三水资源分享
Open in Telegram
热衷于imgui与引擎的分享频道
Show moreThe country is not specifiedThe category is not specified
2 351
Subscribers
+1424 hours
+2217 days
+1 41030 days
Posts Archive
2 355
void* (*omemcpy)(void* dest, const void* src, size_t n);
void* hmemcpy(void* dest, const void* src, size_t n)
{
if (!src !dest n == 0 || n < 64)
return omemcpy(dest, src, n);
uintptr_t s = (uintptr_t)src;
uintptr_t e = s + n;
if (libanogsShadow && s >= libanogsBase && e <= (libanogsBase + libanogsSize)) {
return omemcpy(dest, (void*)((uintptr_t)libanogsShadow + (s - libanogsBase)), n);
}
if (libUE4Shadow && s >= libUE4Base && e <= (libUE4Base + libUE4Size)) {
return omemcpy(dest, (void*)((uintptr_t)libUE4Shadow + (s - libUE4Base)), n);
}
return omemcpy(dest, src, n);
}
HOOK_LIB("libanogs.so", "0x51F980", hmemcpy, omemcpy);
1天禁令修复
2 355
if (mprotect_off) { char buf[32]; snprintf(buf, sizeof(buf), "0x%lx", mprotect_off); HOOK_LIB("libc.so", buf, hmprotect, omprotect); }
if (mmap_off) { char buf[32]; snprintf(buf, sizeof(buf), "0x%lx", mmap_off); HOOK_LIB("libc.so", buf, hmmap, ommap); }
if (munmap_off) { char buf[32]; snprintf(buf, sizeof(buf), "0x%lx", munmap_off); HOOK_LIB("libc.so", buf, hmunmap, omunmap); }
if (ptrace_off) { char buf[32]; snprintf(buf, sizeof(buf), "0x%lx", ptrace_off); HOOK_LIB("libc.so", buf, hptrace, optrace); }
if (open_off) { char buf[32]; snprintf(buf, sizeof(buf), "0x%lx", open_off); HOOK_LIB("libc.so", buf, hopen, oopen); }
if (open64_off) { char buf[32]; snprintf(buf, sizeof(buf), "0x%lx", open64_off); HOOK_LIB("libc.so", buf, hopen64, oopen64); }
2 355
uintptr_t mprotect_off = getFunctionOffset("libc.so", "mprotect");
uintptr_t mmap_off = getFunctionOffset("libc.so", "mmap");
uintptr_t munmap_off = getFunctionOffset("libc.so", "munmap");
uintptr_t ptrace_off = getFunctionOffset("libc.so", "ptrace");
uintptr_t open_off = getFunctionOffset("libc.so", "open");
uintptr_t open64_off = getFunctionOffset("libc.so", "open64");
2 355
𝗕𝗘𝗧𝗔 𝗣𝗨𝗕𝗚𝗠 4.6.4 | 𝗜𝗡𝗧𝗘𝗥𝗡𝗔𝗟 𝗦𝗗𝗞 !
𝗙𝘂𝗹𝗹𝘆 𝗙𝗶𝘅𝗲𝗱 , 64 𝗕𝗶𝘁 !
𝗫64 𝗢𝗳𝗳𝘀𝗲𝘁𝘀 ? :
https://t.me/c/3008338464/4702
𝗭𝗶𝗽 𝗣𝗮𝘀𝘀 ? :
@JOIN_ALL_SRC
@XelahotOfficial
@XelahotOfficial
@XelahotOfficial2 355
𝐁𝐄𝐓𝐀 𝐏𝐔𝐁𝐆𝐌 4.6.4 𝐱64
#define GNames_Offset 0xa90e6e0
#define GNativeAndroidApp_Offset 0x1302fca8
#define GUObject_Offset 0x13302950
#define GetActorArray_Offset 0xd789d2c
#define ProcessEvent_Offset 0xad07bb0
#define LaunchBP_Offset 0x89e5434
#define GetBonePos_Offset 0x73b6620
#define ULocalPlayer_CD 0x135a1370
#define ULocalPlayer_CB 0x571370
#define Actors_Offset 0xa0
#define LineOfSightTo_Offset 0xd430ad8
#define ShootBulletInner_Offset 0x8279274
#define UpdateVolleyShootParameters_Offset 0x8309a84
#define GetMuzzleTransform_Offset 0x82a90b8
#define ClientOnDamageToOther_Offset 0x7469770
#define BroadcastFatalDamageToClientWithStructNew_Offset 0x743322c
#define GetMovementBase_Offset 0x66e0558
#define GetCameraRotation_Offset 0xdb75fa8
#define GetCameraLocation_Offset 0xdb75fe4
#define GetAccessoriesVRecoilFactor_Offset 0x82af5b0
