Results 1 to 1 of 1
  1. #1
    derh.acker's Avatar
    Join Date
    Aug 2010
    Gender
    male
    Location
    localhost
    Posts
    825
    Reputation
    14
    Thanks
    613
    My Mood
    Angelic

    Interesting about the LTClient

    I was interested after I heard from the SendToServer command and then I found something interesting (I dont know if you already found it) :
    (The Addresses are for CA Europe, I searched for references to PushToConsole)

    Copies the pointer to the LTClient to ECX and jumps to the define function :
    Code:
    00474C00   $ 8B0D A4578000  MOV ECX,DWORD PTR DS:[8057A4]                                               
    ;  Engine2.007DFFF8 -- CA EU LTClient
    00474C06   .^E9 35FAFFFF    JMP Engine2.00474640
    Now where it jumps to :
    Code:
    00474640   > C781 80000000 >MOV DWORD PTR DS:[ECX+80],Engine2.0046EF50
    0047464A   . C741 7C 70EF46>MOV DWORD PTR DS:[ECX+7C],Engine2.0046EF70
    00474651   . C781 84000000 >MOV DWORD PTR DS:[ECX+84],Engine2.0046EFA0
    0047465B   . C781 8C000000 >MOV DWORD PTR DS:[ECX+8C],Engine2.0046EFE0
    00474665   . C781 88000000 >MOV DWORD PTR DS:[ECX+88],Engine2.0046F000
    0047466F   . C781 90000000 >MOV DWORD PTR DS:[ECX+90],Engine2.0046F070
    00474679   . C781 94000000 >MOV DWORD PTR DS:[ECX+94],Engine2.0046F010
    00474683   . C781 CC000000 >MOV DWORD PTR DS:[ECX+CC],Engine2.004A0160
    0047468D   . C781 D0000000 >MOV DWORD PTR DS:[ECX+D0],Engine2.004A0180
    00474697   . C781 D8000000 >MOV DWORD PTR DS:[ECX+D8],Engine2.004A10D0
    004746A1   . C781 E4000000 >MOV DWORD PTR DS:[ECX+E4],Engine2.00470F70
    004746AB   . C781 E0000000 >MOV DWORD PTR DS:[ECX+E0],Engine2.00470F60
    004746B5   . C781 DC000000 >MOV DWORD PTR DS:[ECX+DC],Engine2.004A0F30
    004746BF   . C781 D4000000 >MOV DWORD PTR DS:[ECX+D4],Engine2.004A01B0
    004746C9   . C781 E8000000 >MOV DWORD PTR DS:[ECX+E8],Engine2.004A01D0
    004746D3   . C741 08 80F046>MOV DWORD PTR DS:[ECX+8],Engine2.0046F080
    004746DA   . C741 0C 80A14A>MOV DWORD PTR DS:[ECX+C],Engine2.004AA180
    004746E1   . C741 18 A0F046>MOV DWORD PTR DS:[ECX+18],Engine2.0046F0A0
    004746E8   . C741 14 C0F046>MOV DWORD PTR DS:[ECX+14],Engine2.0046F0C0
    004746EF   . C741 10 E0F046>MOV DWORD PTR DS:[ECX+10],Engine2.0046F0E0
    004746F6   . C741 1C 10F146>MOV DWORD PTR DS:[ECX+1C],Engine2.0046F110
    004746FD   . C741 20 40F146>MOV DWORD PTR DS:[ECX+20],Engine2.0046F140
    00474704   . C741 24 70F146>MOV DWORD PTR DS:[ECX+24],Engine2.0046F170
    0047470B   . C741 28 90F146>MOV DWORD PTR DS:[ECX+28],Engine2.0046F190
    00474712   . C741 2C D0F146>MOV DWORD PTR DS:[ECX+2C],Engine2.0046F1D0
