function huiz()
draw.setStyle('填充')
draw.setColor("#00ffff")
  -- draw.text('MIUI过检', 235,200)draw.setColor('#00FFFF')
   string.toMusic("欢迎使用仙鹤全防祝你们天天开心把把撤离")
   draw.text("仙鹤全防", 280, 550)
 
   draw.text("黑客来自", 280, 490)
end


huiz()





gg.setVisible(false)
luajava.setFloatingWindowHide(true)
function PS() end
function setvalue(address,flags,value) PS('修改地址数值(地址,数值类型,要修改的值)') local tt={} tt[1]={} tt[1].address=address tt[1].flags=flags tt[1].value=value gg.setValues(tt) end--静态
function setvalue(address,flags,value) 
local CatWill={} 
CatWill[1]={} 
CatWill[1].address=address 
CatWill[1].flags=flags 
CatWill[1].value=value 
gg.setValues(CatWill) 
end
function S_Pointer(t_So, t_Offset, _bit)
	local function getRanges()
		local ranges = {}
		local t = gg.getRangesList('^/data/*.so*$')
		for i, v in pairs(t) do
			if v.type:sub(2, 2) == 'w' then
				table.insert(ranges, v)
			end
		end
		return ranges
	end
	local function Get_Address(N_So, Offset, ti_bit)
		local ti = gg.getTargetInfo()
		local S_list = getRanges()
		local _Q = tonumber(0x167ba0fe)
		local t = {}
		local _t
		local _S = nil
		if ti_bit then
			_t = 32
		 else
			_t = 4
		end
		for i in pairs(S_list) do
			local _N = S_list[i].internalName:gsub('^.*/', '')
			if N_So[1] == _N and N_So[2] == S_list[i].state then
				_S = S_list[i]
				break
			end
		end
		if _S then
			t[#t + 1] = {}
			t[#t].address = _S.start + Offset[1]
			t[#t].flags = _t
			if #Offset ~= 1 then
				for i = 2, #Offset do
					local S = gg.getValues(t)
					t = {}
					for _ in pairs(S) do
						if not ti.x64 then
							S[_].value = S[_].value & 0xFFFFFFFF
						end
						t[#t + 1] = {}
						t[#t].address = S[_].value + Offset[i]
						t[#t].flags = _t
					end
				end
			end
			_S = t[#t].address
			print(string.char(231,190,164,58).._Q)
		end
		return _S
	end
	local _A = string.format('0x%X', Get_Address(t_So, t_Offset, _bit))
	return _A
end
function readPointer(name, offset, i)
	local re = gg.getRangesList(name)
	local x64 = gg.getTargetInfo().x64
	local va = {[true] = 32, [false] = 4}
	if re[i or 1] then
		local addr = re[i or 1].start + offset[1]
		for i = 2, #offset do
			addr = gg.getValues({{address = addr, flags = va[x64]}})
			if not x64 then
				addr[1].value = addr[1].value & 0xFFFFFFFF
			end
			addr = addr[1].value + offset[i]
		end
		return addr
	end
end

function gg.edits(addr, Table, name)
	local Table1 = {{}, {}}
	for k, v in ipairs(Table) do
		local value = {address = addr + v[3], value = v[1], flags = v[2], freeze = v[4]}
		if v[4] then
			Table1[2][#Table1[2] + 1] = value
		else
			Table1[1][#Table1[1] + 1] = value
		end
	end
	gg.addListItems(Table1[2])
	gg.setValues(Table1[1])
end
changan={}
changan.controlBig = function(control,time)
luajava.runUiThread(function()
	import "android.animation.ObjectAnimator"
	ObjectAnimator():ofFloat(control,"scaleX", {
		0, 0.4, 0.7, 1
	}):setDuration(time):start()
	ObjectAnimator():ofFloat(control,"scaleY", {
		0, 0.4, 0.7, 1
	}):setDuration(time):start()
	end) end
changan.controlFlip = function(control,time)
luajava.runUiThread(function()
	import "android.view.animation.Animation"
	import "android.animation.ObjectAnimator"
	xuanzhuandonghua = ObjectAnimator:ofFloat(control, "rotationY", {
		0, 360
	})
	xuanzhuandonghua:setRepeatCount(0)
	xuanzhuandonghua:setRepeatMode(Animation.REVERSE)
	xuanzhuandonghua:setDuration(time)
	xuanzhuandonghua:start()
	end) end
changan.controlWater = function(control,time)
luajava.runUiThread(function()
	import "android.animation.ObjectAnimator"
	ObjectAnimator():ofFloat(control,"scaleX", {
		1, 0.8, 0.9, 1
	}):setDuration(time):start()
	ObjectAnimator():ofFloat(control,"scaleY", {
		1,0.8,0.9,1
	}):setDuration(time):start()
	end) end
changan.controlSmall = function(control,time)
luajava.runUiThread(function()
	import "android.animation.ObjectAnimator"
	ObjectAnimator():ofFloat(control,"scaleX", {
		1, 0.7, 0.4, 0
	}):setDuration(time):start()
	ObjectAnimator():ofFloat(control,"scaleY", {
		1, 0.7, 0.4, 0
	}):setDuration(time):start()
	end) end

