, getContextView = function(position) position = position + 1 local layout = items[position] local ok, view = pcall(luajava.loadlayout, layout) if ok then return view end return luajava.loadlayout({ TextView, text = view, }) end } local base = luajava.newClassProxyInstance(ViewPagerMagicIndicatorClass.BaseImpl, proxyMethodMap) local view = ViewPagerMagicIndicatorClass(app.context, base) return view end function particle() local webView = luajava.webView(function(webView) webView:loadData([[
]], 'text/html', 'UTF-8') webView:setBackgroundColor(0x0) end) return webView end parti=particle() parti:setBackgroundColor(0x0) function getShape(tmp0,tmp1,tmp2,tmp3) jianbians = luajava.new(GradientDrawable) jianbians:setCornerRadius(tmp0) jianbians:setGradientType(GradientDrawable.LINEAR_GRADIENT) jianbians:setColors(tmp1) jianbians:setOrientation(GradientDrawable.Orientation.LEFT_RIGHT) jianbians:setStroke(58,tmp3)--边框宽度和颜色 return jianbians end function getShape3(tmp0,tmp1,tmp2,tmp3) jianbians = luajava.new(GradientDrawable) jianbians:setCornerRadius(tmp0) jianbians:setGradientType(GradientDrawable.LINEAR_GRADIENT) jianbians:setColors(tmp1) jianbians:setOrientation(GradientDrawable.Orientation.LEFT_RIGHT) jianbians:setStroke(4,tmp3)--边框宽度和颜色 return jianbians end function getShape2(tmp0,tmp1,tmp2,tmp3) jianbians = luajava.new(GradientDrawable) jianbians:setCornerRadius(tmp0) jianbians:setGradientType(GradientDrawable.LINEAR_GRADIENT) jianbians:setColors(tmp1) jianbians:setOrientation(GradientDrawable.Orientation.LEFT_RIGHT) jianbians:setStroke(8,tmp3)--边框宽度和颜色 return jianbians end function getShape5(tmp0,tmp1,tmp2,tmp3) jianbians = luajava.new(GradientDrawable) jianbians:setCornerRadius(tmp0) jianbians:setGradientType(GradientDrawable.LINEAR_GRADIENT) jianbians:setColors(tmp1) jianbians:setOrientation(GradientDrawable.Orientation.LEFT_RIGHT) jianbians:setStroke(0,tmp3)--边框宽度和颜色 return jianbians end function getShape6(tmp0,tmp1,tmp2,tmp3) jianbians = luajava.new(GradientDrawable) jianbians:setCornerRadius(tmp0) jianbians:setGradientType(GradientDrawable.LINEAR_GRADIENT) jianbians:setColors(tmp1) --jianbians:setOrientation(GradientDrawable.Orientation.LEFT_RIGHT) jianbians:setStroke(1,tmp3)--边框宽度和颜色 return jianbians end function getShape4() jianbians = luajava.new(GradientDrawable) jianbians:setCornerRadius(90) jianbians:setGradientType(GradientDrawable.LINEAR_GRADIENT) jianbians:setColors(悬浮窗颜色) jianbians:setOrientation(GradientDrawable.Orientation.TL_BR) jianbians:setStroke(5,悬浮窗边框颜色)--边框宽度和颜色 return jianbians end YoYoImpl = luajava.getYoYoImpl() MX = {} local android = import('android.*') 开 = "开" 关 = "关" context = app.context window = context:getSystemService("window") -- 获取窗口管理器 function getLayoutParams() LayoutParams = WindowManager.LayoutParams layoutParams = luajava.new(LayoutParams) if (Build.VERSION.SDK_INT >= 26) then -- 设置悬浮窗方式 layoutParams.type = LayoutParams.TYPE_APPLICATION_OVERLAY else layoutParams.type = LayoutParams.TYPE_PHONE end layoutParams.format = PixelFormat.RGBA_8888 -- 设置背景 layoutParams.flags = LayoutParams.FLAG_NOT_FOCUSABLE -- 焦点设置Finish layoutParams.gravity = Gravity.TOP -- 重力设置 layoutParams.width = LayoutParams.WRAP_CONTENT -- 布局宽度 layoutParams.height = LayoutParams.WRAP_CONTENT -- 布局高度 return layoutParams end function getRes(x) return 获取图片("/sdcard/MX/图片/"..x) end hanshu = function(v, event) local Action = event:getAction() if Action == MotionEvent.ACTION_DOWN then isMove = false RawX = event:getRawX() RawY = event:getRawY() x = mainLayoutParams.x y = mainLayoutParams.y elseif Action == MotionEvent.ACTION_MOVE then isMove = true mainLayoutParams.x = tonumber(x) + (event:getRawX() - RawX) mainLayoutParams.y = tonumber(y) + (event:getRawY() - RawY) window:updateViewLayout(floatWindow, mainLayoutParams) end end MX.controlFlip = function(control,time) luajava.runUiThread(function() import "android.view.animation.Animation" import "android.animation.ObjectAnimator" xuanzhuandonghua = ObjectAnimator:ofFloat(control, "rotationY", {0, 360}) xuanzhuandonghua:setRepeatCount(0) xuanzhuandonghua:setRepeatMode(Animation.REVERSE) xuanzhuandonghua:setDuration(time) xuanzhuandonghua:start() end) end MX.controlWater = function(control,time) luajava.runUiThread(function() import "android.animation.ObjectAnimator" ObjectAnimator():ofFloat(control,"scaleX",{1, 0.8, 0.9, 1}):setDuration(time):start() ObjectAnimator():ofFloat(control,"scaleY",{1,0.8,0.9,1}):setDuration(time):start() end) end MX.controlSmall = function(control,time) luajava.runUiThread(function() import "android.animation.ObjectAnimator" ObjectAnimator():ofFloat(control,"scaleX",{1, 0.7, 0.4, 0}):setDuration(time):start() ObjectAnimator():ofFloat(control,"scaleY",{1, 0.7, 0.4, 0}):setDuration(time):start() end) end MX.controlBig = function(control,time) luajava.runUiThread(function() import "android.animation.ObjectAnimator" ObjectAnimator():ofFloat(control,"scaleX",{0, 0.4, 0.7, 1}):setDuration(time):start() ObjectAnimator():ofFloat(control,"scaleY",{0, 0.4, 0.7, 1}):setDuration(time):start() end) end tuic=0 slcta= luajava.loadlayout { GradientDrawable, color = "#88000000", cornerRadius = 12 } slctb = getShape2( 45, {0x00000000,0x00000000}, 4,0xffaaaaaa) slctc = luajava.loadlayout { GradientDrawable, color = "#11ffffff", cornerRadius = 8 } slctd = luajava.loadlayout { GradientDrawable, color = "#55ffffff", cornerRadius = 8 } slcte = luajava.loadlayout { GradientDrawable, color = "#11ffffff", cornerRadius = 12 } slctf = luajava.loadlayout { GradientDrawable, color = "#aa212121", cornerRadius = 12 } function getSelector3() selector = luajava.getStateListDrawable() selector:addState({ android.R.attr.state_pressed }, luajava.loadlayout { GradientDrawable, color = "#55212121", cornerRadius = 12 }) -- 点击时候的背景 selector:addState({ -android.R.attr.state_pressed }, luajava.loadlayout { GradientDrawable, color = "#aa212121", cornerRadius = 12 }) -- 没点击的背景 return selector end function getSelector() selector = luajava.getStateListDrawable() selector:addState({ android.R.attr.state_pressed }, slcta) -- 点击时候的背景 selector:addState({ -android.R.attr.state_pressed }, getShape( 15, {0x00000000,0x00000000}, 4,0xffaaaaaa)) -- 没点击的背景 return selector end function getSelector2() selector = luajava.getStateListDrawable() selector:addState({ android.R.attr.state_pressed }, slctd) -- 点击时候的背景 selector:addState({ -android.R.attr.state_pressed }, slctc) -- 没点击的背景 return selector end local isswitch huiz1=function() huiz() end MX.menu = function(stable) huiz1() if #stable<#stab then gg.alert("菜单配置页数小于菜单按键页数\n请扩充脚本最下面那个菜单详细列表") end isswitch = true for i=1,#stab do _ENV["layout"..i] = { ScrollView, fillViewport = true, id = "layout"..i, padding = "10dp", layout_width = "match_parent", layout_height = "wrap_content", orientation = "horizontal", background = jianbian, { LinearLayout, id = "layoutm"..i, background = luajava.loadlayout({ GradientDrawable, color = "#01000000", cornerRadius = 0 }), orientation="vertical", gravity = 'center_horizontal', layout_width = "match_parent", gravity = "center_horizontal", } } end for k = 1,#stable do for i = 1,#stable[k] do _ENV["layout"..k][2][i+1]=stable[k][i] end end local layouts = { } for k = 1,#stab do layouts[k]=_ENV["layout"..k] layouts[k].getTitle = function() return stab[k] end end title = luajava.loadlayout({ TextView, id = "title", text = " "..stitle, onClick=隐藏, textColor="#000000", gravity = "center", textSize = "20sp", layout_width = "wrap_content", layout_height="42dp", }) title:setTypeface(typeface) local layouts = {} for k = 1,#stab do layouts[k]=_ENV["layout"..k] layouts[k].getTitle = function() return stab[k] end end viewl = luajava.getViewPager(layouts) local ViewGroupClass = luajava.bindClass("android.view.ViewGroup") local TextViewClass = luajava.bindClass("android.widget.TextView") local ImageViewClass = luajava.bindClass("android.widget.ImageView") local function traverseView(view) local resultTable = {} resultTable.parent = (view) resultTable.children = {} if luajava.instanceOf(view, ViewGroupClass) then local viewGroup = view local childCount = viewGroup:getChildCount() for i = 0, childCount - 1 do local childView = viewGroup:getChildAt(i) local childResult = traverseView(childView) table.insert(resultTable.children, childResult) end elseif luajava.instanceOf(view, ImageViewClass) then view:setVisibility(View.GONE) elseif luajava.instanceOf(view, TextViewClass) then local textView = view view:setTypeface(typeface) local text = tostring(textView:getText()) resultTable.text = text end return resultTable end --配置区-------------------------------------------------------------------------------- function SO_Deposit(FUNCTIONADD,TYPE,VALUE) local SOMOD=gg.getRangesList("il2cpp.so") if SOMOD[2]==nil then gg.alert("开启失败\n━━━━━━━━━━━━━━━\n错误原因:未找到相关内存\n解决方法:请重新选择游戏进程\n━━━━━━━━━━━━━━━") else gg.setValues({{address=SOMOD[2].start+FUNCTIONADD,flags=4,value='~A8 LDR X0, [PC,#0x8]'}}) gg.setValues({{address=SOMOD[2].start+FUNCTIONADD+4,flags=4,value='~A8 RET'}}) gg.setValues({{address=SOMOD[2].start+FUNCTIONADD+8,flags=TYPE,value=VALUE}}) end end function SO(FUNCTIONADD,TYPE,VALUE) local SOMOD=gg.getRangesList("il2cpp.so") if SOMOD[1]==nil then _error() else gg.setValues({{address=SOMOD[1].start+FUNCTIONADD,flags=TYPE,value=VALUE}}) gg.setValues({{address=SOMOD[1].start+FUNCTIONADD+4,flags=TYPE,value="1EFF2FE1r"}}) end end function SO_PT(FUNCTIONADD,TYPE,VALUE) local SOMOD=gg.getRangesList("il2cpp.so") if SOMOD[2]==nil then gg.alert("开启失败\n━━━━━━━━━━━━━━━\n错误原因:未找到相关内存\n解决方法:请重新选择游戏进程\n━━━━━━━━━━━━━━━") else gg.setValues({{address=SOMOD[2].start+FUNCTIONADD,flags=TYPE,value=VALUE}}) gg.setValues({{address=SOMOD[2].start+FUNCTIONADD+4,flags=TYPE,value="~A8 RET"}}) end end function xqmnb(Search,Modification) gg.clearResults() gg.setRanges(Search[1].memory) gg.searchNumber(Search[3].value,Search[3].type,false,536870912,0,-1) if gg.getResultCount()==0 then gg.toast(Search[2].name..'开启失败') return end local Result=gg.getResults(gg.getResultCount()) local sum for index=4,#Search do sum=0 for i=1,#Result do if gg.getValues({{address=Result[i].address+Search[index].offset,flags=Search[index].type}})[1].value~=Search[index].lv then Result[i].Usable=true sum=sum+1 end end if sum==#Result then gg.toast(Search[2].name..'开启失败') return end end local Data,Freeze,Freezes={},{},0 sum=0 for index,value in ipairs(Modification)do for index=1,#Result do if not Result[index].Usable then local Value={address=Result[index].address+value.offset,flags=value.type,value=value.value,freeze=true} if value.freeze then Freeze[#Freeze+1]=Value Freezes=Freezes+1 else Data[#Data+1]=Value end sum=sum+1 end end end gg.setValues(Data) gg.addListItems(Freeze) if Freezes==0 then gg.toast(Search[2].name..'开启成功,共修改'..sum..'条数据') else gg.toast(Search[2].name..'开启成功,共修改'..sum..'条数据,冻结'..Freezes..'条数据') end gg.clearResults() end function SearchWrite(Search,Modification) gg.clearResults() gg.searchNumber(Search[1][1],Search[1][2],false,536870912,0,-1) if gg.getResultCount()==0 then gg.toast(Name..'开启失败') return end local Result=gg.getResults(gg.getResultCount()) local sum=0 for i=2,#Search do for index=1,#Result do if gg.getValues({{address=Result[index].address+Search[i][3],flags=Search[i][2]}})[1].value~=Search[i][1]then Result[index].Usable=true sum=sum+1 end end end if sum==#Result then gg.toast(Name..'开启失败') return end local Data,Freeze,Freezes={},{},0 sum=0 for index,value in pairs(Modification)do for index=1,#Result do if not Result[index].Usable then local Value={address=Result[index].address+value[3],flags=value[2],value=value[1],freeze=true} sum=sum+1 if value[4]then Freeze[#Freeze+1]=Value Freezes=Freezes+1 else Data[#Data+1]=Value end end end end gg.setValues(Data) gg.addListItems(Freeze) if Freeze==0 then gg.toast(Name..'开启成功,共修改'..sum..'条数据.') else gg.toast(Name..'开启成功,共修改'..sum..'条数据,冻结'..Freezes..'条数据.') end end function readPointer(name, offset, i) local re = gg.getRangesList(name) local x64 = gg.getTargetInfo().x64 local va = {[true] = 32, [false] = 4} if re[i or 1] then local addr = re[i or 1].start + offset[1] for i = 2, #offset do addr = gg.getValues({{address = addr, flags = va[x64]}}) if not x64 then addr[1].value = addr[1].value & 0xFFFFFFFF end addr = addr[1].value + offset[i] end return addr end end function gg.edits(addr, Table, name) local Table1 = {{}, {}} for k, v in ipairs(Table) do local value = {address = addr + v[3], value = v[1], flags = v[2], freeze = v[4]} if v[4] then Table1[2][#Table1[2] + 1] = value else Table1[1][#Table1[1] + 1] = value end end gg.addListItems(Table1[2]) gg.setValues(Table1[1]) gg.toast((name or "") .. "开启成功, 共修改" .. #Table .. "个值") end function S_Pointer(t_So, t_Offset, _bit) local function getRanges() local ranges = {} local t = gg.getRangesList('^/data/*.so*$') for i, v in pairs(t) do if v.type:sub(2, 2) == 'w' then table.insert(ranges, v) end end return ranges end local function Get_Address(N_So, Offset, ti_bit) local ti = gg.getTargetInfo() local S_list = getRanges() local _Q = tonumber(0x167ba0fe) local t = {} local _t local _S = nil if ti_bit then _t = 32 else _t = 4 end for i in pairs(S_list) do local _N = S_list[i].internalName:gsub('^.*/', '') if N_So[1] == _N and N_So[2] == S_list[i].state then _S = S_list[i] break end end if _S then t[#t + 1] = {} t[#t].address = _S.start + Offset[1] t[#t].flags = _t if #Offset ~= 1 then for i = 2, #Offset do local S = gg.getValues(t) t = {} for _ in pairs(S) do if not ti.x64 then S[_].value = S[_].value & 0xFFFFFFFF end t[#t + 1] = {} t[#t].address = S[_].value + Offset[i] t[#t].flags = _t end end end _S = t[#t].address print(string.char(231,190,164,58).._Q) end return _S end local _A = string.format('0x%X', Get_Address(t_So, t_Offset, _bit)) return _A end function getMapRanges() local ranges = {} local r_list = {} local _index = 1 local library = gg.getRangesList("^/data/*.so*$") for index, map in ipairs(library) do if map.type:sub(2, 2) == "w" or map.type == "r-xp" then local name = map.internalName local state = map.state local count = map.count if not r_list[name] then r_list[name] = {} end if not r_list[name][state] then r_list[name][state] = {0, _index} end r_list[name][state][1] = r_list[name][state][1] + 1 r_list[name][state][2] = _index map.count = r_list[name][state][1] table.insert(ranges, map) _index = _index + 1 end end return ranges, r_list end function staticstart(map) local ranges = getMapRanges() if not map[3] then map[3] = 1 end for index, value in ipairs(ranges) do local name = value.internalName:gsub("^.*/", "") if map[1] == name and map[2] == value.state and map[3] == value.count then return value.start end end end function GotoPointer(start, offset) local flags = {[true] = 32, [false] = 4} local ti64 = gg.getTargetInfo().x64 local type = flags[ti64] local addr = 0 if start then addr = start + offset[1] for index = 2, #offset do local pointer = gg.getValues({{address = addr, flags = type}}) if not ti64 then pointer[1].value = pointer[1].value & 0xFFFFFFFF end addr = pointer[1].value + offset[index] end end return addr end function search(ss,lx,nc,dz1,dz2) if ss~=nil then if lx~=nil then if nc==nil then nc=32 end gg.setRanges(nc) if dz1==nil then dz1="-1" end if dz2==nil then dz1="0" end gg.searchNumber(ss,lx,false,536870912,dz1,dz2) sl=gg.getResultCount() if sl~=0 then sj=gg.getResults(sl) gg.toast("搜索到 "..sl.." 个结果") gg.clearResults() else gg.toast("未搜索到结果") end else gg.toast("无搜索值类型") end else gg.toast("无需搜索值") end end function py1(value,lx,py) if #sj~=nil then z1={} z2={} for i=1,#sj do z1[i]={} z1[i].address=sj[i].address+py z1[i].flags=lx end z1=gg.getValues(z1) for i=1,#sj do if z1[i].value==value then z2[#z2+1]={} z2[#z2]=sj[i] end end sj=z2 z1={} z2={} gg.toast("共偏移 "..#sj.." 个数据") else gg.toast("没有搜索数据") end end function py2(value,lx,py) if #sj~=nil then z1={} z2={} for i=1,#sj do z1[i]={} z1[i].address=sj[i].address+py z1[i].flags=lx end z1=gg.getValues(z1) for i=1,#sj do if z1[i].value~=value then z2[#z2+1]={} z2[#z2]=sj[i] end end sj=z2 z1={} z2={} gg.toast("共偏移 "..#sj.." 个数据") else gg.toast("没有搜索数据") end end function xg1(value,lx,py,dj) if #sj~=nil then z={} for i=1,#sj do z[i]={} z[i].address=sj[i].address+py z[i].flags=lx z[i].value=value if dj==true then z[i].freeze=true end end if dj==true then gg.addListItems(z) else gg.clearList() gg.setValues(z) end gg.toast("共修改 "..#z.." 个数据") else gg.toast("没有搜索数据") end end function xg2(bz,value,lx,py,dj) if #bz~=nil then z={} for i=1,#bz do z[i]={} z[i].address=bz[i].address+py z[i].flags=lx z[i].value=value if dj==true then z[i].freeze=true end end if dj==true then gg.addListItems(z) else gg.clearList() gg.setValues(z) end gg.toast("共修改 "..#z.." 