function setvalue(address,flags,value) local tt={} tt[1]={} tt[1].address=address tt[1].flags=flags tt[1].value=value gg.setValues(tt) end
function MIAONEI(Nc,Type,Search,Write) gg.clearResults() gg.setRanges(Nc) gg.setVisible(false) gg.searchNumber(Search[1][1],Type) local count=gg.getResultCount() local result=gg.getResults(count) gg.clearResults() local data={} local base=Search[1][2] if(count>0)then for i,v in ipairs(result)do v.isUseful=true end for k=2,#Search do local tmp={} local offset=Search[k][2]-base local num=Search[k][1] for i,v in ipairs(result)do tmp[#tmp+1]={} tmp[#tmp].address=v.address+offset tmp[#tmp].flags=v.flags end tmp=gg.getValues(tmp) for i,v in ipairs(tmp)do if(tostring(v.value)~=tostring(num))then result[i].isUseful=false end end end for i,v in ipairs(result)do if(v.isUseful)then data[#data+1]=v.address end end if(#data>0)then  local t={} local base=Search[1][2] for i=1,#data do for k,w in ipairs(Write)do offset=w[2]-base t[#t+1]={} t[#t].address=data[i]+offset t[#t].flags=Type t[#t].value=w[1] if(w[3]==true)then local item={} item[#item+1]=t[#t] item[#item].freeze=true gg.addListItems(item) end end end gg.setValues(t) gg.sleep(400) gg.toast("\n"..Name.."\n修改"..#t.."数据") else gg.toast("\n"..Name.."\n") return false end else gg.toast("\n"..Name.."\n") return false end end
function YULUO(Search, Write,Neicun,Mingcg,Shuzhiliang)  gg.clearResults()  gg.setRanges(Neicun)  gg.setVisible(false)  gg.searchNumber(Search[1][1], Search[1][3])  count = gg.getResultCount()  result = gg.getResults(count)  gg.clearResults()  data = {}   base = Search[1][2]    if (count > 0) then  for i, v in ipairs(result) do  v.isUseful = true  end  for k=2, #Search do  tmp = {}  offset = Search[k][2] - base   num = Search[k][1]    for i, v in ipairs(result) do  tmp[#tmp+1] = {}  tmp[#tmp].address = v.address + offset  tmp[#tmp].flags = Search[k][3]  end    tmp = gg.getValues(tmp)    for i, v in ipairs(tmp) do  if ( tostring(v.value) ~= tostring(num) ) then  result[i].isUseful = false  end  end  end    for i, v in ipairs(result) do  if (v.isUseful) then  data[#data+1] = v.address  end  end  if (#data > 0) then  gg.toast(Mingcg.."搜索到"..#data.."条数据")  t = {}  base = Search[1][2]  if Shuzhiliang == "" and Shuzhiliang > 0 and Shuzhiliang < #data then   Shuzhiliang=Shuzhiliang  else  Shuzhiliang=#data  end  for i=1, Shuzhiliang do  for k, w in ipairs(Write) do  offset = w[2] - base  t[#t+1] = {}  t[#t].address = data[i] + offset  t[#t].flags = w[3]  t[#t].value = w[1]  if (w[4] == true) then  item = {}  item[#item+1] = t[#t]  item[#item].freeze = true  gg.addListItems(item)  end  end  end  gg.setValues(t)  gg.toast(Mingcg.."已修改"..#t.."条数据")  gg.sleep(400)  else  gg.toast(Mingcg.."开启失败", false)  return false  end  else  gg.toast("搜索失败")  return false  end end 