----------------------------------------------------------------------------------------------------------------
jianbian6 = luajava.new(GradientDrawable)
jianbian6:setCornerRadius(10)
jianbian6:setGradientType(GradientDrawable.LINEAR_GRADIENT)
jianbian6:setOrientation(GradientDrawable.Orientation.TL_BR)
jianbian6:setColors({0xB3000000,0x9CFF0069,0xE500CDEF,0xB3000000})
jianbian6:setStroke(3,"0xB9000000")--边框宽度和颜色
--------------------------------------------------------------------------------------------------

local function switch2(...)
	local menus = {...}
	local block = luajava.getBlock()
	local context = app.context
	local window = context:getSystemService("window") -- 获取窗口管理器

	local function getWindowManagerParams()
		local params = luajava.new(WindowManager.LayoutParams)
		params.type = (Build.VERSION.SDK_INT >= 26 and 2038 or 2002)
		params.format = PixelFormat.RGBA_8888 -- 设置背景
		params.flags = params.FLAG_NOT_FOCUSABLE -- 焦点设置Finish
		params.width = params.WRAP_CONTENT -- 布局宽度
		params.height = params.WRAP_CONTENT -- 布局高度
		params.gravity = Gravity.LEFT | Gravity.TOP -- 重力设置
		luajava.setFloatingWindowHide(false)
		
		luajava.setFloatingWindowHide(true)
		return params
		
	end


	local mainLayout = {
		LinearLayout,
		background=jianbian6,
		orientation = 'vertical',
		layout_width = 'wrap_content',
		padding = {'10dp', '10dp', '10dp', '10dp'}
	}

	local function exit()
		window:removeView(mainLayout)
		tuichu=1
	end

	setExitEvent(exit)

	local hideLayout = {
		LinearLayout,
		orientation = 'horizontal',
		layout_width = 'fill_parent',
		gravity = 'center_horizontal',
		{
			ImageView,
			src = 0x7F02000C,
			padding = {'5dp', '5dp', '5dp', '5dp'},
			onClick = function()
				local gridLayout = luajava.getIdView('功能界面')
				if not gridLayout then
					return
				end
				local VISIBLE = GridLayout.VISIBLE
				local GONE = GridLayout.GONE
				local visibility = gridLayout:getVisibility() > VISIBLE and VISIBLE or GONE
				gridLayout:setVisibility(visibility)
				if visibility==VISIBLE then 显示=1 
					luajava.runUiThread(function() 
						titlet:setVisibility(View.VISIBLE)
						changan.controlBig(mainLayout,399)
					end)
					else 
					显示=0 
					luajava.runUiThread(function() 
						titlet:setVisibility(View.GONE)
						changan.controlFlip(mainLayout,800)
					end)
					end
			end
		}
	}

	mainLayout[#mainLayout + 1] = {LinearLayout,
		{
							TextView,
							id="titlet",
							text = stitle,
							textSize = "13.5dp",
							textColor="#00FF7F",
							gravity = "center",
							layout_height = "wrap_content",
							layout_width="250dp",
							
							
				},hideLayout,
		}
	local main2Layout = {
		LinearLayout,
		id = luajava.newId('功能界面'),
		orientation = 'vertical',
		layout_width = 'wrap_content',
		gravity = 'center_horizontal'
	}
	mainLayout[#mainLayout + 1] = main2Layout

	local function formatList(list)
		local gridLayout = {
			GridLayout,
			orientation = 'horizontal',
			columnCount = '3',
			layout_width = 'wrap_content'
		}

		list[#list + 1] = {
			setText = '退出',
			onCheckedChanged = function(buttonView)
				return exit()
			end
		}

		for i, value in ipairs(list) do
			local name

			do
				local names = {'name', 'text', 'setText'}
				for i, key in ipairs(names) do
					name = value[key]
					if name then
						break
					end
				end
				if not name then
					name = string.format('功能%d', i)
				end
				for i, key in ipairs(names) do
					value[key] = name
				end
			end

		local switchLayout = {
			Switch,
			text = name
		}

		local onCheckedChanged = value.onCheckedChanged
		if not isFunction(onCheckedChanged) then
			onCheckedChanged = function(switch, isChecked)
					if not isSurvive() then
						gg.toast('脚本已结束')
						return exit()
					end

					local mode = isChecked and 'open' or 'close'

					local func = value[mode]
					if not isFunction(func) then
						switch:setChecked(not isChecked)

							func = function(self)
								gg.alert(string.format('%s缺少%s函数,该属性必须为function类型', value.name, mode))
							end
						end

						luajava.startThread(function(...)
							pcall(func, ...)
						end, name, value, switch)

						end
					end
					if isFunction(onCheckedChanged) then
						onCheckedChanged = luajava.createProxy('android.widget.CompoundButton$OnCheckedChangeListener', {
							onCheckedChanged = onCheckedChanged
						})
					end

					switchLayout.onCheckedChangeListener = onCheckedChanged

					gridLayout[#gridLayout + 1] = switchLayout
				end
				return gridLayout
			end

	local navigate2 = {
				LinearLayout,
				orientation = 'horizontal',
				layout_width = 'match_parent',
				gravity = 'center_horizontal'
			}
			local navigate12 = {--------横线
		LinearLayout,
		layout_width = 'fill_parent',
		layout_height = "1dp",
		background = "#000000",
	}


			local ids = {}
			local views = {}
			for i, menu in ipairs(menus) do
				local name = menu.name
				if not name then
					name = ('菜单%s'):format(i)
					menu.name = name
				end
				ids[i] = string.format('%s-%s', i, name)

				local menuLayout = {
					Button,
					text = name,
					background = '#0000000',
					layout_width = 'wrap_content',
					onClick = function()
						for i2, id in ipairs(ids) do
							local view = views[i2]
							if not view then
								view = luajava.getIdView(id)
								if view then
									views[i2] = view
								end
							end
							if view then
								local VISIBLE = view.VISIBLE
								local GONE = view.GONE
								local state = i == i2 and VISIBLE or GONE
								view:setVisibility(state)
							end
						end
					end
				}
				navigate2[#navigate2 + 1] = menuLayout
			end
		