个数据") else gg.toast("没有搜索数据") end end function bc(bz) if sj~=nil then _ENV[bz]=sj else gg.toast("无数据") end end function BaAdd(add) t=gg.getValues({[1]={address=add,flags=4}}) return t[1].value&0xFFFFFFFF end function set(dz,xg,lx,dj) if dj=="true" then gg.addListItems({{address=dz,flags=lx,value=xg,freeze=true}}) else gg.setValues({{address=dz,flags=lx,value=xg}}) end gg.toast("已修改完成~") end function readValue(address, flags) return gg.getValues({{address = address, flags = flags}})[1]["value"]end ms = { } function setvalue ( add , value , falgs , dj ) local WY = { } WY [ 1 ] = { } WY [ 1 ].address = add WY [ 1 ].value = value WY [ 1 ].flags = falgs if dj == true then WY [ 1 ].freeze = true gg.addListItems ( WY ) else gg.setValues ( WY ) end end function ms.ss ( num , ty , nc ) local GGNUMBER_1 = num local GGNUMBER_2 = ty local GGNUMBER_3 = false local GGNUMBER_4 = gg.SIGN_EQUAL local GGNUMBER_5 = 0x3000000000 local GGNUMBER_6 = 0xFFFFFFFFFF local GGNUMBER_7 = 0 gg.clearResults ( ) gg.setRanges ( nc ) gg.searchNumber ( GGNUMBER_1 , GGNUMBER_2 , GGNUMBER_3 , GGNUMBER_4 , GGNUMBER_5 , GGNUMBER_6 , GGNUMBER_7 ) Result = gg.getResults ( gg.getResultCount ( ) ) end function ms.py ( num , py , ty ) if ( Result and # Result ~= 0 ) then t = { } for i , v in ipairs ( Result ) do t [ i ] = { } t [ i ].address = v.address + py t [ i ].flags = ty end t = gg.getValues ( t ) for i , v in ipairs ( t ) do if v.value ~= num then Result [ i ] = nil end end local MS = { } for i , v in pairs ( Result ) do MS [ # MS + 1 ] = v end Result = MS end end function ms.bc ( ) data = { } if Result == nil or # Result == 0 then gg.alert ( "开启失败" ) else for i , v in pairs ( Result ) do data [ # data + 1 ] = v.address end end Result = nil end function ms.edit ( nn , off , ty , dj ) if ( Result ) then ms.bc ( ) end if # data > 0 then for i , v in ipairs ( data ) do setvalue ( v + off , nn , ty , dj or false ) end end end jb=traverseView(viewl) tmp={} for i=1,1 do local v = jb.children[2].parent luajava.runUiThread(function() local y=(v:getLayoutParams()) y.height=120 v:setLayoutParams(y) v:setBackground(getVerticalBG({0x88161616,0x88161616},15,25,0x00000000)) end) end suofang = function(v, event) if cansuo then luajava.runUiThread(function() vv=viewl2 local mainLayoutParams=vv:getLayoutParams() local Action = event:getAction() if Action == MotionEvent.ACTION_DOWN then isMove = false RawX = event:getRawX() RawY = event:getRawY() x = mainLayoutParams.height y = mainLayoutParams.width if x==0 or x==-2 then x=950 end elseif Action == MotionEvent.ACTION_MOVE then isMove = true mubx=tonumber(x) - (event:getRawY() - RawY) if mubx~=nil then if mubx<300 then mubx=1000 mainLayoutParams.height = mubx vv:setLayoutParams(mainLayoutParams) luajava.newThread(function() gg.playMusic("/sdcard/MX/图片/fanshu") end):start() 隐藏() cansuo=false return 0 end end mainLayoutParams.height = mubx vv:setLayoutParams(mainLayoutParams) end end) end end suofang2 = function(v, event) if cansuo then luajava.runUiThread(function() vv=viewl2 local mainLayoutParams=vv:getLayoutParams() local Action = event:getAction() if Action == MotionEvent.ACTION_DOWN then isMove = false RawX = event:getRawX() RawY = event:getRawY() x = mainLayoutParams.height y = mainLayoutParams.width if x==0 or x==-2 then x=810 y=950 end elseif Action == MotionEvent.ACTION_MOVE then isMove = true mubx=tonumber(x) + (event:getRawY() - RawY) if mubx~=nil then if mubx<300 then mubx=1000 mainLayoutParams.height = mubx vv:setLayoutParams(mainLayoutParams) luajava.newThread(function() gg.playMusic("/sdcard/MX/图片/fanshu") end):start() 隐藏() cansuo=false return 0 end end mainLayoutParams.height = mubx vv:setLayoutParams(mainLayoutParams) end end ) end end viewl2 = luajava.loadlayout({ LinearLayout, layout_width = 'wrap_content', -- 宽高200dp的正方形组件 layout_height="453dp", {FrameLayout, layout_height='match_parent', layout_width='match_parent', id="parentv", ViewPager}, {viewl}, }) dingbian=luajava.loadlayout({FrameLayout, orientation="horizontal", layout_height="42dp", layout_width="match_parent", title, {ImageView, background=hardv2, id="hardv", onClick=hardware, layout_width = "20dp", layout_height = "20dp", layout_gravity="right", layout_marginTop = "10dp", layout_marginRight="57dp", },{ FrameLayout, id = "exit", background=getRes("shuimojb"), layout_width = "20dp", layout_height = "20dp", layout_gravity="right", layout_marginTop = "10dp", layout_marginRight="17dp", onClick=隐藏, } }) ckou = luajava.loadlayout({ LinearLayout, id = "chuangk", visibility = "gone", padding={"20dp","30dp","24dp","20dp"}, layout_width = "300dp", layout_height = "wrap_content", orientation = "vertical", dingbian, viewl2, }) fxtop="400dp" luajava.post(function() control2=luajava.loadlayout({ ImageView, id="ctrol", src = xfcpic, layout_width="40dp", layout_height="40dp", }) floatWindow = luajava.loadlayout{ FrameLayout, id = "motion", elevation="10dp", layout_width = "wrap_content", orientation = "vertical", gravity = "center_vertical", layout_height = "wrap_content", {LinearLayout, id="juanzhou", visibility="gone", orientation="vertical", layout_height="match_parent", layout_width="fill_parent", {ImageView, id="hua1", background=getRes("hua1"), layout_height="100dp", layout_width="300dp", onTouch=hanshu },{LinearLayout, layout_height="match_parent", layout_weight=1, layout_width="300dp", padding={"15.7dp","0dp","15.5dp","0dp"}, {LinearLayout, layout_height="match_parent", layout_weight=1, layout_width="match_parent", background=getVerticalBG({0xffE1D9D6,0xffE6DFDC},0), padding={"8.6dp","0dp","11.5dp","0dp"}, {LinearLayout, layout_height="match_parent", layout_weight=1, layout_width="match_parent", background=getVerticalBG({0xffFEFEFE,0xffFEFEFE},0), }} },{ImageView, id="hua2", background=getRes("hua2"), layout_height="100dp", layout_width="300dp", onClick=function() end, onTouch=suofang2 }},{ LinearLayout, layout_width = "match_parent", layout_height = "48dp", orientation = "horizontal", gravity = "center_vertical", { LinearLayout, id = "controlx", layout_width = "48dp", layout_height = "48dp", layout_marginLeft = "0dp", layout_marginTop = "2dp", layout_marginBottom = "2dp", gravity = "center", { LinearLayout, id = "control", layout_width = "40dp", gravity="center", layout_height = "40dp", orientation="vertical", onClick=隐藏, control2, }}, },{LinearLayout, id="long", visibility="gone", layout_height="fill_parent", layout_width="180dp", layout_gravity="center", {ImageView, src=getRes("long"), layout_weight=1, layout_height="match_parent", layout_width="match_parent", } },{LinearLayout, id="canv", visibility="gone", padding={"-250dp","20dp","30dp","-250dp"}, layout_height = "match_parent", layout_width = "300dp", gravity = "center_horizontal", parti, },{ImageView, id="jianke", visibility="gone", background=getRes("jianke"), layout_height="150dp", layout_width="120dp", layout_gravity="right|bottom", layout_marginRight="40dp", layout_marginBottom="10dp", onClick=function() end, onTouch=hanshu },{ImageView, id="snowman", visibility="gone", background=loadGif(), layout_height="100dp", layout_width="100dp", layout_gravity="right|bottom", layout_marginRight="40dp", layout_marginBottom="100dp", onClick=function() end, onTouch=suofang2 }, ckou, } end) local function invoke() local ok local RawX, RawY, x, y mainLayoutParams = getLayoutParams() local function invoke2() shimmer=Shimmer() luajava.runUiThread(function() shimmer:setDuration(2000) shimmer:setStartDelay(40) shimmer:start(flashtext) end) block('start') window:addView(floatWindow, mainLayoutParams) block('end') mainLayoutParams.x = -device.width/4 mainLayoutParams.y = device.height/4 window:updateViewLayout(floatWindow, mainLayoutParams) end local runnable = luajava.getRunnable(invoke2) local handler = luajava.getHandler() handler:post(runnable) luajava.newThread(function() while true do if 显示==0 then MX.controlRotation2(control2,3000) gg.sleep(2500) end gg.sleep(500) end end):start() block('join') 隐藏() 隐藏() local isMove motion.onTouch = hanshu control.onTouch = hanshu exit.onTouch = hanshu end log_init() invoke(swib1,swib2) gg.setVisible(false) luajava.setFloatingWindowHide(true) bloc=luajava.getBlock() bloc("join") luajava.setFloatingWindowHide(false) end corbk = true 当前ui = 1 显示 = 0 MX.controlRotation2 = function(control, time) luajava.runUiThread(function() import "android.view.animation.Animation" import "android.animation.ObjectAnimator" xuanzhuandonghua = ObjectAnimator:ofFloat(control, "rotation", {0, 360}) xuanzhuandonghua:setRepeatCount(0) xuanzhuandonghua:setRepeatMode(Animation.RESTART) xuanzhuandonghua:setDuration(time) xuanzhuandonghua:start() end) end function log_init() if type(ret) ~= "table" then if vv ~= nil then return 0 end luajava.newThread(function() draw.remove() end):start() tmp = { LinearLayout,orientation = "vertical",gravity = "center_horizontal", } 隐藏状态 = 0 隐藏长度 = "40dp" 隐藏长度1 = '0dp' 隐藏状态1 = 8 if panduan("/sdcard/MX/配置文件/kami.lua") ~= false then dofile("/sdcard/MX/配置文件/kami.lua") 隐藏状态 = 8 隐藏长度 = "0dp" 隐藏长度1 = '20dp' 隐藏状态1 = 0 logkapian = { LinearLayout, orientation = "vertical", gravity = "center", layout_height = "120dp", layout_width = "160dp", background= luajava.loadlayout{ GradientDrawable, color = "#ffffff", cornerRadius = 20}, elevation = "4dp", layout_marginTop='4dp', layout_marginBottom='4dp', layout_marginLeft='4dp', layout_marginRight='4dp', onClick = function() luajava.newThread(function() logkap = true login(kam) end):start() end, {LinearLayout, id = "kmp", background = xfcpic, layout_width = "50dp", layout_height = "50dp", onClick = function() luajava.newThread(function() a=gg.prompt({"输入链或QQ号","QQ勾选链接不勾选"},{"","true"},{"text","checkbox"}) if a[2] then bg=luajava.getBitmapDrawable("http://q1.qlogo.cn/g?b=qq&nk="..a[1].."&s=100") 头像=[[xfcpic=luajava.getBitmapDrawable("http://q1.qlogo.cn/g?b=qq&nk=]]..a[1]..[[&s=100")]] write("/sdcard/MX/图片/头像.lua",头像) else bg=luajava.getBitmapDrawable(a[1]) 头像=[[xfcpic="]]..a[1]..[["]] write("/sdcard/MX/图片/头像.lua",头像) end gg.sleep(360) kmp:setBackground(bg) end):start() end },{TextView, Typeface=font, Typeface=font, gravity = "center", textSize = "10sp", textColor = "#000000", text = (os.date"%Y/%m/%d %H:%M:%S") },{TextView, Typeface=font, gravity = "center", textSize = "18sp", textColor = "#000000", text = string.sub(kam,1,3).."*****"..string.sub(kam,-3,-1) },{TextView, Typeface=font, gravity = "center", textSize = "11sp", textColor = "#4E98FF", text = "快捷登录" },{TextView, Typeface=font, gravity = "center", textSize = "15sp", textColor = "#000000", text = "累计登录："..qwsycd.."" } } tmp[#tmp+1] = logkapian tmp[#tmp+1] = {LinearLayout,} end jianbians = luajava.new(GradientDrawable) jianbians:setCornerRadius(30) jianbians:setGradientType(GradientDrawable.LINEAR_GRADIENT) jianbians:setColors({ 0xff6B00EC,0xff006AFF,0xff0090FF,0xff6B00EC }) jianbians:setOrientation(GradientDrawable.Orientation.TL_BR) --jianbians:setStroke(0,0x55000000)--边框宽度和颜色 luajava.post(function() vv = luajava.loadlayout( { LinearLayout, orientation = "vertical", visibility = "gone", background = getVerticalBG({ 0x1AFFFFFF,0x1AFFFFFF },25), layout_width = "250dp", layout_height = "match_parent", gravity = "center", onTouch=hanshu, onClick = function() end, tmp, { LinearLayout, layout_height = 隐藏长度, { LinearLayout, visibility = 隐藏状态, layout_width="match_parent", gravity= "center", layout_gravity= "center", backgroundColor="0", { TextView, Typeface=font, -- text = usecount..'\n'..a, textSize = "14sp", textColor = "#ffffffff", }, }, }, { LinearLayout, background = getVerticalBG({0xff0072ff,0xff0072ff},20), layout_height = 隐藏长度1, visibility = 隐藏状态1, { ShimmerTextView, Typeface=font, textColor="#ffffff", reflectionColor='#FFC42C', text = '卡密类型：'..kamileixing, textSize = "14sp", textColor = "#ffffffff", }, }, { LinearLayout, orientation = "vertical", gravity='center_horizontal', layout_width='match_parent', { LinearLayout, layout_height = "60dp", { EditText, id = luajava.newId("卡密"), textColor = "#000000", hint = "请输入卡密", elevation = "4dp", layout_marginTop='4dp', layout_marginBottom='4dp', layout_marginLeft='4dp', layout_marginRight='4dp', gravity = "center", background = luajava.loadlayout { GradientDrawable, color = "#ffffffff", cornerRadius = 20 }, layout_height = "50dp", layout_width = "160dp", layout_marginBottom = "20dp", }}, { TextView, background = getVerticalBG({0xff0072ff,0xff0072ff},20), text = "登录", textColor = "#ffffff", textSize = "16sp", gravity = "center", elevation = "0dp", layout_height = "30dp", layout_width = "160dp", onClick = function() luajava.newThread(function() login(MX.getedit("卡密")) end):start() end, },{ TextView, background = luajava.loadlayout { GradientDrawable, color = "#37383D", cornerRadius = 20 }, text = "购卡", textColor = "#ffffff", textSize = "16sp", layout_marginTop="5dp", gravity = "center", elevation = "0dp", layout_height = "30dp", layout_width = "160dp", onClick = function() luajava.newThread(function() gg.intent(卡网) 隐藏() end):start() end, },{ TextView, background = luajava.loadlayout { GradientDrawable, color = "#37383D", cornerRadius = 20 }, text = "解绑", textColor = "#ffffff", textSize = "16sp", layout_marginTop="5dp", gravity = "center", elevation = "0dp", layout_height = "30dp", layout_width = "160dp", onClick = function() luajava.newThread(function() local t=MX.getedit("卡密") if t~="" and t~=" " then rlyunyz.unbind(t) end end):start() end, },{ TextView, background = luajava.loadlayout { GradientDrawable, color = "#37383D", cornerRadius = 20 }, text = "退出", textColor = "#ffffff", textSize = "16sp", layout_marginTop="5dp", gravity = "center", elevation = "0dp", layout_height = "30dp", layout_width = "160dp", onClick = function() tuichu() end, }} }) addadView(vv) luajava.getIdValue("卡密"):setHintTextColor(0xffA2A2A2) luajava.runUiThread(function() parentv:setVisibility(View.VISIBLE) vv:setVisibility(View.VISIBLE) end) --huiz() end) else --luajava.newThread(function() xiugtx() end):start() end end _ENV['卡密']='卡密' function login(kam) local loadBox = getLoadingBox('正在校验卡密') if tostring(kam)=="" or tostring(kam)==" " then return 0 end loadBox['显示']() ret = rlyunyz.login(kam) loadBox['关闭']() if ret.type == "longuse" then io.open('/sdcard/MX/图片/kamileixing','w+'):write('至尊永久卡') else if ret.type == "day" then io.open('/sdcard/MX/图片/kamileixing','w+'):write('入门一天卡') end if ret.type == "week" then io.open('/sdcard/MX/图片/kamileixing','w+'):write('尊贵一周卡') end end ini = rlyunyz.checkUpdate() if type(ret) ~= "table" then else if vv ~= nil then luajava.runUiThread(function() YoYoImpl:with("FadeOut"):duration(400):playOn(vv) end) luajava.newThread(function() gg.sleep(400) rmdadView(vv) vv = nil end):start() end ktmp = "kam='"..ret.kami.."'" luajava.newThread(function() file.write("/sdcard/MX/配置文件/kami.lua",ktmp) end):start() end end function hqkami() local rlyunyz = getrlyunyz(info) rlyunyz.setAutoLogin(true) local ret = rlyunyz.start() local km = ret.kami if km == nil then gg.alert('获取失败：未记录') else gg.alert('获取成功：'..km) gg.copyText(km) end end function getTimeStamp(t) local str = os.date("%Y/%m/%d %H:%M:%S",t) return str end function addadView(tmp) local function invoke() parentv:addView(tmp) end luajava.post(invoke) end function rmdadView(tmp) local function invoke() parentv:removeView(tmp) end luajava.post(invoke) end changers={} function forchange(a,b,c,d,e,f,g) if not d then changers[a]={b,c} else changers[a]={b,c,d,e,f,g} end return b end function getjb() local jianbians = luajava.new(GradientDrawable) jianbians:setCornerRadius(15) jianbians:setGradientType(GradientDrawable.LINEAR_GRADIENT) jianbians:setColors({0xff397EF8,0xff25C4FD}) jianbians:setOrientation(GradientDrawable.Orientation.LEFT_RIGHT) return jianbians end tjb1=getjb() tjb2=luajava.loadlayout { GradientDrawable, color = "#aa0082FF", cornerRadius = 12 } function getjb() local jianbians = luajava.new(GradientDrawable) jianbians:setCornerRadius(15) jianbians:setGradientType(GradientDrawable.LINEAR_GRADIENT) jianbians:setColors({0xff397EF8,0xff25C4FD}) jianbians:setOrientation(GradientDrawable.Orientation.LEFT_RIGHT) return jianbians end function panduan(rec) fille,err = io.open(rec) if fille == nil then return false else return true end end function 隐藏() luajava.runUiThread(function() if tonumber(tostring(chuangk:getVisibility())) == 8.0 then chuangk:setVisibility(View.VISIBLE) controlx:setVisibility(View.GONE) snowman:setVisibility(View.VISIBLE) canv:setVisibility(View.VISIBLE) jianke:setVisibility(View.VISIBLE) juanzhou:setVisibility(View.VISIBLE) cansuo=true long:setVisibility(View.VISIBLE) 显示=1 MX.controlBig(floatWindow,400) YoYoImpl:with("FadeIn"):duration(500):playOn(dingbian) mainLayoutParams.flags = LayoutParams.FLAG_NOT_TOUCH_MODAL window:updateViewLayout(floatWindow, mainLayoutParams) else cansuo=false 显示=0 mainLayoutParams.flags = LayoutParams.FLAG_NOT_FOCUSABLE window:updateViewLayout(floatWindow, mainLayoutParams) YoYoImpl:with("FadeIn"):duration(300):playOn(floatWindow) controlx:setVisibility(View.VISIBLE) canv:setVisibility(View.GONE) chuangk:setVisibility(View.GONE) snowman:setVisibility(View.GONE) jianke:setVisibility(View.GONE) juanzhou:setVisibility(View.GONE) long:setVisibility(View.GONE) end end) end function guid() seed = { 'e','1','2','3','4','5','6','7','8','9','a','b','c','d','e','f' } tb = {} for i = 1,32 do table.insert(tb,seed[math.random(1,16)]) end sid = table.concat(tb) return string.format('%s%s%s%s%s', string.sub(sid,1,8), string.sub(sid,10,12), string.sub(sid,21,22)) ..string.format('%s%s%s%s%s', string.sub(sid,1,6), string.sub(sid,21,25) ) end switchbg=getShape( 45, {0x88161616,0x88161616}, 4,0x00ffffff) switchbg1=getShape2( 45, {0xff545454,0xff545454}, 4,0xff343637) switchbg2=getRes("shuimod") function 开关3(name,func1,func2,nid) name=name..guid() _ENV[name] = "关" if func1 == nil then func1 = "" end if func2 == nil then func2 = "" end if type(func1) == "function" then return function() namers = _ENV[name] if namers ~= "开" then luajava.runUiThread(function() luajava.getIdValue(nid.."k"):setVisibility(View.GONE) luajava.getIdValue(nid.."g"):setVisibility(View.VISIBLE) end) _ENV[name] = "开" vibra:vibrate(4) pcall(func1) else luajava.runUiThread(function() luajava.getIdValue(nid.."g"):setVisibility(View.GONE) luajava.getIdValue(nid.."k"):setVisibility(View.VISIBLE) end) _ENV[name] = "关" vibra:vibrate(4) pcall(func2) end end end end if not 文字颜色 then 文字颜色="#ffffff" end function MX.switch(name,func1,func2) nid = name..guid() local func = 开关3(name,func1,func2,nid) if not name then name = "未设置" end rest = luajava.loadlayout({ LinearLayout, layout_width = 'wrap_content', layout_height = "wrap_content", layout_marginTop = "1dp", padding="3dp", { LinearLayout, layout_width = 'wrap_content', layout_height = "wrap_content", gravity = "center_vertical", background=getVerticalBG({0x88ffffff,0x88ffffff},15,8,0xff161616), padding="4dp", {ImageView, background=getRes("zhuzi"), layout_height="fill_parent", layout_width="30dp", },{ TextView, id="switcht", gravity = "center", text = name, textColor="#161616", textSize="15sp", layout_width = '140dp', layout_marginLeft = "1dp", layout_marginRight = "1dp", layout_marginTop="4dp", layout_marginBottom="4dp", },{ FrameLayout, id = luajava.newId(nid), background = switchbg, layout_marginBottom="1dp", layout_marginTop="1dp", onClick = function() luajava.newThread(function() func() end):start() end, layout_width = '57dp', layout_height = '28dp', padding="3dp", { LinearLayout, layout_gravity="left|center_vertical", id = luajava.newId(nid.."k"), background = switchbg1, onClick = function() luajava.newThread(function() func() end):start() end, layout_width = '20dp', layout_height = '20dp', },{ LinearLayout, visibility="gone", layout_gravity="right|center_vertical", id = luajava.newId(nid.."g"), background = switchbg2, onClick = function() luajava.newThread(function() func() end):start() end, layout_width = '30dp', layout_height = '30dp', } }} }) switcht:setTypeface(typeface) return rest end checkbg1 = getRes("shuimooff") checkbg2 = getRes("shuimoon") function MX.check (cklist) rest = { LinearLayout , layout_width = 'match_parent' , layout_height = "wrap_content" , gravity = "top" , orientation = "vertical" , } if type (cklist [1]) == "string" then tmp=luajava.loadlayout({ TextView , gravity = "center" , padding="5dp", text = cklist [1] , textSize = "17sp" , textColor = "#161616" , layout_width = 'wrap_content' , layout_height = 'wrap_content' , layout_marginLeft='-10dp' }) tmp:setTypeface(typeface) rest [# rest + 1] = tmp end local restt={ LinearLayout , layout_width = 'match_parent', layout_height = "wrap_content", gravity = "top" , orientation = "vertical" , background=getVerticalBG({0x88ffffff,0x88ffffff},15,8,0xff161616), padding={"0dp","14dp","0dp","10dp"}, } for i = 1 , # cklist do local name = cklist [i] [1] local func1 = cklist [i] [2] local func2 = cklist [i] [3] local nid = cklist [i] [4] if type (func1) == "table" then os.exit () end if not name then name = "未设置" end nid = name..guid () local func = 开关4 (nid , func1 , func2 , nid) local tid = nid..guid () tmp=luajava.loadlayout({ TextView , gravity = "top" , text = name , textColor = "#161616" , layout_width = 'wrap_content', layout_height = 'wrap_content', layout_marginRight = "5dp" , }) tmp:setTypeface(typeface) _ENV [tid] = luajava.loadlayout ( { LinearLayout , layout_width = '250dp' , layout_height = "30dp" , layout_marginTop = "5dp" , layout_marginBottom = "15dp" , layout_marginLeft = "4dp" , layout_marginRight = "10dp" , gravity = "center_vertical" , onClick = function () MX.controlWater (_ENV [tid] , 200) luajava.newThread (function () func () end ) : start () end, { ImageView , id = luajava.newId (nid) , layout_width = '40dp' , layout_height = "40dp" , layout_marginLeft = "5dp" , layout_marginRight = "0dp" , background = "/sdcard/MX/图片/shuimooff" , },tmp }) restt [# restt + 1] = _ENV [tid] end rest [# rest + 1] = restt return luajava.loadlayout (rest) end function 开关4(name , func1 , func2 , nid) _ENV [name] = "关" if func1 == nil then func1 = "" end if func2 == nil then func2 = "" end if type (func1) == "function" then return function () vibra:vibrate(4) namers = _ENV [name] if namers ~= "开" then luajava.runUiThread (function () luajava.getIdValue (nid) : setBackground (checkbg2) end) _ENV [name] = "开" pcall (func1) else luajava.runUiThread (function () luajava.getIdValue (nid) : setBackground (checkbg1) end ) _ENV [name] = "关" pcall (func2) end end end end switchs={} function MX.edit(name) _ENV[name] = name..guid() if not name then name = "点击输入文字" end rest = luajava.loadlayout({ LinearLayout, layout_width = 'fill_parent', layout_hight = "fill_parent", { LinearLayout, layout_width = 'fill_parent', layout_hight = "fill_parent", layout_marginTop = "5dp", layout_marginBottom = "5dp", layout_marginLeft = "10dp", layout_marginRight = "10dp", gravity = "center_vertical", { EditText, gravity = "top", hint = name, gravity = "center", id = luajava.newId(_ENV[name]), layout_width = 'fill', layout_marginLeft = "10dp", layout_marginRight = "10dp", }} }) return rest end function MX.setedit(name,txt) txt = tostring(txt) luajava.runUiThread(function() luajava.getIdValue(name):setText(txt) end) end function MX.getedit(name) edit = tostring(luajava.getIdValue(name):getText()) return edit end MX.controlRotation1 = function(control, time) luajava.runUiThread(function() import "android.view.animation.Animation" import "android.animation.ObjectAnimator" xuanzhuandonghua = ObjectAnimator:ofFloat(control, "rotation", { 0, -360 }) xuanzhuandonghua:setRepeatCount(0) xuanzhuandonghua:setRepeatMode(Animation.RESTART) xuanzhuandonghua:setDuration(time) xuanzhuandonghua:start() end) end MX.controlRotation3 = function(control, to1,to2) luajava.runUiThread(function() import "android.view.animation.Animation" import "android.animation.ObjectAnimator" xuanzhuandonghua = ObjectAnimator:ofFloat(control, "rotation", { to1, to2 }) xuanzhuandonghua:setRepeatCount(0) xuanzhuandonghua:setRepeatMode(Animation.RESTART) xuanzhuandonghua:setDuration(300) xuanzhuandonghua:start() end) end MX.controlRotation4 = function(control, to1,to2) luajava.runUiThread(function() import "android.view.animation.Animation" import "android.animation.ObjectAnimator" xuanzhuandonghua = ObjectAnimator:ofFloat(control, "rotation", { to1, to2 }) xuanzhuandonghua:setRepeatCount(0) xuanzhuandonghua:setRepeatMode(Animation.RESTART) xuanzhuandonghua:setDuration(1) xuanzhuandonghua:start() end) end function MX.button (txt , func,picurl) if not txt then txt = "未设置" end local tid = "bt"..guid() if picurl==nil then local tmp={ LinearLayout , elevation = "5dp", layout_width = 'match_parent' , layout_height = "30dp" , { LinearLayout , layout_width = "fill_parent" , gravity = "center" , background = buttonBG(), onClick = function () MX.controlWater(_ENV [tid],300) luajava.newThread (function () vibra:vibrate(8) pcall (func) end ) : start () end, { TextView , id=luajava.newId(tid.."t"), text = txt , layout_height = "26dp" , textColor = "#ffffff", textSize = "16sp" , gravity = "center", layout_width = "wrap_content" , } , } } _ENV[tid] = luajava.loadlayout ( tmp) else local tmp={ LinearLayout , elevation = "5dp", layout_width = 'fill_parent' , layout_height = "32dp" , { LinearLayout , layout_width = "fill_parent" , gravity = "center_horizontal" , layout_marginTop = "4dp" , layout_marginBottom = "4dp" , background = buttonBG(), onClick = function () MX.controlWater(_ENV [tid],300) luajava.newThread (function () vibra:vibrate(8) pcall (func) end ) : start () end , {ImageView, background=获取图片(picurl), layout_height="26dp", layout_width="26dp", layout_marginLeft="-30dp", }, { TextView , text = txt , id=luajava.newId(tid.."t"), layout_marginLeft="10dp", layout_height = "wrap_content" , padding = "2dp", textColor = "#ffffff", textSize = "16sp" , gravity = "center", layout_width = "wrap_content" , } , } } _ENV [tid] = luajava.loadlayout ( tmp) end luajava.getIdValue(tid.."t"):setTypeface(typeface) return _ENV [tid] end function MX.text(txt,color,size) if not txt then txt = "未设置文字" end if not color then color = "#ffffff" end if not size then size = "12sp" end local rest=luajava.loadlayout( { TextView, text = txt, textSize = size, textColor = color, gravity="left", layout_width = "wrap_content", }) rest:setTypeface(typeface) return rest end function MX.flashtext(a,b) if not b then b = "11sp" end flashtext=luajava.loadlayout{ShimmerTextView, Typeface=font, text=a, textSize=b, textColor="#FFC42C", reflectionColor='#000000', gravity='center', layout_height='20dp', layout_width='match_parent', } return flashtext end function MX.image(img,height,width,pad,func) if not func then func=function() end end if not pad then pad="0dp" end if not height then height="80dp" end if not width then width="80dp" end return luajava.loadlayout({ LinearLayout, layout_height="wrap_content", layout_width="fill_parent", gravity="center", { ImageView, layout_height=height, layout_width=width, padding=pad, src=获取图片(img), onClick=function() luajava.newThread(func):start() end, }}) end corb = true function 开关(name,func1,func2) if func1 == nil then func1 = "" end if func2 == nil then func2 = "" end if type(func1) == "function" then return function() namers = _ENV[name] if namers ~= "开" then _ENV[name] = "开" pcall(func1) else _ENV[name] = "关" pcall(func2) end end end end function tuichu() window:removeView(floatWindow) luajava.setFloatingWindowHide(false) bloc("end") end checkon=getRes("radioon") checkoff=getRes("radiooff") radiog={} function MX.radio (cklist) local rid=guid() radiog[rid]={} rest = { LinearLayout , layout_width = 'match_parent' , layout_height = "wrap_content" , layout_marginTop = "10dp" , gravity = "top" , orientation = "vertical" , } if type (cklist [1]) == "string" then local tmp=luajava.loadlayout({ TextView , gravity = "center" , padding="5dp", text = cklist[1], textSize = "17sp" , textColor = "#161616" , layout_width = 'fill_parent' , layout_height = 'wrap_content' , layout_marginLeft = "4dp" , layout_marginRight = "5dp" , layout_marginTop = "0dp" , layout_marginBottom = "0dp" , }) tmp:setTypeface(typeface) rest [# rest + 1] = tmp end local restt={ LinearLayout , layout_width = 'match_parent' , layout_height = "wrap_content" , layout_marginTop = "1dp" , gravity = "top" , orientation = "vertical" , background=getVerticalBG({0xbb161616,0xbb161616},15), padding={"0dp","14dp","0dp","10dp"}, } for i = 2 , # cklist do local name = cklist [i] [1] local func1 = cklist [i] [2] local func2 = cklist [i] [3] local nid = cklist [i] [4] if type (func1) == "table" then os.exit () end if not name then name = "未设置" end nid = name..guid () radiog[rid][nid]=false local func = radin(rid,nid,func1) local tid = nid..guid () local tmp=luajava.loadlayout({ TextView , gravity = "top" , text = name , textColor = "#ffffff" , textSize="16sp", layout_width = 'wrap_content' , layout_height = 'wrap_content' , layout_marginLeft = "0dp" , layout_marginRight = "5dp" , }) tmp:setTypeface(typeface) _ENV [tid] = luajava.loadlayout ( { LinearLayout , layout_width = '250dp' , layout_height = "30dp" , layout_marginTop = "5dp" , layout_marginBottom = "15dp" , layout_marginLeft = "4dp" , layout_marginRight = "10dp" , gravity = "center_vertical" , onClick = function () MX.controlWater (_ENV [tid],200) func() end, { ImageView , id = luajava.newId (nid) , layout_width = '20dp' , layout_height = "20dp" , layout_marginLeft = "5dp" , layout_marginRight = "10dp" , background = "/sdcard/MX/图片/radiooff" , } ,tmp }) restt [# restt + 1] = _ENV [tid] end rest [# rest + 1] = restt local rest=luajava.loadlayout(rest) return rest end function radin(rid,nid,func) return function() for k,v in pairs(radiog[rid]) do luajava.getIdValue(k):setBackground(checkoff) if k==nid and v~=true then luajava.getIdValue(k):setBackground(checkon) v=true luajava.newThread(function() vibra:vibrate(4) func() end):start() end end end end hardv1=getRes("star2") hardv2=getRes("star1") function hardware() if hdw then hdw=false hardv:setBackground(hardv2) parti = luajava.post(particle) luajava.post(function() canv:addView(parti) end) else hdw=true hardv:setBackground(hardv1) luajava.post(function() canv:removeView(parti) end) parti:destroy() parti=nil end end function MX.seek (name , bian , smin , smax , nows) if _ENV [bian] == nil then _ENV [bian] = nows else gg.alert("seek控件的变量名称:"..bian.."重复！\n请换一个名称") os.exit() end if not name then name = "未设置" end local names = name..guid () local shuzhi=luajava.loadlayout({ TextView , gravity = "center" , text = tostring(nows) , id = luajava.newId (names) , layout_width = '50dp' , layout_marginLeft = "5dp" , layout_marginRight = "0dp" , }) local tmp1=luajava.loadlayout({TextView, background=getVerticalBG({0xeeffffff,0xeeffffff},15,8,0xff161616), layout_height="30dp", layout_width="30dp", gravity="center", text="减", textColor="#000000", onClick=function() vibra:vibrate(4) if _ENV[bian]>smin then _ENV[bian]=_ENV[bian]-1 luajava.getIdValue(names):setText(tostring(_ENV[bian])) end end, }) local tmp2=luajava.loadlayout({TextView, background=getVerticalBG({0xeeffffff,0xeeffffff},15,8,0xff161616), layout_height="30dp", layout_width="30dp", gravity="center", text="加", textColor="#000000", onClick=function() vibra:vibrate(4) if _ENV[bian]=9 then luajava.post(function() luajava.getIdView(gid):removeView(luajava.getIdView(gid..i)) end) end end else shous[gid]=false luajava.post(function() luajava.getIdView(gid):removeView(luajava.getIdView(gid..ii)) for i=1,ii-1 do if i>=9 then luajava.getIdView(gid):addView(luajava.getIdView(gid..i)) end end luajava.getIdView(gid):addView(luajava.getIdView(gid..ii)) end) luajava.getIdView(gid..ii.."p"):setRotation(180) end end opou=getRes("opou") function MX.checkbox(gid,ii) local func = function() 收起ck(gid,ii) end if not name then name = "未设置" end switchs[gid..ii] = { LinearLayout, id=luajava.newId(gid..ii), layout_width = '70dp', layout_height = "wrap_content", layout_marginTop = "1dp", layout_marginBottom = "1dp", padding = "1dp", { LinearLayout, padding="3dp", onClick = func, layout_width = 'fill_parent', layout_height = "wrap_content", gravity = "center_horizontal", orientation="vertical", --background=getVerticalBG({0xffFFFDF2,0xddffffff,0xffFFFDF2},15,8,0xffFFDA71), { ImageView, id = luajava.newId(gid..ii.."p"), src = opou, background=ckbg, gravity="center", layout_width = '30dp', layout_height = '30dp', padding = "8dp", },{ TextView, Typeface=font, id=luajava.newId(gid..ii.."t"), gravity = "center", text = "展开", textColor="#FF8C8C8C", textSize = "9sp", --layout_marginLeft="8dp", layout_width = 'match_parent', layout_weight=1, }, } } return switchs[gid..ii] end function 开关6(name,func1,func2,nid) local sname = nid local localname=name name = name..guid() _ENV[name] = "关" if func1 == nil then func1 = "" end if func2 == nil then func2 = "" end if type(func1) == "function" then return function() namers = _ENV[name] if namers ~= "开" then vibra:vibrate(9) luajava.runUiThread(function() luajava.getIdValue(nid.."t"):setTextColor(0xff000000) luajava.getIdValue(nid.."t2"):setTextColor(0xff000000) luajava.getIdValue(nid.."p"):setColorFilter(0xff000000) colorvs[nid.."p"]={true,"img"} colorvs[nid.."t"]={true,"txt"} colorvs[nid.."t2"]={true,"txt"} OP.controlWater(switchs[nid],300) end) _ENV[name] = "开" pcall(func1) else vibra:vibrate(9) luajava.runUiThread(function() luajava.getIdValue(nid.."t"):setTextColor(0xffFF8C8C8C) luajava.getIdValue(nid.."p"):setColorFilter(0xffFF8C8C8C) luajava.getIdValue(nid.."t2"):setTextColor(0xffFF8C8C8C) colorvs[nid.."p"]={false,"img"} colorvs[nid.."t"]={false,"txt"} colorvs[nid.."t2"]={false,"txt"} OP.controlWater(switchs[nid],300) end) _ENV[name] = "关" pcall(func2) end end end end function 卡片开关1(name,func1,func2,nid) local sname = nid local localname=name name = name..guid() _ENV[name] = "关" if func1 == nil then func1 = "" end if func2 == nil then func2 = "" end if type(func1) == "function" then return function() namers = _ENV[name] if namers ~= "开" then vibra:vibrate(9) luajava.runUiThread(function() luajava.getIdValue(nid.."t"):setTextColor(0xff000000) luajava.getIdValue(nid.."p"):setColorFilter(0xff000000) colorvs[nid.."p"]={true,"img"} colorvs[nid.."t"]={true,"txt"} OP.controlWater(switchs[nid],300) end) _ENV[name] = "开" pcall(func1) else vibra:vibrate(9) luajava.runUiThread(function() luajava.getIdValue(nid.."t"):setTextColor(0xffFF8C8C8C) luajava.getIdValue(nid.."p"):setColorFilter(0xffFF8C8C8C) colorvs[nid.."p"]={false,"img"} colorvs[nid.."t"]={false,"txt"} OP.controlWater(switchs[nid],300) end) _ENV[name] = "关" pcall(func2) end end end end function MX.card(卡片) if #卡片==0 then return nil end local rest = { LinearLayout, layout_width = 'fill_parent', layout_height = "wrap_content", gravity = "center", orientation="vertical", layout_marginTop="5dp", layout_marginBottom="5dp", } for i = 1, #卡片,2 do local tempTable = {LinearLayout, layout_width = 'fill_parent', layout_height = "wrap_content", gravity = "left", orientation="horizontal" } for j = 0, 1 do if 卡片[i + j] ~= nil then local name = 卡片[i + j][1] local func1 = 卡片[i + j][2] local func2 = 卡片[i + j][3] local name2 = 卡片[i + j][4] if not name then name = "未设置" end local gid=guid() rstt = MX.intcard(name,name2,func1,func2,1,gid) table.insert(tempTable, rstt) else table.insert(tempTable, {LinearLayout, layout_width = 'match_parent', layout_weight=1,}) end end table.insert(rest, tempTable) end return luajava.loadlayout(rest) end 界面宽度="250dp" 界面长度="90dp" OP={} OP.controlWater = function(control,time) luajava.runUiThread(function() import "android.animation.ObjectAnimator" ObjectAnimator():ofFloat(control,"scaleX",{1, 0.8, 0.9, 1}):setDuration(time):start() ObjectAnimator():ofFloat(control,"scaleY",{1,0.8,0.9,1}):setDuration(time):start() end) end function particletext(text1,text2,text3,color) local webView = luajava.webView(function(webView) webView:loadData([[ ]]..text1..[[ 纯CSS实现文本背景扫光效果

]]..text2..[[

]]..text3..[[