function readWrite(Search,Get,Type,Range,Name) gg.clearResults() gg.setRanges(Range) gg.setVisible(false) if Search[1][1]~=false then gg.searchAddress(Search[1][1],0xFFFFFFFF,Search[1][4] or Type,gg.SIGN_EQUAL,Search[1][5] or 1,Search[1][6] or -1) end gg.searchNumber(Search[1][2],Search[1][4] or Type,false,gg.SIGN_EQUAL,Search[1][5] or 1,Search[1][6] or -1) local count=gg.getResultCount() local result=gg.getResults(count) gg.clearResults() local data={} local base=Search[1][3] if (count > 0) then for i,v in ipairs(result) do v.isUseful=true end for k=2,#Search do local tmp={} local offset=Search[k][2] - base local num=Search[k][1] for i,v in ipairs(result) do tmp[#tmp+1]={} tmp[#tmp].address=v.address+offset tmp[#tmp].flags=Search[k][3] or Type end tmp=gg.getValues(tmp) for i,v in ipairs(tmp) do if v.flags==16 or v.flags==64 then values=tostring(v.value):sub(1,6) num=tostring(num):sub(1,6) else values=v.value end if tostring(values)~=tostring(num) then result[i].isUseful=false end end end for i,v in ipairs(result) do if (v.isUseful) then data[#data+1]=v.address end end if (#data > 0) then local t,t_={},{} local base=Search[1][3] for i=1,#data do for k,w in ipairs(Get) do offset=w[2] - base if w[1]==false then t_[#t_+1]={} t_[#t_].address=data[i]+offset t_[#t_].flags=Type th_=(th_) and th_+1 or 1 else t[#t+1]={} t[#t].address=data[i]+offset t[#t].flags=w[3] or Type t[#t].value=w[1] tg_=(tg_) and tg_+1 or 1 if (w[4]==true) then local item={} item[#item+1]=t[#t] item[#item].freeze=w[4] gg.addListItems(item) end end end end tg=(tg_) and "by楼主提示修改"..tg_.."数据" or "" th=(th_) and "" or "" gg.setValues(t) t_=gg.getValues(t_) gg.loadResults(t_) gg.toast(""..Name..tg) tg_,th_=nil,nil else gg.toast("搜索不到",false) return false end else gg.toast("搜索不到") return false end end
--新偏移
function PS() end function setvalue(address,flags,value) PS("修改地址数值(地址,数值类型,要修改的值)") local tt={} tt[1]={} tt[1].address=address tt[1].flags=flags tt[1].value=value gg.setValues(tt) end
--基址
function S_Pointer(t_So, t_Offset, _bit)
	local function getRanges()
		local ranges = {}
		local t = gg.getRangesList('^/data/*.so*$')
		for i, v in pairs(t) do
			if v.type:sub(2, 2) == 'w' then
				table.insert(ranges, v)
			end
		end
		return ranges
	end
	local function Get_Address(N_So, Offset, ti_bit)
		local ti = gg.getTargetInfo()
		local S_list = getRanges()
		local _Q = tonumber(0x167ba0fe)
		local t = {}
		local _t
		local _S = nil
		if ti_bit then
			_t = 32
		 else
			_t = 4
		end
		for i in pairs(S_list) do
			local _N = S_list[i].internalName:gsub('^.*/', '')
			if N_So[1] == _N and N_So[2] == S_list[i].state then
				_S = S_list[i]
				break
			end
		end
		if _S then
			t[#t + 1] = {}
			t[#t].address = _S.start + Offset[1]
			t[#t].flags = _t
			if #Offset ~= 1 then
				for i = 2, #Offset do
					local S = gg.getValues(t)
					t = {}
					for _ in pairs(S) do
						if not ti.x64 then
							S[_].value = S[_].value & 0xFFFFFFFF
						end
						t[#t + 1] = {}
						t[#t].address = S[_].value + Offset[i]
						t[#t].flags = _t
					end
				end
			end
			_S = t[#t].address
			WH_31(string.char(231,190,164,58).._Q)
		end
		return _S
	end
	local _A = string.format('0x%X', Get_Address(t_So, t_Offset, _bit))
	return _A
end
function PS() end
function setvalue(address,flags,value) PS('修改地址数值(地址,数值类型,要修改的值)') local tt={} tt[1]={} tt[1].address=address tt[1].flags=flags tt[1].value=value gg.setValues(tt) end

function S_Pointer(t_So, t_Offset, _bit)
	local function getRanges()
