how to find Pointer Pushtoconsole

[sabatbatu]

how to find Pointer Pushtoconsole ???

[XarutoUsoCrack]

Search for String: FogEnable

You will se something like this:

bla bla bla [0x0000000] -> this is your pointer.
bla bla bla [ECX + 0xSomething] -> 0xSomething is your offset

I Don't know explain too much, but, you can easy search in google how to find that, is most easy thing to do in CrossFire.

[-[I]fLuX]

example in cfna:

string: FogEnable 0

10043B7A   68 B8554C10      PUSH CShell.104C55B8                     ; ASCII "FogEnable 0"
10043B7F   FFD2             CALL EDX
10043B81   83C4 04          ADD ESP,0x4
10043B84   53               PUSH EBX
10043B85   E8 46F3FDFF      CALL CShell.10022ED0
10043B8A   8BC8             MOV ECX,EAX
10043B8C   E8 BF5F2F00      CALL CShell.10339B50
10043B91   8B0D B89EF410    MOV ECX,DWORD PTR DS:[0x10F49EB8]
10043B97   3BCB             CMP ECX,EBX
10043B99   74 06            JE SHORT CShell.10043BA1
10043B9B   53               PUSH EBX
10043B9C   E8 1F0D2600      CALL CShell.102A48C0
10043BA1   E8 DA893000      CALL CShell.1034C580
10043BA6   80B8 10870D00 00 CMP BYTE PTR DS:[EAX+0xD8710],0x0
10043BAD   74 52            JE SHORT CShell.10043C01
10043BAF   6A 04            PUSH 0x4
10043BB1   E8 8A3D0800      CALL CShell.100C7940
10043BB6   A1 44A25910      MOV EAX,DWORD PTR DS:[0x1059A244] == Pointer
10043BBB   8B88 04020000    MOV ECX,DWORD PTR DS:[EAX+0x204] == Offset

[sabatbatu]

thank you friend

[nightnikka]

example in cfna:

string: FogEnable 0

10043B7A   68 B8554C10      PUSH CShell.104C55B8                     ; ASCII "FogEnable 0"
10043B7F   FFD2             CALL EDX
10043B81   83C4 04          ADD ESP,0x4
10043B84   53               PUSH EBX
10043B85   E8 46F3FDFF      CALL CShell.10022ED0
10043B8A   8BC8             MOV ECX,EAX
10043B8C   E8 BF5F2F00      CALL CShell.10339B50
10043B91   8B0D B89EF410    MOV ECX,DWORD PTR DS:[0x10F49EB8]
10043B97   3BCB             CMP ECX,EBX
10043B99   74 06            JE SHORT CShell.10043BA1
10043B9B   53               PUSH EBX
10043B9C   E8 1F0D2600      CALL CShell.102A48C0
10043BA1   E8 DA893000      CALL CShell.1034C580
10043BA6   80B8 10870D00 00 CMP BYTE PTR DS:[EAX+0xD8710],0x0
10043BAD   74 52            JE SHORT CShell.10043C01
10043BAF   6A 04            PUSH 0x4
10043BB1   E8 8A3D0800      CALL CShell.100C7940
10043BB6   A1 44A25910      MOV EAX,DWORD PTR DS:[0x1059A244] == Pointer
10043BBB   8B88 04020000    MOV ECX,DWORD PTR DS:[EAX+0x204] == Offset

That is pretty much it :P good job Flux :P