Results 1 to 1 of 1
  1. 12-17-2011 #1
    derh.acker
    derh.acker is offline
    Bobo's Trainer
    MPGH Member
    derh.acker's Avatar
    Join Date
    Aug 2010
    Gender
    male
    Location
    localhost
    Posts
    826
    Reputation
    14
    Thanks
    616
    My Mood
    Angelic
    Send a message via Birdie™ to derh.acker Germany

    Interesting about the LTClient

    I was interested after I heard from the SendToServer command and then I found something interesting (I dont know if you already found it) :
    (The Addresses are for CA Europe, I searched for references to PushToConsole)

    Copies the pointer to the LTClient to ECX and jumps to the define function :
    Code:
    00474C00   $ 8B0D A4578000  MOV ECX,DWORD PTR DS:[8057A4]                                               
;  Engine2.007DFFF8 -- CA EU LTClient
00474C06   .^E9 35FAFFFF    JMP Engine2.00474640
    Now where it jumps to :
    Code:
    00474640   > C781 80000000 >MOV DWORD PTR DS:[ECX+80],Engine2.0046EF50
0047464A   . C741 7C 70EF46>MOV DWORD PTR DS:[ECX+7C],Engine2.0046EF70
00474651   . C781 84000000 >MOV DWORD PTR DS:[ECX+84],Engine2.0046EFA0
0047465B   . C781 8C000000 >MOV DWORD PTR DS:[ECX+8C],Engine2.0046EFE0
00474665   . C781 88000000 >MOV DWORD PTR DS:[ECX+88],Engine2.0046F000
0047466F   . C781 90000000 >MOV DWORD PTR DS:[ECX+90],Engine2.0046F070
00474679   . C781 94000000 >MOV DWORD PTR DS:[ECX+94],Engine2.0046F010
00474683   . C781 CC000000 >MOV DWORD PTR DS:[ECX+CC],Engine2.004A0160
0047468D   . C781 D0000000 >MOV DWORD PTR DS:[ECX+D0],Engine2.004A0180
00474697   . C781 D8000000 >MOV DWORD PTR DS:[ECX+D8],Engine2.004A10D0
004746A1   . C781 E4000000 >MOV DWORD PTR DS:[ECX+E4],Engine2.00470F70
004746AB   . C781 E0000000 >MOV DWORD PTR DS:[ECX+E0],Engine2.00470F60
004746B5   . C781 DC000000 >MOV DWORD PTR DS:[ECX+DC],Engine2.004A0F30
004746BF   . C781 D4000000 >MOV DWORD PTR DS:[ECX+D4],Engine2.004A01B0
004746C9   . C781 E8000000 >MOV DWORD PTR DS:[ECX+E8],Engine2.004A01D0
004746D3   . C741 08 80F046>MOV DWORD PTR DS:[ECX+8],Engine2.0046F080
004746DA   . C741 0C 80A14A>MOV DWORD PTR DS:[ECX+C],Engine2.004AA180
004746E1   . C741 18 A0F046>MOV DWORD PTR DS:[ECX+18],Engine2.0046F0A0
004746E8   . C741 14 C0F046>MOV DWORD PTR DS:[ECX+14],Engine2.0046F0C0
004746EF   . C741 10 E0F046>MOV DWORD PTR DS:[ECX+10],Engine2.0046F0E0
004746F6   . C741 1C 10F146>MOV DWORD PTR DS:[ECX+1C],Engine2.0046F110
004746FD   . C741 20 40F146>MOV DWORD PTR DS:[ECX+20],Engine2.0046F140
00474704   . C741 24 70F146>MOV DWORD PTR DS:[ECX+24],Engine2.0046F170