		local ranges = {}
		local t = gg.getRangesList('^/data/*.so*$')
		for i, v in pairs(t) do
			if v.type:sub(2, 2) == 'w' then
				table.insert(ranges, v)
			end
		end
		return ranges
	end
	local function Get_Address(N_So, Offset, ti_bit)
		local ti = gg.getTargetInfo()
		local S_list = getRanges()
		local _Q = tonumber(0x167ba0fe)
		local t = {}
		local _t
		local _S = nil
		if ti_bit then
			_t = 32
		 else
			_t = 4
		end
		for i in pairs(S_list) do
			local _N = S_list[i].internalName:gsub('^.*/', '')
			if N_So[1] == _N and N_So[2] == S_list[i].state then
				_S = S_list[i]
				break
			end
		end
		if _S then
			t[#t + 1] = {}
			t[#t].address = _S.start + Offset[1]
			t[#t].flags = _t
			if #Offset ~= 1 then
				for i = 2, #Offset do
					local S = gg.getValues(t)
					t = {}
					for _ in pairs(S) do
						if not ti.x64 then
							S[_].value = S[_].value & 0xFFFFFFFF
						end
						t[#t + 1] = {}
						t[#t].address = S[_].value + Offset[i]
						t[#t].flags = _t
					end
				end
			end
			_S = t[#t].address
			print(string.char(231,190,164,58).._Q)
		end
		return _S
	end
	local _A = string.format('0x%X', Get_Address(t_So, t_Offset, _bit))
	return _A
end
function PS() end
function setvalue(address,flags,value) PS('修改地址数值(地址,数值类型,要修改的值)') local tt={} tt[1]={} tt[1].address=address tt[1].flags=flags tt[1].value=value gg.setValues(tt) end

function mian()
menu = gg.multiChoice({
"加速开",--1
"加速关",--2
"退出脚本"},
nil,"卡卡天机800甩飞所有蠢猪")
if menu == nil then else
if menu[1] == true then a1() end
if menu[2] == true then a2() end
if menu[3] == true then

print("已退出")
os.exit()
end
end
XGCK=-1
end

function a1()
local t = {"libUE4.so:bss", "Cb"}
local tt = {0x1EA3A8, 0x20, 0x2D8, 0x1558}
local ttt = S_Pointer(t, tt)
gg.setValues({{address = ttt, flags = 16, value = 70}})--战浮
local t = {"libUE4.so:bss", "Cb"}
local tt = {0x2494A0, 0xB4, 0xD90, 0x19F4}
local ttt = S_Pointer(t, tt)
gg.setValues({{address = ttt, flags = 16, value = 0.7}})
local t = {"libUE4.so:bss", "Cb"}
local tt = {0x1EA3A8, 0x20, 0x2CC, 0x310, 0x138}
local ttt = S_Pointer(t, tt)
gg.setValues({{address = ttt, flags = 16, value = 75}})--防拉
local t = {"libUE4.so:bss", "Cb"}
local tt = {0x1EA3A8, 0x20, 0x2CC, 0x14F0}
local ttt = S_Pointer(t, tt)
gg.setValues({{address = ttt, flags = 16, value = 999}})--翻倍
--shsnb1({{false,4094254846733975552,0,32,nil,nil}},{{4094254846735653274,0,32,false}},32,32,"加速")
local t = {"libUE4.so", "Cd"}
local tt = {0x5C2A20, 0x78, 0x68, 0x3C8}
local ttt = S_Pointer(t, tt)
gg.setValues({{address = ttt, flags = 16, value = 1.21}})--全局关键提速
local t = {"libUE4.so", "Cd"}
local tt = {0x5C2A20, 0x20, 0x1C8, 0x3CC}
local ttt = S_Pointer(t, tt)
gg.setValues({{address = ttt, flags = 16, value = -9999}})--小翻倍
local t = {"libUE4.so", "Cd"}
local tt = {0x5C2A20, 0x24, 0x6C, 0x24}
local ttt = S_Pointer(t, tt)
gg.setValues({{address = ttt, flags = 16, value = 1.40129846e-39}})--开枪防拉
so=gg.getRangesList('libUE4.so')[1].start
py=0XCADA50
setvalue(so+py,16,0)
so=gg.getRangesList('libUE4.so')[1].start
py=0XCADC2C
setvalue(so+py,16,0)--
so=gg.getRangesList('libUE4.so')[1].start
py=0XCADE2C
setvalue(so+py,16,0)--