    00474719   . C741 34 F0F146>MOV DWORD PTR DS:[ECX+34],Engine2.0046F1F0
    00474720   . C741 38 10F246>MOV DWORD PTR DS:[ECX+38],Engine2.0046F210
    00474727   . C741 3C 30F246>MOV DWORD PTR DS:[ECX+3C],Engine2.0046F230
    0047472E   . C741 40 50F246>MOV DWORD PTR DS:[ECX+40],Engine2.0046F250
    00474735   . C741 44 E0F246>MOV DWORD PTR DS:[ECX+44],Engine2.0046F2E0
    0047473C   . C741 30 20F346>MOV DWORD PTR DS:[ECX+30],Engine2.0046F320
    00474743   . C741 48 B0F346>MOV DWORD PTR DS:[ECX+48],Engine2.0046F3B0
    0047474A   . C741 4C E0F346>MOV DWORD PTR DS:[ECX+4C],Engine2.0046F3E0
    00474751   . C741 50 10F446>MOV DWORD PTR DS:[ECX+50],Engine2.0046F410
    00474758   . C741 5C 20F546>MOV DWORD PTR DS:[ECX+5C],Engine2.0046F520
    0047475F   . C741 60 40F546>MOV DWORD PTR DS:[ECX+60],Engine2.0046F540
    00474766   . C781 FC000000 >MOV DWORD PTR DS:[ECX+FC],Engine2.0046F6B0
    00474770   . C781 00010000 >MOV DWORD PTR DS:[ECX+100],Engine2.0046F720
    0047477A   . C781 04010000 >MOV DWORD PTR DS:[ECX+104],Engine2.0046F7A0
    00474784   . C781 9C010000 >MOV DWORD PTR DS:[ECX+19C],Engine2.004AA0B0
    0047478E   . C781 A0010000 >MOV DWORD PTR DS:[ECX+1A0],Engine2.004AA0C0
    00474798   . C781 A4010000 >MOV DWORD PTR DS:[ECX+1A4],Engine2.0046F7E0
    004747A2   . C781 A8010000 >MOV DWORD PTR DS:[ECX+1A8],Engine2.0046F810
    004747AC   . C781 AC010000 >MOV DWORD PTR DS:[ECX+1AC],Engine2.0046F830
    004747B6   . C781 B0010000 >MOV DWORD PTR DS:[ECX+1B0],Engine2.0046F840
    004747C0   . C781 B4010000 >MOV DWORD PTR DS:[ECX+1B4],Engine2.0046F860
    004747CA   . C781 B8010000 >MOV DWORD PTR DS:[ECX+1B8],Engine2.0046F880
    004747D4   . C781 BC010000 >MOV DWORD PTR DS:[ECX+1BC],Engine2.0046F8B0
    004747DE   . C781 C0010000 >MOV DWORD PTR DS:[ECX+1C0],Engine2.0046F900
    004747E8   . C781 C4010000 >MOV DWORD PTR DS:[ECX+1C4],Engine2.0046F950
    004747F2   . C781 C8010000 >MOV DWORD PTR DS:[ECX+1C8],Engine2.0046F990
    004747FC   . C781 CC010000 >MOV DWORD PTR DS:[ECX+1CC],Engine2.0046F9D0
    00474806   . C781 D0010000 >MOV DWORD PTR DS:[ECX+1D0],Engine2.0046F9F0
    00474810   . C781 D4010000 >MOV DWORD PTR DS:[ECX+1D4],Engine2.0046FA10
    0047481A   . C781 D8010000 >MOV DWORD PTR DS:[ECX+1D8],Engine2.0046FA50
    00474824   . C781 DC010000 >MOV DWORD PTR DS:[ECX+1DC],Engine2.0046FA80
    0047482E   . C781 E0010000 >MOV DWORD PTR DS:[ECX+1E0],Engine2.0046FAC0
    00474838   . C781 E4010000 >MOV DWORD PTR DS:[ECX+1E4],Engine2.0046FAD0
    00474842   . C781 E8010000 >MOV DWORD PTR DS:[ECX+1E8],Engine2.0046FAE0
    0047484C   . C781 EC010000 >MOV DWORD PTR DS:[ECX+1EC],Engine2.0046FAF0
