如何更新:
- Reversal Guide
- This guide contains signatures, reference points (xrefs), and notes for various functions. Use it as a reference when analyzing the binary.
-
- getEntityComponents
- Signature Address: 761F80
- Signature:
- 48 89 5C 24 ? 48 89 74 24 ? 57 48 83 EC 30 33 DB 48 8B F9
- XRefs:
- XREF #1 (@ 763106):
- E8 ? ? ? ? 48 8B C8 48 89 05 ? ? ? ? E8 ? ? ? ? 48 8D 4C 24
- Alternate Finding Method:
- Scan for XRefs of COleControlSiteOrWnd
- Note:
- getEntityComponents is located on this xref. For getEntityAdmin, look for:
- *(_QWORD *)a1 = off_2B2ED10;
- RenderDataKeys
- Signature:
- 48 B9 15 4A C7 90 CF 45 84 17 48 B8 54 EE AB F1 B7 D8 88 9F 48 03 F9 48 33 F8
- Notes:
- Purpose: Retrieves keys.
- Decompilation Tip: Use F5 to decompile the function.
- Key Calculation Example:
- v2 = (qword_3626400 + 0x178445CF90C74A15LL) ^ 0x9F88D8B7F1ABEE54uLL;
- Expected Outcome:
- RenderData = qword_3626400 + 0xf0
- CameraManager
- Signature Address: 22560FA
- Signature:
- 8B CE 48 8B 1C C8
- Notes:
- Retrieving the Camera Manager:
- v9 = *(_QWORD *)(qword_3D1D860 + 8LL * v3);
- CamManager = qword_3D1D860;
- ViewMatrix Location (Experimental):
- ViewMatrix = CamManager + 0x548
- (This is experimental and may require further verification.)
- Raycast[removed]
- Signature Address: 7646A1
- Signature:
- 48 8D 15 ? ? ? ? E8 ? ? ? ? 48 8D 48 ? 48 8B 40 ? FF 50 ? 48 85 C0
- Notes:
- Contains the instruction:
- lea rdx, off_3758E90
- Identification: This is the raycast[removed] function.
- Raycast
- Signature Address: C2F870
- Signature:
- 48 89 5C 24 ? 55 56 57 48 8D AC 24 ? ? ? ? 48 81 EC 30 02 00 00
- Notes:
- Decompiled Snippet Example:
- v8 = (unsigned int)((__int64 (__fastcall *)(_OWORD *, __int64, _QWORD))loc_C90B30)(v10, a3, 0LL) != 0;
- Identification: This is the raycast function.
- ArrayInsertU64
- Signature Address: 55A590
- XRefs (Top 5 out of 106):
- XREF #1 (@ 7C3A6F):
- E8 ? ? ? ? 33 F6 90
- XREF #2 (@ 7DBBA3):
- E8 ? ? ? ? FF 07 F6 83
- XREF #3 (@ 1F5A79F):
- E8 ? ? ? ? 48 83 EE 08
- XREF #4 (@ 1E35658):
- E8 ? ? ? ? 4B 8D 04 76
- XREF #5 (@ AA4401):
- E8 ? ? ? ? 8B D7 49 8B CC
- Decompiled Function:
- __int64 __fastcall sub_55A590(__int64 *a1, _QWORD *a2);
- // This function performs ArrayInsertU64.
- GetVarBag
- Signature Address: 2114600
- XRefs (Top 5 out of 5):
- XREF #1 (@ DA9C70):
- E8 ? ? ? ? 48 8B D8 48 85 C0 74 ? 48 8B 96
- XREF #2 (@ 20D626C):
- E8 ? ? ? ? 48 8B F0 48 85 C0 74 ? 0F 57 DB
- XREF #3 (@ 20D684C):
- E8 ? ? ? ? 48 8B F8 48 85 C0 74 ? 48 8B 53 ? 4C 8D 45
- Decompiled Function:
- __int64 __fastcall sub_2114600(__int64 a1, __int64 a2);
- // This function is the GetVarBag.
- LocalPlayerUID
- Signature Address: 74DAAD
- Signature:
- 4A C7 84 C1 ? ? ? ? ? ? ? ? E9
- Disassembly Reference:
- .text:000000000074DAAD mov qword ptr [rcx+r8*8+2F0h], 0
- Notes:
- The relevant offset is 0x2F0.
- Use this guide to help navigate the binary and locate the functions during your analysis. Happy reversing!
- Last edited by IEmulateEAC; Today at 05:07 PM.
- IEmulateEAC is online now
- Last Active: Today
- Add to IEmulateEAC's Reputation Take from IEmulateEAC's reputation. Report Post Reply With Quote Multi-Quote This Message Quick reply to this message
-
- Unread Today, 05:23 PM #2
- CoolA1d
- Junior Downloads Moderator
- CoolA1d's Avatar
- Join Date: Apr 2014
- Posts: 790
- Reputation: 11644
- Rep Power: 289
- CoolA1d 's rep takes up 1 gig of server spaceCoolA1d 's rep takes up 1 gig of server spaceCoolA1d 's rep takes up 1 gig of server spaceCoolA1d 's rep takes up 1 gig of server spaceCoolA1d 's rep takes up 1 gig of server spaceCoolA1d 's rep takes up 1 gig of server spaceCoolA1d 's rep takes up 1 gig of server spaceCoolA1d 's rep takes up 1 gig of server spaceCoolA1d 's rep takes up 1 gig of server spaceCoolA1d 's rep takes up 1 gig of server spaceCoolA1d 's rep takes up 1 gig of server space
- Recognitions
- This certification is awarded to forum staff members that are educated in the fields of reverse engineering and file analysis. All forum staff members with this certification have successfully gone through the process of becoming certified, which includes an individual assessment by upper staff, and the requirement of passing an internal file analysis examination. Anyone with a File Analysis certification is trusted by upper staff to be able to safely and competently approve files within UnKnoWnCheaTs, and only forum staff members that are certified file analyzers have permission to approve files within the UnKnoWnCheaTs downloads section. File Analyzer
- Members who have contributed financial support towards UnKnoWnCheaTs. Donator (3)
- Points: 24,598, Level: 22
- Points: 24,598, Level: 22 Points: 24,598, Level: 22 Points: 24,598, Level: 22
- Level up: 40%, 902 Points needed
- Level up: 40% Level up: 40% Level up: 40%
- Activity: 99.2%
- Activity: 99.2% Activity: 99.2% Activity: 99.2%
- Last Achievements
- InternalInternalInternalInternal
- File Approved
- Internal
- SHA256: cc8eed781ba715533fc303f925035294ae2fe5f68e7ae64ca206459c4c12137c - 1111111.zip
- Interested in how we analyze files? Click here to find out.