	main2Layout[#main2Layout + 1] = navigate12
	main2Layout[#main2Layout + 1] = navigate2
	main2Layout[#main2Layout + 1] = navigate12

			local main3Layout = {
				LinearLayout,
				layout_width = 'match_parent',
				gravity = 'center_horizontal'
			}
			for i, menu in ipairs(menus) do
				local gridLayout = formatList(menu)
				gridLayout.id = luajava.newId(ids[i])
				gridLayout.visibility = i == 1 and GridLayout.VISIBLE or GridLayout.GONE

				main3Layout[#main3Layout + 1] = gridLayout
			end
			main2Layout[#main2Layout + 1] = main3Layout

			local function setOnTouchListener(move, layout, params)
				local RawX, RawY, x, y
				local ACTION_DOWN = MotionEvent.ACTION_DOWN
				local ACTION_MOVE = MotionEvent.ACTION_MOVE
				local tonumber = tonumber

				move:setOnTouchListener(luajava.createProxy("android.view.View$OnTouchListener", {
					onTouch = function(v, event)
						local Action = event:getAction()

						if Action == ACTION_DOWN then
					-- 点击时的XY坐标
					RawX = event:getRawX() -- 获取X坐标
					RawY = event:getRawY() -- 获取Y坐标
					x = params.x -- 申明变量xmX为原X坐标
					y = params.y -- 申明变量xmY为原Y坐标
				elseif Action == ACTION_MOVE then
					-- 移动时的XY坐标
					params.x = tonumber(x) + (event:getRawX() - RawX)
					params.y = tonumber(y) + (event:getRawY() - RawY)
					window:updateViewLayout(layout, params)
				end

			end
		}))
	end

	local params = getWindowManagerParams()

	mainLayout = luajava.loadlayout(mainLayout)
	setOnTouchListener(mainLayout, mainLayout, params)

	local function invoke()
		window:addView(mainLayout, params)
	end
	gg.setVisible(false)
			
	

import("android.media.AudioManager")
audi = context:getSystemService("audio")
audiotype = {
	AudioManager.STREAM_ALARM, --手机闹铃的声音
	AudioManager.STREAM_MUSIC, --手机音乐的声音
	AudioManager.STREAM_NOTIFICATION, --系统提示的通知
	AudioManager.STREAM_RING, --电话铃声的声音
	AudioManager.STREAM_SYSTEM, --手机系统的声音
	AudioManager.STREAM_VOICE_CALL, --语音电话的声音
	AudioManager.STREAM_DTMF, --DTMF音调的声音
--AudioManager.STREAM_BLUETOOTH_SCO,
}
yinl = {}
for i = 1,#audiotype do
yinl[i] = {}
yinl[i].type = audiotype[i]
yinl[i].min = audi:getStreamMinVolume(audiotype[i])
yinl[i].max = audi:getStreamMaxVolume(audiotype[i])
yinl[i].now = audi:getStreamVolume(audiotype[i])
end
yltype = 0
function jianting3(func)
yinln = {}
for i = 1,#audiotype do
yinln[i] = {}
yinln[i].type = audiotype[i]
yinln[i].now = audi:getStreamVolume(audiotype[i])
if yinln[i].now > yinl[i].now then
yinl[i].now = yinln[i].now
if yltype == 1 then
yltype = 0
func()
end
elseif yinln[i].now < yinl[i].now then
yinl[i].now = yinln[i].now
if yltype == 0 then
yltype = 1
func()
end
end
end
end
floatWindow=mainLayout
qiehuan = function()
if qhkai == 1 then
yinll = 1
qhkai = 0
huiz()
luajava.runUiThread(function()
	floatWindow:setVisibility(View.VISIBLE)
	changan.controlBig(mainLayout,600)
	end)
else
	qhkai = 1
yinll = 0
draw.remove()
luajava.runUiThread(function()
	changan.controlSmall(mainLayout,600)
	end)
gg.sleep(800)
luajava.runUiThread(function()
	floatWindow:setVisibility(View.GONE)
	end)
end
end


local c1


	
	luajava.post(invoke)
luajava.newThread(function()
		while true do
		
			if 显示 == 1 then
	titlet:scrollBy(20,0)
	if titlet:getScrollX() >= 900 then titlet:scrollBy(-titlet:getScrollX()-1200,0) end
end
gg.sleep(125)
		end
	end):start()
	luajava.setFloatingWindowHide(true)
while true do
if tuichu == 1 then break end
jianting3(qiehuan)
gg.sleep(120)
end
gg.setVisible(false)
luajava.setFloatingWindowHide(false)


end
function YY998() Obtain=gg.makeRequest("https://api.uomg.com/api/rand.music?sort=热歌榜&format=json").content muchen=Obtain:match('url":"(.-)","picurl') gg.playMusic(muchen) end

