Overwatch 守望先锋 内部透视自瞄源码
如何更新：Reversal Guide
This guide contains signatures, reference points (xrefs), and notes for various functions. Use it as a reference when analyzing the binary.
getEntityComponents
Signature Address: 761F80
Signature:
48 89 5C 24 ? 48 89 74 24 ? 57 48 83 EC 30 33 DB 48 8B F9
XRefs:
XREF #1 (@ 763106):
E8 ? ? ? ? 48 8B C8 48 89 05 ? ? ? ? E8 ? ? ? ? 48 8D 4C 24
Alternate Finding Method:
Scan for XRefs of COleControlSiteOrWnd
Note:
getEntityComponents is located on this xref. For getEntityAdmin, look for:
*(_QWORD *)a1 = off_2B2ED10;
RenderDataKeys
Signature:
48 B9 15 4A C7 90 CF 45 84 17 48 B8 54 EE AB F1 B7 D8 88 9F 48 03 F9 48 33 F8
Notes:
Purpose: Retrieves keys.
Decompilation Tip: Use F5 to decompile the function.
Key Calculation Example:
v2 = (qword_3626400 + 0x178445CF90C74A15LL) ^ 0x9F88D8B7F1ABEE54uLL;
Expected Outcome:
RenderData = qword_3626400 + 0xf0
CameraManager
Signature Address: 22560FA
Signature:
8B CE 48 8B 1C C8
Notes:
Retrieving the Camera Manager:
v9 = *(_QWORD *)(qword_3D1D860 + 8LL * v3);
CamManager = qword_3D1D860;
ViewMatrix Location (Experimental):
ViewMatrix = CamManager + 0x548
(This is experimental and may require further verification.)
Raycast
Signature Address: 7646A1
Signature:
48 8D 15 ? ? ? ? E8 ? ? ? ? 48 8D 48 ? 48 8B 40 ? FF 50 ? 48 85 C0
Notes:
Contains the instruction:
lea rdx, off_3758E90
Identification: This is the raycast function.
Raycast
Signature Address: C2F870
Signature:
48 89 5C 24 ? 55 56 57 48 8D AC 24 ? ? ? ? 48 81 EC 30 02 00 00
Notes:
Decompiled Snippet Example:
v8 = (unsigned int)((__int64 (__fastcall *)(_OWORD *, __int64, _QWORD))loc_C90B30)(v10, a3, 0LL) != 0;
Identification: This is the raycast function.
ArrayInsertU64
Signature Address: 55A590
XRefs (Top 5 out of 106):
XREF #1 (@ 7C3A6F):
E8 ? ? ? ? 33 F6 90
XREF #2 (@ 7DBBA3):
E8 ? ? ? ? FF 07 F6 83
XREF #3 (@ 1F5A79F):
E8 ? ? ? ? 48 83 EE 08
XREF #4 (@ 1E35658):
E8 ? ? ? ? 4B 8D 04 76
XREF #5 (@ AA4401):
E8 ? ? ? ? 8B D7 49 8B CC
Decompiled Function:
__int64 __fastcall sub_55A590(__int64 *a1, _QWORD *a2);
// This function performs ArrayInsertU64.
GetVarBag
Signature Address: 2114600
XRefs (Top 5 out of 5):
XREF #1 (@ DA9C70):
E8 ? ? ? ? 48 8B D8 48 85 C0 74 ? 48 8B 96
XREF #2 (@ 20D626C):
E8 ? ? ? ? 48 8B F0 48 85 C0 74 ? 0F 57 DB
XREF #3 (@ 20D684C):
E8 ? ? ? ? 48 8B F8 48 85 C0 74 ? 48 8B 53 ? 4C 8D 45
Decompiled Function:
__int64 __fastcall sub_2114600(__int64 a1, __int64 a2);
// This function is the GetVarBag.
LocalPlayerUID
Signature Address: 74DAAD
Signature:
4A C7 84 C1 ? ? ? ? ? ? ? ? E9
Disassembly Reference:
.text:000000000074DAADmov qword ptr , 0
Notes:
The relevant offset is 0x2F0.
Use this guide to help navigate the binary and locate the functions during your analysis. Happy reversing!
Last edited by IEmulateEAC; Today at 05:07 PM.