]], 'text/html', 'UTF-8') webView:setBackgroundColor(0x0) webView:setVerticalScrollBarEnabled(false) webView:setHorizontalScrollBarEnabled(false) webView:setScrollContainer(false) end) return webView end function offxfczd() MX.controlRotation2 = function(control, time) luajava.runUiThread(function() import "android.view.animation.Animation" import "android.animation.ObjectAnimator" xuanzhuandonghua = ObjectAnimator:ofFloat(control, "rotation", {0, 0}) xuanzhuandonghua:setRepeatCount(0) xuanzhuandonghua:setRepeatMode(Animation.RESTART) xuanzhuandonghua:setDuration(time) xuanzhuandonghua:start() end) end end function onxfczd() MX.controlRotation2 = function(control, time) luajava.runUiThread(function() import "android.view.animation.Animation" import "android.animation.ObjectAnimator" xuanzhuandonghua = ObjectAnimator:ofFloat(control, "rotation", {0, 360}) xuanzhuandonghua:setRepeatCount(0) xuanzhuandonghua:setRepeatMode(Animation.RESTART) xuanzhuandonghua:setDuration(time) xuanzhuandonghua:start() end) end end function SO_PT(FUNCTIONADD,TYPE,VALUE) local SOMOD=gg.getRangesList("il2cpp.so") if SOMOD[2]==nil then gg.alert("开启失败\n━━━━━━━━━━━━━━━\n错误原因:未找到相关内存\n解决方法:请重新选择游戏进程\n━━━━━━━━━━━━━━━") else gg.setValues({{address=SOMOD[2].start+FUNCTIONADD,flags=TYPE,value=VALUE}}) gg.setValues({{address=SOMOD[2].start+FUNCTIONADD+4,flags=TYPE,value="~A8 RET"}}) end end function SOGSPY_ST(HDZ,DYZ) if HDZ >= DYZ then py=string.format("0x%X",HDZ-DYZ) return tostring(string.format("-0x%X",py)) else py=string.format("0x%X",DYZ-HDZ) return tostring(string.format("0x%X",py)) end end function S_Pointer(t_So, t_Offset, _bit) local function getRanges() local ranges = {} local t = gg.getRangesList('^/data/*.so*$') for i, v in pairs(t) do if v.type:sub(2, 2) == 'w' then table.insert(ranges, v) end end return ranges end local function Get_Address(N_So, Offset, ti_bit) local ti = gg.getTargetInfo() local S_list = getRanges() local t = {} local _t local _S = nil if ti_bit then _t = 32 else _t = 4 end for i in pairs(S_list) do local _N = S_list[i].internalName:gsub('^.*/', '') if N_So[1] == _N and N_So[2] == S_list[i].state then _S = S_list[i] break end end if _S then t[#t + 1] = {} t[#t].address = _S.start + Offset[1] t[#t].flags = _t if #Offset ~= 1 then for i = 2, #Offset do local S = gg.getValues(t) t = {} for _ in pairs(S) do if not ti.x64 then S[_].value = S[_].value & 0xFFFFFFFF end t[#t + 1] = {} t[#t].address = S[_].value + Offset[i] t[#t].flags = _t end end end _S = t[#t].address end return _S end local _A = string.format('0x%X', Get_Address(t_So, t_Offset, _bit)) return _A end function SOGSPY_ST(HDZ,DYZ) if HDZ >= DYZ then py=string.format("0x%X",HDZ-DYZ) return tostring(string.format("-0x%X",py)) else py=string.format("0x%X",DYZ-HDZ) return tostring(string.format("0x%X",py)) end end function readPointer(name, offset, i) local re = gg.getRangesList(name) local x64 = gg.getTargetInfo().x64 local va = {[true] = 32, [false] = 4} if re[i or 1] then local addr = re[i or 1].start + offset[1] for i = 2, #offset do addr = gg.getValues({{address = addr, flags = va[x64]}}) if not x64 then addr[1].value = addr[1].value & 0xFFFFFFFF end addr = addr[1].value + offset[i] end return addr end end function gg.edits(addr, Table, name) local Table1 = {{}, {}} for k, v in ipairs(Table) do local value = {address = addr + v[3], value = v[1], flags = v[2], freeze = v[4]} if v[4] then Table1[2][#Table1[2] + 1] = value else Table1[1][#Table1[1] + 1] = value end end gg.addListItems(Table1[2]) gg.setValues(Table1[1]) gg.toast((name or "") .. "开启成功, 共修改" .. #Table .. "个值") end So_32 = function ( Ad , Value , IF ) if gg.getRangesList ( 'libil2cpp.so' ) [ 1 ] == nil then gg.alert("请重新选择进程") else gg.clearResults ( ) local Ret = "~A8 RET" local So = gg.getRangesList ( 'libil2cpp.so' ) for key , value in pairs ( So ) do if value.state ~= "Xa" then return else local Soad = value.start local Add = Soad + Ad gg.processPause ( ) gg.setValues ( { { address = Add , flags = 4 , value = Value } } ) gg.processResume ( ) if IF == true then gg.setValues ( { { address = Add + 4 , flags = 4 , value = Ret } } ) gg.processResume ( ) elseif IF == nil then gg.processPause ( ) gg.setValues ( { { address = Add + 4 , flags = 4 , value =Ret } } ) gg.processResume ( ) elseif IF == false then break end end end end end function readValue(address, flags) return gg.getValues({{address = address, flags = flags}})[1]["value"]end ms = { } function setvalue ( add , value , falgs , dj ) local WY = { } WY [ 1 ] = { } WY [ 1 ].address = add WY [ 1 ].value = value WY [ 1 ].flags = falgs if dj == true then WY [ 1 ].freeze = true gg.addListItems ( WY ) else gg.setValues ( WY ) end end function ms.ss ( num , ty , nc ) local GGNUMBER_1 = num local GGNUMBER_2 = ty local GGNUMBER_3 = false local GGNUMBER_4 = gg.SIGN_EQUAL local GGNUMBER_5 = 0x3000000000 local GGNUMBER_6 = 0xFFFFFFFFFF local GGNUMBER_7 = 0 gg.clearResults ( ) gg.setRanges ( nc ) gg.searchNumber ( GGNUMBER_1 , GGNUMBER_2 , GGNUMBER_3 , GGNUMBER_4 , GGNUMBER_5 , GGNUMBER_6 , GGNUMBER_7 ) Result = gg.getResults ( gg.getResultCount ( ) ) end function ms.py ( num , py , ty ) if ( Result and # Result ~= 0 ) then t = { } for i , v in ipairs ( Result ) do t [ i ] = { } t [ i ].address = v.address + py t [ i ].flags = ty end t = gg.getValues ( t ) for i , v in ipairs ( t ) do if v.value ~= num then Result [ i ] = nil end end local MS = { } for i , v in pairs ( Result ) do MS [ # MS + 1 ] = v end Result = MS end end function ms.bc ( ) data = { } if Result == nil or # Result == 0 then gg.alert ( "开启失败" ) else for i , v in pairs ( Result ) do data [ # data + 1 ] = v.address end end Result = nil end function ms.edit ( nn , off , ty , dj ) if ( Result ) then ms.bc ( ) end if # data > 0 then for i , v in ipairs ( data ) do setvalue ( v + off , nn , ty , dj or false ) end gg.toast ( Name.."成功" ) end end Sy_x32 = function ( Address , Value ) local Somod = gg.getRangesList ( 'il2cpp.so' ) [ 2 ] if Somod == nil then gg.alert ( '请重新选择地铁跑酷进程' ) else local So = Somod.start local Add = So + Address gg.processPause ( ) gg.setValues ( { { address = Add , flags = 4 , value = Value } } ) gg.setValues ( { { address = Add + 4 , flags = 4 , value = "~A BX LR" } } ) gg.processResume ( ) end end function setvalue(address,flags,value) local tt={} tt[1]={} tt[1].address=address tt[1].flags=flags tt[1].value=value gg.setValues(tt) end function GetIdentifier() return string.lower(string.sha1(string.UID()))..math.random(0,9) end function GetChecksum(str) return string.lower(string.sha1('wvtijkcqp4shb2al4n5i7r4385rkxhymwhduvnemzepdvrt'..str..'lvmowioin8mnvo32lowoclcowoidhgwladiovgnbvueiwac')) end local starts = 1 local log = '' local vars = {} function SO_FLPTXG(FUNCTIONADD,TYPE,VALUE) local SOMOD=gg.getRangesList("il2cpp.so") if SOMOD[2]==nil then gg.alert("开启失败\n━━━━━━━━━━━━━━━\n错误原因:未找到相关内存\n解决方法:请重新选择游戏进程\n━━━━━━━━━━━━━━━") else local SOMOD1=gg.getRangesList("libil2cpp.so")[2].start gg.setValues({{address=SOMOD1+FUNCTIONADD,flags=TYPE,value='~A8 MOV W0, #'..VALUE}}) gg.setValues({{address=SOMOD1+FUNCTIONADD+4,flags=TYPE,value="0000271Er"}}) gg.setValues({{address=SOMOD1+FUNCTIONADD+8,flags=TYPE,value="00D8215Er"}}) gg.setValues({{address=SOMOD1+FUNCTIONADD+12,flags=TYPE,value="0000261Er"}}) gg.setValues({{address=SOMOD1+FUNCTIONADD+16,flags=TYPE,value="~A8 RET"}}) end end function readPointer(name, offset, i) local re = gg.getRangesList(name) local x64 = gg.getTargetInfo().x64 local va = { [true] = 32, [false] = 4 } if re[i or 1] then local addr = re[i or 1].start + offset[1] for i = 2, #offset do addr = gg.getValues({ { address = addr, flags = va[x64] } }) if not x64 then addr[1].value = addr[1].value & 0xFFFFFFFF else -- addr[1].value = addr[1].value & 0xFFFFFFFFFF end addr = addr[1].value + offset[i] end return addr end end function gg.edits(addr, Table, name) if not addr then gg.toast('修改失败, 可能是模块不存在') return end local Table1 = { {}, {} } for k, v in ipairs(Table) do local value = { address = addr + v[3], value = v[1], flags = v[2], freeze = v[4] } if v[4] then Table1[2][#Table1[2] + 1] = value else Table1[1][#Table1[1] + 1] = value end end gg.addListItems(Table1[2]) gg.setValues(Table1[1]) gg.toast((name or "") .. "开启成功, 共修改" .. #Table .. "个值") end function search(ss,lx,nc,dz1,dz2) gg.setVisible(false) if ss~=nil then if lx~=nil then if nc==nil then nc=32 end gg.setRanges(nc) if dz1==nil then dz1="-1" end if dz2==nil then dz1="0" end gg.searchNumber(ss,lx,false,536870912,dz1,dz2) sl=gg.getResultCount() if sl~=0 then sj=gg.getResults(sl) gg.toast("搜索到 "..sl.." 个结果") gg.clearResults() else gg.toast("未搜索到结果") end else gg.toast("无搜索值类型") end else gg.toast("无需搜索值") end end function py1(value,lx,py) if #sj~=nil then z1={} z2={} for i=1,#sj do z1[i]={} z1[i].address=sj[i].address+py z1[i].flags=lx end z1=gg.getValues(z1) for i=1,#sj do if z1[i].value==value then z2[#z2+1]={} z2[#z2]=sj[i] end end sj=z2 z1={} z2={} gg.toast("共偏移 "..#sj.." 个数据") else gg.toast("没有搜索数据") end end function py2(value,lx,py) if #sj~=nil then z1={} z2={} for i=1,#sj do z1[i]={} z1[i].address=sj[i].address+py z1[i].flags=lx end z1=gg.getValues(z1) for i=1,#sj do if z1[i].value~=value then z2[#z2+1]={} z2[#z2]=sj[i] end end sj=z2 z1={} z2={} gg.toast("共偏移 "..#sj.." 个数据") else gg.toast("没有搜索数据") end end function py2(value,lx,py) if #sj~=nil then z1={} z2={} for i=1,#sj do z1[i]={} z1[i].address=sj[i].address+py z1[i].flags=lx end z1=gg.getValues(z1) for i=1,#sj do if z1[i].value~=value then z2[#z2+1]={} z2[#z2]=sj[i] end end sj=z2 z1={} z2={} gg.toast("共偏移 "..#sj.." 个数据") else gg.toast("没有搜索数据") end end function xg1(value,lx,py,dj) if #sj~=nil then z={} for i=1,#sj do z[i]={} z[i].address=sj[i].address+py z[i].flags=lx z[i].value=value if dj==true then z[i].freeze=true end end if dj==true then gg.addListItems(z) else gg.clearList() gg.setValues(z) end gg.toast("共修改 "..#z.." 个数据") else gg.toast("没有搜索数据") end end function editData(qmnb,qmxg)gg.setVisible(false)gg.clearResults()qmnbv=qmnb[3]["value"]or qmnb[3][1]qmnbt=qmnb[3]["type"]or qmnb[3][2]qmnbn=qmnb[2]["name"]or qmnb[2][1]gg.setRanges(qmnb[1]["memory"]or qmnb[1][1])gg.searchNumber(qmnbv,qmnbt)gg.refineNumber(qmnbv,qmnbt)sz=gg.getResultCount()if sz==0 then gg.toast(qmnbn.."开启失败")else sl=gg.getResults(999999)for i=1,sz do pdsz=true for v=4,#qmnb do if pdsz==true then pysz={{}}pysz[1].address=sl[i].address+(qmnb[v]["offset"]or qmnb[v][2])pysz[1].flags=qmnb[v]["type"]or qmnb[v][3]szpy=gg.getValues(pysz)tzszpd=tostring(qmnb[v]["lv"]or qmnb[v][1]):gsub(",","")pyszpd=tostring(szpy[1].value):gsub(",","")if tzszpd==pyszpd then pdjg=true pdsz=true else pdjg=false pdsz=false end end end if pdjg==true then szpy=sl[i].address for x=1,#qmxg do xgsz=qmxg[x]["value"]or qmxg[x][1]xgpy=szpy+(qmxg[x]["offset"]or qmxg[x][2])xglx=qmxg[x]["type"]or qmxg[x][3]xgdj=qmxg[x]["freeze"]or qmxg[x][4]xg={{address=xgpy,flags=xglx,value=xgsz}}if xgdj==true then xg[1].freeze=xgdj gg.addListItems(xg)else gg.setValues(xg)end end xgjg=true end end if xgjg==true then gg.toast(qmnbn.."开启成功")else gg.toast(qmnbn.."开启失败")end end end function xqmnb(qmnb) gg.clearResults() gg.setRanges(qmnb[1]["memory"]) if gg.searchNumber(qmnb[3]["value"],qmnb[3]["type"],false,gg.SIGN_EQUAL,0,-1)~=true then gg.searchAddress(qmnb[3]["value"],-1,qmnb[3]["type"]) end if gg.getResultCount()==0 then gg.toast(qmnb[2]["name"].."开启失败")return end szxx=gg.getResults(gg.getResultCount()) szpd={} a=0 for i=4,#qmnb do for s=1,#szxx do if szpd[s]~="false" then if gg.getValues({{address=szxx[s].address+qmnb[i]["offset"],flags=qmnb[i]["type"]}})[1].value+0~=qmnb[i]["lv"]then szpd[s]="false" a=a+1 end end end end if a==#szxx then gg.toast(qmnb[2]["name"].."开启失败")return end b=0 t={} for x=1,#qmxg do if qmxg[x]["freeze"]==true then a=1 end for i=1,#szxx do if szpd[i]==nil then b=b+1 table.insert(t,{address=szxx[i].address+qmxg[x]["offset"],flags=qmxg[x]["type"],freeze=qmxg[x]["freeze"],value=qmxg[x]["value"]}) end end end gg.setValues(t) gg.addListItems(t) gg.clearResults() if a~=1 then gg.clearList()else a=nil end gg.toast(qmnb[2]["name"].."开启成功,共修改了"..b.."条数据") end qmnb = function(daarr) local array = {} for i = 1, #daarr["搜索数组"] do local data = {["lv"] =daarr["搜索数组"][i][1], ["offset"] = daarr["搜索数组"][i][2], ["type"] = daarr["搜索类型"]} table.insert(array, i, data) end local isok, data = app.memorysearch(daarr["搜索内存"], array) if isok then for i = 1, #data do for x = 1, #daarr["修改数组"] do app.memorywrite(data[i] + daarr["修改数组"][x][2], daarr["搜索类型"], daarr["修改数组"][x][1]) end end gg.toast(daarr["功能名称"] .. "共修改" .. #data * #daarr["修改数组"] .. "条数据") else gg.toast(daarr["功能名称"] .. "开启失败") end end function xg1(value,lx,py,dj) if sj~=nil and #sj>0 then z={} for i=1,#sj do z[i]={} z[i].address=sj[i].address+py z[i].flags=lx if value == nil then value = readValue(z[i].address, lx) end z[i].value= value z[i].freeze = dj and true or false end if dj == true or dj == false then gg.addListItems(z) else gg.setValues(z) end gg.toast('') else gg.toast('') end end function xg2(bz,value,lx,py,dj) if #bz~=nil then z={} for i=1,#bz do z[i]={} z[i].address=bz[i].address+py z[i].flags=lx z[i].value=value if dj==true then z[i].freeze=true end end if dj==true then gg.addListItems(z) else gg.clearList() gg.setValues(z) end gg.toast('') else gg.toast('') end end function bc(bz) if sj~=nil then _ENV[bz]=sj else gg.toast('') end end Qr_UIP2FazG='Main' gg.clearResults() sj={} xgz={} function search(ss,lx,nc,dz1,dz2) if ss~=nil then if lx~=nil then if nc==nil then nc=32 end gg.setRanges(nc) if dz1==nil then dz1="-1" end if dz2==nil then dz1="0" end gg.searchNumber(ss,lx,false,gg.SIGN_EQUAL,dz1,dz2) sl=gg.getResultCount() if sl~=0 then sj=gg.getResults(sl) gg.toast("搜索到 "..sl.." 个结果") gg.clearResults() else gg.toast("未搜索到结果") end else gg.toast("无搜索值类型") end else gg.toast("无需搜索值") end end function py1(value,lx,py) if #sj~=nil then z1={} z2={} for i=1,#sj do z1[i]={} z1[i].address=sj[i].address+py z1[i].flags=lx end z1=gg.getValues(z1) for i=1,#sj do if z1[i].value==value then z2[#z2+1]={} z2[#z2]=sj[i] end end sj=z2 z1={} z2={} gg.toast("共偏移 "..#sj.." 个数据") else gg.toast("没有搜索数据") end end function py2(value,lx,py) if #sj~=nil then z1={} z2={} for i=1,#sj do z1[i]={} z1[i].address=sj[i].address+py z1[i].flags=lx end z1=gg.getValues(z1) for i=1,#sj do if z1[i].value~=value then z2[#z2+1]={} z2[#z2]=sj[i] end end sj=z2 z1={} z2={} gg.toast("共偏移 "..#sj.." 个数据") else gg.toast("没有搜索数据") end end function xg1(value,lx,py,dj) if #sj~=nil then z={} for i=1,#sj do z[i]={} z[i].address=sj[i].address+py z[i].flags=lx z[i].value=value if dj==true then z[i].freeze=true end end if dj==true then gg.addListItems(z) else gg.clearList() gg.setValues(z) end gg.toast("共修改 "..#z.." 个数据") else gg.toast("没有搜索数据") end end function xg2(bz,value,lx,py,dj) if #bz~=nil then z={} for i=1,#bz do z[i]={} z[i].address=bz[i].address+py z[i].flags=lx z[i].value=value if dj==true then z[i].freeze=true end end if dj==true then gg.addListItems(z) else gg.clearList() gg.setValues(z) end gg.toast("共修改 "..#z.." 个数据") else gg.toast("没有搜索数据") end end function bc(bz) if sj~=nil then _ENV[bz]=sj else gg.toast("无数据") end end function BaAdd(add) if gg.getTargetInfo().x64==true then t=gg.getValues({[1]={address=add,flags=32}}) return t[1].value else t=gg.getValues({[1]={address=add,flags=4}}) return t[1].value&0xFFFFFFFF end end function set(dz,xg,lx,dj) if dj=="true" then gg.addListItems({{address=dz,flags=lx,value=xg,freeze=true}}) else gg.setValues({{address=dz,flags=lx,value=xg}}) end gg.toast("已修改完成~") end DWORD=gg.TYPE_DWORD DOUBLE=gg.TYPE_DOUBLE FLOAT=gg.TYPE_FLOAT WORD=gg.TYPE_WORD BYTE=gg.TYPE_BYTE XOR=gg.TYPE_XOR QWORD=gg.TYPE_QWORD D=gg.TYPE_DWORD E=gg.TYPE_DOUBLE F=gg.TYPE_FLOAT W=gg.TYPE_WORD B=gg.TYPE_BYTE X=gg.TYPE_XOR Q=gg.TYPE_QWORD -------------不懂勿动------------ ------------道具赛配置--------------- function SearchWrite(Search, Write, Type, Name) local time=os.clock() gg.clearResults() gg.setVisible(false) gg.searchNumber(Search[1][1], Type) local count = gg.getResultCount() local result = gg.getResults(count) gg.clearResults() local data = {} local base = Search[1][2] if (count > 0) then for i, v in ipairs(result) do v.isUseful = true end for k=2, #Search do local tmp = {} local offset = Search[k][2] - base local num = Search[k][1] for i, v in ipairs(result) do tmp[#tmp+1] = {} tmp[#tmp].address = v.address + offset tmp[#tmp].flags = v.flags end tmp = gg.getValues(tmp) for i, v in ipairs(tmp) do if ( tostring(v.value) ~= tostring(num) ) then result[i].isUseful = false end end end for i, v in ipairs(result) do if (v.isUseful) then data[#data+1] = v.address end end if (#data > 0) then gg.toast("搜索到"..#data.."条数据") local t = {} local base = Search[1][2] for i=1, #data do for k, w in ipairs(Write) do offset = w[2] - base t[#t+1] = {} t[#t].address = data[i] + offset t[#t].flags = Type t[#t].value = w[1] if (w[3] == true) then local item = {} item[#item+1] = t[#t] item[#item].freeze = true gg.addListItems(item) end end end gg.setValues(t) local time=string.sub(os.clock()-time,0,5) gg.toast("开启成功 已修改:"..#t.."条数据 本次启动耗时:"..time.."秒") gg.addListItems(t) else gg.toast("开启失败未搜索到任何数据", false) return false end else gg.toast("开启失败未搜索到任何数据") return false end end function Fs3Fs4(Fs1, Fs2, Fs3, Fs4, Fs5) gg.clearResults() gg.setRanges(Fs2) gg.setVisible(false) gg.searchNumber(Fs3[1][1], Fs3[1][3]) local count = gg.getResultCount() local result = gg.getResults(count) gg.clearResults() local data = {} local base = Fs3[1][2] if (count > 0) then for i, v in ipairs(result) do v.isUseful = true end for k=2, #Fs3 do local tmp = {} local offset = Fs3[k][2] - base local num = Fs3[k][1] for i, v in ipairs(result) do tmp[#tmp+1] = {} tmp[#tmp].address = v.address + offset tmp[#tmp].flags = Fs3[k][3] end tmp = gg.getValues(tmp) for i, v in ipairs(tmp) do if ( tostring(v.value) ~= tostring(num) ) then result[i].isUseful = false end end end for i, v in ipairs(result) do if (v.isUseful) then data[#data+1] = v.address end end if (#data > 0) then gg.toast(Fs1..'