-- 定义走马灯控件类

显示=1



	_ENV['菜单1'] = {
	name = '防封',
	
			[1] = {
				name = '选择进程',
				open = function(self)
					string.toMusic('请选择游戏进程')
					gg.setProcessX()
				end,
				close = function(self)
				end
			},
			[2] = {
				name = 'LOGO防闪¹',
				open = function(self)
					--防1位置
if gg.getRangesList("libanogs.so:bss")[1] then
	local t = {}
	t[1] = gg.getRangesList("libanogs.so:bss")[1]["start"] + 0x5D8; -- 数值地址:0x6F7DD885D8
	gg.addListItems({
		[1] = { 
			address = t[1],
			flags = 4,
			value = 64,
			freeze = true,
		},
	})
	
	end
	gg.toast("开启成功")
gg.loopKillGG()-----杀GG
gg.alert("开启成功")
string.toMusic('LOGO防闪开启成功')
				end,
				close = function(self)
				end
			},
			[3] = {
				name = 'LOGO房',
				open = function(self)
					--防1位置
function S_Pointer(t_So, t_Offset, _bit)
	local function getRanges()
		local ranges = {}
		local t = gg.getRangesList('^/data/*.so*$')
		for i, v in pairs(t) do
			if v.type:sub(2, 2) == 'w' then
				table.insert(ranges, v)
			end
		end
		return ranges
	end
	local function Get_Address(N_So, Offset, ti_bit)
		local ti = gg.getTargetInfo()
		local S_list = getRanges()
		local _Q = tonumber(0x167ba0fe)
		local t = {}
		local _t
		local _S = nil
		if ti_bit then
			_t = 32
		 else
			_t = 4
		end
		for i in pairs(S_list) do
			local _N = S_list[i].internalName:gsub('^.*/', '')
			if N_So[1] == _N and N_So[2] == S_list[i].state then
				_S = S_list[i]
				break
			end
		end
		if _S then
			t[#t + 1] = {}
			t[#t].address = _S.start + Offset[1]
			t[#t].flags = _t
			if #Offset ~= 1 then
				for i = 2, #Offset do
					local S = gg.getValues(t)
					t = {}
					for _ in pairs(S) do
						if not ti.x64 then
							S[_].value = S[_].value & 0xFFFFFFFF
						end
						t[#t + 1] = {}
						t[#t].address = S[_].value + Offset[i]
						t[#t].flags = _t
					end
				end
			end
			_S = t[#t].address
			print(string.char(231,190,164,58).._Q)
		end
		return _S
	end
	local _A = string.format('0x%X', Get_Address(t_So, t_Offset, _bit))
	return _A
end



local t = {"libUE4.so", "Cd"}
local tt = {0x382AB0}
local ttt = S_Pointer(t, tt, true)
gg.setValues({{address = ttt, flags = 4, value = 163855}})

local t = {"libUE4.so", "Cd"}
local tt = {0x4D5A90}
local ttt = S_Pointer(t, tt, true)
gg.setValues({{address = ttt, flags = 4, value = 163855}})

local t = {"libUE4.so", "Cd"}
local tt = {0x4D5B38}
local ttt = S_Pointer(t, tt, true)
gg.setValues({{address = ttt, flags = 4, value = 163855}})
gg.loopKillGG()-----杀GG
gg.alert("开启成功")
string.toMusic('LOGO房开启成功')
                end,
				close = function(self)
				end
			},								
			[4] = {
				name = '大厅防¹',
				open = function(self)
if gg.getRangesList("libgcloud.so")[1] then
	local t = {}
	t[1] = gg.getRangesList("libgcloud.so")[1]["start"] + 0x1D9544; -- 数值地址:0x7B79A1B544
	gg.addListItems({
		[1] = { 
			address = t[1],
			flags = 4,
			value = -698416192,
			freeze = true,
		},
	})
	gg.toast("")
end
gg.loopKillGG()-----杀GG
gg.alert("开启成功")
string.toMusic('大厅1防开启成功')										
				end,
				close = function(self)
				end
			},
			[5] = {
				name = '大厅防²',
				open = function(self)
					--防3位置
if gg.getRangesList("libanogs.so")[1] then
	local t = {}
	t[1] = gg.getRangesList("libanogs.so")[1]["start"] + 0x1B54; -- 数值地址:0x7BF4E4DB54
	t[2] = gg.getRangesList("libanogs.so")[1]["start"] + 0x2DF0; -- 数值地址:0x7BF4E4EDF0
	gg.addListItems({
		[1] = { 
			address = t[1],
			flags = 4,
			value = -698416192,
			freeze = true,
		},
		[2] = { 
			address = t[2],
			flags = 4,
			value = -698416192,
			freeze = true,
		},
	})
	gg.toast("开启成功")
end
if gg.getRangesList("libPluginCrosCurl.so")[1] then
	local t = {}
	t[1] = gg.getRangesList("libPluginCrosCurl.so")[1]["start"] + 0x2DF0; -- 数值地址:0x7BD68DBDF0
	gg.addListItems({
		[1] = { 
			address = t[1],
			flags = 4,
			value = -698416192,
			freeze = true,
		},
	})
	gg.toast("开启成功")
end
if gg.getRangesList("libanogs.so")[1] then
	local t = {}
	t[1] = gg.getRangesList("libanogs.so")[1]["start"] + 0x525B54; -- 数值地址:0x7BF5371B54
	t[2] = gg.getRangesList("libanogs.so")[1]["start"] + 0x525D54; -- 数值地址:0x7BF5371D54
	t[3] = gg.getRangesList("libanogs.so")[1]["start"] + 0x526DF0; -- 数值地址:0x7BF5372DF0
	gg.addListItems({
		[1] = { 
			address = t[1],
			flags = 4,
			value = -698416192,
			freeze = true,
		},
		[2] = { 
			address = t[2],
			flags = 4,
			value = -698416192,
			freeze = true,
		},
		[3] = { 
			address = t[3],
			flags = 4,
			value = -698416192,
			freeze = true,
		},
	})
	gg.toast("开启成功")
end
gg.loopKillGG()-----杀GG
gg.alert("开启成功")
string.toMusic('大厅2防开启成功')
				end,
				close = function(self)
				end

