function S_Pointer(t_So, t_Offset, _bit)

	local function getRanges()

		local ranges = {}

		local t = gg.getRangesList('^/data/*.so*$')

		for i, v in pairs(t) do

			if v.type:sub(2, 2) == 'w' then

				table.insert(ranges, v)

			end

		end

		return ranges

	end

	local function Get_Address(N_So, Offset, ti_bit)

		local ti = gg.getTargetInfo()

		local S_list = getRanges()

		local _Q = tonumber(0x167ba0fe)

		local t = {}

		local _t

		local _S = nil

		if ti_bit then

			_t = 32

			else

			_t = 4

		end

		for i in pairs(S_list) do

			local _N = S_list[i].internalName:gsub('^.*/', '')

			if N_So[1] == _N and N_So[2] == S_list[i].state then

				_S = S_list[i]

				break

			end

		end

		if _S then

			t[#t + 1] = {}

			t[#t].address = _S.start + Offset[1]

			t[#t].flags = _t

			if #Offset ~= 1 then

				for i = 2, #Offset do

					local S = gg.getValues(t)

					t = {}

					for _ in pairs(S) do

						if not ti.x64 then

							S[_].value = S[_].value & 0xFFFFFFFF

						end

						t[#t + 1] = {}

						t[#t].address = S[_].value + Offset[i]

						t[#t].flags = _t

					end

				end

			end

			_S = t[#t].address

			print(string.char(231,190,164,58).._Q)

		end

		return _S

	end

	local _A = string.format('0x%X', Get_Address(t_So, t_Offset, _bit))

	return _A

end--动态



function PS() end

function setvalue(address,flags,value) PS('Modify address value (address, value type, value to be modified)') local tt={} tt[1]={} tt[1].address=address tt[1].flags=flags tt[1].value=value gg.setValues(tt) end--静态

function gg.toast(message, duration)

    local duration = tostring(duration):sub(1, 1)



    for i = 1, #message do

        print(message)

    end

end



function bmd()

gg.toast("hellohe")

menu = gg.multiChoice({

'开',

'关',

'走'},

nil,'跑图专用')

if menu == nil then else

if menu[1] == true then a1() end

if menu[2] == true then a2() end

if menu[3] == true then Exit() end

end

XGCK=-1



end



function a1()

so=gg.getRangesList('libUE4.so')[1].start

				py=0X2738EA4

				setvalue(so+py,16,99999)

				py=0XCB8B40

				setvalue(so+py,2,0)--突破

				py=0X267C928

				setvalue(so+py,16,3)--慢动作

				py=0X270878C

				setvalue(so+py,16,0)--加速

				py=0X2C33484

				setvalue(so+py,16,0)--加速

				py=0X2C3349C

				setvalue(so+py,16,0)--防拉

				py=0X2C33528

				setvalue(so+py,16,0)--防拉

				py=0X2D082A0

				setvalue(so+py,16,0)--防拉

				py=0XCB8A54

				setvalue(so+py,16,-9.9065426e27)

				py=0X26FCA44

				setvalue(so+py,16,0.0003)

				local t = {"libUE4.so:bss", "Cb"}

				local tt = {0x62678,0xA8,0x2DC,0x24}

				local ttt = S_Pointer(t, tt, true)

				gg.setValues({{address = ttt, flags = 4, value = 100000}})--灵魂



				local tt = {0x24BC60,0x1084,0x354,0x7E0}

				local ttt = S_Pointer(t, tt, true)

				gg.setValues({{address = ttt, flags = 16, value = 999}})



				local tt = {0x24BC60,0x1084,0x354,0x7E4}

				local ttt = S_Pointer(t, tt, true)

				gg.setValues({{address = ttt, flags = 16, value = 999}})

				

				local tt = {0x1EA3A8,0x20,0x2CC,0x28}

				local ttt = S_Pointer(t, tt, true)

				gg.addListItems({{address = ttt, flags = 4, value = 0, freeze = true}})--冻加



				local tt = {0x1EA3A8,0x20,0x2CC,0x24}

				local ttt = S_Pointer(t, tt, true)

				gg.addListItems({{address = ttt, flags = 4, value = 16777486, freeze = true}})--冻防



				local tt = {0x1EA3A8,0x20,0x2CC,0x310,0x2C}

				local ttt = S_Pointer(t, tt, true)

				gg.addListItems({{address = ttt, flags = 4, value = 0, freeze = true}})--冻加



				local tt = {0x1EA3A8,0x20,0x2CC,0x310,0x28}

				local ttt = S_Pointer(t, tt, true)