    00474856   . C781 F0010000 >MOV DWORD PTR DS:[ECX+1F0],Engine2.0046FB00
    00474860   . C781 F4010000 >MOV DWORD PTR DS:[ECX+1F4],Engine2.0046FB10
    0047486A   . C781 F8010000 >MOV DWORD PTR DS:[ECX+1F8],Engine2.0046FB30
    00474874   . C781 FC010000 >MOV DWORD PTR DS:[ECX+1FC],Engine2.00498F50                                 ;  Entry address
    0047487E   . C781 00020000 >MOV DWORD PTR DS:[ECX+200],Engine2.0046FB50
    00474888   . C781 04020000 >MOV DWORD PTR DS:[ECX+204],Engine2.0046FB70
    00474892   . C781 08020000 >MOV DWORD PTR DS:[ECX+208],Engine2.0046FBC0 --------------------------PushToConsole
    0047489C   . C781 0C020000 >MOV DWORD PTR DS:[ECX+20C],Engine2.0046FBF0
    004748A6   . C781 10020000 >MOV DWORD PTR DS:[ECX+210],Engine2.0046FC10
    004748B0   . C781 14020000 >MOV DWORD PTR DS:[ECX+214],Engine2.00473640
    004748BA   . C781 18020000 >MOV DWORD PTR DS:[ECX+218],Engine2.004736E0
    004748C4   . C781 1C020000 >MOV DWORD PTR DS:[ECX+21C],Engine2.004737B0
    004748CE   . C741 64 600C47>MOV DWORD PTR DS:[ECX+64],Engine2.00470C60
    004748D5   . C741 68 800C47>MOV DWORD PTR DS:[ECX+68],Engine2.00470C80
    004748DC   . C741 6C 603547>MOV DWORD PTR DS:[ECX+6C],Engine2.00473560
    004748E3   . C781 20020000 >MOV DWORD PTR DS:[ECX+220],Engine2.0046D6B0
    004748ED   . C781 24020000 >MOV DWORD PTR DS:[ECX+224],Engine2.00472B50
    004748F7   . C741 74 302C47>MOV DWORD PTR DS:[ECX+74],Engine2.00472C30
    004748FE   . C741 78 202D47>MOV DWORD PTR DS:[ECX+78],Engine2.00472D20
    00474905   . C781 28020000 >MOV DWORD PTR DS:[ECX+228],Engine2.0046D710
    0047490F   . C741 70 E02B47>MOV DWORD PTR DS:[ECX+70],Engine2.00472BE0
    00474916   . C781 2C020000 >MOV DWORD PTR DS:[ECX+22C],Engine2.0046FC40
    00474920   . C781 30020000 >MOV DWORD PTR DS:[ECX+230],Engine2.0046FCC0                                 ;  Entry address
    0047492A   . C781 34020000 >MOV DWORD PTR DS:[ECX+234],Engine2.0046FD90
    00474934   . C781 38020000 >MOV DWORD PTR DS:[ECX+238],Engine2.0046FDB0
    0047493E   . C781 3C020000 >MOV DWORD PTR DS:[ECX+23C],Engine2.004738D0
    00474948   . C781 40020000 >MOV DWORD PTR DS:[ECX+240],Engine2.0046FDD0
    00474952   . C781 44020000 >MOV DWORD PTR DS:[ECX+244],Engine2.00473B90
    0047495C   . C781 48020000 >MOV DWORD PTR DS:[ECX+248],Engine2.0046FE10
    00474966   . C781 4C020000 >MOV DWORD PTR DS:[ECX+24C],Engine2.0046FE80
    00474970   . C781 50020000 >MOV DWORD PTR DS:[ECX+250],Engine2.0046FED0
    0047497A   . C781 54020000 >MOV DWORD PTR DS:[ECX+254],Engine2.0046FF10
    00474984   . C781 58020000 >MOV DWORD PTR DS:[ECX+258],Engine2.0046FF50
    0047498E   . C781 5C020000 >MOV DWORD PTR DS:[ECX+25C],Engine2.00470010