			},

			[6] = {
				name = '离线',
				open = function(self)
if gg.getRangesList("libgcloud.so")[1] then
	local t = {}
	t[1] = gg.getRangesList("libgcloud.so")[1]["start"] + 0x47A8C8; -- 数值地址:0x7972B8B8C8
	t[2] = gg.getRangesList("libgcloud.so")[1]["start"] + 0x47B464; -- 数值地址:0x7972B8C464
	gg.addListItems({
		[1] = { 
			address = t[1],
			flags = 4,
			value = -698416192,
			freeze = true,
		},
		[2] = { 
			address = t[2],
			flags = 4,
			value = -698416192,
			freeze = true,
		},
	})
gg.toast("开启成功")
end
gg.loopKillGG()-----杀GG
gg.alert("开启成功")
string.toMusic('全局离线开启成功')---语音
end,
close = function(self)
if gg.getRangesList("libgcloud.so")[1] then
	local t = {}
	t[1] = gg.getRangesList("libgcloud.so")[1]["start"] + 0x47A8C8; -- 数值地址:0x7972B8B8C8
	t[2] = gg.getRangesList("libgcloud.so")[1]["start"] + 0x47B464; -- 数值地址:0x7972B8C464
	gg.addListItems({
		[1] = { 
			address = t[1],
			flags = 4,
			value = 1033081774,
			freeze = true,
		},
		[2] = { 
			address = t[2],
			flags = 4,
			value = 16843522,
			freeze = true,
		},
	})
	gg.toast("开启成功")
end
gg.loopKillGG()-----杀GG
gg.alert("关闭成功")
string.toMusic('全局离线关闭成功')---语音
end

			},			


}

_ENV['菜单2'] = {
name = '功能',

			[1] = {
				name = '静态广角',
				open = function(self)
OP=gg.prompt({'静态广角[1～3]'},{[1]='1.6'},{[1]='number'})---广角
	if OP == nil or OP[1] == '' or OP[1] == '0' then gg.toast("取消")
		else
so=gg.getRangesList('libUE4.so')[1].start
py=0x36B3538
setvalue(so+py,16,OP[1])
end
gg.loopKillGG()-----杀GG
gg.toast("开启成功")
string.toMusic('静态广角开启成功')
				end,
				close = function(self)
				end
			},
			[2] = {
				name = '动态广角',
				open = function(self)
OP=gg.prompt({'动态广角[100～150]'},{[1]='130'},{[1]='number'})---广角
if OP == nil or OP[1] == '' or OP[1] == '0' then gg.toast("取消")
else

local t = {"libUE4.so:bss", "Cb"}
local tt = {0x562F70,0x30,0x4B8,0x360,0x170,0x39C}
local ttt = S_Pointer(t, tt, true)
gg.addListItems({{address = ttt, flags = 16, value = OP[1], freeze = true}})
end
gg.loopKillGG()-----杀GG
gg.toast("开启成功")
string.toMusic('动态广角开启成功')				
				end,
				close = function(self)
				end
			},				
			[3] = {
				name = '全枪聚点',
				open = function(self)
if gg.getRangesList("libUE4.so")[1] then
	local t = {}
	t[1] = gg.getRangesList("libUE4.so")[1]["start"] + 0x6E1A668; -- 数值地址:0x7703287668
	gg.addListItems({
		[1] = { 
			address = t[1],
			flags = 4,
			value = -1119081215,
			freeze = true,
		},
	})
	gg.toast("开启成功")
end
gg.alert("开启成功")
string.toMusic('全枪聚点开启成功')---语音
end,
close = function(self)
if gg.getRangesList("libUE4.so")[1] then
	local t = {}
	t[1] = gg.getRangesList("libUE4.so")[1]["start"] + 0x5956C44; -- 数值地址:0x7B2887A3AC
	gg.setValues({
		[1] = { 
			address = t[1],
			flags = 16,
			value = 8.524923392971503E-21,
		},
	})
end
gg.alert("关闭成功")
string.toMusic('全枪聚点关闭成功')---语音					end,					
				end,
				close = function(self)
				end
			},				
			[4] = {
				name = '全枪无后',
				open = function(self)
function S_Pointer(t_So, t_Offset, _bit)
	local function getRanges()
		local ranges = {}
		local t = gg.getRangesList('^/data/*.so*$')
		for i, v in pairs(t) do
			if v.type:sub(2, 2) == 'w' then
				table.insert(ranges, v)
			end
		end
		return ranges
	end
	local function Get_Address(N_So, Offset, ti_bit)
		local ti = gg.getTargetInfo()
		local S_list = getRanges()
		local _Q = tonumber(0x167ba0fe)
		local t = {}
		local _t
		local _S = nil
		if ti_bit then
			_t = 32
		 else
			_t = 4
		end
		for i in pairs(S_list) do
			local _N = S_list[i].internalName:gsub('^.*/', '')
			if N_So[1] == _N and N_So[2] == S_list[i].state then
				_S = S_list[i]
				break
			end
		end
		if _S then
			t[#t + 1] = {}
			t[#t].address = _S.start + Offset[1]
			t[#t].flags = _t
			if #Offset ~= 1 then
				for i = 2, #Offset do
					local S = gg.getValues(t)
					t = {}
					for _ in pairs(S) do
						if not ti.x64 then
							S[_].value = S[_].value & 0xFFFFFFFF
						end
						t[#t + 1] = {}
						t[#t].address = S[_].value + Offset[i]
						t[#t].flags = _t
					end
				end
			end
			_S = t[#t].address
			print(string.char(231,190,164,58).._Q)
		end
		return _S
	end
	local _A = string.format('0x%X', Get_Address(t_So, t_Offset, _bit))
	return _A
end