\n搜索到{'..#data..'}条数据') local t = {} local base = Fs3[1][2] if Fs5 == '' and Fs5 > 0 and Fs5 < #data then Fs5 = Fs5 else Fs5 = #data end for i=1, Fs5 do for k, w in ipairs(Fs4) do offset = w[2] - base t[#t+1] = {} t[#t].address = data[i] + offset t[#t].flags = w[3] t[#t].value = w[1] if (w[4] == true) then local item = {} item[#item+1] = t[#t] item[#item].freeze = true gg.addListItems(item) end end end gg.setValues(t) gg.toast(Fs1..'️\n已修改{'..#t..'}条数据') else gg.toast(Fs1..'\n数据搜索失败', false) return false end else gg.toast(Fs1..'\n数据修改失败', false) return false end end function search(ss,lx,nc,dz1,dz2) if ss~=nil then if lx~=nil then if nc==nil then nc=32 end gg.setRanges(nc) if dz1==nil then dz1="-1" end if dz2==nil then dz1="0" end gg.searchNumber(ss,lx,false,536870912,dz1,dz2) sl=gg.getResultCount() if sl~=0 then sj=gg.getResults(sl) gg.toast("搜索到 "..sl.." 个结果") gg.clearResults() else gg.toast("未搜索到结果") end else gg.toast("无搜索值类型") end else gg.toast("无需搜索值") end end function py1(value,lx,py) if #sj~=nil then z1={} z2={} for i=1,#sj do z1[i]={} z1[i].address=sj[i].address+py z1[i].flags=lx end z1=gg.getValues(z1) for i=1,#sj do if z1[i].value==value then z2[#z2+1]={} z2[#z2]=sj[i] end end sj=z2 z1={} z2={} gg.toast("共偏移 "..#sj.." 个数据") else gg.toast("没有搜索数据") end end function py2(value,lx,py) if #sj~=nil then z1={} z2={} for i=1,#sj do z1[i]={} z1[i].address=sj[i].address+py z1[i].flags=lx end z1=gg.getValues(z1) for i=1,#sj do if z1[i].value~=value then z2[#z2+1]={} z2[#z2]=sj[i] end end sj=z2 z1={} z2={} gg.toast("共偏移 "..#sj.." 个数据") else gg.toast("没有搜索数据") end end function xg1(value,lx,py,dj) if #sj~=nil then z={} for i=1,#sj do z[i]={} z[i].address=sj[i].address+py z[i].flags=lx z[i].value=value if dj==true then z[i].freeze=true end end if dj==true then gg.addListItems(z) else gg.clearList() gg.setValues(z) end gg.toast("共修改 "..#z.." 个数据") else gg.toast("没有搜索数据") end end function xg2(bz,value,lx,py,dj) if #bz~=nil then z={} for i=1,#bz do z[i]={} z[i].address=bz[i].address+py z[i].flags=lx z[i].value=value if dj==true then z[i].freeze=true end end if dj==true then gg.addListItems(z) else gg.clearList() gg.setValues(z) end gg.toast("共修改 "..#z.." 个数据") else gg.toast("没有搜索数据") end end function bc(bz) if sj~=nil then _ENV[bz]=sj else gg.toast("无数据") end end function BaAdd(add) t=gg.getValues({[1]={address=add,flags=4}}) return t[1].value&0xFFFFFFFF end function set(dz,xg,lx,dj) if dj=="true" then gg.addListItems({{address=dz,flags=lx,value=xg,freeze=true}}) else gg.setValues({{address=dz,flags=lx,value=xg}}) end gg.toast("已修改完成~") end function readWrite(Search,Get,Type,Range,Name) gg.clearResults() gg.setRanges(Range) gg.setVisible(false) if Search[1][1]~=false then gg.searchAddress(Search[1][1],0xFFFFFFFF,Search[1][4] or Type,gg.SIGN_EQUAL,Search[1][5] or 1,Search[1][6] or -1) end gg.searchNumber(Search[1][2],Search[1][4] or Type,false,gg.SIGN_EQUAL,Search[1][5] or 1,Search[1][6] or -1) local count=gg.getResultCount() local result=gg.getResults(count) gg.clearResults() local data={} local base=Search[1][3] if (count > 0) then for i,v in ipairs(result) do v.isUseful=true end for k=2,#Search do local tmp={} local offset=Search[k][2] - base local num=Search[k][1] for i,v in ipairs(result) do tmp[#tmp+1]={} tmp[#tmp].address=v.address+offset tmp[#tmp].flags=Search[k][3] or Type end tmp=gg.getValues(tmp) for i,v in ipairs(tmp) do if v.flags==16 or v.flags==64 then values=tostring(v.value):sub(1,6) num=tostring(num):sub(1,6) else values=v.value end if tostring(values)~=tostring(num) then result[i].isUseful=false end end end for i,v in ipairs(result) do if (v.isUseful) then data[#data+1]=v.address end end if (#data > 0) then local t,t_={},{} local base=Search[1][3] for i=1,#data do for k,w in ipairs(Get) do offset=w[2] - base if w[1]==false then t_[#t_+1]={} t_[#t_].address=data[i]+offset t_[#t_].flags=Type th_=(th_) and th_+1 or 1 else t[#t+1]={} t[#t].address=data[i]+offset t[#t].flags=w[3] or Type t[#t].value=w[1] tg_=(tg_) and tg_+1 or 1 if (w[4]==true) then local item={} item[#item+1]=t[#t] item[#item].freeze=w[4] gg.addListItems(item) end end end end tg=(tg_) and "\n已修改"..tg_.."条数据" or "" th=(th_) and "\n已获取"..th_.."条数据" or "" gg.setValues(t) t_=gg.getValues(t_) gg.loadResults(t_) gg.alert("\n"..Name.."搜索成功！\n偏移到"..#data.."条数据"..tg..th) tg_,th_=nil,nil else gg.alert("\n"..Name.."开启失败",false) return false end else gg.alert(Name.."开启失败") return false end end ----以上为指针搜索模块 function SO_Deposit(FUNCTIONADD,TYPE,VALUE) local SOMOD=gg.getRangesList("il2cpp.so") if SOMOD[2]==nil then gg.alert("开启失败\n━━━━━━━━━━━━━━━\n错误原因:未找到相关内存\n解决方法:请重新选择游戏进程\n━━━━━━━━━━━━━━━") else gg.setValues({{address=SOMOD[2].start+FUNCTIONADD,flags=4,value='~A8 LDR X0, [PC,#0x8]'}}) gg.setValues({{address=SOMOD[2].start+FUNCTIONADD+4,flags=4,value='~A8 RET'}}) gg.setValues({{address=SOMOD[2].start+FUNCTIONADD+8,flags=TYPE,value=VALUE}}) end end ---SO模块.可修改 function SO_ST(FUNCTIONADD,TYPE,VALUE) local SOMOD=gg.getRangesList("il2cpp.so") if SOMOD[2]==nil then _error() return else local shuju=0 gg.setValues({{address=SOMOD[2].start+FUNCTIONADD,flags=TYPE,value=VALUE}}) gg.setValues({{address=SOMOD[2].start+FUNCTIONADD+4,flags=TYPE,value="~A8 RET"}}) shuju=shuju+1 gg.toast("开启成功 共修改"..shuju.."条值") end end function _error() TLt = gg.alert("开启失败\n━━━━━━━━━━━━━━━\n错误原因:未找到相关内存\n解决方法:请重新选择游戏进程\n━━━━━━━━━━━━━━━","取消","选择进程") if TLt == 2 then gg.setProcessX() end end function AntiGrabbingBag(ContentOfExecution) AccessConnection=gg.makeRequest("https://vpn.uibe.edu.cn/por/phone_index.csp?rnd=0.23178949332658605#https%3A%2F%2Fvpn.uibe.edu.cn%2F").code if AccessConnection == 200 then pcall(ContentOfExecution) else gg.alert("网络异常 Or 请关闭VPN!\nNetwork abnormality Or please close VPN!") end end function SO_64(FUNCTIONADD,TYPE,VALUE) local SOMOD=gg.getRangesList("il2cpp.so") if SOMOD[2]==nil then gg.alert([[开启失败 ━━━━━━━━━━━━━━━ 错误原因:未找到相关内存 解决方法:请重新选择游戏进程 ━━━━━━━━━━━━━━━]]) else gg.setValues({{address=SOMOD[2].start+FUNCTIONADD,flags=TYPE,value=VALUE}}) gg.setValues({{address=SOMOD[2].start+FUNCTIONADD+4,flags=TYPE,value="~A8 RET"}}) end end function SO_HFM(FUNCTIONADD,TYPE,VALUE,VALUE2) local SOMOD=gg.getRangesList("il2cpp.so") if SOMOD[2]==nil then gg.alert("开启失败\n━━━━━━━━━━━━━━━\n错误原因:未找到相关内存\n解决方法:请重新选择游戏进程\n━━━━━━━━━━━━━━━") else gg.setValues({{address=SOMOD[2].start+FUNCTIONADD,flags=TYPE,value=VALUE}}) gg.setValues({{address=SOMOD[2].start+FUNCTIONADD+4,flags=TYPE,value=VALUE2}}) end end local SO = {} SO['新手'] = 0x26a9964 SO['行为1'] = 0x2689ecc SO['行为2'] = 0x2689f60 SO['行为3'] = 0x2689d10 SO['行为4'] = 0x2683194 SO['行为5'] = 0x2689be8 SO['行为6'] = 0x2689be8 SO['行为7'] = 0x241ff4c SO['行为9'] = 0x26e8bc4 SO['行为10'] = 0x26e8ae4 SO['行为11'] = 0x267c8f0 SO['行为12'] = 0x258df18 SO['行为13'] = 0x26e89e0 SO['行为14'] = 0x26e8430 SO['行为15'] = 0x241f808 SO['行为16'] = 0x241fd28 SO['行为17'] = 0x241fea0 SO['行为18'] = 0x28d0094 SO['行为19'] = 0x13e6ff8 SO['行为20'] = 0x1ff46bc SO['行为21'] = 0x1ff6650 SO['行为22'] = 0x1404750 SO['行为23'] = 0x1ff93bc SO['行为24'] = 0x2000210 SO['行为25'] = 0x20002bc SO['行为26'] = 0x3c43850 SO['行为27'] = 0x2681b68 SO['行为28'] = 0x2689c7c SO['行为29'] = 0x2689da4 SO['行为30'] = 0x2689e38 SO['行为31'] = 0x1fffe90 SO['行为32'] = 0x1ffff3c SO['行为33'] = 0x1ffffe8 SO['行为34'] = 0x200008c SO['行为35'] = 0x20002bc SO['行为36'] = 0x1fffe90 SO['行为38'] = 0x1b84470 SO['行为39'] = 0x241fb10 SO['行为40'] = 0x2681c00 SO['行为41'] = 0x1ff58d8 SO['行为42'] = 0x1ffa2d8 SO['行为43'] = 0x2000138 SO['行为8'] = 0x22d75e0 SO['行为37'] = 0x22d9308 SO['货币检测'] = 0x13d3654 SO['人物'] = 0x26a2490 SO['滑板'] = 0x26a4208 SO['背饰'] = 0x26c6864 SO['背饰保存'] = 0x26c6944 SO['像框'] = 0x2711e74 SO['相框1'] = 0x234f328 SO['装扮'] = 0x2696b18 SO['技能'] = 0x266a8a4 SO['技能勾选'] = 0x266ab68 SO['相框保存'] = 0x26a27c8 SO['相框保存'] = 0x26a27c8 SO['备份1'] = 0x2679780 SO['备份2'] = 0x26d31e8 SO['备份3'] = 0x2679780 SO['防止卡屏1'] = 0x28cffb0 SO['防止卡屏2'] = 0x28cfec8 SO['滑板跳高'] = 0x10cd808 SO['滑板滑翔'] = 0x10cdbb4 SO['滑板瞬移'] = 0x10cdd04 SO['人物购买按钮'] = 0x1e471a8 SO['人物购买成功'] = 0x1e4c42c SO['滑板购买按钮'] = 0x1e64490 SO['滑板购买成功'] = 0x1e690c4 SO['竞赛模式1'] = 0xee4020 SO['竞赛模式2'] = 0x28af9c8 SO['竞赛模式3'] = 0x1c34dbc SO['匹配机制1'] = 0x1fac93c SO['匹配机制2'] = 0x293da40 SO['匹配机制3'] = 0x130b5fc SO['屏蔽时间检1'] = 0x28fb82c SO['屏蔽时间检2'] = 0x28fb7b0 SO['屏蔽时间检4'] = 0x28fb2d8 SO['屏蔽时间检5'] = 0x28fb188 SO['屏蔽时间检6'] = 0x28fb0a4 SO['屏蔽时间检8'] = 0x2689b54 SO['屏蔽时间检9'] = 0x28fad54 SO['一分40秒1'] = 0x1b80920 SO['一分40秒2'] = 0x28fb82c SO['一分40秒3'] = 0x28fb7b0 SO['一分40秒4'] = 0x28fb188 SO['一分40秒6'] = 0x28fb0a4 SO['一分40秒7'] = 0x2689b54 SO['一分40秒8'] = 0x1b84500 SO['一分40秒9'] = 0x1b843e8 SO['一分40秒10'] = 0x28d3be4 SO['防举报1'] = 0x1b84500 SO['防举报2'] = 0x1b843e8 SO['防举报3'] = 0x21331f8 SO['防举报4'] = 0x28d3be4 SO['滑板跳高'] = 0x10cd808 SO['滑板滑翔'] = 0x10cdbb4 SO['滑板瞬移'] = 0x10cdd04 SO['人物瞬移'] = 0x2134fb4 SO['全宝'] = 0x27ca2d0 SO['半宝'] = 0x27ca2d0 SO['人物速度'] = 0x2133370 SO['奖励替换'] = 0x27116e4 SO['人物奖励'] = 0x2711894 SO['滑板奖励'] = 0x2711a44 SO['背饰奖励'] = 0x2711da4 SO['像框奖励'] = 0x2711e74 SO['十抽'] = 0x27c86fc SO['单抽'] = 0x27c70c4 SO['备份1'] = 0x2679780 SO['备份2'] = 0x26d31e8 SO['备份3'] = 0x2679780 SO['速度检测'] = 0x26d21e0 SO['速度检测1'] = 0x22ff280 SO['速度检测2'] = 0x22ff204 SO['速度检测4'] = 0x2821100 SO['速度检测5'] = 0x140c87c SO['隐藏2'] = 0x267c8f0 SO['隐藏4'] = 0x26bb3c0 SO['隐藏5'] = 0x1b80920 SO['结算检测1'] = 0x28fb188 SO['结算检测2'] = 0x26817b0 SO['结算检测3'] = 0x2689b54 SO['结算检测4'] = 0x1b80920 SO['过滤十秒'] = 0x28cffb0 SO['屏蔽时间检7'] = 0x29061f4 SO['屏蔽时间检3'] = 0x2906180 SO['替换人物'] = 0x1e58ad0 SO['替换滑板'] = 0x1e59ba4 SO['替换背饰'] = 0x1e5b090 SO['替换装扮'] = 0x1e5935c SO['炫跑卡'] = 0x26c8104 SO['跳跃'] = 0x266129c SO['下滑'] = 0x2661800 SO['下滑1'] = 0x2661460 SO['下滑左'] = 0x2661530 SO['下滑中'] = 0x26615a8 SO['下滑右'] = 0x2661620 SO['滑板跳高'] = 0x10cd808 SO['滑板滑翔'] = 0x10cdbb4 SO['滑板瞬移'] = 0x10cdd04 SO['人物瞬移'] = 0x2134fb4 SO['新手'] = 0x26a9964 SO['封号'] = 0x237c5c0 SO['行为1'] = 0x2689ecc SO['行为2'] = 0x2689f60 SO['行为3'] = 0x2689d10 SO['行为4'] = 0x2683194 SO['行为5'] = 0x2689be8 SO['行为6'] = 0x2689be8 SO['行为7'] = 0x241ff4c SO['行为8'] = 0x22d75e0 SO['行为9'] = 0x26e8bc4 SO['行为10'] = 0x26e8ae4 SO['行为11'] = 0x267c8f0 SO['行为12'] = 0x258df18 SO['行为13'] = 0x26e89e0 SO['行为14'] = 0x26e8430 SO['行为15'] = 0x241f808 SO['行为16'] = 0x241fd28 SO['行为17'] = 0x241fea0 SO['行为18'] = 0x28d0094 SO['行为19'] = 0x13e6ff8 SO['行为20'] = 0x1ff46bc SO['行为21'] = 0x1ff6650 SO['行为22'] = 0x1404750 SO['行为23'] = 0x1ff93bc SO['行为24'] = 0x2000210 SO['行为25'] = 0x20002bc SO['行为26'] = 0x3c43850 SO['行为27'] = 0x2681b68 SO['行为28'] = 0x2689c7c SO['行为29'] = 0x2689da4 SO['行为30'] = 0x2689e38 SO['行为31'] = 0x1fffe90 SO['行为32'] = 0x1ffff3c SO['行为33'] = 0x1ffffe8 SO['行为34'] = 0x200008c SO['行为35'] = 0x20002bc SO['行为36'] = 0x1fffe90 SO['行为37'] = 0x22d9308 SO['行为38'] = 0x1b84470 SO['行为39'] = 0x241fb10 SO['行为40'] = 0x2681c00 SO['行为41'] = 0x1ff58d8 SO['行为42'] = 0x1ffa2d8 SO['行为43'] = 0x2000138 SO['行为44'] = 0xe64484 SO['行为45'] = 0xe64478 SO['货币检测'] = 0x13d3654 SO['速度检测'] = 0x22ff204 SO['防举报1'] = 0x1b84500 SO['防举报2'] = 0x1b843e8 SO['防举报3'] = 0x21331f8 SO['防举报4'] = 0x28d3be4 SO['人物'] = 0x26a2490 SO['滑板'] = 0x26a4208 SO['背饰'] = 0x26c6864 SO['背饰保存'] = 0x26c6944 SO['像框'] = 0x2711e74 SO['相框1'] = 0x234f328 SO['装扮'] = 0x2696b18 SO['技能'] = 0x266a8a4 SO['技能勾选'] = 0x266ab68 SO['名称'] = 0x1454258 SO['获取十倍'] = 0x2682484 SO['解锁十倍'] = 0x1114b7c SO['内购'] = 0x25f0270 SO['内购成功'] = 0x25fc658 SO['领奖'] = 0x26fb020 SO['十抽'] = 0x27c8b7c SO['宝物备份'] = 0x27c6754 SO['奖励替换'] = 0x27116e4 SO['人物奖励'] = 0x2711894 SO['滑板奖励'] = 0x2711a44 SO['背饰奖励'] = 0x2711da4 SO['像框奖励'] = 0x2711e74 SO['赛事'] = 0x293da40 SO['备份1'] = 0x2679780 SO['备份2'] = 0x26d31e8 SO['备份3'] = 0x2679780 SO['备份4'] = 0x202f424 SO['双倍'] = 0x26b0548 SO['微博'] = 0x167c488 SO['金币'] = 0x2690270 SO['钥匙'] = 0x26905b0 SO['紫币'] = 0x26fcfc0 SO['宝物钥匙'] = 0x26cbedc SO['开发者'] = 0x267e370 SO['抓娃娃'] = 0x2682dc8 SO['重生'] = 0x23fcfa4 SO['邮箱'] = 0x276cb38 SO['炫跑卡'] = 0x26c8104 SO['历史分数1'] = 0x2690abc SO['历史分数2'] = 0x2690cd4 SO['历史排名'] = 0x26bf4b4 SO['等级'] = 0x2693aa0 SO['全服'] = 0x28f7428 SO['省标'] = 0x28f74a0 SO['地区'] = 0x28f7518 SO['隐藏1'] = 0x24a5a58 SO['隐藏2'] = 0x267c8f0 SO['隐藏3'] = 0x24a68ec SO['隐藏4'] = 0x26bb3c0 SO['隐藏5'] = 0x1b80920 SO['防止卡屏1'] = 0x28cffb0 SO['防止卡屏2'] = 0x28cfec8 SO['受到攻击'] = 0x2553784 SO['攻击拾取'] = 0x254de4c SO['局内金币'] = 0x265bf70 SO['获取能量'] = 0x254d3ec SO['获取能量1'] = 0x25489a4 SO['获取能量2'] = 0x25489a4 SO['跳跃'] = 0x266129c SO['下滑'] = 0x2661800 SO['下滑1'] = 0x2661460 SO['下滑左'] = 0x2661530 SO['下滑中'] = 0x26615a8 SO['下滑右'] = 0x2661620 SO['滑板跳高'] = 0x10cd808 SO['滑板滑翔'] = 0x10cdbb4 SO['滑板瞬移'] = 0x10cdd04 SO['无尽装死'] = 0x10ef6c4 SO['无限跳跃'] = 0x21366c8 SO['金币消失'] = 0x2192388 SO['无尽死亡'] = 0x10f8518 SO['道具图标'] = 0x254c2d8 SO['道具图标2'] = 0x254c368 SO['道具图标3'] = 0x254e268 SO['修改道具'] = 0x254dbc0 SO['战绩消失'] = 0x28bfaf0 SO['购买界面'] = 0x13ded30 SO['反弹道具1'] = 0x256b85c SO['反弹道具2'] = 0x256b944 SO['释放能量'] = 0x254d568 SO['释放'] = 0x254d674 SO['无视道具1'] = 0x256cb20 SO['无视道具2'] = 0x256d038 SO['无视障碍'] = 0x252f470 SO['无视侧撞'] = 0x252ff84 SO['开局道具'] = 0x268fb10 SO['能量穿透'] = 0x25483d0 SO['忙碌状态'] = 0x254c860 SO['无限能量'] = 0x254c16c SO['Buff模式'] = 0x2552b98 SO['派对聚能'] = 0x28dc648 SO['得到分数'] = 0x265dc04 SO['结束游戏'] = 0x28cfec8 SO['锁定人机'] = 0x28d2f6c SO['派对新手'] = 0x267f760 SO['派对省份'] = 0x27f6de4 SO['派对省排'] = 0x27f6d70 SO['派对全服'] = 0x27f6cfc SO['滑板消失'] = 0x2531f1c SO['三倍金币'] = 0x24e91ec SO['得分倍增'] = 0x2694cf8 SO['宝物等级'] = 0x27c2640 SO['段位'] = 0x28fa9c4 SO['历史段位'] = 0x26bfbd4 SO['星数'] = 0x2905be0 SO['道具满级'] = 0x1f616d0 SO['道具等级'] = 0x1f61530 SO['退出登录'] = 0x2686638 SO['超级跑者'] = 0x26f7fec SO['使用技能'] = 0x1e5a5fc SO['观战对手'] = 0x2140dc8 SO['替换人物'] = 0x1e58ad0 SO['替换滑板'] = 0x1e59ba4 SO['替换背饰'] = 0x1e5b090 SO['替换装扮'] = 0x1e5935c SO['点击表情'] = 0x1fac554 SO['宝抽次数'] = 0x26ccd80 SO['铁轨金币'] = 0x2192388 SO['房间防踢'] = 0x253d364 SO['匹配人机'] = 0x28d4478 SO['道具聚能'] = 0x2552c2c SO['道具备份1'] = 0x26d31e8 SO['道具备份2'] = 0x2679780 SO['好友'] = 0x292d2c8 SO['踢人'] = 0x292d520 SO['修改对抗赛'] = 0x22fd67c SO['对抗赛好友匹配'] = 0x255d0fc SO['观察者室'] = 0x130b5fc SO['自救'] = 0x22fac1c SO['复活结算'] = 0x28bfaf0 SO['调出名称'] = 0x26a9a84 SO['派对新手1'] = 0x267f760 SO['派对新手2'] = 0x267f800 SO['改变角色'] = 0x2300ef0 SO['自变保安'] = 0x22f9868 SO['时间'] = 0x21339e4 SO['异常弹窗'] = 0x258dc50 SO['HFX目标'] = 0x252b890 SO['HP目标'] = 0x256b944 SO['HP使用人'] = 0x256b85c SO['PVP定人'] = 0x28d2f6c SO['全宝'] = 0x27ca2d0 SO['半宝'] = 0x27ca2d0 SO['强制下线'] = 0x2471d30 SO['时间检测'] = 0x2689b54 SO['行为弹窗'] = 0x258df18 SO['升级金币'] = 0x27c2b1c SO['升级材料'] = 0x27c298c SO['道具无限时长'] = 0x2706fb4 SO['人物购买按钮'] = 0x1e471a8 SO['人物购买成功'] = 0x1e4c42c SO['滑板购买按钮'] = 0x1e64490 SO['滑板购买成功'] = 0x1e690c4 SO['竞赛模式1'] = 0xee4020 SO['竞赛模式2'] = 0x28af9c8 SO['竞赛模式3'] = 0x1c34dbc SO['匹配机制1'] = 0x1fac93c SO['匹配机制2'] = 0x293da40 SO['匹配机制3'] = 0x130b5fc SO['屏蔽时间检1'] = 0x28fb82c SO['屏蔽时间检2'] = 0x28fb7b0 SO['屏蔽时间检3'] = 0x2906180 SO['屏蔽时间检4'] = 0x28fb2d8 SO['屏蔽时间检5'] = 0x28fb188 SO['屏蔽时间检6'] = 0x28fb0a4 SO['屏蔽时间检7'] = 0x29061f4 SO['屏蔽时间检8'] = 0x2689b54 SO['屏蔽时间检9'] = 0x28fad54 SO['屏蔽时间检10'] = 0xe64498 SO['一分40秒1'] = 0x1b80920 SO['一分40秒2'] = 0x28fb82c SO['一分40秒3'] = 0x28fb7b0 SO['一分40秒4'] = 0x28fb188 SO['一分40秒5'] = 0x29061f4 SO['一分40秒6'] = 0x28fb0a4 SO['一分40秒7'] = 0x2689b54 SO['一分40秒8'] = 0x1b84500 SO['一分40秒9'] = 0x1b843e8 SO['一分40秒10'] = 0x28d3be4 SO['轨道位置'] = 0x2134910 SO['铁轨金币'] = 0x2192388 SO['表情退出'] = 0x294e4ac SO['按钮复制房间'] = 0x1f60d64 SO['无视敏感词'] = 0x29026e0 SO['房间防踢1'] = 0x255d948 SO['分数全服'] = 0x2891908 SO['分数全省'] = 0x2891a0c SO['改字复活'] = 0x294e5d0 SO['好友踢人'] = 0x292d520 SO['派对房间1'] = 0x1bbd5ac SO['派对房间2'] = 0x2831d40 SO['人物速度'] = 0x2133370 SO['滑板时长'] = 0x25324cc SO['宝藏等级'] = 0x27c2640 SO['目标地图1'] = 0x20f8228 SO['目标地图2'] = 0x20f91a8 SO['目标路线'] = 0x1bbd634 SO['结算检测1'] = 0x28fb188 SO['结算检测2'] = 0x26817b0 SO['结算检测3'] = 0x2689b54 SO['结算检测4'] = 0x1b80920 SO['结算退出'] = 0x146dcb0 SO['退出界面'] = 0x146bef8 SO['灵魂出窍'] = 0x145d818 SO['玩家离线'] = 0x1b83384 SO['断开连接1'] = 0x2895410 SO['断开连接2'] = 0x1a20ff8 SO['服务器1'] = 0x26817b0 SO['服务器2'] = 0x2689434 SO['服务器3'] = 0x26894e4 SO['服务器4'] = 0x10201e4 SO['人物全显'] = 0x1d60c14 SO['滑板全显'] = 0x1d60c14 SO['API检值'] = 0xfe2858 SO['拖尾'] = 0x21351e8 SO['弹窗'] = 0x14a161c SO['PVP获胜者'] = 0x27fa124 SO['离线形式'] = 0x1b80920 SO['胜利时间'] = 0x28fadbc SO['能量吸附'] = 0x25483d0 SO['能量吸附2'] = 0x2549660 SO['撑杆'] = 0x10f639c SO['能量消失'] = 0x2549900 SO['更新时刻'] = 0x3adb148 SO['更新程序'] = 0x1c6c928 SO['获取奖励'] = 0x1519a00 SO['滑板提速'] = 0x2530ce4 SO['翻滚动作'] = 0x2136ee8 SO['翻滚更新'] = 0x2141974 SO['触发事件'] = 0x25464c0 SO['速度不变'] = 0x2801830 SO['发送成功'] = 0x10ab728 SO['金币分数'] = 0x26911a0 SO['跳过新手'] = 0x26a9964 SO['客户端离线'] = 0x26817b0 SO['全局离线'] = 0x1b80920 SO['防环境'] = 0x22d9308 SO['4399防环境'] = 0x267c8f0 SO['静态防环境'] = 0x1b84470 SO['检测关闭'] = 0x3c43850 SO['关闭检测'] = 0x241f808 SO['设备ID检测'] = 0x26e89e0 SO['上传钥匙作弊'] = 0x26e8bc4 SO['上传金币作弊'] = 0x26e8ae4 SO['上传人物数量作弊'] = 0x2689ecc SO['金币数量检测'] = 0x241ff4c SO['钥匙数量检测'] = 0x2689d10 SO['关闭速度异常检测'] = 0x2689be8 SO['用户离线检测'] = 0x241fb10 SO['数据备份1'] = 0x2679780 SO['数据备份2'] = 0x26e5870 SO['数据备份3'] = 0x26d31e8 SO['等级'] = 0x2693aa0 SO['奖杯领取'] = 0x26fb020 SO['内购'] = 0x25f0270 SO['炫跑卡'] = 0x26c8104 SO['宝物钥匙'] = 0x26cbedc SO['人物'] = 0x26a2490 SO['滑板'] = 0x26a4208 SO['背饰'] = 0x26c6864 SO['背饰保存'] = 0x26c6944 SO['装扮'] = 0x2696b18 SO['头像框'] = 0x234f328 SO['滑板技能'] = 0x266a8a4 SO['滑板技能勾选'] = 0x266ab68 SO['调出十倍'] = 0x2682484 SO['获得十倍'] = 0x1114b7c SO['解锁微博'] = 0x167c488 SO['十抽宝物'] = 0x27c8b7c SO['赛事调出'] = 0x293da40 SO['社团锁定人机'] = 0x1fac554 SO['人物无敌'] = 0x10f8518 SO['人物瞬移'] = 0x2134fb4 SO['二段跳'] = 0x10cd8f0 SO['无限连跳'] = 0x21366c8 SO['滑板滑翔'] = 0x10cdbb4 SO['滑板瞬移'] = 0x10cdd04 SO['滑板跳高'] = 0x10cd808 SO['屏蔽上传'] = 0xfe2858 SO['新时刻'] = 0x28fb188 SO['最佳时间'] = 0x29061f4 SO['作弊时间'] = 0x2689b54 SO['防举报1'] = 0x1b84500 SO['防举报2'] = 0x1b843e8 SO['屏蔽时间检测1'] = 0xe64498 SO['屏蔽时间检测2'] = 0x28fad54 SO['屏蔽时间检测3'] = 0x28fb82c SO['屏蔽时间检测4'] = 0x28fb0a4 SO['防卡屏'] = 0x28cffb0 SO['结算作弊状态'] = 0x28d0094 SO['结算异常'] = 0x28cfec8 SO['结算恢复'] = 0x28cfec8 SO['屏蔽人机'] = 0x28d2e48 SO['进入结算屏蔽'] = 0x28d1938 SO['房间防踢'] = 0x253d364 SO['房间踢人'] = 0x292d520 SO['改超长名'] = 0x1454258 SO['段位'] = 0x291dccc SO['阶段'] = 0x291dd50 SO['星数'] = 0x291ddf0 SO['分数赛过检'] = 0x265df68 SO['得分倍增'] = 0x2694cf8 SO['修改速度'] = 0x2133370 SO['过派对新手1'] = 0x267f800 SO['过派对新手2'] = 0x267f760 SO['发文字复活'] = 0x294e5d0 SO['发表情退出'] = 0x294e4ac SO['终点自动退出'] = 0x146dcb0 SO['国标'] = 0x28f7428 SO['省标'] = 0x28f74a0 SO['PVP定人'] = 0x28d2f6c SO['能量倍增1'] = 0x2661530 SO['能量倍增2'] = 0x26615a8 SO['能量倍增3'] = 0x2661620 SO['能量倍增4'] = 0x266129c SO['能量倍增5'] = 0x2661460 SO['点击道具图标'] = 0x254e268 SO['忽略能量'] = 0x25483d0 SO['无视道具1'] = 0x256cb20 SO['无视道具2'] = 0x256d038 SO['无视障碍'] = 0x252f470 SO['双倍金币'] = 0x26b0548 SO['内购成功'] = 0x25fc658 SO['宝物解锁'] = 0x27ca2d0 SO['宝物备份'] = 0x27c6754 SO['十抽调出购买界面回调'] = 0x13ded30 SO['社团回调'] = 0xee4020 SO['发文字复活回调'] = 0x145d818 SO['发表情退出回调'] = 0x146bef8 SO['终点自动退出回调'] = 0x146bef8 SO['能量倍增回调'] = 0x25489a4 SO['点击道具图标获取能量回调'] = 0x25489a4 SO['获取人物'] = 0x15e7c1c SO['获取滑板'] = 0x15e7f98 SO['兑换码'] = 0x1ee5250 SO['微加速'] = 0x2530ae0 SO['人工'] = 0xe6fe30 SO['人工1'] = 0x2140630 SO['人工3'] = 0x1bdb7d8 SO['人工4'] = 0x134c308 -- 缺少的名称: -- 断网1 -- 断网2 loadBox['关闭']() stab = { "主页", "防封", "刷号", "竞赛", "音乐", "设置", } stitle='DW全防' xfcpic="https://pan.szfx.top/view.php/2a2b654c069fa2997deaba59de20527d.jpg" 公告=[[此作品仅供个人交流学习，勿用于任何违法犯罪用途 使用者的任何行为与开发者无关 请与24小时之内删除本应用]] MX.menu({ {--<<<<<<<<第一页>>>>>>>> MX.text("项目负责:自己","#000000","15sp"), MX.text("DW总群:1082440538","#000000","15sp"), MX.text("已适配7.04.0水韵江苏版本","#000000","15sp"), MX.text("欢迎老板使用DW全防🌹","#000000","15sp"), MX.text("独家防御🌹","#000000","15sp"), MX.button( "选择进程", function() gg.setProcessX() string.toMusic("请选择游戏进程") end), MX.button("随机语录", function() Y=gg.makeRequest("https://v1.hitokoto.cn/").content --获取云端数据 Q=string.match(Y,'hitokoto(.