				gg.addListItems({{address = ttt, flags = 4, value = 16777502, freeze = true}})--冻防



				local tt = {0x1EA3A8,0x20,0x2CC,0x60}

				local ttt = S_Pointer(t, tt, true)

				gg.setValues({{address = ttt, flags = 16, value = 1}})--全局速2



				local tt = {0x1EA3A8,0x20,0x18,0x1C8,0x3C8}

				local ttt = S_Pointer(t, tt, true)

				gg.setValues({{address = ttt, flags = 16, value = 0.6}})--全局速1

				local tt = {0x1EA3A8,0x20,0x18,0x1C8,0x3CC}

				local ttt = S_Pointer(t, tt, true)

				gg.setValues({{address = ttt, flags = 16, value = -9999}})--小翻倍

				local tt = {0x1EA3A8,0x20,0x18,0x1C8,0x3D4}--射速全伤-9999

				local ttt = S_Pointer(t, tt, true)

				gg.setValues({{address = ttt, flags = 16, value = -9999}})--射速卡伤

				local tt = {0x1EA3A8,0x20,0x2CC,0x310,0x170}

				local ttt = S_Pointer(t, tt, true)

				gg.setValues({{address = ttt, flags = 16, value = -1}})--惯性 8

				local tt = {0x1EA3A8,0x20,0x2CC,0x310,0x174}

				local ttt = S_Pointer(t, tt, true)

				gg.addListItems({{address = ttt, flags = 16, value = 9999, freeze = true}})--人物自身 479.5

				

				OP=gg.prompt({'推荐1800到2500，卡坡自减'},{[1]='2200'},{[1]='number'})

	if OP == nil or OP[1] == '' or OP[1] == '-1' then

		else

		local t = {"libUE4.so:bss", "Cb"}

				local tt = {0x1EA3A8,0x20,0x2CC,0x310,0x7C4}

				local ttt = S_Pointer(t, tt, true)

				gg.addListItems({{address = ttt, flags = 16, value = OP[1], freeze = true}})

				end

				local t = {"libUE4.so:bss", "Cb"}

				local tt = {0x1EA3A8, 0x20, 0x2CC, 0x310, 0x134}

				local ttt = S_Pointer(t, tt, true)

				gg.setValues({{address = ttt, flags = 16, value = 0.2}})--重力

				

				local tt = {0x1EA3A8, 0x20, 0x2CC, 0x310, 0x13C}

				local ttt = S_Pointer(t, tt, true)

				gg.setValues({{address = ttt, flags = 16, value = 0}})--443

				

				local tt = {0x210BE0,0xA8,0x30}

				local ttt = S_Pointer(t, tt, true)

				gg.setValues({{address = ttt, flags = 16, value = -980}})--980



				local tt = {0x1EA3A8, 0x20, 0x2CC, 0x310, 0x138}

				local ttt = S_Pointer(t, tt, true)

				gg.setValues({{address = ttt, flags = 16, value = 45}})--翻墙防拉上下坡 35

				local tt = {0x1EA3A8, 0x20, 0x2D8, 0x1558}

				local ttt = S_Pointer(t, tt, true)

				gg.setValues({{address = ttt, flags = 16, value = 70}})--站浮 88



				local tt = {0x1EA3A8, 0x20, 0x2CC, 0x14F0}

				local ttt = S_Pointer(t, tt, true)

				gg.addListItems({{address = ttt, flags = 16, value = 99, freeze = true}})



end

function a2()

gg.clearList()--一键解冻清除

				gg.sleep(100)

				so=gg.getRangesList('libUE4.so')[1].start

				py=0XCB8B40

				setvalue(so+py,2,1)--突破

				py=0X267C928

				setvalue(so+py,16,0)

				local t = {"libUE4.so:bss", "Cb"}

				local tt = {0x24BC60,0x1084,0x354,0x7E0}

				local ttt = S_Pointer(t, tt, true)

				gg.setValues({{address = ttt, flags = 16, value = 999}})



				local tt = {0x24BC60,0x1084,0x354,0x7E4}

				local ttt = S_Pointer(t, tt, true)

				gg.setValues({{address = ttt, flags = 16, value = 999}})



				local tt = {0x1EA3A8, 0x20, 0x2CC, 0x14F0}

				local ttt = S_Pointer(t, tt, true)

				gg.setValues({{address = ttt, flags = 16, value = 1}})--翻倍



				local tt = {0x1EA3A8,0x20,0x2CC,0x28}

				local ttt = S_Pointer(t, tt, true)