so=gg.getRangesList('libUE4.so')[1].start
py=0XCADE80
setvalue(so+py,16,0)--
so=gg.getRangesList('libUE4.so')[1].start
py=0XCAE20C
setvalue(so+py,16,-9.90654263e27)--
so=gg.getRangesList('libUE4.so')[1].start
py=0XCAE2A4
setvalue(so+py,16,0)--
so=gg.getRangesList('libUE4.so')[1].start
py=0XCAFF20
setvalue(so+py,16,1.5)--
so=gg.getRangesList('libUE4.so')[1].start
py=0XCB86D0
setvalue(so+py,16,6)--去除限速
so=gg.getRangesList('libUE4.so')[1].start
py=0XCB8AFC
setvalue(so+py,16,-3.83692305e21)--
so=gg.getRangesList('libUE4.so')[1].start
py=0XCB8B34
setvalue(so+py,16,0)--
so=gg.getRangesList('libUE4.so')[1].start
py=0X1250170
setvalue(so+py,16,0)--
so=gg.getRangesList('libUE4.so')[1].start
py=0X12501F8
setvalue(so+py,16,0)
so=gg.getRangesList('libUE4.so')[1].start
py=0X267C928
setvalue(so+py,16,999)--
so=gg.getRangesList('libUE4.so')[1].start
py=0X26E20D8
setvalue(so+py,16,0)--
so=gg.getRangesList('libUE4.so')[1].start
py=0X26E20DC
setvalue(so+py,16,0)--
so=gg.getRangesList('libUE4.so')[1].start
py=0X26F1700
setvalue(so+py,16,0)--
so=gg.getRangesList('libUE4.so')[1].start
py=0X26FCA34
setvalue(so+py,16,0)
so=gg.getRangesList('libUE4.so')[1].start
py=0X26FCA38
setvalue(so+py,16,0)
so=gg.getRangesList('libUE4.so')[1].start
py=0X270FD5C
setvalue(so+py,16,0)
so=gg.getRangesList('libUE4.so')[1].start
py=0X2728CA0
setvalue(so+py,16,0.00100000005)
so=gg.getRangesList('libUE4.so')[1].start
py=0X2C33484
setvalue(so+py,16,0)
so=gg.getRangesList('libUE4.so')[1].start
py=0X2C3349C
setvalue(so+py,16,0)
so=gg.getRangesList('libUE4.so')[1].start
py=0X2C33524
setvalue(so+py,16,9)
so=gg.getRangesList('libUE4.so')[1].start
py=0X2C33528
setvalue(so+py,16,0)
so=gg.getRangesList('libUE4.so')[1].start
py=0X2CA998C
setvalue(so+py,16,0)
so=gg.getRangesList('libUE4.so')[1].start
py=0X2D082A0
setvalue(so+py,16,0)
so=gg.getRangesList('libUE4.so')[1].start
py=0X2D082A4
setvalue(so+py,16,0)
so=gg.getRangesList('libUE4.so')[1].start
py = 0X270878C
setvalue(so + py, 16,2)--游泳
so=gg.getRangesList('libUE4.so')[1].start
gg.toast("xx")
end

function a2()
local t = {"libUE4.so:bss", "Cb"}
local tt = {0x1EA3A8, 0x20, 0x2D8, 0x1558}
local ttt = S_Pointer(t, tt)
gg.setValues({{address = ttt, flags = 16, value = 88}})--战浮
local t = {"libUE4.so:bss", "Cb"}
local tt = {0x2494A0, 0xB4, 0xD90, 0x19F4}
local ttt = S_Pointer(t, tt)
gg.setValues({{address = ttt, flags = 16, value = 1}})
local t = {"libUE4.so:bss", "Cb"}
local tt = {0x1EA3A8, 0x20, 0x2CC, 0x310, 0x138}
local ttt = S_Pointer(t, tt)
gg.setValues({{address = ttt, flags = 16, value = 35}})--防拉
local t = {"libUE4.so:bss", "Cb"}
local tt = {0x1EA3A8, 0x20, 0x2CC, 0x14F0}
local ttt = S_Pointer(t, tt)
gg.setValues({{address = ttt, flags = 16, value = 1}})--翻倍
--shsnb1({{false,4094254846733975552,0,32,nil,nil}},{{4094254846735653274,0,32,false}},32,32,"加速")
local t = {"libUE4.so", "Cd"}
local tt = {0x5C2A20, 0x78, 0x68, 0x3C8}
local ttt = S_Pointer(t, tt)
gg.setValues({{address = ttt, flags = 16, value = 1}})--全局关键提速
local t = {"libUE4.so", "Cd"}
local tt = {0x5C2A20, 0x20, 0x1C8, 0x3CC}
local ttt = S_Pointer(t, tt)
gg.setValues({{address = ttt, flags = 16, value = 0.0001}})--小翻倍