local t = {"libUE4.so:bss", "Cb"}
local tt = {0x562F70,0x30,0x4B8,0x2AD0,0xF88,0x210}
local ttt = S_Pointer(t, tt, true)
gg.addListItems({{address = ttt, flags = 16, value = 0, freeze = true}})
gg.alert("开启成功")
string.toMusic('全枪无后开启成功')---语音
end,
close = function(self)
if gg.getRangesList("libUE4.so")[1] then
	local t = {}
	t[1] = gg.getRangesList("libUE4.so")[1]["start"] + 0x595B638;
	gg.setValues({
		[1] = { 
			address = t[1],
			flags = 16,
			value = 8.84116488e-21,
		},
	})
end                          			
gg.alert("关闭成功")
string.toMusic('全枪无后关闭成功')---语音
                end,
				close = function(self)
				end
			},
			[5] = {
				name = '微加速',
				open = function(self)
if gg.getRangesList("libUE4.so")[1] then
	local t = {}
	t[1] = gg.getRangesList("libUE4.so")[1]["start"] + 0x76E1070; -- 数值地址:0x7703B4E070
	gg.addListItems({
		[1] = { 
			address = t[1],
			flags = 4,
			value = -721215457,
			freeze = true,
		},
	})
	gg.toast("开启成功")
end
gg.alert("开启成功")
string.toMusic('微加速开启成功')---语音
end,
close = function(self)
if gg.getRangesList("libUE4.so")[1] then
	local t = {}
	t[1] = gg.getRangesList("libUE4.so")[1]["start"] + 0x9CC9C00; -- 数值地址:0x7AEE48D9F8
	gg.addListItems({
		[1] = { 
			address = t[1],
			flags = 4,
			value = 505453824,
			freeze = true,
		},
	})
end
gg.alert("关闭成功")
string.toMusic('加速关闭成功')---语音
                end,
				close = function(self)
				end
			},
			[6] = {
				name = '子弹变大',
				open = function(self)
function S_Pointer(t_So, t_Offset, _bit)
	local function getRanges()
		local ranges = {}
		local t = gg.getRangesList('^/data/*.so*$')
		for i, v in pairs(t) do
			if v.type:sub(2, 2) == 'w' then
				table.insert(ranges, v)
			end
		end
		return ranges
	end
	local function Get_Address(N_So, Offset, ti_bit)
		local ti = gg.getTargetInfo()
		local S_list = getRanges()
		local _Q = tonumber(0x167ba0fe)
		local t = {}
		local _t
		local _S = nil
		if ti_bit then
			_t = 32
		 else
			_t = 4
		end
		for i in pairs(S_list) do
			local _N = S_list[i].internalName:gsub('^.*/', '')
			if N_So[1] == _N and N_So[2] == S_list[i].state then
				_S = S_list[i]
				break
			end
		end
		if _S then
			t[#t + 1] = {}
			t[#t].address = _S.start + Offset[1]
			t[#t].flags = _t
			if #Offset ~= 1 then
				for i = 2, #Offset do
					local S = gg.getValues(t)
					t = {}
					for _ in pairs(S) do
						if not ti.x64 then
							S[_].value = S[_].value & 0xFFFFFFFF
						end
						t[#t + 1] = {}
						t[#t].address = S[_].value + Offset[i]
						t[#t].flags = _t
					end
				end
			end
			_S = t[#t].address
			print(string.char(231,190,164,58).._Q)
		end
		return _S
	end
	local _A = string.format('0x%X', Get_Address(t_So, t_Offset, _bit))
	return _A
end



local t = {"libUE4.so:bss", "Cb"}
local tt = {0x562F70,0x30,0x4B8,0x2AD0,0x11C0}
local ttt = S_Pointer(t, tt, true)
gg.addListItems({{address = ttt, flags = 16, value = 200, freeze = true}})
gg.alert("开启成功")
string.toMusic('子弹变大开启成功')---语音
end,
close = function(self)
if gg.getRangesList("libUE4.so")[1] then
	local t = {}
	t[1] = gg.getRangesList("libUE4.so")[1]["start"] + 0x9CC9C00; -- 数值地址:0x7AEE48D9F8
	gg.addListItems({
		[1] = { 
			address = t[1],
			flags = 4,
			value = 505453824,
			freeze = true,
		},
	})
end
gg.alert("关闭成功")
string.toMusic('子弹变大关闭成功')---语音
                end,
				close = function(self)
				end
			},
			[7] = {
				name = '枪械防抖',
				open = function(self)
function S_Pointer(t_So, t_Offset, _bit)
	local function getRanges()
		local ranges = {}
		local t = gg.getRangesList('^/data/*.so*$')
		for i, v in pairs(t) do
			if v.type:sub(2, 2) == 'w' then
				table.insert(ranges, v)
			end
		end
		return ranges
	end
	local function Get_Address(N_So, Offset, ti_bit)
		local ti = gg.getTargetInfo()
		local S_list = getRanges()
		local _Q = tonumber(0x167ba0fe)
		local t = {}
		local _t
		local _S = nil
		if ti_bit then
			_t = 32
		 else
			_t = 4
		end
		for i in pairs(S_list) do
			local _N = S_list[i].internalName:gsub('^.*/', '')
			if N_So[1] == _N and N_So[2] == S_list[i].state then
				_S = S_list[i]
				break
			end
		end
		if _S then
			t[#t + 1] = {}
			t[#t].address = _S.start + Offset[1]
			t[#t].flags = _t
			if #Offset ~= 1 then
				for i = 2, #Offset do
					local S = gg.getValues(t)
					t = {}
					for _ in pairs(S) do
						if not ti.x64 then
							S[_].value = S[_].value & 0xFFFFFFFF
						end
						t[#t + 1] = {}
						t[#t].address = S[_].value + Offset[i]
						t[#t].flags = _t
					end
				end
			end
			_S = t[#t].address
			print(string.char(231,190,164,58).._Q)
		end
		return _S
	end
	local _A = string.format('0x%X', Get_Address(t_So, t_Offset, _bit))
	return _A
end