    00474998   . C781 6C020000 >MOV DWORD PTR DS:[ECX+26C],Engine2.00470100
    004749A2   . C781 60020000 >MOV DWORD PTR DS:[ECX+260],Engine2.00470060
    004749AC   . C781 64020000 >MOV DWORD PTR DS:[ECX+264],Engine2.00473C20
    004749B6   . C781 68020000 >MOV DWORD PTR DS:[ECX+268],Engine2.00470090
    004749C0   . C781 70020000 >MOV DWORD PTR DS:[ECX+270],Engine2.00470160
    004749CA   . C781 74020000 >MOV DWORD PTR DS:[ECX+274],Engine2.004B4B50
    004749D4   . C781 78020000 >MOV DWORD PTR DS:[ECX+278],Engine2.004B4DB0
    004749DE   . C781 7C020000 >MOV DWORD PTR DS:[ECX+27C],Engine2.004B4F00
    004749E8   . C781 80020000 >MOV DWORD PTR DS:[ECX+280],Engine2.004B4F50
    004749F2   . C781 84020000 >MOV DWORD PTR DS:[ECX+284],Engine2.004B4DD0
    004749FC   . C781 88020000 >MOV DWORD PTR DS:[ECX+288],Engine2.004701C0
    00474A06   . C781 90020000 >MOV DWORD PTR DS:[ECX+290],Engine2.004701E0
    00474A10   . C781 94020000 >MOV DWORD PTR DS:[ECX+294],Engine2.00470220
    00474A1A   . C781 98020000 >MOV DWORD PTR DS:[ECX+298],Engine2.00470200
    00474A24   . C781 9C020000 >MOV DWORD PTR DS:[ECX+29C],Engine2.00470250
    00474A2E   . C781 A4020000 >MOV DWORD PTR DS:[ECX+2A4],Engine2.00470310
    00474A38   . C781 A0020000 >MOV DWORD PTR DS:[ECX+2A0],Engine2.00470270
    00474A42   . C781 A8020000 >MOV DWORD PTR DS:[ECX+2A8],Engine2.004703F0
    00474A4C   . C781 AC020000 >MOV DWORD PTR DS:[ECX+2AC],Engine2.004704E0
    00474A56   . C781 B0020000 >MOV DWORD PTR DS:[ECX+2B0],Engine2.00470580
    00474A60   . C781 EC020000 >MOV DWORD PTR DS:[ECX+2EC],Engine2.00470620
    00474A6A   . C781 F0020000 >MOV DWORD PTR DS:[ECX+2F0],Engine2.00470690
    00474A74   . C781 F4020000 >MOV DWORD PTR DS:[ECX+2F4],Engine2.004706E0
    00474A7E   . C781 F8020000 >MOV DWORD PTR DS:[ECX+2F8],Engine2.00470700
    00474A88   . C781 FC020000 >MOV DWORD PTR DS:[ECX+2FC],Engine2.00470740
    00474A92   . C781 00030000 >MOV DWORD PTR DS:[ECX+300],Engine2.00470770
    00474A9C   . C781 04030000 >MOV DWORD PTR DS:[ECX+304],Engine2.00470880
    00474AA6   . C781 B8020000 >MOV DWORD PTR DS:[ECX+2B8],Engine2.004708B0
    00474AB0   . C781 BC020000 >MOV DWORD PTR DS:[ECX+2BC],Engine2.00470900
    00474ABA   . C781 C0020000 >MOV DWORD PTR DS:[ECX+2C0],Engine2.00470920
    00474AC4   . C781 C4020000 >MOV DWORD PTR DS:[ECX+2C4],Engine2.00470980
    00474ACE   . C781 C8020000 >MOV DWORD PTR DS:[ECX+2C8],Engine2.004709E0
    00474AD8   . C781 CC020000 >MOV DWORD PTR DS:[ECX+2CC],Engine2.00470A00
    00474AE2   . C781 D0020000 >MOV DWORD PTR DS:[ECX+2D0],Engine2.00470A20
    00474AEC   . C781 D4020000 >MOV DWORD PTR DS:[ECX+2D4],Engine2.00470A60