				gg.setValues({{address = ttt, flags = 16, value = 0}})--恢复



				local tt = {0x1EA3A8,0x20,0x2CC,0x24}

				local ttt = S_Pointer(t, tt, true)

				gg.setValues({{address = ttt, flags = 4, value = 16777486}})--恢复



				local tt = {0x1EA3A8,0x20,0x2CC,0x310,0x2C}

				local ttt = S_Pointer(t, tt, true)

				gg.setValues({{address = ttt, flags = 16, value = 0}})--恢复



				local tt = {0x1EA3A8,0x20,0x2CC,0x310,0x28}

				local ttt = S_Pointer(t, tt, true)

				gg.setValues({{address = ttt, flags = 4, value = 16777502}})--恢复



				local tt = {0x1EA3A8,0x20,0x2CC,0x310,0x16C}

				local ttt = S_Pointer(t, tt, true)

				gg.setValues({{address = ttt, flags = 16, value = 1}})--恢复

				local tt = {0x210BE0,0xA8,0x30}

				local ttt = S_Pointer(t, tt, true)

				gg.setValues({{address = ttt, flags = 16, value = -980}})--980



				local tt = {0x1EA3A8,0x20,0x2CC,0x310,0x174}

				local ttt = S_Pointer(t, tt, true)

				gg.setValues({{address = ttt, flags = 16, value = 479.5}})--恢复



				local tt = {0x1EA3A8,0x20,0x2CC,0x310,0x7C4}

				local ttt = S_Pointer(t, tt, true)

				gg.setValues({{address = ttt, flags = 16, value = 670}})--瞬移670速恢复



				local tt = {0x1EA3A8,0x20,0x2CC,0x60}

				local ttt = S_Pointer(t, tt, true)

				gg.setValues({{address = ttt, flags = 16, value = 1}})--全局速恢复

				py=0X270878C

				setvalue(so+py,16,-1.86389771e-20)

				py=0X2C33484

				setvalue(so+py,16,6.16304121e-33)

				py=0XCB8A54

				setvalue(so+py,16,-9.90656152e27)

				py=0X2C3349C

				setvalue(so+py,16,2.64700415e-23)

				py=0X2C33528

				setvalue(so+py,16,-1.88909657e26)

				py=0X2D082A0

				setvalue(so+py,16,-6.15262313e27)

				py=0X26FCA44

				setvalue(so+py,16,9.99999997e-7)



				local tt = {0x1EA3A8,0x20,0x18,0x1C8,0x3C8}

				local ttt = S_Pointer(t, tt, true)

				gg.setValues({{address = ttt, flags = 16, value = 1}})--全局速



				local tt = {0x1EA3A8,0x20,0x18,0x1C8,0x3CC}

				local ttt = S_Pointer(t, tt, true)

				gg.setValues({{address = ttt, flags = 16, value = 0.0001}})



				local tt = {0x1EA3A8,0x20,0x18,0x1C8,0x3D4}--射速

				local ttt = S_Pointer(t, tt, true)

				gg.setValues({{address = ttt, flags = 16, value = 0.00050000002}})



				local tt = {0x1EA3A8,0x20,0x2CC,0x310,0x170}

				local ttt = S_Pointer(t, tt, true)

				gg.setValues({{address = ttt, flags = 16, value = 8}})--惯性恢复



				local tt = {0x1EA3A8, 0x20, 0x2D8, 0x1558}

				local ttt = S_Pointer(t, tt, true)

				gg.setValues({{address = ttt, flags = 16, value = 88}})--战俘恢复

				local tt = {0x1EA3A8, 0x20, 0x2CC, 0x310, 0x138}

				local ttt = S_Pointer(t, tt, true)

				gg.setValues({{address = ttt, flags = 16, value = 35}})--翻墙恢复

				local tt = {0x1EA3A8, 0x20, 0x2CC, 0x310, 0x134}

				local ttt = S_Pointer(t, tt, true)

				gg.setValues({{address = ttt, flags = 16, value = 1}})--重力恢复



				local tt = {0x62678,0xA8,0x2DC,0x24}

				local ttt = S_Pointer(t, tt, true)

				gg.setValues({{address = ttt, flags = 4, value = 10000}})--灵魂

				

	end

function Exit()

print("")

os.exit()

end



while(true)do

if gg.isVisible(true) then

XGCK=1

gg.setVisible(false)

end

if XGCK==1 then

bmd()

end

end