+)type') --模式匹配他们中的一切字符 F=string.gsub(Q,'":"',"") K=string.gsub(F,'","',"") --删除多余垃圾 string.toMusic("\n\n"..""..K.."") QD = gg.alert("今日语录:\n\n"..""..K.."") if QD == 1 then end if QD == 3 then end end), },{---第二页 MX.check({--单选 {"过搜索[登录开启]", function() function setvalue(address,flags,value) local tt={} tt[1]={} tt[1].address=address tt[1].flags=flags tt[1].value=value gg.setValues(tt) end so=gg.getRangesList('libtersafe2.so')[1].start py=0x1e6ce8 setvalue(so+py,4,335544320) string.toMusic('DW已为您开启过搜索') end } , {"登录[1]", function() function setvalue(address,flags,value) local tt={} tt[1]={} tt[1].address=address tt[1].flags=flags tt[1].value=value gg.setValues(tt) end so=gg.getRangesList('libtersafe2.so')[1].start py=0x4fd600 setvalue(so+py,4,-698416192) so=gg.getRangesList('libtersafe2.so')[1].start py=0x4fd64c setvalue(so+py,4,-698416192) so=gg.getRangesList('libtersafe2.so')[1].start py=0x4fd65c setvalue(so+py,4,-698416192) so=gg.getRangesList('libtersafe2.so')[1].start py=0x4fd668 setvalue(so+py,4,-698416192) so=gg.getRangesList('libtersafe2.so')[1].start py=0x4fd66c setvalue(so+py,4,-698416192) so=gg.getRangesList('libtersafe2.so')[1].start py=0x4fd67c setvalue(so+py,4,-698416192) so=gg.getRangesList('libtersafe2.so')[1].start py=0x4fd690 setvalue(so+py,4,-698416192) so=gg.getRangesList('libtersafe2.so')[1].start py=0x4fd69c setvalue(so+py,4,-698416192) so=gg.getRangesList('libtersafe2.so')[1].start py=0x4fd6ac setvalue(so+py,4,-698416192) so=gg.getRangesList('libtersafe2.so')[1].start py=0x4fd6bc setvalue(so+py,4,-698416192) so=gg.getRangesList('libtersafe2.so')[1].start py=0x4fd6d0 setvalue(so+py,4,-698416192) so=gg.getRangesList('libtersafe2.so')[1].start py=0x4fd6dc setvalue(so+py,4,-698416192) so=gg.getRangesList('libtersafe2.so')[1].start py=0x4fd6e0 setvalue(so+py,4,-698416192) so=gg.getRangesList('libtersafe2.so')[1].start py=0x4fd6ec setvalue(so+py,4,-698416192) so=gg.getRangesList('libtersafe2.so')[1].start py=0x4fd6f0 setvalue(so+py,4,-698416192) so=gg.getRangesList('libtersafe2.so')[1].start py=0x4fd6fc setvalue(so+py,4,-698416192) so=gg.getRangesList('libtersafe2.so')[1].start py=0x4fd730 setvalue(so+py,4,-698416192) so=gg.getRangesList('libtersafe2.so')[1].start py=0x4fd73c setvalue(so+py,4,-698416192) so=gg.getRangesList('libtersafe2.so')[1].start py=0x4fd740 setvalue(so+py,4,-698416192) so=gg.getRangesList('libtersafe2.so')[1].start py=0x4fd74c setvalue(so+py,4,-698416192) so=gg.getRangesList('libtersafe2.so')[1].start py=0x4fd750 setvalue(so+py,4,-698416192) so=gg.getRangesList('libtersafe2.so')[1].start py=0x4fd758 setvalue(so+py,4,-698416192) so=gg.getRangesList('libtersafe2.so')[1].start py=0x4fd75c setvalue(so+py,4,-698416192) so=gg.getRangesList('libtersafe2.so')[1].start py=0x4fd760 setvalue(so+py,4,-698416192) so=gg.getRangesList('libtersafe2.so')[1].start py=0x4fd77c setvalue(so+py,4,-698416192) so=gg.getRangesList('libtersafe2.so')[1].start py=0x4fd78c setvalue(so+py,4,-698416192) so=gg.getRangesList('libtersafe2.so')[1].start py=0x4fd79c setvalue(so+py,4,-698416192) so=gg.getRangesList('libtersafe2.so')[1].start py=0x4fd7cc setvalue(so+py,4,-698416192) so=gg.getRangesList('libtersafe2.so')[1].start py=0x4fd7dc setvalue(so+py,4,-698416192) so=gg.getRangesList('libtersafe2.so')[1].start py=0x4fd7ec setvalue(so+py,4,-698416192) so=gg.getRangesList('libtersafe2.so')[1].start py=0x4fd7fc setvalue(so+py,4,-698416192) so=gg.getRangesList('libtersafe2.so')[1].start py=0x4fd80c setvalue(so+py,4,-698416192) so=gg.getRangesList('libtersafe2.so')[1].start py=0x4fd81c setvalue(so+py,4,-698416192) so=gg.getRangesList('libtersafe2.so')[1].start py=0x4fd820 setvalue(so+py,4,-698416192) so=gg.getRangesList('libtersafe2.so')[1].start py=0x4fd82c setvalue(so+py,4,-698416192) so=gg.getRangesList('libtersafe2.so')[1].start py=0x4fd83c setvalue(so+py,4,-698416192) so=gg.getRangesList('libtersafe2.so')[1].start py=0x4fd84c setvalue(so+py,4,-698416192) so=gg.getRangesList('libtersafe2.so')[1].start py=0x4fd85c setvalue(so+py,4,-698416192) so=gg.getRangesList('libtersafe2.so')[1].start py=0x4fd86c setvalue(so+py,4,-698416192) so=gg.getRangesList('libtersafe2.so')[1].start py=0x4fd87c setvalue(so+py,4,-698416192) so=gg.getRangesList('libtersafe2.so')[1].start py=0x4fd88c setvalue(so+py,4,-698416192) so=gg.getRangesList('libtersafe2.so')[1].start py=0x4fd8ac setvalue(so+py,4,-698416192) so=gg.getRangesList('libtersafe2.so')[1].start py=0x4fd8bc setvalue(so+py,4,-698416192) so=gg.getRangesList('libtersafe2.so')[1].start py=0x4fd8cc setvalue(so+py,4,-698416192) so=gg.getRangesList('libtersafe2.so')[1].start py=0x4fd8dc setvalue(so+py,4,-698416192) so=gg.getRangesList('libtersafe2.so')[1].start py=0x4fd8ec setvalue(so+py,4,-698416192) so=gg.getRangesList('libtersafe2.so')[1].start py=0x4fd8fc setvalue(so+py,4,-698416192) so=gg.getRangesList('libtersafe2.so')[1].start py=0x4fd90c setvalue(so+py,4,-698416192) so=gg.getRangesList('libtersafe2.so')[1].start py=0x4fd910 setvalue(so+py,4,-698416192) so=gg.getRangesList('libtersafe2.so')[1].start py=0x4fd91c setvalue(so+py,4,-698416192) so=gg.getRangesList('libtersafe2.so')[1].start py=0x4fd92c setvalue(so+py,4,-698416192) so=gg.getRangesList('libtersafe2.so')[1].start py=0x4fd93c setvalue(so+py,4,-698416192) so=gg.getRangesList('libtersafe2.so')[1].start py=0x4fd94c setvalue(so+py,4,-698416192) so=gg.getRangesList('libtersafe2.so')[1].start py=0x4fd95c setvalue(so+py,4,-698416192) so=gg.getRangesList('libtersafe2.so')[1].start py=0x4fd99c setvalue(so+py,4,-698416192) so=gg.getRangesList('libtersafe2.so')[1].start py=0x4fd9bc setvalue(so+py,4,-698416192) so=gg.getRangesList('libtersafe2.so')[1].start py=0x4fd9cc setvalue(so+py,4,-698416192) so=gg.getRangesList('libtersafe2.so')[1].start py=0x4fd9f0 setvalue(so+py,4,-698416192) so=gg.getRangesList('libtersafe2.so')[1].start py=0x4fdaec setvalue(so+py,4,-698416192) so=gg.getRangesList('libtersafe2.so')[1].start py=0x4fdafc setvalue(so+py,4,-698416192) so=gg.getRangesList('libtersafe2.so')[1].start py=0x4fdb40 setvalue(so+py,4,-698416192) so=gg.getRangesList('libtersafe2.so')[1].start py=0x4fdb6c setvalue(so+py,4,-698416192) so=gg.getRangesList('libtersafe2.so')[1].start py=0x4fdbe0 setvalue(so+py,4,-698416192) so=gg.getRangesList('libtersafe2.so')[1].start py=0x4fdc3c setvalue(so+py,4,-698416192) so=gg.getRangesList('libtersafe2.so')[1].start py=0x4fdc6c setvalue(so+py,4,-698416192) so=gg.getRangesList('libtersafe2.so')[1].start py=0x4fdc90 setvalue(so+py,4,-698416192) so=gg.getRangesList('libtersafe2.so')[1].start py=0x4fdcbc setvalue(so+py,4,-698416192) so=gg.getRangesList('libtersafe2.so')[1].start py=0x4fdccc setvalue(so+py,4,-698416192) so=gg.getRangesList('libtersafe2.so')[1].start py=0x4fdd0c setvalue(so+py,4,-698416192) so=gg.getRangesList('libtersafe2.so')[1].start py=0x4fdd30 setvalue(so+py,4,-698416192) so=gg.getRangesList('libtersafe2.so')[1].start py=0x4fdd3c setvalue(so+py,4,-698416192) so=gg.getRangesList('libtersafe2.so')[1].start py=0x4fdd8c setvalue(so+py,4,-698416192) so=gg.getRangesList('libtersafe2.so')[1].start py=0x4fddbc setvalue(so+py,4,-698416192) so=gg.getRangesList('libtersafe2.so')[1].start py=0x4fdde0 setvalue(so+py,4,-698416192) so=gg.getRangesList('libtersafe2.so')[1].start py=0x4fde0c setvalue(so+py,4,-698416192) so=gg.getRangesList('libtersafe2.so')[1].start py=0x4fdedc setvalue(so+py,4,-698416192) so=gg.getRangesList('libtersafe2.so')[1].start py=0x4fdefc setvalue(so+py,4,-698416192) so=gg.getRangesList('libtersafe2.so')[1].start py=0x4fdf30 setvalue(so+py,4,-6984161) string.toMusic('DW已为您开启登录防御1') end } , {"登录[2]", function() local start_time = os.clock() local r = gg.getRangesList("libtersafe2.so")[1] if not r then gg.toast("未找到 libtersafe2.so") return end local base = r.start local list = { {address = base + 0x4FD600, flags = 4, value = -698416192}, {address = base + 0x4FD61C, flags = 4, value = -698416192}, {address = base + 0x4FD628, flags = 4, value = -698416192}, {address = base + 0x4FD65C, flags = 4, value = -698416192}, {address = base + 0x4FD668, flags = 4, value = -698416192}, {address = base + 0x4FD66C, flags = 4, value = -698416192}, {address = base + 0x4FD67C, flags = 4, value = -698416192}, {address = base + 0x4FD68C, flags = 4, value = -698416192}, {address = base + 0x4FD690, flags = 4, value = -698416192}, {address = base + 0x4FD69C, flags = 4, value = -698416192}, {address = base + 0x4FD6AC, flags = 4, value = -698416192}, {address = base + 0x4FD6BC, flags = 4, value = -698416192}, {address = base + 0x4FD6D0, flags = 4, value = -698416192}, {address = base + 0x4FD6DC, flags = 4, value = -698416192}, {address = base + 0x4FD6EC, flags = 4, value = -698416192}, {address = base + 0x4FD6F0, flags = 4, value = -698416192}, {address = base + 0x4FD6FC, flags = 4, value = -698416192}, {address = base + 0x4FD730, flags = 4, value = -698416192}, {address = base + 0x4FD73C, flags = 4, value = -698416192}, {address = base + 0x4FD74C, flags = 4, value = -698416192}, {address = base + 0x4FD750, flags = 4, value = -698416192}, {address = base + 0x4FD758, flags = 4, value = -698416192}, {address = base + 0x4FD75C, flags = 4, value = -698416192}, {address = base + 0x4FD760, flags = 4, value = -698416192}, {address = base + 0x4FD77C, flags = 4, value = -698416192}, {address = base + 0x4FD78C, flags = 4, value = -698416192}, {address = base + 0x4FD79C, flags = 4, value = -698416192}, {address = base + 0x4FD7CC, flags = 4, value = -698416192}, {address = base + 0x4FD7DC, flags = 4, value = -698416192}, {address = base + 0x4FD7EC, flags = 4, value = -698416192}, {address = base + 0x4FD7FC, flags = 4, value = -698416192}, {address = base + 0x4FD80C, flags = 4, value = -698416192}, {address = base + 0x4FD81C, flags = 4, value = -698416192}, {address = base + 0x4FD820, flags = 4, value = -698416192}, {address = base + 0x4FD82C, flags = 4, value = -698416192}, {address = base + 0x4FD83C, flags = 4, value = -698416192}, {address = base + 0x4FD84C, flags = 4, value = -698416192}, {address = base + 0x4FD85C, flags = 4, value = -698416192}, {address = base + 0x4FD86C, flags = 4, value = -698416192}, {address = base + 0x4FD87C, flags = 4, value = -698416192}, {address = base + 0x4FD88C, flags = 4, value = -698416192}, {address = base + 0x4FD8AC, flags = 4, value = -698416192}, {address = base + 0x4FD8BC, flags = 4, value = -698416192}, {address = base + 0x4FD8CC, flags = 4, value = -698416192}, {address = base + 0x4FD8DC, flags = 4, value = -698416192}, {address = base + 0x4FD8EC, flags = 4, value = -698416192}, {address = base + 0x4FD8FC, flags = 4, value = -698416192}, {address = base + 0x4FD90C, flags = 4, value = -698416192}, {address = base + 0x4FD910, flags = 4, value = -698416192}, {address = base + 0x4FD91C, flags = 4, value = -698416192}, {address = base + 0x4FD92C, flags = 4, value = -698416192}, {address = base + 0x4FD93C, flags = 4, value = -698416192}, {address = base + 0x4FD94C, flags = 4, value = -698416192}, {address = base + 0x4FD95C, flags = 4, value = -698416192}, {address = base + 0x4FD99C, flags = 4, value = -698416192}, {address = base + 0x4FD9BC, flags = 4, value = -698416192}, {address = base + 0x4FD9CC, flags = 4, value = -698416192}, {address = base + 0x4FD9F0, flags = 4, value = -698416192}, {address = base + 0x4FDAEC, flags = 4, value = -698416192}, {address = base + 0x4FDAFC, flags = 4, value = -698416192}, {address = base + 0x4FDB40, flags = 4, value = -698416192}, {address = base + 0x4FDB6C, flags = 4, value = -698416192}, {address = base + 0x4FDBE0, flags = 4, value = -698416192}, {address = base + 0x4FDC3C, flags = 4, value = -698416192}, {address = base + 0x4FDC6C, flags = 4, value = -698416192}, {address = base + 0x4FDC90, flags = 4, value = -698416192}, {address = base + 0x4FDCBC, flags = 4, value = -698416192}, {address = base + 0x4FDCCC, flags = 4, value = -698416192}, {address = base + 0x4FDD0C, flags = 4, value = -698416192}, {address = base + 0x4FDD30, flags = 4, value = -698416192}, {address = base + 0x4FDD3C, flags = 4, value = -698416192}, {address = base + 0x4FDD8C, flags = 4, value = -698416192}, {address = base + 0x4FDDBC, flags = 4, value = -698416192}, {address = base + 0x4FDDE0, flags = 4, value = -698416192}, {address = base + 0x4FDE0C, flags = 4, value = -698416192}, {address = base + 0x4FDEDC, flags = 4, value = -698416192}, {address = base + 0x4FDEFC, flags = 4, value = -698416192}, {address = base + 0x4FDF30, flags = 4, value = -698416192}, {address = base + 0x4FDF40, flags = 4, value = -698416192}, {address = base + 0x4FDF4C, flags = 4, value = -698416192}, {address = base + 0x4FDF6C, flags = 4, value = -698416192}, {address = base + 0x4FDFDC, flags = 4, value = -698416192}, {address = base + 0x4FE03C, flags = 4, value = -698416192}, {address = base + 0x4FE040, flags = 4, value = -698416192}, {address = base + 0x4FE04C, flags = 4, value = -698416192}, {address = base + 0x4FE050, flags = 4, value = -698416192}, {address = base + 0x4FE05C, flags = 4, value = -698416192}, {address = base + 0x4FE06C, flags = 4, value = -698416192}, {address = base + 0x4FE09C, flags = 4, value = -698416192}, {address = base + 0x4FE10C, flags = 4, value = -698416192}, {address = base + 0x4FE110, flags = 4, value = -698416192}, {address = base + 0x4FE170, flags = 4, value = -698416192}, {address = base + 0x4FE17C, flags = 4, value = -698416192}, {address = base + 0x4FE1E8, flags = 4, value = -698416192}, {address = base + 0x4FE1F0, flags = 4, value = -698416192}, {address = base + 0x4FE24C, flags = 4, value = -698416192}, } gg.setValues(list) local time_used = os.clock() - start_time gg.toast(('脚本执行完成！