- Download: https://www.unknowncheats.me/forum/d...=file&id=49933
- Thanks for sharing!
- CoolA1d is online now
- Last Active: Today
- Add to CoolA1d's Reputation Take from CoolA1d's reputation. Report Post Reply With Quote Multi-Quote This Message Quick reply to this message
-
- Unread Today, 05:41 PM #3
- battleofthegays
- (ง'-')ง
- battleofthegays's Avatar
- Join Date: May 2024
- Posts: 15
- Reputation: 547
- Rep Power: 26
- battleofthegays has Made tutorials for hackingbattleofthegays has Made tutorials for hackingbattleofthegays has Made tutorials for hackingbattleofthegays has Made tutorials for hackingbattleofthegays has Made tutorials for hackingbattleofthegays has Made tutorials for hacking
- Recognitions
- Members who have contributed financial support towards UnKnoWnCheaTs. Donator (1)
- Points: 1,372, Level: 2
- Points: 1,372, Level: 2 Points: 1,372, Level: 2 Points: 1,372, Level: 2
- Level up: 95%, 28 Points needed
- Level up: 95% Level up: 95% Level up: 95%
- Activity: 7.1%
- Activity: 7.1% Activity: 7.1% Activity: 7.1%
- Last Achievements
- Internal
- super ud :100:
- jokes aside who the hell wrote this, probably one of the most inconsistent codebases i've ever seen lol
- Last edited by battleofthegays; Today at 05:48 PM.
- battleofthegays is online now
- Last Active: Today
- Add to battleofthegays's Reputation Take from battleofthegays's reputation. Report Post Reply With Quote Multi-Quote This Message Quick reply to this message
-
- Reply Submit Thread to Reddit RedditSubmit Thread to Twitter TwitterSubmit Thread to Facebook Facebook
- collapse quick replyQuick Reply
- Message:
- Remove Text Formatting
-
- Bold
- Italic
- Underline
-
-
-
- Insert Link
- Insert Image
-
- Wrap [QUOTE] tags around selected text
-
- Wrap [CODE] tags around selected text
-
- Decrease Size
- Increase Size
- Options
- Quote message in reply?
-
- collapse similar threadsSimilar Threads
- Thread Thread Starter Forum Replies Last Post
- [Release] [INTERNAL] Inferno v1 Internal BOX|ESP|[CHAMS]|ITEM|VEHICLE|LINES| Ashesh RoS Releases 90 14th April 2018 05:31 PM
- [Source] [Internal] Basic Internal Cheat Source Ashesh RoS Releases 119 8th April 2018 03:47 AM
- [Release] CSGO - INTERNAL ESP & INTERNAL TRIGGERBOT ganjaboy CS:GO Releases 35 21st March 2018 03:13 AM
- [Help] internal into internal/external TRBW Counterstrike Global Offensive 5 21st June 2017 11:22 PM
- [Release] Internal/External/Internal Customizable Triggerbot ThePapanoob CS:GO Releases 45 10th April 2017 06:23 PM
- Currently Active Users Viewing This Thread: 37 (11 members and 26 guests)
- langke12, b0ykoe, ssr24, Gura0873, maxiontop, xw4ckx, saitoutakumi, Ramiro2015, IEmulateEAC, zjq123666
- Tags
- [source], p2c, btw, access, owner, obese, indian, internal, fun, chaos
- « Previous Thread | Next Thread »
- Forum Jump
- Overwatch
- Log Out langke12
- All times are GMT +12. The time now is 08:17 PM.
- Copyright ©2000-2025, Unknowncheats™
- DMCA - Contact - View Staff
- Terms of Use - Privacy Policy
复制代码
|
1. 本主题所有言论和图片纯属会员个人意见,与本论坛立场无关。一切关于该内容及资源商业行为与本站无关。
2. 本站的所有内容都不保证其准确性,有效性,时间性。阅读本站内容因误导等因素而造成的损失本站不承担连带责任。
3. 本站提供的一切软件、教程和内容信息等仅限用于学习和研究目的,不得用于商业或者游戏以及其它非法用途,否则,一切后果请用户自负。
4. 本站资源均来自网络收集整理,版权争议与本站无关。您必须在下载后的24个小时之内,从您的电脑或手机中彻底删除上述内容,如果您喜欢该程序和内容,请支持正版。
5. 本站本着互联网分享学习精神,本站大部分内容转载于其他网站和媒体,如内容涉及版权等问题,请联系本站进行删除或修改处理,敬请谅解!
6. 如有侵犯您版权的内容,请邮件与我们取得联系删除(E-mail:contact@12gamebbs.cc)本站将及时改正。
|