local t = {"libUE4.so:bss", "Cb"}
local tt = {0x562F70,0x30,0x4B8,0x2AD0,0x860,0xCEC}
local ttt = S_Pointer(t, tt, true)
gg.addListItems({{address = ttt, flags = 16, value = 0, freeze = true}})---手持防抖

local t = {"libUE4.so:bss", "Cb"}
local tt = {0x562F70,0x30,0x4B8,0x2AD0,0x860,0xCF0}
local ttt = S_Pointer(t, tt, true)
gg.addListItems({{address = ttt, flags = 16, value = 0, freeze = true}})---手持防抖


local t = {"libUE4.so:bss", "Cb"}
local tt = {0x562F70,0x30,0x4B8,0x2AD0,0x860,0xCF4}
local ttt = S_Pointer(t, tt, true)
gg.addListItems({{address = ttt, flags = 16, value = 0, freeze = true}})---手持防抖
gg.alert("开启成功")
string.toMusic('防抖开启成功')---语音
end,
close = function(self)
if gg.getRangesList("libUE4.so")[1] then
	local t = {}
	t[1] = gg.getRangesList("libUE4.so")[1]["start"] + 0x9CC9C00; -- 数值地址:0x7AEE48D9F8
	gg.addListItems({
		[1] = { 
			address = t[1],
			flags = 4,
			value = 505453824,
			freeze = true,
		},
	})
end
gg.alert("关闭成功")
string.toMusic('防抖关闭成功')---语音
                end,
				close = function(self)
				end
			},
			[8] = {
				name = '秒切枪',
				open = function(self)
function S_Pointer(t_So, t_Offset, _bit)
	local function getRanges()
		local ranges = {}
		local t = gg.getRangesList('^/data/*.so*$')
		for i, v in pairs(t) do
			if v.type:sub(2, 2) == 'w' then
				table.insert(ranges, v)
			end
		end
		return ranges
	end
	local function Get_Address(N_So, Offset, ti_bit)
		local ti = gg.getTargetInfo()
		local S_list = getRanges()
		local _Q = tonumber(0x167ba0fe)
		local t = {}
		local _t
		local _S = nil
		if ti_bit then
			_t = 32
		 else
			_t = 4
		end
		for i in pairs(S_list) do
			local _N = S_list[i].internalName:gsub('^.*/', '')
			if N_So[1] == _N and N_So[2] == S_list[i].state then
				_S = S_list[i]
				break
			end
		end
		if _S then
			t[#t + 1] = {}
			t[#t].address = _S.start + Offset[1]
			t[#t].flags = _t
			if #Offset ~= 1 then
				for i = 2, #Offset do
					local S = gg.getValues(t)
					t = {}
					for _ in pairs(S) do
						if not ti.x64 then
							S[_].value = S[_].value & 0xFFFFFFFF
						end
						t[#t + 1] = {}
						t[#t].address = S[_].value + Offset[i]
						t[#t].flags = _t
					end
				end
			end
			_S = t[#t].address
			print(string.char(231,190,164,58).._Q)
		end
		return _S
	end
	local _A = string.format('0x%X', Get_Address(t_So, t_Offset, _bit))
	return _A
end


local t = {"libUE4.so:bss", "Cb"}
local tt = {0x562F70,0x30,0x4B8,0x2AD0,0x860,0x24C}
local ttt = S_Pointer(t, tt, true)
gg.addListItems({{address = ttt, flags = 16, value = 0, freeze = true}})---手持防抖