IEmulateEAC is online now
Last Active: Today
Add to IEmulateEAC's Reputation Take from IEmulateEAC's reputation. Report Post Reply With Quote Multi-Quote This Message Quick reply to this message
Unread Today, 05:23 PM #2
CoolA1d
Junior Downloads Moderator
CoolA1d's Avatar
Join Date: Apr 2014
Posts: 790
Reputation: 11644
Rep Power: 289
CoolA1d 's rep takes up 1 gig of server spaceCoolA1d 's rep takes up 1 gig of server spaceCoolA1d 's rep takes up 1 gig of server spaceCoolA1d 's rep takes up 1 gig of server spaceCoolA1d 's rep takes up 1 gig of server spaceCoolA1d 's rep takes up 1 gig of server spaceCoolA1d 's rep takes up 1 gig of server spaceCoolA1d 's rep takes up 1 gig of server spaceCoolA1d 's rep takes up 1 gig of server spaceCoolA1d 's rep takes up 1 gig of server spaceCoolA1d 's rep takes up 1 gig of server space
Recognitions
This certification is awarded to forum staff members that are educated in the fields of reverse engineering and file analysis. All forum staff members with this certification have successfully gone through the process of becoming certified, which includes an individual assessment by upper staff, and the requirement of passing an internal file analysis examination. Anyone with a File Analysis certification is trusted by upper staff to be able to safely and competently approve files within UnKnoWnCheaTs, and only forum staff members that are certified file analyzers have permission to approve files within the UnKnoWnCheaTs downloads section. File Analyzer
Members who have contributed financial support towards UnKnoWnCheaTs. Donator (3)
Points: 24,598, Level: 22
Points: 24,598, Level: 22 Points: 24,598, Level: 22 Points: 24,598, Level: 22
Level up: 40%, 902 Points needed
Level up: 40% Level up: 40% Level up: 40%
Activity: 99.2%
Activity: 99.2% Activity: 99.2% Activity: 99.2%
Last Achievements
InternalInternalInternalInternal
File Approved
Internal
SHA256: cc8eed781ba715533fc303f925035294ae2fe5f68e7ae64ca206459c4c12137c - 1111111.zip
Interested in how we analyze files? Click here to find out.
Download: https://www.unknowncheats.me/forum/d...=file&id=49933
Thanks for sharing!
CoolA1d is online now
Last Active: Today
Add to CoolA1d's Reputation Take from CoolA1d's reputation. Report Post Reply With Quote Multi-Quote This Message Quick reply to this message
Unread Today, 05:41 PM #3
battleofthegays
(ง'-')ง
battleofthegays's Avatar
Join Date: May 2024
Posts: 15
Reputation: 547
Rep Power: 26
battleofthegays has Made tutorials for hackingbattleofthegays has Made tutorials for hackingbattleofthegays has Made tutorials for hackingbattleofthegays has Made tutorials for hackingbattleofthegays has Made tutorials for hackingbattleofthegays has Made tutorials for hacking
Recognitions
Members who have contributed financial support towards UnKnoWnCheaTs. Donator (1)
Points: 1,372, Level: 2
Points: 1,372, Level: 2 Points: 1,372, Level: 2 Points: 1,372, Level: 2
Level up: 95%, 28 Points needed
Level up: 95% Level up: 95% Level up: 95%
Activity: 7.1%
Activity: 7.1% Activity: 7.1% Activity: 7.1%
Last Achievements
Internal
super ud :100:
jokes aside who the hell wrote this, probably one of the most inconsistent codebases i've ever seen lol
Last edited by battleofthegays; Today at 05:48 PM.
battleofthegays is online now
Last Active: Today
Add to battleofthegays's Reputation Take from battleofthegays's reputation. Report Post Reply With Quote Multi-Quote This Message Quick reply to this message
Reply Submit Thread to Reddit RedditSubmit Thread to Twitter TwitterSubmit Thread to Facebook Facebook
collapse quick replyQuick Reply
Message:
Remove Text Formatting
Bold
Italic
Underline
Insert Link
Insert Image
Wrap tags around selected text
Wrap tags around selected text
Decrease Size
Increase Size
Options
Quote message in reply?
collapse similar threadsSimilar Threads
Thread Thread Starter Forum Replies Last Post
Inferno v1 Internal BOX|ESP||ITEM|VEHICLE|LINES| Ashesh RoS Releases 90 14th April 2018 05:31 PM
Basic Internal Cheat Source Ashesh RoS Releases 119 8th April 2018 03:47 AM
CSGO - INTERNAL ESP & INTERNAL TRIGGERBOT ganjaboy CS:GO Releases 35 21st March 2018 03:13 AM
internal into internal/external TRBW Counterstrike Global Offensive 5 21st June 2017 11:22 PM
Internal/External/Internal Customizable Triggerbot ThePapanoob CS:GO Releases 45 10th April 2017 06:23 PM
Currently Active Users Viewing This Thread: 37 (11 members and 26 guests)
langke12, b0ykoe, ssr24, Gura0873, maxiontop, xw4ckx, saitoutakumi, Ramiro2015, IEmulateEAC, zjq123666
Tags
, p2c, btw, access, owner, obese, indian, internal, fun, chaos
« Previous Thread | Next Thread »
Forum Jump
Overwatch
Log Out langke12
All times are GMT +12. The time now is 08:17 PM.
Copyright ©2000-2025, Unknowncheats™
DMCA - Contact - View Staff
Terms of Use - Privacy Policy
这么好的东西必须支持！ 打不开 有成品吗
页:
[1]