    00474AF6   . C781 DC020000 >MOV DWORD PTR DS:[ECX+2DC],Engine2.00470B90
    00474B00   . C781 D8020000 >MOV DWORD PTR DS:[ECX+2D8],Engine2.00470B00
    00474B0A   . C741 04 A00A47>MOV DWORD PTR DS:[ECX+4],Engine2.00470AA0
    00474B11   . C781 E0020000 >MOV DWORD PTR DS:[ECX+2E0],Engine2.004C8570
    00474B1B   . C781 E4020000 >MOV DWORD PTR DS:[ECX+2E4],Engine2.004C8650                                 ;  Entry address
    00474B25   . C781 E8020000 >MOV DWORD PTR DS:[ECX+2E8],Engine2.00470CB0
    00474B2F   . C781 14030000 >MOV DWORD PTR DS:[ECX+314],Engine2.00473CC0
    00474B39   . C781 18030000 >MOV DWORD PTR DS:[ECX+318],Engine2.00473CE0
    00474B43   . C781 1C030000 >MOV DWORD PTR DS:[ECX+31C],Engine2.00473D00
    00474B4D   . C781 20030000 >MOV DWORD PTR DS:[ECX+320],Engine2.00470CD0
    00474B57   . C781 24030000 >MOV DWORD PTR DS:[ECX+324],Engine2.00470CF0
    00474B61   . C781 28030000 >MOV DWORD PTR DS:[ECX+328],Engine2.00470D10
    00474B6B   . C781 2C030000 >MOV DWORD PTR DS:[ECX+32C],Engine2.00470D30
    00474B75   . C781 34030000 >MOV DWORD PTR DS:[ECX+334],Engine2.00470E60
    00474B7F   . C781 3C030000 >MOV DWORD PTR DS:[ECX+33C],Engine2.00470E70
    00474B89   . C781 40030000 >MOV DWORD PTR DS:[ECX+340],Engine2.00470E90
    00474B93   . C781 44030000 >MOV DWORD PTR DS:[ECX+344],Engine2.00470EA0
    00474B9D   . C781 48030000 >MOV DWORD PTR DS:[ECX+348],Engine2.00470EB0
    00474BA7   . C781 4C030000 >MOV DWORD PTR DS:[ECX+34C],Engine2.00470EC0
    00474BB1   . C781 50030000 >MOV DWORD PTR DS:[ECX+350],Engine2.00470ED0
    00474BBB   . C781 54030000 >MOV DWORD PTR DS:[ECX+354],Engine2.00470EF0
    00474BC5   . C781 58030000 >MOV DWORD PTR DS:[ECX+358],Engine2.00470F00
    00474BCF   . C781 5C030000 >MOV DWORD PTR DS:[ECX+35C],Engine2.00470F20
    00474BD9   . C781 60030000 >MOV DWORD PTR DS:[ECX+360],Engine2.00470F30
    00474BE3   . C781 64030000 >MOV DWORD PTR DS:[ECX+364],Engine2.00470F50
    00474BED   . C781 38030000 >MOV DWORD PTR DS:[ECX+338],Engine2.00474510
    00474BF7   . E9 B4280C00    JMP Engine2.005374B0
    00474892 . C781 08020000 >MOV DWORD PTR DS:[ECX+208],Engine2.0046FBC0 writes the pointer to PushToConsole.

    If the "SendToServer" function is located in this class, could you help me find it?
    Last edited by derh.acker; 12-17-2011 at 03:49 AM.

Similar Threads

  1. truth about the world
    By <sniper> in forum General
    Replies: 4
    Last Post: 06-06-2007, 05:11 PM
  2. Replies: 3
    Last Post: 01-12-2007, 10:24 PM
  3. News report about the piratebay raid.. etc
    By gunot in forum General
    Replies: 12
    Last Post: 06-30-2006, 09:32 PM