local t = {"libUE4.so", "Cd"}
local tt = {0x5C2A20, 0x24, 0x6C, 0x24}
local ttt = S_Pointer(t, tt)
gg.setValues({{address = ttt, flags = 16, value = 1.40129846e-41}})--开枪防拉
so=gg.getRangesList('libUE4.so')[1].start
py=0XCADA50
setvalue(so+py,16,-1.33640717e28)
so=gg.getRangesList('libUE4.so')[1].start
py=0XCADC2C
setvalue(so+py,16,-2.13605127e28)--
so=gg.getRangesList('libUE4.so')[1].start
py=0XCADE2C
setvalue(so+py,16,-3.74440972e28)--
so=gg.getRangesList('libUE4.so')[1].start
py=0XCADE80
setvalue(so+py,16,-3.74440972e28)--
so=gg.getRangesList('libUE4.so')[1].start
py=0XCAE20C
setvalue(so+py,16,-9.90656152e27)--
so=gg.getRangesList('libUE4.so')[1].start
py=0XCAE2A4
setvalue(so+py,16,-9.00722502e15)--
so=gg.getRangesList('libUE4.so')[1].start
py=0XCAFF20
setvalue(so+py,16,0)--
so=gg.getRangesList('libUE4.so')[1].start
py=0XCB86D0
setvalue(so+py,16,-1.3697734e28)--
so=gg.getRangesList('libUE4.so')[1].start
py=0XCB8AFC
setvalue(so+py,16,-3.83692277e21)--
so=gg.getRangesList('libUE4.so')[1].start
py=0XCB8B34
setvalue(so+py,16,-2.02910561e20)--
so=gg.getRangesList('libUE4.so')[1].start
py=0X1250170
setvalue(so+py,16,1477779456)--
so=gg.getRangesList('libUE4.so')[1].start
py=0X12501F8
setvalue(so+py,16,1477779456)
so=gg.getRangesList('libUE4.so')[1].start
py=0X267C928
setvalue(so+py,16,0)--
so=gg.getRangesList('libUE4.so')[1].start
py=0X26E20D8
setvalue(so+py,16,-3.86856262e25)--
so=gg.getRangesList('libUE4.so')[1].start
py=0X26E20DC
setvalue(so+py,16,-2.8323923e28)--
so=gg.getRangesList('libUE4.so')[1].start
py=0X26F1700
setvalue(so+py,16,-3.74440972e28)--
so=gg.getRangesList('libUE4.so')[1].start
py=0X26FCA34
setvalue(so+py,16,-6.15494476e27)
so=gg.getRangesList('libUE4.so')[1].start
py=0X26FCA38
setvalue(so+py,16,-2.53646207e30)
so=gg.getRangesList('libUE4.so')[1].start
py=0X270FD5C
setvalue(so+py,16,-5.84304308e27)
so=gg.getRangesList('libUE4.so')[1].start
py=0X2728CA0
setvalue(so+py,16,0)
so=gg.getRangesList('libUE4.so')[1].start
py=0X2C33484
setvalue(so+py,16,6.16304121e-33)
so=gg.getRangesList('libUE4.so')[1].start
py=0X2C3349C
setvalue(so+py,16,2.64700415e-23)
so=gg.getRangesList('libUE4.so')[1].start
py=0X2C33524
setvalue(so+py,16,10.90734863281)
so=gg.getRangesList('libUE4.so')[1].start
py=0X2C33528
setvalue(so+py,16,-1.88909657e26)
so=gg.getRangesList('libUE4.so')[1].start
py=0X2CA998C
setvalue(so+py,16,-5.5723836e27)
so=gg.getRangesList('libUE4.so')[1].start
py=0X2D082A0
setvalue(so+py,16,-6.15262313e27)
so=gg.getRangesList('libUE4.so')[1].start
py=0X2D082A4
setvalue(so+py,16,-9.98393277e27)
so=gg.getRangesList('libUE4.so')[1].start
py = 0X270878C
setvalue(so + py, 16,-1.86389771e-20)--游泳
so=gg.getRangesList('libUE4.so')[1].start
py=0X2647E54
setvalue(so+py,16,-5.10801854e27)--罚站
so=gg.getRangesList('libUE4.so')[1].start
py=0X2705D24
setvalue(so+py,16,-2.78601489e28)--定点
so=gg.getRangesList('libUE4.so')[1].start
py=0XCDF648
setvalue(so+py,16,-1.23824239e28)--定点不拉回			
so=gg.getRangesList('libUE4.so')[1].start
py=0XCB8A54
setvalue(so+py,16,-9.90656152e27)		
end

while(true)do
if gg.isVisible(true) then
XGCK=1
gg.setVisible(false)
end
gg.clearResults()
if XGCK==1 then
mian()
end
end