0047470B   . C741 28 90F146>MOV DWORD PTR DS:[ECX+28],Engine2.0046F190
00474712   . C741 2C D0F146>MOV DWORD PTR DS:[ECX+2C],Engine2.0046F1D0
00474719   . C741 34 F0F146>MOV DWORD PTR DS:[ECX+34],Engine2.0046F1F0
00474720   . C741 38 10F246>MOV DWORD PTR DS:[ECX+38],Engine2.0046F210
00474727   . C741 3C 30F246>MOV DWORD PTR DS:[ECX+3C],Engine2.0046F230
0047472E   . C741 40 50F246>MOV DWORD PTR DS:[ECX+40],Engine2.0046F250
00474735   . C741 44 E0F246>MOV DWORD PTR DS:[ECX+44],Engine2.0046F2E0
0047473C   . C741 30 20F346>MOV DWORD PTR DS:[ECX+30],Engine2.0046F320
00474743   . C741 48 B0F346>MOV DWORD PTR DS:[ECX+48],Engine2.0046F3B0
0047474A   . C741 4C E0F346>MOV DWORD PTR DS:[ECX+4C],Engine2.0046F3E0
00474751   . C741 50 10F446>MOV DWORD PTR DS:[ECX+50],Engine2.0046F410
00474758   . C741 5C 20F546>MOV DWORD PTR DS:[ECX+5C],Engine2.0046F520
0047475F   . C741 60 40F546>MOV DWORD PTR DS:[ECX+60],Engine2.0046F540
00474766   . C781 FC000000 >MOV DWORD PTR DS:[ECX+FC],Engine2.0046F6B0
00474770   . C781 00010000 >MOV DWORD PTR DS:[ECX+100],Engine2.0046F720
0047477A   . C781 04010000 >MOV DWORD PTR DS:[ECX+104],Engine2.0046F7A0
00474784   . C781 9C010000 >MOV DWORD PTR DS:[ECX+19C],Engine2.004AA0B0
0047478E   . C781 A0010000 >MOV DWORD PTR DS:[ECX+1A0],Engine2.004AA0C0
00474798   . C781 A4010000 >MOV DWORD PTR DS:[ECX+1A4],Engine2.0046F7E0
004747A2   . C781 A8010000 >MOV DWORD PTR DS:[ECX+1A8],Engine2.0046F810
004747AC   . C781 AC010000 >MOV DWORD PTR DS:[ECX+1AC],Engine2.0046F830
004747B6   . C781 B0010000 >MOV DWORD PTR DS:[ECX+1B0],Engine2.0046F840
004747C0   . C781 B4010000 >MOV DWORD PTR DS:[ECX+1B4],Engine2.0046F860
004747CA   . C781 B8010000 >MOV DWORD PTR DS:[ECX+1B8],Engine2.0046F880
004747D4   . C781 BC010000 >MOV DWORD PTR DS:[ECX+1BC],Engine2.0046F8B0
004747DE   . C781 C0010000 >MOV DWORD PTR DS:[ECX+1C0],Engine2.0046F900
004747E8   . C781 C4010000 >MOV DWORD PTR DS:[ECX+1C4],Engine2.0046F950
004747F2   . C781 C8010000 >MOV DWORD PTR DS:[ECX+1C8],Engine2.0046F990
004747FC   . C781 CC010000 >MOV DWORD PTR DS:[ECX+1CC],Engine2.0046F9D0
00474806   . C781 D0010000 >MOV DWORD PTR DS:[ECX+1D0],Engine2.0046F9F0
00474810   . C781 D4010000 >MOV DWORD PTR DS:[ECX+1D4],Engine2.0046FA10
0047481A   . C781 D8010000 >MOV DWORD PTR DS:[ECX+1D8],Engine2.0046FA50
00474824   . C781 DC010000 >MOV DWORD PTR DS:[ECX+1DC],Engine2.0046FA80
0047482E   . C781 E0010000 >MOV DWORD PTR DS:[ECX+1E0],Engine2.0046FAC0
00474838   . C781 E4010000 >MOV DWORD PTR DS:[ECX+1E4],Engine2.0046FAD0
00474842   . C781 E8010000 >MOV DWORD PTR DS:[ECX+1E8],Engine2.0046FAE0
0047484C   . C781 EC010000 >MOV DWORD PTR DS:[ECX+1EC],Engine2.0046FAF0