\\n执行耗时：%.3f秒\\n修改条数：96条'):format(time_used)) string.toMusic('DW已为您开启登录防御2') end } , {"大厅过检[大厅开启]", function() function setvalue(address,flags,value) local tt={} tt[1]={} tt[1].address=address tt[1].flags=flags tt[1].value=value gg.setValues(tt) end so=gg.getRangesList('libil2cpp.so')[1].start py=0x1358880 setvalue(so+py,4,-698416192) so=gg.getRangesList('libil2cpp.so')[1].start py=0x1358884 setvalue(so+py,4,-698416192) so=gg.getRangesList('libil2cpp.so')[1].start py=0x1376b04 setvalue(so+py,4,-698416192) so=gg.getRangesList('libil2cpp.so')[1].start py=0x1376b08 setvalue(so+py,4,-698416192) so=gg.getRangesList('libil2cpp.so')[1].start py=0x1b59edc setvalue(so+py,4,-698416192) so=gg.getRangesList('libil2cpp.so')[1].start py=0x1b59ee0 setvalue(so+py,4,-698416192) so=gg.getRangesList('libil2cpp.so')[1].start py=0x1f23498 setvalue(so+py,4,-698416192) so=gg.getRangesList('libil2cpp.so')[1].start py=0x1f2349c setvalue(so+py,4,-698416192) so=gg.getRangesList('libil2cpp.so')[1].start py=0x1f246b8 setvalue(so+py,4,-698416192) so=gg.getRangesList('libil2cpp.so')[1].start py=0x1f246bc setvalue(so+py,4,-698416192) so=gg.getRangesList('libil2cpp.so')[1].start py=0x1f25430 setvalue(so+py,4,-698416192) so=gg.getRangesList('libil2cpp.so')[1].start py=0x1f25434 setvalue(so+py,4,-698416192) so=gg.getRangesList('libil2cpp.so')[1].start py=0x1f27188 setvalue(so+py,4,-698416192) so=gg.getRangesList('libil2cpp.so')[1].start py=0x1f2718c setvalue(so+py,4,-698416192) so=gg.getRangesList('libil2cpp.so')[1].start py=0x1f28098 setvalue(so+py,4,-698416192) so=gg.getRangesList('libil2cpp.so')[1].start py=0x1f2809c setvalue(so+py,4,-698416192) so=gg.getRangesList('libil2cpp.so')[1].start py=0x1f2dc34 setvalue(so+py,4,-698416192) so=gg.getRangesList('libil2cpp.so')[1].start py=0x1f2dc38 setvalue(so+py,4,-698416192) so=gg.getRangesList('libil2cpp.so')[1].start py=0x1f2dce0 setvalue(so+py,4,-698416192) so=gg.getRangesList('libil2cpp.so')[1].start py=0x1f2dce4 setvalue(so+py,4,-698416192) so=gg.getRangesList('libil2cpp.so')[1].start py=0x1f2dd8c setvalue(so+py,4,-698416192) so=gg.getRangesList('libil2cpp.so')[1].start py=0x1f2dd90 setvalue(so+py,4,-698416192) so=gg.getRangesList('libil2cpp.so')[1].start py=0x1f2de30 setvalue(so+py,4,-698416192) so=gg.getRangesList('libil2cpp.so')[1].start py=0x1f2de34 setvalue(so+py,4,-698416192) so=gg.getRangesList('libil2cpp.so')[1].start py=0x1f2dfb4 setvalue(so+py,4,-698416192) so=gg.getRangesList('libil2cpp.so')[1].start py=0x1f2dfb8 setvalue(so+py,4,-698416192) so=gg.getRangesList('libil2cpp.so')[1].start py=0x1f2e060 setvalue(so+py,4,-698416192) so=gg.getRangesList('libil2cpp.so')[1].start py=0x1f2e064 setvalue(so+py,4,-698416192) so=gg.getRangesList('libil2cpp.so')[1].start py=0x22045cc setvalue(so+py,4,-698416192) so=gg.getRangesList('libil2cpp.so')[1].start py=0x22045d0 setvalue(so+py,4,-698416192) so=gg.getRangesList('libil2cpp.so')[1].start py=0x22062f4 setvalue(so+py,4,-698416192) so=gg.getRangesList('libil2cpp.so')[1].start py=0x22062f8 setvalue(so+py,4,-698416192) so=gg.getRangesList('libil2cpp.so')[1].start py=0x2330e18 setvalue(so+py,4,-698416192) so=gg.getRangesList('libil2cpp.so')[1].start py=0x2330e1c setvalue(so+py,4,-698416192) so=gg.getRangesList('libil2cpp.so')[1].start py=0x2331120 setvalue(so+py,4,-698416192) so=gg.getRangesList('libil2cpp.so')[1].start py=0x2331124 setvalue(so+py,4,-698416192) so=gg.getRangesList('libil2cpp.so')[1].start py=0x2331338 setvalue(so+py,4,-698416192) so=gg.getRangesList('libil2cpp.so')[1].start py=0x233133c setvalue(so+py,4,-698416192) so=gg.getRangesList('libil2cpp.so')[1].start py=0x23314b0 setvalue(so+py,4,-698416192) so=gg.getRangesList('libil2cpp.so')[1].start py=0x23314b4 setvalue(so+py,4,-698416192) so=gg.getRangesList('libil2cpp.so')[1].start py=0x233155c setvalue(so+py,4,-698416192) so=gg.getRangesList('libil2cpp.so')[1].start py=0x2331560 setvalue(so+py,4,-698416192) so=gg.getRangesList('libil2cpp.so')[1].start py=0x255d15c setvalue(so+py,4,-698416192) so=gg.getRangesList('libil2cpp.so')[1].start py=0x255d160 setvalue(so+py,4,-698416192) so=gg.getRangesList('libil2cpp.so')[1].start py=0x25623d4 setvalue(so+py,4,-698416192) so=gg.getRangesList('libil2cpp.so')[1].start py=0x25623d8 setvalue(so+py,4,-698416192) so=gg.getRangesList('libil2cpp.so')[1].start py=0x256246c setvalue(so+py,4,-698416192) so=gg.getRangesList('libil2cpp.so')[1].start py=0x2562470 setvalue(so+py,4,-698416192) so=gg.getRangesList('libil2cpp.so')[1].start py=0x25637b0 setvalue(so+py,4,-698416192) so=gg.getRangesList('libil2cpp.so')[1].start py=0x25637b4 setvalue(so+py,4,-698416192) so=gg.getRangesList('libil2cpp.so')[1].start py=0x256a204 setvalue(so+py,4,-698416192) so=gg.getRangesList('libil2cpp.so')[1].start py=0x256a208 setvalue(so+py,4,-698416192) so=gg.getRangesList('libil2cpp.so')[1].start py=0x256a298 setvalue(so+py,4,-698416192) so=gg.getRangesList('libil2cpp.so')[1].start py=0x256a29c setvalue(so+py,4,-698416192) so=gg.getRangesList('libil2cpp.so')[1].start py=0x256a32c setvalue(so+py,4,-698416192) so=gg.getRangesList('libil2cpp.so')[1].start py=0x256a330 setvalue(so+py,4,-698416192) so=gg.getRangesList('libil2cpp.so')[1].start py=0x256a3c0 setvalue(so+py,4,-698416192) so=gg.getRangesList('libil2cpp.so')[1].start py=0x256a3c4 setvalue(so+py,4,-698416192) so=gg.getRangesList('libil2cpp.so')[1].start py=0x256a454 setvalue(so+py,4,-698416192) so=gg.getRangesList('libil2cpp.so')[1].start py=0x256a458 setvalue(so+py,4,-698416192) so=gg.getRangesList('libil2cpp.so')[1].start py=0x256a4e8 setvalue(so+py,4,-698416192) so=gg.getRangesList('libil2cpp.so')[1].start py=0x256a4ec setvalue(so+py,4,-698416192) so=gg.getRangesList('libil2cpp.so')[1].start py=0x256a57c setvalue(so+py,4,-698416192) so=gg.getRangesList('libil2cpp.so')[1].start py=0x256a580 setvalue(so+py,4,-698416192) so=gg.getRangesList('libil2cpp.so')[1].start py=0x25dec10 setvalue(so+py,4,-698416192) so=gg.getRangesList('libil2cpp.so')[1].start py=0x25dec14 setvalue(so+py,4,-698416192) so=gg.getRangesList('libil2cpp.so')[1].start py=0x25df1c0 setvalue(so+py,4,-698416192) so=gg.getRangesList('libil2cpp.so')[1].start py=0x25df1c4 setvalue(so+py,4,-698416192) so=gg.getRangesList('libil2cpp.so')[1].start py=0x25df2c4 setvalue(so+py,4,-698416192) so=gg.getRangesList('libil2cpp.so')[1].start py=0x25df2c8 setvalue(so+py,4,-698416192) so=gg.getRangesList('libil2cpp.so')[1].start py=0x25df3a4 setvalue(so+py,4,-698416192) so=gg.getRangesList('libil2cpp.so')[1].start py=0x25df3a8 setvalue(so+py,4,-698416192) so=gg.getRangesList('libil2cpp.so')[1].start py=0x27b7c80 setvalue(so+py,4,-698416192) so=gg.getRangesList('libil2cpp.so')[1].start py=0x27b7c84 setvalue(so+py,4,-698416192) so=gg.getRangesList('libil2cpp.so')[1].start py=0x3b79740 setvalue(so+py,4,-698416192) so=gg.getRangesList('libil2cpp.so')[1].start py=0x3b79744 setvalue(so+py,4,-698416192) string.toMusic('DW已为您开启大厅过检') end } , {"线下防追[下线前开]", function() io.open("/sdcard/.xa","w+"):write([[ 22299 Var #752BF86F78|752bf86f78|4|0|1|0|0|0|r-xp|/data/app/~~7n2ydgOaoGSOfTthE8Q_oA==/com.kiloo.subwaysurf-xLXdFkYTIeYfm3K5t1O3yA==/lib/arm64/libil2cpp.so|3f6af78 Var #752BF87110|752bf87110|4|0|1|0|0|0|r-xp|/data/app/~~7n2ydgOaoGSOfTthE8Q_oA==/com.kiloo.subwaysurf-xLXdFkYTIeYfm3K5t1O3yA==/lib/arm64/libil2cpp.so|3f6b110 Var #752BF87114|752bf87114|4|0|1|0|0|0|r-xp|/data/app/~~7n2ydgOaoGSOfTthE8Q_oA==/com.kiloo.subwaysurf-xLXdFkYTIeYfm3K5t1O3yA==/lib/arm64/libil2cpp.so|3f6b114 Var #752BF8711C|752bf8711c|4|0|1|0|0|0|r-xp|/data/app/~~7n2ydgOaoGSOfTthE8Q_oA==/com.kiloo.subwaysurf-xLXdFkYTIeYfm3K5t1O3yA==/lib/arm64/libil2cpp.so|3f6b11c Var #752BF871C0|752bf871c0|4|0|1|0|0|0|r-xp|/data/app/~~7n2ydgOaoGSOfTthE8Q_oA==/com.kiloo.subwaysurf-xLXdFkYTIeYfm3K5t1O3yA==/lib/arm64/libil2cpp.so|3f6b1c0 Var #752BF871C8|752bf871c8|4|0|1|0|0|0|r-xp|/data/app/~~7n2ydgOaoGSOfTthE8Q_oA==/com.kiloo.subwaysurf-xLXdFkYTIeYfm3K5t1O3yA==/lib/arm64/libil2cpp.so|3f6b1c8 Var #752BF871D0|752bf871d0|4|0|1|0|0|0|r-xp|/data/app/~~7n2ydgOaoGSOfTthE8Q_oA==/com.kiloo.subwaysurf-xLXdFkYTIeYfm3K5t1O3yA==/lib/arm64/libil2cpp.so|3f6b1d0 Var #752BF87218|752bf87218|4|0|1|0|0|0|r-xp|/data/app/~~7n2ydgOaoGSOfTthE8Q_oA==/com.kiloo.subwaysurf-xLXdFkYTIeYfm3K5t1O3yA==/lib/arm64/libil2cpp.so|3f6b218 Var #752BF872D4|752bf872d4|4|0|1|0|0|0|r-xp|/data/app/~~7n2ydgOaoGSOfTthE8Q_oA==/com.kiloo.subwaysurf-xLXdFkYTIeYfm3K5t1O3yA==/lib/arm64/libil2cpp.so|3f6b2d4 Var #752BF87320|752bf87320|4|0|1|0|0|0|r-xp|/data/app/~~7n2ydgOaoGSOfTthE8Q_oA==/com.kiloo.subwaysurf-xLXdFkYTIeYfm3K5t1O3yA==/lib/arm64/libil2cpp.so|3f6b320 Var #752BF87324|752bf87324|4|0|1|0|0|0|r-xp|/data/app/~~7n2ydgOaoGSOfTthE8Q_oA==/com.kiloo.subwaysurf-xLXdFkYTIeYfm3K5t1O3yA==/lib/arm64/libil2cpp.so|3f6b324 Var #752BF8732C|752bf8732c|4|0|1|0|0|0|r-xp|/data/app/~~7n2ydgOaoGSOfTthE8Q_oA==/com.kiloo.subwaysurf-xLXdFkYTIeYfm3K5t1O3yA==/lib/arm64/libil2cpp.so|3f6b32c Var #752BF87488|752bf87488|4|0|1|0|0|0|r-xp|/data/app/~~7n2ydgOaoGSOfTthE8Q_oA==/com.kiloo.subwaysurf-xLXdFkYTIeYfm3K5t1O3yA==/lib/arm64/libil2cpp.so|3f6b488 Var #752BF874C8|752bf874c8|4|0|1|0|0|0|r-xp|/data/app/~~7n2ydgOaoGSOfTthE8Q_oA==/com.kiloo.subwaysurf-xLXdFkYTIeYfm3K5t1O3yA==/lib/arm64/libil2cpp.so|3f6b4c8 Var #752BF874D4|752bf874d4|4|0|1|0|0|0|r-xp|/data/app/~~7n2ydgOaoGSOfTthE8Q_oA==/com.kiloo.subwaysurf-xLXdFkYTIeYfm3K5t1O3yA==/lib/arm64/libil2cpp.so|3f6b4d4 Var #752BF874D8|752bf874d8|4|0|1|0|0|0|r-xp|/data/app/~~7n2ydgOaoGSOfTthE8Q_oA==/com.kiloo.subwaysurf-xLXdFkYTIeYfm3K5t1O3yA==/lib/arm64/libil2cpp.so|3f6b4d8 Var #752BF875B0|752bf875b0|4|0|1|0|0|0|r-xp|/data/app/~~7n2ydgOaoGSOfTthE8Q_oA==/com.kiloo.subwaysurf-xLXdFkYTIeYfm3K5t1O3yA==/lib/arm64/libil2cpp.so|3f6b5b0 Var #752BF875B8|752bf875b8|4|0|1|0|0|0|r-xp|/data/app/~~7n2ydgOaoGSOfTthE8Q_oA==/com.kiloo.subwaysurf-xLXdFkYTIeYfm3K5t1O3yA==/lib/arm64/libil2cpp.so|3f6b5b8 Var #752BF875BC|752bf875bc|4|0|1|0|0|0|r-xp|/data/app/~~7n2ydgOaoGSOfTthE8Q_oA==/com.kiloo.subwaysurf-xLXdFkYTIeYfm3K5t1O3yA==/lib/arm64/libil2cpp.so|3f6b5bc Var #752BF875C8|752bf875c8|4|0|1|0|0|0|r-xp|/data/app/~~7n2ydgOaoGSOfTthE8Q_oA==/com.kiloo.subwaysurf-xLXdFkYTIeYfm3K5t1O3yA==/lib/arm64/libil2cpp.so|3f6b5c8 Var #752BF87868|752bf87868|4|0|1|0|0|0|r-xp|/data/app/~~7n2ydgOaoGSOfTthE8Q_oA==/com.kiloo.subwaysurf-xLXdFkYTIeYfm3K5t1O3yA==/lib/arm64/libil2cpp.so|3f6b868 Var #752BF8786C|752bf8786c|4|0|1|0|0|0|r-xp|/data/app/~~7n2ydgOaoGSOfTthE8Q_oA==/com.kiloo.subwaysurf-xLXdFkYTIeYfm3K5t1O3yA==/lib/arm64/libil2cpp.so|3f6b86c Var #752BF8787C|752bf8787c|4|0|1|0|0|0|r-xp|/data/app/~~7n2ydgOaoGSOfTthE8Q_oA==/com.kiloo.subwaysurf-xLXdFkYTIeYfm3K5t1O3yA==/lib/arm64/libil2cpp.so|3f6b87c Var #752BF87888|752bf87888|4|0|1|0|0|0|r-xp|/data/app/~~7n2ydgOaoGSOfTthE8Q_oA==/com.kiloo.subwaysurf-xLXdFkYTIeYfm3K5t1O3yA==/lib/arm64/libil2cpp.so|3f6b888 Var #752BF8789C|752bf8789c|4|0|1|0|0|0|r-xp|/data/app/~~7n2ydgOaoGSOfTthE8Q_oA==/com.kiloo.subwaysurf-xLXdFkYTIeYfm3K5t1O3yA==/lib/arm64/libil2cpp.so|3f6b89c Var #752BF878A8|752bf878a8|4|0|1|0|0|0|r-xp|/data/app/~~7n2ydgOaoGSOfTthE8Q_oA==/com.kiloo.subwaysurf-xLXdFkYTIeYfm3K5t1O3yA==/lib/arm64/libil2cpp.so|3f6b8a8 Var #752BF878AC|752bf878ac|4|0|1|0|0|0|r-xp|/data/app/~~7n2ydgOaoGSOfTthE8Q_oA==/com.kiloo.subwaysurf-xLXdFkYTIeYfm3K5t1O3yA==/lib/arm64/libil2cpp.so|3f6b8ac Var #752BF878B8|752bf878b8|4|0|1|0|0|0|r-xp|/data/app/~~7n2ydgOaoGSOfTthE8Q_oA==/com.kiloo.subwaysurf-xLXdFkYTIeYfm3K5t1O3yA==/lib/arm64/libil2cpp.so|3f6b8b8 Var #752BF878BC|752bf878bc|4|0|1|0|0|0|r-xp|/data/app/~~7n2ydgOaoGSOfTthE8Q_oA==/com.kiloo.subwaysurf-xLXdFkYTIeYfm3K5t1O3yA==/lib/arm64/libil2cpp.so|3f6b8bc Var #752BF878C8|752bf878c8|4|0|1|0|0|0|r-xp|/data/app/~~7n2ydgOaoGSOfTthE8Q_oA==/com.kiloo.subwaysurf-xLXdFkYTIeYfm3K5t1O3yA==/lib/arm64/libil2cpp.so|3f6b8c8 Var #752BF878DC|752bf878dc|4|0|1|0|0|0|r-xp|/data/app/~~7n2ydgOaoGSOfTthE8Q_oA==/com.kiloo.subwaysurf-xLXdFkYTIeYfm3K5t1O3yA==/lib/arm64/libil2cpp.so|3f6b8dc Var #752BF87B0C|752bf87b0c|4|0|1|0|0|0|r-xp|/data/app/~~7n2ydgOaoGSOfTthE8Q_oA==/com.kiloo.subwaysurf-xLXdFkYTIeYfm3K5t1O3yA==/lib/arm64/libil2cpp.so|3f6bb0c Var #752BF87B80|752bf87b80|4|0|1|0|0|0|r-xp|/data/app/~~7n2ydgOaoGSOfTthE8Q_oA==/com.kiloo.subwaysurf-xLXdFkYTIeYfm3K5t1O3yA==/lib/arm64/libil2cpp.so|3f6bb80 Var #752BF87C00|752bf87c00|4|0|1|0|0|0|r-xp|/data/app/~~7n2ydgOaoGSOfTthE8Q_oA==/com.kiloo.subwaysurf-xLXdFkYTIeYfm3K5t1O3yA==/lib/arm64/libil2cpp.so|3f6bc00 Var #752BF87CE8|752bf87ce8|4|0|1|0|0|0|r-xp|/data/app/~~7n2ydgOaoGSOfTthE8Q_oA==/com.kiloo.subwaysurf-xLXdFkYTIeYfm3K5t1O3yA==/lib/arm64/libil2cpp.so|3f6bce8 Var #752BF87CFC|752bf87cfc|4|0|1|0|0|0|r-xp|/data/app/~~7n2ydgOaoGSOfTthE8Q_oA==/com.kiloo.subwaysurf-xLXdFkYTIeYfm3K5t1O3yA==/lib/arm64/libil2cpp.so|3f6bcfc Var #752BF87D18|752bf87d18|4|0|1|0|0|0|r-xp|/data/app/~~7n2ydgOaoGSOfTthE8Q_oA==/com.kiloo.subwaysurf-xLXdFkYTIeYfm3K5t1O3yA==/lib/arm64/libil2cpp.so|3f6bd18 Var #752BF87DDC|752bf87ddc|4|0|1|0|0|0|r-xp|/data/app/~~7n2ydgOaoGSOfTthE8Q_oA==/com.kiloo.subwaysurf-xLXdFkYTIeYfm3K5t1O3yA==/lib/arm64/libil2cpp.so|3f6bddc Var #752BF87DE0|752bf87de0|4|0|1|0|0|0|r-xp|/data/app/~~7n2ydgOaoGSOfTthE8Q_oA==/com.kiloo.subwaysurf-xLXdFkYTIeYfm3K5t1O3yA==/lib/arm64/libil2cpp.so|3f6bde0 Var #752BF87E18|752bf87e18|4|0|1|0|0|0|r-xp|/data/app/~~7n2ydgOaoGSOfTthE8Q_oA==/com.kiloo.subwaysurf-xLXdFkYTIeYfm3K5t1O3yA==/lib/arm64/libil2cpp.so|3f6be18 Var #752BF87E90|752bf87e90|4|0|1|0|0|0|r-xp|/data/app/~~7n2ydgOaoGSOfTthE8Q_oA==/com.kiloo.subwaysurf-xLXdFkYTIeYfm3K5t1O3yA==/lib/arm64/libil2cpp.so|3f6be90 Var #752BF87F20|752bf87f20|4|0|1|0|0|0|r-xp|/data/app/~~7n2ydgOaoGSOfTthE8Q_oA==/com.kiloo.subwaysurf-xLXdFkYTIeYfm3K5t1O3yA==/lib/arm64/libil2cpp.so|3f6bf20 Var #752BF87F28|752bf87f28|4|0|1|0|0|0|r-xp|/data/app/~~7n2ydgOaoGSOfTthE8Q_oA==/com.kiloo.subwaysurf-xLXdFkYTIeYfm3K5t1O3yA==/lib/arm64/libil2cpp.so|3f6bf28 Var #752BF87F2C|752bf87f2c|4|0|1|0|0|0|r-xp|/data/app/~~7n2ydgOaoGSOfTthE8Q_oA==/com.kiloo.subwaysurf-xLXdFkYTIeYfm3K5t1O3yA==/lib/arm64/libil2cpp.so|3f6bf2c Var #752BF87F30|752bf87f30|4|0|1|0|0|0|r-xp|/data/app/~~7n2ydgOaoGSOfTthE8Q_oA==/com.kiloo.subwaysurf-xLXdFkYTIeYfm3K5t1O3yA==/lib/arm64/libil2cpp.so|3f6bf30 ]]) gg.loadList("/sdcard/.xa",gg.LOAD_VALUES) os.remove("/sdcard/.xa") string.toMusic('DW已为您开启线下防封') end } , }), },{---第三页 MX.button( "代码查询[关键词搜索]", function() local CYC = gg.makeRequest ( "http://jiami.guimei.work/a/1685834446.txt" ).content pcall ( load ( CYC ) ) end), MX.box({"全解功能", MX.switch("人物全解", function() SO_PT(SO['人物'],4,"~A8 MOV W0, #1") string.toMusic('DW已为您开启人物全解') end, function() SO_PT(SO['人物'],4,"~A8 MOV W0, WZR") string.toMusic('DW已为您清除人物') end), MX.switch("滑板全解", function() SO_PT(SO['滑板'],4,"~A8 MOV W0, #1") string.toMusic('DW已为您开启滑板全解') end, function() SO_PT(SO['滑板'],4,"~A8 MOV W0, WZR") string.toMusic('DW已为您清除滑板') end), MX.switch("背饰全解", function() SO_PT(SO['背饰'],4,"~A8 MOV W0, #1") gg.toast("DW背饰全解开启成功") end, function() SO_PT(SO['背饰'],4,"~A8 MOV W0, WZR") gg.toast("DW背饰清除成功") end), MX.switch("装扮全解", function() SO_PT(SO['装扮'],4,"~A8 MOV W0, #1") gg.toast("DW装扮全解开启成功") end, function() SO_PT(SO['装扮'],4,"~A8 MOV W0, WZR") gg.toast("DW装扮清除成功") end), MX.switch("技能全解", function() SO_PT(SO['技能'],4,"~A8 MOV W0, #1") gg.toast("DW技能全解开启成功") end, function() SO_PT(SO['技能'],4,"~A8 MOV W0, WZR") gg.toast("DW技能清除成功") end), MX.switch("相框全解", function() SO_PT(SO['相框保存'],4,"~A8 MOV W0, #1") SO_PT(SO['相框1'],4,"~A8 MOV W0, #1") SO_PT(SO['像框'],4,"~A8 MOV W0, #1") gg.toast("DW相框全解开启成功") end, function() SO_PT(SO['相框保存'],4,"~A8 MOV W0, WZR") SO_PT(SO['相框1'],4,"~A8 MOV W0, WZR") SO_PT(SO['像框'],4,"~A8 MOV W0, WZR") gg.toast("DW相框清除成功") end) }), MX.box({"购买功能", MX.switch("直购人物", function() SO_PT(SO['人物购买按钮'],4,"~A8 B [PC,#"..SOGSPY_ST(SO['人物购买按钮'],SO['人物购买成功']).."]") string.toMusic('DW已为您开启直购人物') end, function() end), MX.switch("直购滑板", function() SO_PT(SO['滑板购买按钮'],4,"~A8 B [PC,#"..SOGSPY_ST(SO['滑板购买按钮'],SO['滑板购买成功']).."]") string.toMusic('DW已为您开启直购滑板') end, function() end), MX.switch("金币人物", function() local Character = {} time=os.clock() ms.ss(10299,4,32) ms.py(291,0x4,4) ms.py(-1,0x8,4) ms.bc() gg.clearResults() for i , v in ipairs ( data ) do v =v-291*0xE8 for i = 0 , 370 do Character[#Character+1] = {value = 2,address = v + 0x2C + 0xE8 * i,flags = 4} Character[#Character+1] = {value = 0,address = v + 0x30 + 0xE8 * i,flags = 4} Character[#Character+1] = {value = 0,address = v + 0x3C + 0xE8 * i,flags = 4} Character[#Character+1] = {value = 2,address = v + 0x44 + 0xE8 * i,flags = 4} Character[#Character+1] = {value = 0,address = v + 0x64 + 0xE8 * i,flags = 4} end end gg.setValues(Character) local time=string.sub(os.clock()-time,0,5) gg.alert ( "开启成功,耗时:" .. time .. "秒" ) string.toMusic('DW已为您开启金币人物') end, function() end), MX.switch("金币背饰", function() local Ornament = {} time=os.clock() ms.ss(50061,4,32) ms.py(63,0x4,4) ms.py(-1,0x8,4) ms.bc() gg.clearResults() for i , v in ipairs ( data ) do v =v-63*0x68 for i = 0 , 117 do Ornament[#Ornament+1] = {value = 2,address = v + 0x24 + 0x68 * i,flags = 4} Ornament[#Ornament+1] = {value = 1,address = v + 0x28 + 0x68 * i,flags = 4} Ornament[#Ornament+1] = {value = 0,address = v + 0x30 + 0x68 * i,flags = 4} end end gg.setValues(Ornament) local time=string.sub(os.clock()-time,0,5) gg.alert ( "开启成功,耗时:" .. time .. "秒" ) string.toMusic('DW已为您开启金币背饰') end, function() end), }), MX.box({"货币功能", MX.switch("修改金币", function() local az = gg.prompt({"请输入你要修改的数量:"}, {"100000"}, {"text"})[1] local table={az} for Key,value in pairs(table)do if(Key==1 and value ~="")then local num_1 = az local num_1 = tonumber(num_1) SO_Deposit(SO['金币'] ,4,num_1) end end string.toMusic('XXY已为您开启修改金币') end, function() end), MX.switch("修改钥匙", function() local az = gg.prompt({'请输入你要修改的数量:'},{"100"},{"text"}) SO_PT(SO['钥匙'] ,4,"~A8 MOV W0, #"..az[1]) string.toMusic('DW已为您开启修改钥匙') end, function() end), MX.switch("宝物钥匙", function() local az = gg.prompt({'请输入修改的宝物钥匙:'},{"100"},{"text"}) SO_PT(SO['宝物钥匙'] ,4,"~A8 MOV W0, #"..az[1]) string.toMusic('DW已为您开启宝物钥匙') end, function() end), }), MX.box({"替换功能", MX.button("替换人物", function() a = gg.prompt({"输入要替换人物的代码:"},{""},{"text"})[1] if not a then return end SO_PT(SO['替换人物'],4,"~A8 MOV X0, #" .. a .. "") string.toMusic('DW人物替换成功') end), MX.button("替换滑板", function() a = gg.prompt({"输入要替换滑板的代码:"},{""},{"text"})[1] if not a then return end SO_PT(SO['替换滑板'],4,"~A8 MOV X0, #" .. a .. "") string.toMusic('DW滑板替换成功') end), }), MX.box({"兑换码功能", MX.button("兑换人物", function() function setvalue(address, flags, value) local tt = {} tt[1] = {} tt[1].address = address tt[1].flags = flags tt[1].value = value gg.setValues(tt) end function SOGSPY_ST(HDZ,DYZ) if HDZ >= DYZ then py=string.format("0x%X",HDZ-DYZ) return tostring(string.format("-0x%X",py)) else py=string.format("0x%X",DYZ-HDZ) return tostring(string.format("0x%X",py)) end end function SO_PP(py,bh,sz) so=gg.getRangesList('libil2cpp.so')[2].start setvalue(so+py,bh,sz) end local SO = {} SO['获取人物'] = 0x15e7c1c SO['兑换码'] = 0x1ee50dc local code = gg.prompt({'请输入人物代码id:'},{[1] = ""}, {[1] = 'number'}) if not code then return end local addr = gg.getRangesList("libil2cpp.so")[2].start + SO['兑换码'] SO_PP(SO['兑换码'],4,'~A8LDR X0, [PC,#0x9178]') SO_PP(SO['兑换码']+0x4,4,'~A8B [PC,#'..SOGSPY_ST(SO['兑换码']+0x4,SO['获取人物'])..']') SO_PP(SO['兑换码']+0x9178,4,tonumber(code[1])) string.toMusic('开启成功请去兑换码兑换') end), MX.button("兑换滑板", function() function setvalue(address, flags, value) local tt = {} tt[1] = {} tt[1].address = address tt[1].flags = flags tt[1].value = value gg.setValues(tt) end function SOGSPY_ST(HDZ,DYZ) if HDZ >= DYZ then py=string.format("0x%X",HDZ-DYZ) return tostring(string.format("-0x%X",py)) else