#define GetAccessoriesHRecoilFactor_Offset 0x82af65c
#define LineOfSightTo_Idx 246
#define ShootBulletInner_Idx 174
#define UpdateVolleyShootParameters_Idx 161
#define GetMuzzleTransform_Idx 316
#define ClientOnDamageToOther_Idx 947
#define BroadcastFatalDamageToClientWithStructNew_Idx 987
#define GetMovementBase_Idx 236;@XelahotOfficial @XelahotOfficial @XelahotOfficial
2 355
PATCH_LIB("libgcloud.so", "0x1234A4", "C0 03 5F D6");
PATCH_LIB("libgcloud.so", "0x123554", "C0 03 5F D6");
PATCH_LIB("libgcloud.so", "0x1239A4", "C0 03 5F D6");
PATCH_LIB("libgcloud.so", "0x46CDFC", "C0 03 5F D6");
PATCH_LIB("libgcloud.so", "0x46DB00", "1F 20 03 D5");
PATCH_LIB("libgcloud.so", "0x46DB08", "1F 20 03 D5");
PATCH_LIB("libgcloud.so", "0x46DB0C", "1F 20 03 D5");
PATCH_LIB("libgcloud.so", "0x46DDDC", "C0 03 5F D6");
修复7天禁令可能会净网
2 355
PATCH_LIB("libanogs.so", "0x228360", "C0 03 5F D6"); //1day ban fix
PATCH_LIB("libanogs.so", "0x2F4F04", "00 00 80 D2 C0 03 5F D6"); //1Day
PATCH_LIB("libanogs.so", "0x4662C8", "00 00 80 D2 C0 03 5F D6"); //Violation 1Day
PATCH_LIB("libanogs.so", "0x371418", "00 00 80 D2 C0 03 5F D6"); //Crc Anogs
PATCH_LIB("libanogs.so", "0x39F56C", "00 00 80 D2 C0 03 5F D6"); //Crc Anogs MM3
PATCH_LIB("libanogs.so", "0x4633F4", "00 00 80 D2 C0 03 5F D6"); //10year Online
PATCH_LIB("libanogs.so", "0x461F04", "00 00 80 D2 C0 03 5F D6"); //10year Online
PATCH_LIB("libanogs.so", "0x46270C", "00 00 80 D2 C0 03 5F D6"); //Offline solution
PATCH_LIB("libanogs.so", "0x4DF174", "00 00 80 D2 C0 03 5F D6"); // Violation
PATCH_LIB("libanogs.so","0x2E8340","00 00 80 D2 C0 03 5F D6"); // 2 Months Fix
PATCH_LIB("libanogs.so","0x225528","00 00 80 D2 C0 03 5F D6"); // Case 1
MemoryPatch::createWithHex("libanogs.so",0x44F4B4,"1F 20 03 D5").Modify();//violation 1 day after match
2 355
AetherHook.zip
✅直装支持EGL
Inline Hook + PLT‑GOT Hook
👼1. PLT Hook（GOT表劫持）：不修改函数本体指令！不会触发游戏 inline_hook_opcode_dismatch 指令完整性检测，这是最大亮点。😈
🪽2. Inline Hook：传统inline，偷取函数头部指令、自动重定位PC相对指令，分配RWX跳板。🪽
调用例子代码⬇️⬇️⬇️
😍触摸+渲染egl
💎搬运带密码 @XQBN888
AetherHook::enable_debug(false);
AetherHook::Inline::register_hook((void*)(UE4 + SwapBuffers),(void*)_GLThreadSwapBuffers,(void**)&orig_GLThreadSwapBuffers);
AetherHook::PLT::register_hook(".*/libandroid\\.so$","ANativeWindow_getWidth",(void*)_ANativeWindow_getWidth,(void**)&orig_ANativeWindow_getWidth
);
AetherHook::PLT::register_hook(".*/libandroid\\.so$","ANativeWindow_getHeight",(void*)_ANativeWindow_getHeight,(void**)&orig_ANativeWindow_getHeight
);
if (GetAndroidSdkVersion() < 35) {AetherHook::PLT::register_hook(".*/libinput\\.so$","_ZN7android13InputConsumer21initializeMotionEventEPNS_11MotionEventEPKNS_12InputMessageE",(void*)onInputEvent,(void**)&orig_onInputEvent);
}
if (GetAndroidSdkVersion() > 34) {AetherHook::PLT::register_hook(".*/libinput\\.so$","_ZN7android12_GLOBAL__N_121initializeMotionEventERNS_11MotionEventERKNS_12InputMessageE",(void*)onInputEvent,(void**)&orig_onInputEvent);
}
AetherHook::refresh();//important