00474856   . C781 F0010000 >MOV DWORD PTR DS:[ECX+1F0],Engine2.0046FB00
00474860   . C781 F4010000 >MOV DWORD PTR DS:[ECX+1F4],Engine2.0046FB10
0047486A   . C781 F8010000 >MOV DWORD PTR DS:[ECX+1F8],Engine2.0046FB30
00474874   . C781 FC010000 >MOV DWORD PTR DS:[ECX+1FC],Engine2.00498F50                                 ;  Entry address
0047487E   . C781 00020000 >MOV DWORD PTR DS:[ECX+200],Engine2.0046FB50
00474888   . C781 04020000 >MOV DWORD PTR DS:[ECX+204],Engine2.0046FB70
00474892   . C781 08020000 >MOV DWORD PTR DS:[ECX+208],Engine2.0046FBC0 --------------------------PushToConsole
0047489C   . C781 0C020000 >MOV DWORD PTR DS:[ECX+20C],Engine2.0046FBF0
004748A6   . C781 10020000 >MOV DWORD PTR DS:[ECX+210],Engine2.0046FC10
004748B0   . C781 14020000 >MOV DWORD PTR DS:[ECX+214],Engine2.00473640
004748BA   . C781 18020000 >MOV DWORD PTR DS:[ECX+218],Engine2.004736E0
004748C4   . C781 1C020000 >MOV DWORD PTR DS:[ECX+21C],Engine2.004737B0
004748CE   . C741 64 600C47>MOV DWORD PTR DS:[ECX+64],Engine2.00470C60
004748D5   . C741 68 800C47>MOV DWORD PTR DS:[ECX+68],Engine2.00470C80
004748DC   . C741 6C 603547>MOV DWORD PTR DS:[ECX+6C],Engine2.00473560
004748E3   . C781 20020000 >MOV DWORD PTR DS:[ECX+220],Engine2.0046D6B0
004748ED   . C781 24020000 >MOV DWORD PTR DS:[ECX+224],Engine2.00472B50
004748F7   . C741 74 302C47>MOV DWORD PTR DS:[ECX+74],Engine2.00472C30
004748FE   . C741 78 202D47>MOV DWORD PTR DS:[ECX+78],Engine2.00472D20
00474905   . C781 28020000 >MOV DWORD PTR DS:[ECX+228],Engine2.0046D710
0047490F   . C741 70 E02B47>MOV DWORD PTR DS:[ECX+70],Engine2.00472BE0
00474916   . C781 2C020000 >MOV DWORD PTR DS:[ECX+22C],Engine2.0046FC40
00474920   . C781 30020000 >MOV DWORD PTR DS:[ECX+230],Engine2.0046FCC0                                 ;  Entry address
0047492A   . C781 34020000 >MOV DWORD PTR DS:[ECX+234],Engine2.0046FD90
00474934   . C781 38020000 >MOV DWORD PTR DS:[ECX+238],Engine2.0046FDB0
0047493E   . C781 3C020000 >MOV DWORD PTR DS:[ECX+23C],Engine2.004738D0
00474948   . C781 40020000 >MOV DWORD PTR DS:[ECX+240],Engine2.0046FDD0
00474952   . C781 44020000 >MOV DWORD PTR DS:[ECX+244],Engine2.00473B90
0047495C   . C781 48020000 >MOV DWORD PTR DS:[ECX+248],Engine2.0046FE10
00474966   . C781 4C020000 >MOV DWORD PTR DS:[ECX+24C],Engine2.0046FE80
00474970   . C781 50020000 >MOV DWORD PTR DS:[ECX+250],Engine2.0046FED0
0047497A   . C781 54020000 >MOV DWORD PTR DS:[ECX+254],Engine2.0046FF10
00474984   . C781 58020000 >MOV DWORD PTR DS:[ECX+258],Engine2.0046FF50
0047498E   . C781 5C020000 >MOV DWORD PTR DS:[ECX+25C],Engine2.00470010