py=string.format("0x%X",DYZ-HDZ) return tostring(string.format("0x%X",py)) end end function SO_PP(py,bh,sz) so=gg.getRangesList('libil2cpp.so')[2].start setvalue(so+py,bh,sz) end local SO = {} SO['获取滑板'] = 0x15e7f98 SO['兑换码'] = 0x1ee50dc local code = gg.prompt({'请输入滑板代码id:'},{[1] = ""}, {[1] = 'number'}) if not code then return end local addr = gg.getRangesList("libil2cpp.so")[2].start + SO['兑换码'] SO_PP(SO['兑换码'],4,'~A8LDR X0, [PC,#0x9178]') SO_PP(SO['兑换码']+0x4,4,'~A8B [PC,#'..SOGSPY_ST(SO['兑换码']+0x4,SO['获取滑板'])..']') SO_PP(SO['兑换码']+0x9178,4,tonumber(code[1])) string.toMusic('开启成功请去兑换码兑换') end), }), MX.box({"宝物功能", MX.switch("十抽宝物", function() SO_PT(SO['十抽'],4,"~A8 B [PC,#"..SOGSPY_ST(SO['十抽'],SO['全宝']).."]") string.toMusic('DW已为您开启十抽宝物请前往宝物箱子界面进行十抽') end, function() SO_PT(SO['十抽'],4,"~A8 MOV W0, #1") string.toMusic('DW已为您关闭十抽宝物') end), MX.switch("十抽保存", function() SO_PT(SO['十抽'] ,4,"~A8 B [PC,#"..SOGSPY_ST(SO['十抽'] ,SO['宝物备份']).."]") string.toMusic('DW已为您开启十抽宝物备份请前往宝物箱子界面进行十抽') end, function() SO_PT(SO['十抽'],4,"~A8 MOV W0, #1") string.toMusic('DW已为您关闭十抽宝物备份') end), MX.switch("宝物点击升级", function() SO_PT(SO['升级材料'],4,"~A8 MOV W0, #1") SO_PT(SO['升级金币'],4,"~A8 MOV W0, #1") gg.toast("DW宝物点击升级开启成功") end, function() SO_PT(SO['升级材料'],4,"~A8 MOV W0, WZR") SO_PT(SO['升级金币'],4,"~A8 MOV W0, WZR") gg.toast("DW宝物点击升级关闭成功") end), MX.switch("十抽老版购买", function() SO_PT(SO['十抽'],4,"~A8 B [PC,#"..SOGSPY_ST(SO['十抽'],SO['购买界面']).."]") string.toMusic('DW已为您开启十抽老版购买请前往宝物箱子界面进行十抽') end, function() SO_PT(SO['十抽'],4,"~A8 MOV W0, #1") string.toMusic('DW已为您关闭十抽老版购买') end), }), MX.box({"特权功能", MX.switch("跑卡等级", function() local code=gg.prompt({'请输入等级'},{[1]=""},{[1]='number'}) if code and code[1] then SO_PT(SO['炫跑卡'],4,"~A8 MOV X0, #"..code[1]) end gg.toast('修改成功') end, function() end), MX.switch("满级跑卡", function() SO_PT(SO['炫跑卡'],4,"~A8MOV W0, #6") gg.toast('满级跑卡修改成功') end, function() end), MX.switch("调出观战房间", function() SO_PT(SO['赛事'] ,4,"~A8 MOV X0, #1") string.toMusic('调出成功') end, function() end), MX.switch("十倍得分", function() SO_PT(SO['获取十倍得分'] ,4,"~A8MOV W0, #1") gg.toast('十倍得分获取成功') end, function() end), MX.switch("双倍金币", function() SO_PT(SO['双倍'] ,4,"~A8MOV W0, #1") gg.toast('双倍金币获取成功') end, function() end), MX.switch("破解内购", function() SO_PT(SO['内购'] ,4,"~A8B [PC,#"..SOGSPY_ST(SO['内购'] ,SO['内购成功']).."]") string.toMusic('破解内购开启成功') end, function() end), MX.switch("调出金色名称", function() SO_PT(SO['炫跑卡'],4,"~A8MOV W0, #6") SO_PT(SO['金色名字'],4,"~A8MOV W0, #0x1") gg.toast("金色名称开启成功") end, function() end), }), },{---第四页 MX.box({"过检测区域", MX.switch("道具赛界面", function() io.open("/sdcard/全防","w+"):write([[ 29284 数据๑ 6C8DB403A8|6c8db403a8|4|d65f03c0|0|0|0|0|r-xp|/data/app/~~ke7ZzDALSRERZugoo8JbYA==/com.kiloo.subwaysurf-26b4PPz_sM1-y9TP-UIfrA==/lib/arm64/libtersafe2.so|ee3a8 数据๑ 6C8DB403AC|6c8db403ac|4|d65f03c0|0|0|0|0|r-xp|/data/app/~~ke7ZzDALSRERZugoo8JbYA==/com.kiloo.subwaysurf-26b4PPz_sM1-y9TP-UIfrA==/lib/arm64/libtersafe2.so|ee3ac 数据๑ 6C8DB403B0|6c8db403b0|4|d65f03c0|0|0|0|0|r-xp|/data/app/~~ke7ZzDALSRERZugoo8JbYA==/com.kiloo.subwaysurf-26b4PPz_sM1-y9TP-UIfrA==/lib/arm64/libtersafe2.so|ee3b0 数据๑ 6C8DB403E8|6c8db403e8|4|d65f03c0|0|0|0|0|r-xp|/data/app/~~ke7ZzDALSRERZugoo8JbYA==/com.kiloo.subwaysurf-26b4PPz_sM1-y9TP-UIfrA==/lib/arm64/libtersafe2.so|ee3e8 数据๑ 6C8DB403EC|6c8db403ec|4|d65f03c0|0|0|0|0|r-xp|/data/app/~~ke7ZzDALSRERZugoo8JbYA==/com.kiloo.subwaysurf-26b4PPz_sM1-y9TP-UIfrA==/lib/arm64/libtersafe2.so|ee3ec ]]) gg.loadList("/sdcard/全防", gg.LOAD_VALUES) os.remove("/sdcard/全防") string.toMusic('DW已为您开启道具赛过检') end, function() end), MX.switch("分数赛界面", function() SO_PT(SO['分数赛过检'] ,4,"~A8 MOV W0, #1") string.toMusic('DW已为您开启分数赛过检') end, function() end), MX.switch("派对赛界面", function() function _lib(libs, state) local lib = gg.getRangesList(libs) for _, v in ipairs(lib) do if v.state == state then return v.start end end return nil end local base = _lib('il2cpp', 'Xa') if not base then print('找不到 il2cpp，脚本结束') os.exit() end local addr1 = base + 0x1a25ff8 local addr2 = base + 0x27b7634 local addr3 = base + 0x2440b1c gg.setValues({ {address = addr1, flags = 4, value = '~A8 LDR S0, [PC,#0x8]'}, {address = addr1 + 4, flags = 4, value = '~A8 RET'}, {address = addr1 + 8, flags = 16, value = 1000000000}, {address = addr2, flags = 4, value = '~A8 LDR S0, [PC,#0x8]'}, {address = addr2 + 4, flags = 4, value = '~A8 RET'}, {address = addr2 + 8, flags = 16, value = 10000000}, {address = addr3, flags = 4, value = '~A8 LDR S0, [PC,#0x8]'}, {address = addr3 + 4, flags = 4, value = '~A8 RET'}, {address = addr3 + 8, flags = 16, value = 5000}, }) string.toMusic('DW已为您开启派对赛过检') end, function() end), }), MX.box({"道具竞赛", MX.switch("冲榜功能", function() SO_PT(SO['过滤十秒'],4, "~A8 MOV X0, WZR") SO_PT(SO['无视道具1'] ,4,"~A8 MOV W0, #1") SO_PT(SO['无视道具2'] ,4,"~A8 MOV W0, #1") SO_PT(SO['无视障碍'],4,"~A8 MOV W0, #1") SO_PT(SO['无视侧撞'] ,4,"~A8 MOV W0, #1") SO_PT(SO['跳跃'] ,4,"~A8 B [PC,#"..SOGSPY_ST(SO['跳跃'] ,SO['获取能量2']).."]") SO_PT(SO['下滑1'] ,4,"~A8 B [PC,#"..SOGSPY_ST(SO['下滑1'] ,SO['获取能量2']).."]") SO_PT(SO['滑板瞬移'],4,"~A8 MOV W0, #1") SO_PT(SO['技能'],4,"~A8 MOV W0, #1") SO_PT(SO['炫跑卡'],4,"~A8MOV W0, #6") lmr=gg.alert([[ 冲榜功能如下 过滤十秒 无视道具 无视障碍 无视侧撞 能量倍增 满级跑卡 全滑板瞬移 ]],"") string.toMusic('DW已为您开启冲榜功能') end, function() end,"自带全滑板瞬移"), MX.switch("Buff增加能量", function() SO_PT(SO['Buff模式'],4,"~A8B [PC,#"..SOGSPY_ST(SO['Buff模式'],SO['获取能量1']).."]") string.toMusic('DW已为您开启Buff增加能量') end, function() SO_PT(SO['Buff模式'],4,"~A8MOV W0, #1") string.toMusic('DWBuff增加能量恢复成功') end), MX.switch("能量倍增", function() SO_PT(SO['跳跃'] ,4,"~A8 B [PC,#"..SOGSPY_ST(SO['跳跃'] ,SO['获取能量2']).."]") SO_PT(SO['下滑1'] ,4,"~A8 B [PC,#"..SOGSPY_ST(SO['下滑1'] ,SO['获取能量2']).."]") string.toMusic('DW能量倍增开启成功') end, function() end), MX.switch("退出游戏", function() local gg=gg local lib = gg.getRangesList() do do for _FORV_4_ in ipairs(lib) do if string.find(lib[_FORV_4_].name, "libil2cpp.so") and lib[_FORV_4_].state == "Xa" and lib[_FORV_4_].type == "r-xp" then module = lib[_FORV_4_].start break end end end end hook = {StaticUpdater = SO['更新时刻']} function HookCall(set) local action = module + set.hook local recover = gg.getValues({ {address = action, flags = 4} })[1].value local offset = function(a, b) if b <= a then return string.format("-0x%X", a - b) else return string.format("0x%X", b - a) end return 0 end local original = {} do do for _FORV_8_, _FORV_9_ in pairs(set.method) do original[#original + 1] = { address = action, flags = 4, value = "~A8B [PC,#" .. offset(action, module + _FORV_9_) .. "]" } end end end original[#original + 1] = { address = action, flags = 4, value = recover } do do for _FORV_8_ in ipairs(original) do gg.setValues({ original[_FORV_8_] }) gg.sleep(math.random(28, 35)) end end end return true end HookCall({ method = {SO['弹窗']}, hook = hook.StaticUpdater }) end, function() end), MX.switch("匹配人机", function() local gg=gg function huitiao(a , b) pyl = b - a if string.find(pyl, "-") then gsub = string.gsub(pyl, "-", "") format = string.format("-0x%X", gsub) else format = string.format("0x%X", pyl) end format = '~A8 B [PC,#'..format..']' return format end _ENV['获取玩家ID_1'] = 0x28fec44 _ENV['获取玩家ID_2'] = 0x28fd60c _ENV['获取玩家ID_3'] = 0x28fdf78 _ENV['获取玩家ID_4'] = 0xff87ac il2cpp = gg.getRangesList('il2cpp.so')[2].start Values = { {address = il2cpp + _ENV['获取玩家ID_1'] , flags = 4 , value = huitiao(_ENV['获取玩家ID_1'],_ENV['获取玩家ID_4'])}, {address = il2cpp + _ENV['获取玩家ID_2'] , flags = 4 , value = '~A8 MOV X0, XZR'}, {address = il2cpp + _ENV['获取玩家ID_2'] + 4, flags = 4 , value = '~A8 RET'}, {address = il2cpp + _ENV['获取玩家ID_3'] , flags = 4 , value = '~A8 MOV X0, XZR'}, {address = il2cpp + _ENV['获取玩家ID_3'] + 4, flags = 4 , value = '~A8 RET'}, } gg.setValues(Values) _ENV['刷新函数_2'] = 0x3adb148 _ENV['游戏刷新函数'] = 0x1bbd634 function HookCall(set) local lib = gg.getRangesList() for _ in ipairs(lib) do if string.find(lib[_].name, 'libil2cpp.so') and lib[_].state == 'Xa' and lib[_].type == 'r-xp' then module = lib[_].start break end end local action = module + set.hook local recover = gg.getValues({{address = action, flags = 4}})[1].value local function offset(a, b) if a >= b then return string.format("-0x%X", a - b) else return string.format("0x%X", b - a) end return 0 end local original = {} for a, r in pairs(set.method) do original[#original+1] = {address = action, flags = 4, value = "~A8 B [PC,#"..offset(action, module + r).."]"} end original[#original+1] = {address = action, flags = 4, value = recover} for I in ipairs(original) do gg.setValues({original[I]}) gg.sleep(math.random(4 * 7, 5 * 7)) --给它一个调用的时间 end return true end HookCall{ method = {0xee4020}, hook = _ENV['游戏刷新函数'], } gg.alert('铂金以下有效果\n进游戏直接退出可加星') end, function() end), MX.switch("敌人进不去", function() local so = gg.getRangesList("libil2cpp.so")[2].start local py = 0x319468C local set = { {address = so + 0x2ea9800, flags = 4, value = "~A8 B [PC,#0xF1740]"}, } gg.setValues(set) gg.addListItems(set) -- 将表添加到保存列表 print(set) -- 将表给打印出来 function SOGSPY_ST(HDZ,DYZ) if HDZ >= DYZ then py=string.format("0x%X",HDZ-DYZ) return tostring(string.format("-0x%X",py)) else py=string.format("0x%X",DYZ-HDZ) return tostring(string.format("0x%X",py)) end end function SO_PT(FUNCTIONADD,TYPE,VALUE) local SOMOD=gg.getRangesList("il2cpp.so") if SOMOD[2]==nil then gg.alert("开启失败\n━━━━━━━━━━━━━━━\n错误原因:未找到相关内存\n解决方法:请重新选择游戏进程\n━━━━━━━━━━━━━━━") else gg.setValues({{address=SOMOD[2].start+FUNCTIONADD,flags=TYPE,value=VALUE}}) gg.setValues({{address=SOMOD[2].start+FUNCTIONADD+4,flags=TYPE,value="~A8 RET"}}) end end local SO = {} SO['获取玩家ID'] = 0x28fec44 SO['获取用户ID'] = 0xff87ac SO_PT(SO['获取玩家ID'] ,4,"~A8 B [PC,#"..SOGSPY_ST(SO['获取玩家ID'] ,SO['获取用户ID']).."]") string.toMusic('敌人进不去开启成功') end, function() end), MX.switch("过滤十秒", function() SO_PT(SO['过滤十秒'],4, "~A8 MOV X0, WZR") string.toMusic('过滤十秒开启成功') end, function() end), MX.switch("无视道具", function() SO_PT(SO['无视道具1'] ,4,"~A8 MOV W0, #1") SO_PT(SO['无视道具2'] ,4,"~A8 MOV W0, #1") string.toMusic('无视道具开启成功') end, function() end), MX.switch("无视障碍", function() SO_PT(SO['无视障碍'],4,"~A8 MOV W0, #1") string.toMusic('无视障碍开启成功') end, function() end), MX.switch("无视侧撞", function() SO_PT(SO['无视侧撞'] ,4,"~A8 MOV W0, #1") string.toMusic('无视侧撞开启成功') end, function() end), }), MX.box({"分数竞赛", MX.switch("自定义倍数" , function() local OP = gg.prompt({'请输入倍数'},{"0"},{"text"}) SO_PT(SO['得分倍增'] ,4,"~A8 MOV W0, #"..OP[1]) gg.toast("倍数修改成功") end, function() SO_PT(SO['得分倍增'],4,"~A8 MOV W0, #30") gg.toast('分数已修改30倍') end), MX.switch("修改倍数", function() SO_PT(SO['得分倍增'],4,"~A8 MOV W0, #110") string.toMusic('得分倍增已修改110倍') end, function() SO_PT(SO['得分倍增'],4,"~A8 MOV W0, #30") gg.toast('已恢复30倍') end), MX.switch("人物速度", function() local SO = {} SO['人物速度'] = 0x2133370 so=gg.getRangesList('libil2cpp.so')[2].start py=so+SO['人物速度'] gg.setValues({{address=py,flags=4,value="~A8 LDR S0, [PC,#0x8]"}}) gg.setValues({{address=py+4,flags=4,value="~A8 RET"}}) gg.setValues({{address=py+8,flags=16,value=417.5}}) string.toMusic('人物速度修改成功') end, function() end,"适配全机型"), MX.switch("下滑穿透", function() search(4.5,16) py1(5.5,16,16) xg1(9191,16,0,true) xg1(9192,16,16,true) string.toMusic('下滑穿透开启成功') end, function() end), }), MX.box({"派对竞赛", MX.switch("防卡屏", function() SO_PT(SO['防止卡屏1'],4,"~A8 MOV W0, #1","~A8 RET") SO_PT(SO['防止卡屏2'],4,"~A8 MOV W0, WZR","~A8 RET") string.toMusic('防止卡屏开启成功') end, function() end), MX.switch("冲榜功能", function() SO_PT(SO['跳跃'] ,4,"~A8 B [PC,#"..SOGSPY_ST(SO['跳跃'] ,SO['获取能量2']).."]") SO_PT(SO['下滑1'] ,4,"~A8 B [PC,#"..SOGSPY_ST(SO['下滑1'] ,SO['获取能量2']).."]") SO_PT(SO['反弹道具1'] ,4,"~A8 MOV W0, #1") SO_PT(SO['反弹道具2'] ,4,"~A8 MOV W0, WZR") SO_PT(SO['无视障碍'] ,4,"~A8 MOV W0, #1") SO_PT(SO['无视侧撞'] ,4,"~A8 MOV W0, #1") SO_PT(SO['技能'],4,"~A8 MOV W0, #1") SO_PT(SO['滑板瞬移'],4,"~A8 MOV W0, #1") lmr=gg.alert([[ 冲榜功能如下 能量倍增 反弹道具 无视障碍 无视侧撞 全滑板瞬移 ]],"") string.toMusic('DW已为您开启冲榜功能') end, function() end,"自带全滑板瞬移"), MX.switch("能量倍增", function() SO_PT(SO['跳跃'] ,4,"~A8 B [PC,#"..SOGSPY_ST(SO['跳跃'] ,SO['获取能量2']).."]") SO_PT(SO['下滑1'] ,4,"~A8 B [PC,#"..SOGSPY_ST(SO['下滑1'] ,SO['获取能量2']).."]") string.toMusic("能量倍增开启成功") end, function() end), MX.switch("受击获得道具", function() SO_PT(SO['受到攻击'] ,4,"~A8 B [PC,#"..SOGSPY_ST(SO['受到攻击'] ,SO['攻击拾取']).."]") gg.toast("开启成功") end, function() end), MX.switch("无视道具", function() SO_PT(SO['无视道具1'] ,4,"~A8 MOV W0, #1") SO_PT(SO['无视道具2'] ,4,"~A8 MOV W0, #1") gg.toast("开启成功") end, function() end), MX.switch("反弹道具", function() SO_PT(SO['反弹道具1'] ,4,"~A8 MOV W0, #1") SO_PT(SO['反弹道具2'] ,4,"~A8 MOV W0, WZR") gg.toast("开启成功") end, function() SO_PT(SO['反弹道具2'] ,4,"~A8 MOV W0, WZR") SO_PT(SO['反弹道具1'] ,4,"~A8 MOV W0, #1") gg.toast("关闭成功") end, function() end), MX.switch("表情退出", function() SO_PT(SO['表情退出'],4,"~A8 B [PC,#-0x67BF4]") gg.alert("点击表情调出退出成功") gg.toast("开启成功") end, function() end), MX.switch("无视障碍" , function() SO_PT(SO['无视障碍'] ,4,"~A8 MOV W0, #1") gg.toast("无视障碍开启成功") gg.alert('无视障碍开启成功') end, function() end), MX.switch("派对全服", function() a = gg.prompt({""},{""},{"text"})[1] if not a then return end SO_PT(SO['派对全服'],4,"~A8 MOV W0, #"..a.."") gg.alert("修改成功") end, function() end), MX.switch("派对省排", function() a = gg.prompt({""},{""},{"text"})[1] if not a then return end SO_PT(SO['派对省排'],4,"~A8 MOV W0, #"..a.."") gg.alert("修改成功") end, function() end), MX.switch("派对省份", function() a = gg.prompt({"0=其他地区\n1=北京\n2=上海\n3=天津\n4=重庆\n5=河北\n6=山西\n7=河南\n8=辽宁\n9=吉林\n10=黑龙江\n11=内蒙古\n12=江苏\n13=山东\n14=安徽\n15=浙江\n16=福建\n17=湖北\n18=湖南\n19=广东\n20=广西\n21=江西\n22=四川\n23=海南\n24=贵州\n25=云南\n26=西藏\n27=陕西\n28=甘肃\n29=青海\n30=宁夏\n31=新疆\n32=香港\n33=澳门\n34=台湾"},{""},{"text"})[1] if not a then return end SO_PT(SO['派对省份'],4,"~A8 MOV W0, #"..a.."") gg.alert("修改成功") end, function() end), MX.switch("派对道具等级", function() a = gg.prompt({""},{""},{"text"})[1] if not a then return end SO_PT(SO['道具等级'],4,"~A8 MOV W0, #"..a.."") gg.alert("修改成功") end, function() end), MX.switch("派对道具满级" , function() SO_PT(SO['道具满级'] ,4,"~A8 MOV W0, #1") SO_PT(SO['道具等级'] ,4,"~A8 MOV W0, #99") gg.alert("开启成功") gg.toast("开启成功") end), }), MX.box({"跑分大作战", MX.switch("功能一套", function() SO_PT(SO['局内金币'] ,4,"~A8 B [PC,#"..SOGSPY_ST(SO['局内金币'] ,SO['获取能量2']).."]") SO_PT(SO['无视障碍'],4,"~A8 MOV W0, #1") SO_PT(SO['无视侧撞'] ,4,"~A8 MOV W0, #1") SO_PT(SO['技能'],4,"~A8 MOV W0, #1") SO_PT(SO['滑板瞬移'],4,"~A8 MOV W0, #1") lmr=gg.alert([[ 功能一套如下 滑板聚能 无视障碍 无视侧撞 全滑板瞬移 ]],"") string.toMusic('DW已为您开启功能一套') end, function() end), MX.switch("自改倍数", function() function SO_PT(FUNCTIONADD,TYPE,VALUE) local SOMOD=gg.getRangesList("il2cpp.so") if SOMOD[2]==nil then gg.alert("开启失败\n━━━━━━━━━━━━━━━\n错误原因:未找到相关内存\n解决方法:请重新选择游戏进程\n━━━━━━━━━━━━━━━") else gg.setValues({{address=SOMOD[2].start+FUNCTIONADD,flags=TYPE,value=VALUE}}) gg.setValues({{address=SOMOD[2].start+FUNCTIONADD+4,flags=TYPE,value="~A8 RET"}}) end end local SO = {} SO['高分比赛倍增'] = 0x259A664 local dl = gg.prompt({'请输入修改倍数'},{"100000000"},{"text"}) if not dl or dl[1] == "" then gg.alert("输入不能为空！") return end local mul = tonumber(dl[1]) if not mul or mul <= 0 then gg.alert("请输入大于0的有效数字！") return end local low16 = bit32.band(mul, 0xFFFF) local high16 = bit32.rshift(mul, 16) SO_PT(SO['高分比赛倍增'], 4, "~A8 MOV W0, #" .. low16) if high16 > 0 then SO_PT(SO['高分比赛倍增'] + 4, 4, "~A8 MOVK W0, #" .. high16 .. ", LSL #16") end string.toMusic('开启成功') end, function() end,"只能改1~10亿"), }), MX.box({"滑板技能", MX.switch("滑板高跳", function() SO_PT(SO['滑板跳高'],4,"~A8 MOV W0, #1") string.toMusic('滑板高跳开启成功') end, function() end,"无法关闭"), MX.switch("滑板滑翔", function() SO_PT(SO['滑板滑翔'],4,"~A8 MOV W0, #1") string.toMusic('滑板滑翔开启成功') end, function() end,"无法关闭"), MX.switch("滑板瞬移", function() SO_PT(SO['技能'],4,"~A8 MOV W0, #1") SO_PT(SO['滑板瞬移'],4,"~A8 MOV W0, #1") string.toMusic('滑板瞬移开启成功') end, function() end), }), },{---第五页 MX.button("关闭音乐", function () for i=1,2 do gg.playMusic("stop") gg.playMusic("stop") gg.playMusic("stop") end gg.toast("已停止音乐") end), MX.box({"可选音乐", MX.button("热歌榜", function() A="https://api.uomg.com/api/rand.music?sort=热歌榜&format=json" Obtain=gg.makeRequest(A).content muchen=Obtain:match('url":"(.-)","picurl') name=Obtain:match('name":"(.-)","') gg.alert('开始播放['..name..']') gg.playMusic(muchen) end), MX.button("新歌榜", function() A="https://api.uomg.com/api/rand.music?sort=新歌榜&format=json" Obtain=gg.makeRequest(A).content muchen=Obtain:match('url":"(.-)","picurl') name=Obtain:match('name":"(.-)","') gg.alert('开始播放['..name..']') gg.playMusic(muchen) end), MX.button("飙升榜", function() A="https://api.uomg.com/api/rand.music?sort=飙升榜&format=json" Obtain=gg.makeRequest(A).content muchen=Obtain:match('url":"(.-)","picurl') name=Obtain:match('name":"(.-)","') gg.alert('开始播放['..name..']') gg.playMusic(muchen) end), MX.button("抖音榜", function() A="https://api.uomg.com/api/rand.music?sort=抖音榜&format=json" Obtain=gg.makeRequest(A).content muchen=Obtain:match('url":"(.-)","picurl') name=Obtain:match('name":"(.-)","') gg.alert('开始播放['..name..']') gg.playMusic(muchen) end), MX.button("电音榜", function() A="https://api.uomg.com/api/rand.music?sort=电音榜&format=json" Obtain=gg.makeRequest(A).content muchen=Obtain:match('url":"(.-)","picurl') name=Obtain:match('name":"(.-)","') gg.alert('开始播放['..name..']') gg.playMusic(muchen) end), }), wyylog--音乐 },{---以下是列表六 MX.image( xfcpic, "60dp","60dp",--图片高度宽度（可省略） --"10dp",--内边距（可省略） function() qq.joinGroup("无") end), MX.flashtext('点击进入官方群聊'), MX.switch( '音量键隐藏UI', function() 音量键=true end, function() 音量键=false end), MX.switch( '摇一摇隐藏UI', function() 摇一摇=true end, function() 摇一摇=false end), MX.switch("悬浮窗转动", function() offxfczd() end, function() onxfczd() end), MX.button("加入群聊", function () gg.QQgroup("1082440538") end), MX.button ("退出脚本" , function () tuichu () end), },{ } })