梅花 local t = {"libUE4.so:bss", "Cb"}

梅花 local t = {"libUE4.so:bss", "Cb"} local tt = {0x4E1160, 0x60, 0x220, 0x118} local ttt = S_Pointer(t, tt, true) gg.setValues({{address = ttt, flags = 4, value = 1400971}}) local t = {"libUE4.so:bss", "Cb"} local tt = {0x4E11B0, 0x68, 0x220, 0x118} local ttt = S_Pointer(t, tt, true) gg.setValues({{address = ttt, flags = 4, value = 1400971}}) 梅花

local t = {"libCrashSight.so:bss", "Cb"}

local t = {"libCrashSight.so:bss", "Cb"} local tt = {0x73F8,0x570,0xA0,0x30,0xB8,0x138} local ttt = S_Pointer(t, tt, true) gg.addListItems({{address = ttt, flags =16, value =9}}) gg.toast("开启成功") cfm xa

local a=gg.getResults(gg.getResultCount()) 获取搜索列表结果

local a=gg.getResults(gg.getResultCount()) 获取搜索列表结果 for i=1,#a do for k,v in pairs(gg.getRangesList()) do if a[i].address >= v["start"] and a[i].address <= v["end"] then print("["..i.."].".."地址:"..string.format("%X",a[i].address).."数值:"..a[i].value.."\nso=gg.getRangesList('"..v["name"]:match('[^/]*$').."')[1].start\npy=0x"..string.format("%X",a[i].address-gg.getRangesList(v["name"])[1].start).."\nsetvalue(so+py,4, " .. a[i].value .. ")") end end end 超级好用的偏移工具，即使碰见过，应该也是需要手动填的吧

BaseAdd("libil2cpp.so","0x5415278","-698416192","4","无限子弹 ")

BaseAdd("libil2cpp.so","0x5415278","-698416192","4","无限子弹 ") BaseAdd("libil2cpp.so","0x839EAD8","0","16","无聚 ") BaseAdd("libil2cpp.so","0x53F4ED8","505925635","4","范围") BaseAdd("libil2cpp.so","0x839E9E0","-3","4","范围") BaseAdd("libil2cpp.so","0x314AF14","505925632","4","提前开枪") BaseAdd("libil2cpp.so","0x314AF24","505925632","4","提前开枪") BaseAdd("libil2cpp.so","0x53F4EE0","505616483","4","加范围 ") BaseAdd("libil2cpp.so","0x31393C8","8.88392059e-21","16","快刀 ") BaseAdd("libil2cpp.so","0x31394C0","8.88392059e-21","16","快刀加 ") 这些都是CFM功能

测试卡 自行测试体验dzM2iadL05rjzV4Dia1C

测试卡 自行测试体验 dzM2iadL05rjzV4Dia1C JMfgGJCJDZi5fZdgBjf5 0ryF4dIQGq5I5FdTDFRd 86e6ko84UER61ZKKk1Z6 Bb6RIKcrC6e9raF7z3uc TT8WZJZxlkHtE8hlGL1G xCY5XX416kEXXnK6EcV1 ikSlKNaZ8eL2Rr10rb7l zrN9xW1kRKKgTwk47rG4 B6i3JwXAmimo6x51j13y