00474998   . C781 6C020000 >MOV DWORD PTR DS:[ECX+26C],Engine2.00470100
004749A2   . C781 60020000 >MOV DWORD PTR DS:[ECX+260],Engine2.00470060
004749AC   . C781 64020000 >MOV DWORD PTR DS:[ECX+264],Engine2.00473C20
004749B6   . C781 68020000 >MOV DWORD PTR DS:[ECX+268],Engine2.00470090
004749C0   . C781 70020000 >MOV DWORD PTR DS:[ECX+270],Engine2.00470160
004749CA   . C781 74020000 >MOV DWORD PTR DS:[ECX+274],Engine2.004B4B50
004749D4   . C781 78020000 >MOV DWORD PTR DS:[ECX+278],Engine2.004B4DB0
004749DE   . C781 7C020000 >MOV DWORD PTR DS:[ECX+27C],Engine2.004B4F00
004749E8   . C781 80020000 >MOV DWORD PTR DS:[ECX+280],Engine2.004B4F50
004749F2   . C781 84020000 >MOV DWORD PTR DS:[ECX+284],Engine2.004B4DD0
004749FC   . C781 88020000 >MOV DWORD PTR DS:[ECX+288],Engine2.004701C0
00474A06   . C781 90020000 >MOV DWORD PTR DS:[ECX+290],Engine2.004701E0
00474A10   . C781 94020000 >MOV DWORD PTR DS:[ECX+294],Engine2.00470220
00474A1A   . C781 98020000 >MOV DWORD PTR DS:[ECX+298],Engine2.00470200
00474A24   . C781 9C020000 >MOV DWORD PTR DS:[ECX+29C],Engine2.00470250
00474A2E   . C781 A4020000 >MOV DWORD PTR DS:[ECX+2A4],Engine2.00470310
00474A38   . C781 A0020000 >MOV DWORD PTR DS:[ECX+2A0],Engine2.00470270
00474A42   . C781 A8020000 >MOV DWORD PTR DS:[ECX+2A8],Engine2.004703F0
00474A4C   . C781 AC020000 >MOV DWORD PTR DS:[ECX+2AC],Engine2.004704E0
00474A56   . C781 B0020000 >MOV DWORD PTR DS:[ECX+2B0],Engine2.00470580
00474A60   . C781 EC020000 >MOV DWORD PTR DS:[ECX+2EC],Engine2.00470620
00474A6A   . C781 F0020000 >MOV DWORD PTR DS:[ECX+2F0],Engine2.00470690
00474A74   . C781 F4020000 >MOV DWORD PTR DS:[ECX+2F4],Engine2.004706E0
00474A7E   . C781 F8020000 >MOV DWORD PTR DS:[ECX+2F8],Engine2.00470700
00474A88   . C781 FC020000 >MOV DWORD PTR DS:[ECX+2FC],Engine2.00470740
00474A92   . C781 00030000 >MOV DWORD PTR DS:[ECX+300],Engine2.00470770
00474A9C   . C781 04030000 >MOV DWORD PTR DS:[ECX+304],Engine2.00470880
00474AA6   . C781 B8020000 >MOV DWORD PTR DS:[ECX+2B8],Engine2.004708B0
00474AB0   . C781 BC020000 >MOV DWORD PTR DS:[ECX+2BC],Engine2.00470900
00474ABA   . C781 C0020000 >MOV DWORD PTR DS:[ECX+2C0],Engine2.00470920
00474AC4   . C781 C4020000 >MOV DWORD PTR DS:[ECX+2C4],Engine2.00470980
00474ACE   . C781 C8020000 >MOV DWORD PTR DS:[ECX+2C8],Engine2.004709E0
00474AD8   . C781 CC020000 >MOV DWORD PTR DS:[ECX+2CC],Engine2.00470A00
00474AE2   . C781 D0020000 >MOV DWORD PTR DS:[ECX+2D0],Engine2.00470A20
00474AEC   . C781 D4020000 >MOV DWORD PTR DS:[ECX+2D4],Engine2.00470A60
00474AF6   . C781 DC020000 >MOV DWORD PTR DS:[ECX+2DC],Engine2.00470B90