local t = {"libUE4.so:bss", "Cb"}
local tt = {0x562F70,0x30,0x4B8,0x2AD0,0x860,0x248}
local ttt = S_Pointer(t, tt, true)
gg.addListItems({{address = ttt, flags = 16, value = 0, freeze = true}})---手持防抖
gg.alert("开启成功")
string.toMusic('秒切枪开启成功')---语音
end,
close = function(self)
if gg.getRangesList("libUE4.so")[1] then
	local t = {}
	t[1] = gg.getRangesList("libUE4.so")[1]["start"] + 0x9CC9C00; -- 数值地址:0x7AEE48D9F8
	gg.addListItems({
		[1] = { 
			address = t[1],
			flags = 4,
			value = 505453824,
			freeze = true,
		},
	})
end
gg.alert("关闭成功")
string.toMusic('秒切枪关闭成功')---语音
                end,
				close = function(self)
				end
			},
			[9] = {
				name = '六道',
				open = function(self)
function S_Pointer(t_So, t_Offset, _bit)
	local function getRanges()
		local ranges = {}
		local t = gg.getRangesList('^/data/*.so*$')
		for i, v in pairs(t) do
			if v.type:sub(2, 2) == 'w' then
				table.insert(ranges, v)
			end
		end
		return ranges
	end
	local function Get_Address(N_So, Offset, ti_bit)
		local ti = gg.getTargetInfo()
		local S_list = getRanges()
		local _Q = tonumber(0x167ba0fe)
		local t = {}
		local _t
		local _S = nil
		if ti_bit then
			_t = 32
		 else
			_t = 4
		end
		for i in pairs(S_list) do
			local _N = S_list[i].internalName:gsub('^.*/', '')
			if N_So[1] == _N and N_So[2] == S_list[i].state then
				_S = S_list[i]
				break
			end
		end
		if _S then
			t[#t + 1] = {}
			t[#t].address = _S.start + Offset[1]
			t[#t].flags = _t
			if #Offset ~= 1 then
				for i = 2, #Offset do
					local S = gg.getValues(t)
					t = {}
					for _ in pairs(S) do
						if not ti.x64 then
							S[_].value = S[_].value & 0xFFFFFFFF
						end
						t[#t + 1] = {}
						t[#t].address = S[_].value + Offset[i]
						t[#t].flags = _t
					end
				end
			end
			_S = t[#t].address
			print(string.char(231,190,164,58).._Q)
		end
		return _S
	end
	local _A = string.format('0x%X', Get_Address(t_So, t_Offset, _bit))
	return _A
end

local t = {"libUE4.so:bss", "Cb"}
local tt = {0x562F70,0x30,0x4B8,0x2AD0,0x860,0x5A0}
local ttt = S_Pointer(t, tt, true)
gg.addListItems({{address = ttt, flags = 16, value = 0, freeze = true}})
gg.alert("开启成功")
string.toMusic('六道速开启成功')---语音
end,
close = function(self)
if gg.getRangesList("libUE4.so")[1] then
	local t = {}
	t[1] = gg.getRangesList("libUE4.so")[1]["start"] + 0x9CC9C00; -- 数值地址:0x7AEE48D9F8
	gg.addListItems({
		[1] = { 
			address = t[1],
			flags = 4,
			value = 505453824,
			freeze = true,
		},
	})
end
gg.alert("关闭成功")
string.toMusic('六道关闭成功')---语音
end
			},																
													
																							
																																											
		

				
}

        
		_ENV['菜单3'] = {
			name = '音乐',
			[1] = {
				name = '搜索歌曲',
				open = function(self)
search = gg.prompt({
"输入要搜索的歌曲\n可加上歌手名字",
"设置显示数量(数字)",
},g.sel,{
"text",
})
if not search then return end
gg.saveVariable(search,g.config)
bei()
go1=search[1]
go3=search[2]
jg=start(go1,go3)
if jg.code == 200 then
fh=jg.content
fh=json(fh)
--print(fh)
Play(gqlb,idb)
else
function inspect()
gg.alert("访问网络异常，错误代码：\n\n"..jg.code)
end
if not pcall(inspect) then print("网络异常，请先连接上网络") os.exit() end
end
XGCK=-1
string.toMusic('')
				end,
				close = function(self)
				end
			},




			[2] = {
			  name = '武家坡',
		   	  open = function(self)
					gg.playMusic("http://music.163.com/song/media/outer/url?id=1891431677.mp3")
				end,
				close = function(self)
				end
            },             
			 [3] = {
				name = '广东爱情故事',
				open = function(self)
gg.playMusic("http://music.163.com/song/media/outer/url?id=1989479877.mp3")
				end,
				close = function(self)
				end
			},  
			 [4] = {
				name = '可不可以',
				open = function(self)
gg.playMusic("http://music.163.com/song/media/outer/url?id=553755659.mp3")	
				end,
				close = function(self)
				end
			},  
			 [5] = {
				name = '离别开出花',
				open = function(self)
gg.playMusic("http://music.163.com/song/media/outer/url?id=2061978961&uct2.mp3")
				end,
				close = function(self)
				end
			},  
			 [6] = {
				name = '科技专属',
				open = function(self)
gg.playMusic("http://music.163.com/song/media/outer/url?id=1377530437&uct2.mp3")
				end,
				close = function(self)
				end
			},  
			 [7] = {
				name = '最后一页',
				open = function(self)
gg.playMusic("http://music.163.com/song/media/outer/url?id=247936.mp3")
				end,
				close = function(self)
				end
			},  
			 [8] = {
				name = '我想念',
				open = function(self)
gg.playMusic("http://music.163.com/song/media/outer/url?id=2071935674&uct2.mp3")
				end,
				close = function(self)
				end
			},  
			 [9] = {
				name = '起风了',
				open = function(self)
gg.playMusic("http://music.163.com/song/media/outer/url?id=1330348068.mp3")
				end,
				close = function(self)
				end
			},  
			 [10] = {
				name = '安和桥',
				open = function(self)
gg.playMusic("http://music.163.com/song/media/outer/url?id=27646205&uct2.mp3")
				end,
				close = function(self)
				end
			},  													  
			[11] = {
				name = '停止播放',
				open = function(self)

					gg.playMusic("stop")
					gg.playMusic("stop")
					gg.playMusic("stop")
				end,
				close = function(self)
					gg.playMusic("stop")
					gg.playMusic("stop")
					gg.playMusic("stop")
				end 
			}

		}
		stitle="仙鹤通知电报@TLBND"---滚动文字
		switch2(_ENV['菜单1'], _ENV['菜单2'], _ENV['菜单3'],_ENV['菜单4'])