OverKiller v2.0 & GDcfV3.6 (Decompiled Version)

[Debee]

I decompiled these 2 hacks an hour ago just for fun. Hope you find it useful, if not just ignore this thread.

OverKiller2.0.c is OverDrivejt's latest pub hack 25/03/2011.
GDcfV3.6.c is .





Addies found in OverKiller v2.0 / NA version (25/03/2011):

Originally Posted by OverDrivejt

OverKiller v2.0
Made by @OverDrivejt (Over) and @KillerPhantom123(Killer)

OneHitKill (ALMOST ALL WEAPONS)
No Weapon Weight (Almost All Weapons)
Instant Reload (Almost All Weapons)
No Change Delay (Almost All Weapons)
No Grenade Damage
No Fall Damage

10001B61  |> 8B55 F8        |mov edx , dword ptr [ebp-08h]
10001B64  |. 8B82 80B2A000  |mov eax , dword ptr [edx+00A0B280h]
10001B6A  |. 8B4D F4        |mov ecx , dword ptr [ebp-0Ch]
10001B6D  |. 8B1488         |mov edx , dword ptr [eax+ecx*4]
10001B70  |. C782 F8070000 >|mov dword ptr [edx+000007F8h] , 4E6E6B2>
10001B7A  |. 8B45 F8        |mov eax , dword ptr [ebp-08h]
10001B7D  |. 8B88 80B2A000  |mov ecx , dword ptr [eax+00A0B280h]
10001B83  |. 8B55 F4        |mov edx , dword ptr [ebp-0Ch]
10001B86  |. 8B0491         |mov eax , dword ptr [ecx+edx*4]
10001B89  |. C780 24240000 >|mov dword ptr [eax+00002424h] , 4E6E6B2>
10001B93  |. 8B4D F8        |mov ecx , dword ptr [ebp-08h]
10001B96  |. 8B91 80B2A000  |mov edx , dword ptr [ecx+00A0B280h]
10001B9C  |. 8B45 F4        |mov eax , dword ptr [ebp-0Ch]
10001B9F  |. 8B0C82         |mov ecx , dword ptr [edx+eax*4]
10001BA2  |. C781 20240000 >|mov dword ptr [ecx+00002420h] , 4E6E6B2>
10001BAC  |. 8B55 F8        |mov edx , dword ptr [ebp-08h]
10001BAF  |. 8B82 80B2A000  |mov eax , dword ptr [edx+00A0B280h]
10001BB5  |. 8B4D F4        |mov ecx , dword ptr [ebp-0Ch]
10001BB8  |. 8B1488         |mov edx , dword ptr [eax+ecx*4]
10001BBB  |. C782 D8210000 >|mov dword ptr [edx+000021D8h] , 0000000>
10001BC5  |. 8B45 F8        |mov eax , dword ptr [ebp-08h]
10001BC8  |. 8B88 80B2A000  |mov ecx , dword ptr [eax+00A0B280h]
10001BCE  |. 8B55 F4        |mov edx , dword ptr [ebp-0Ch]
10001BD1  |. 8B0491         |mov eax , dword ptr [ecx+edx*4]
10001BD4  |. C780 DC210000 >|mov dword ptr [eax+000021DCh] , 0000000>
10001BDE  |> 837D F4 06     |cmp dword ptr [ebp-0Ch] , 06h

10001C5C  |. 8B4D F8        |mov ecx , dword ptr [ebp-08h]
10001C5F  |. 8B91 80B2A000  |mov edx , dword ptr [ecx+00A0B280h]
10001C65  |. 8B45 F4        |mov eax , dword ptr [ebp-0Ch]
10001C68  |. 8B0C82         |mov ecx , dword ptr [edx+eax*4]
10001C6B  |. C781 F8070000 >|mov dword ptr [ecx+000007F8h] , 0000000>
10001C75  |>^E9 C2F3FFFF    \jmp 1000103Ch
10001C7A  |> 8B55 F8        mov edx , dword ptr [ebp-08h]
10001C7D  |. 8B82 64B2A000  mov eax , dword ptr [edx+00A0B264h]
10001C83  |. C740 04 000000>mov dword ptr [eax+04h] , 00000000h
10001C8A  |. B8 01000000    mov eax , 00000001h
10001C8F  |. 8BE5           mov esp , ebp

//Log
for ( i = 0; i < 441; ++i )
*(DWORD *)(*(DWORD *)(*((DWORD *)cshell+ 0x000000) + 4 * i) + 0x000) = value;

[B]0xA0B280 + 0x7F8 > 0; 
0xA0B280 + 0x2424 > 0;
0xA0B280 + 0x2420 > 0;
0xA0B280 + 0x21D8 = 0;
0xA0B280 + 0x21DC = 0;[/B]

if (i==6||i==7||i==8||i==64||i==100||i==126||i==135||i==209||i==210||i==240||i==263||i==272||i==338||i==382||i==383||i==384)
*(DWORD *)(*((DWORD *)cshell+ 0x000000) + 0x0) = 0;

[B]0xA0B264 + 0x4 = 0;[/B]

GetModuleHandleA("ClientFX.fxd") && GetModuleHandleA("CShell.dll");

MessageBoxA(0, "OverKiller v2.0 by OverDrivejt", "OverKiller v2.0", 0);
CreateThread(0, 0, (LPTHREAD_START_ROUTINE)main, 0, 0, 0);
ShellExecuteA(0, "open", "http://www.*********/forum/members/106539-overdrivejt.html", 0, 0, 1);

It contains binary files, virus scan is not necessary.

[Endee]

but what is it for?

[.Scy]

get the addy's?

[Debee]

Originally Posted by .Scy

get the addy's?

In OverKiller v2.0:

for ( i = 0; i < 441; ++i )
*(DWORD *)(*(DWORD *)(*((DWORD *)cshell+ 0x000000) + 4 * i) + 0x000) = value;

[B][B]0xA0B280 + 0x7F8 > 0;
0xA0B280 + 0x2424 > 0;
0xA0B280 + 0x2420 > 0;
0xA0B280 + 0x21D8 = 0;
0xA0B280 + 0x21DC = 0;[/B][/B]

if (i==6||i==7||i==8||i==64||i==100||i==126||i==135||i==209||i==210||i==240||i==263||i==272||i==338||i==382||i==383||i==384)
*(DWORD *)(*((DWORD *)cshell+ 0x000000) + 0x0) = 0;

[B]0xA0B264 + 0x4 = 0;[/B]

I dont play cf so you must know what are those for.

[LaFikker]

ich versteh nicht ganz wozu sind diese 2 datein ?

[fuzzyman123]

so can u desceribe it more . we really dont know WTH are u talking about

[ryandale]

This is for programmers only.

[cakeflavor]

Very nice. With what tools you decompiled it? Thank you.