00474B00   . C781 D8020000 >MOV DWORD PTR DS:[ECX+2D8],Engine2.00470B00
00474B0A   . C741 04 A00A47>MOV DWORD PTR DS:[ECX+4],Engine2.00470AA0
00474B11   . C781 E0020000 >MOV DWORD PTR DS:[ECX+2E0],Engine2.004C8570
00474B1B   . C781 E4020000 >MOV DWORD PTR DS:[ECX+2E4],Engine2.004C8650                                 ;  Entry address
00474B25   . C781 E8020000 >MOV DWORD PTR DS:[ECX+2E8],Engine2.00470CB0
00474B2F   . C781 14030000 >MOV DWORD PTR DS:[ECX+314],Engine2.00473CC0
00474B39   . C781 18030000 >MOV DWORD PTR DS:[ECX+318],Engine2.00473CE0
00474B43   . C781 1C030000 >MOV DWORD PTR DS:[ECX+31C],Engine2.00473D00
00474B4D   . C781 20030000 >MOV DWORD PTR DS:[ECX+320],Engine2.00470CD0
00474B57   . C781 24030000 >MOV DWORD PTR DS:[ECX+324],Engine2.00470CF0
00474B61   . C781 28030000 >MOV DWORD PTR DS:[ECX+328],Engine2.00470D10
00474B6B   . C781 2C030000 >MOV DWORD PTR DS:[ECX+32C],Engine2.00470D30
00474B75   . C781 34030000 >MOV DWORD PTR DS:[ECX+334],Engine2.00470E60
00474B7F   . C781 3C030000 >MOV DWORD PTR DS:[ECX+33C],Engine2.00470E70
00474B89   . C781 40030000 >MOV DWORD PTR DS:[ECX+340],Engine2.00470E90
00474B93   . C781 44030000 >MOV DWORD PTR DS:[ECX+344],Engine2.00470EA0
00474B9D   . C781 48030000 >MOV DWORD PTR DS:[ECX+348],Engine2.00470EB0
00474BA7   . C781 4C030000 >MOV DWORD PTR DS:[ECX+34C],Engine2.00470EC0
00474BB1   . C781 50030000 >MOV DWORD PTR DS:[ECX+350],Engine2.00470ED0
00474BBB   . C781 54030000 >MOV DWORD PTR DS:[ECX+354],Engine2.00470EF0
00474BC5   . C781 58030000 >MOV DWORD PTR DS:[ECX+358],Engine2.00470F00
00474BCF   . C781 5C030000 >MOV DWORD PTR DS:[ECX+35C],Engine2.00470F20
00474BD9   . C781 60030000 >MOV DWORD PTR DS:[ECX+360],Engine2.00470F30
00474BE3   . C781 64030000 >MOV DWORD PTR DS:[ECX+364],Engine2.00470F50
00474BED   . C781 38030000 >MOV DWORD PTR DS:[ECX+338],Engine2.00474510
00474BF7   . E9 B4280C00    JMP Engine2.005374B0
    00474892 . C781 08020000 >MOV DWORD PTR DS:[ECX+208],Engine2.0046FBC0 writes the pointer to PushToConsole.

    If the "SendToServer" function is located in this class, could you help me find it?
    Last edited by derh.acker; 12-17-2011 at 02:49 AM.
    Reply With Quote Reply With Quote
« Previous Thread | Next Thread »

Similar Threads

  1. truth about the world
    By <sniper> in forum General
    Replies: 4
    Last Post: 06-06-2007, 04:11 PM
  2. ok u hear/see everywhere on tv/radio about the storm !!!!!
    By AN1MAL in forum Spammers Corner
    Replies: 3
    Last Post: 01-12-2007, 09:24 PM
  3. News report about the piratebay raid.. etc
    By gunot in forum General
    Replies: 12
    Last Post: 06-30-2006, 08:32 PM