Como encontro o endereço do superkill?

1036222F  |. 68 383D9B10    |PUSH CShell_0.109B3D38                  ;  ASCII "ModelNodeType"
10362234  |. 51             |PUSH ECX
10362235  |. E8 26835100    |CALL CShell_0.1087A560
1036223A  |. 83C4 08        |ADD ESP,8
1036223D  |. 3BC3           |CMP EAX,EBX
1036223F  |. 74 1D          |JE SHORT CShell_0.1036225E
10362241  |. 8B50 04        |MOV EDX,DWORD PTR DS:[EAX+4]
10362244  |. 8B42 04        |MOV EAX,DWORD PTR DS:[EDX+4]
10362247  |. 8B40 04        |MOV EAX,DWORD PTR DS:[EAX+4]
1036224A  |. 50             |PUSH EAX
1036224B  |. FF15 10079510  |CALL DWORD PTR DS:[10950710]
10362251  |. 8B0D 14F99B11  |MOV ECX,DWORD PTR DS:[119BF914]
10362257  |. 83C4 04        |ADD ESP,4
1036225A  |. 89440F 54      |MOV DWORD PTR DS:[EDI+ECX+54],EAX
1036225E  |> 8B15 14F99B11  |MOV EDX,DWORD PTR DS:[119BF914]
10362264  |. 8B0417         |MOV EAX,DWORD PTR DS:[EDI+EDX]
10362267  |. 3BC3           |CMP EAX,EBX
10362269  |. 7C 0E          |JL SHORT CShell_0.10362279
1036226B  |. 3D 96000000    |CMP EAX,96
10362270  |. 7D 07          |JGE SHORT CShell_0.10362279
10362272  |. 892C85 B8F69B1>|MOV DWORD PTR DS:[EAX*4+119BF6B8],EBP
10362279  |> 8305 10F99B11 >|ADD DWORD PTR DS:[119BF910],1
10362280  |. 83C5 01        |ADD EBP,1
10362283  |. 81C7 9C000000  |ADD EDI,9C

Endereço do 'Super Kill'
Offset do 'Super Kill'

103620B5  |. 68 603D9B10    |PUSH CShell_0.109B3D60                  ;  ASCII "Dimension"
103620BA  |. 51             |PUSH ECX
103620BB  |. E8 A0845100    |CALL CShell_0.1087A560
103620C0  |. 8BF0           |MOV ESI,EAX
103620C2  |. 83C4 08        |ADD ESP,8
103620C5  |. 3BF3           |CMP ESI,EBX
103620C7  |. 74 51          |JE SHORT CShell_0.1036211A
103620C9  |. 8B56 04        |MOV EDX,DWORD PTR DS:[ESI+4]
103620CC  |. 8B42 04        |MOV EAX,DWORD PTR DS:[EDX+4]
103620CF  |. 8B40 04        |MOV EAX,DWORD PTR DS:[EAX+4]
103620D2  |. 50             |PUSH EAX
103620D3  |. FF15 B0069510  |CALL DWORD PTR DS:[109506B0]
103620D9  |. 8B56 04        |MOV EDX,DWORD PTR DS:[ESI+4]
103620DC  |. 8B42 08        |MOV EAX,DWORD PTR DS:[EDX+8]
103620DF  |. 8B40 04        |MOV EAX,DWORD PTR DS:[EAX+4]
103620E2  |. 8B0D 14F99B11  |MOV ECX,DWORD PTR DS:[119BF914]
103620E8  |. 50             |PUSH EAX
103620E9  |. D95C0F 38      |FSTP DWORD PTR DS:[EDI+ECX+38]
103620ED  |. FF15 B0069510  |CALL DWORD PTR DS:[109506B0]
103620F3  |. 8B56 04        |MOV EDX,DWORD PTR DS:[ESI+4]
103620F6  |. 8B42 0C        |MOV EAX,DWORD PTR DS:[EDX+C]
103620F9  |. 8B40 04        |MOV EAX,DWORD PTR DS:[EAX+4]
103620FC  |. 8B0D 14F99B11  |MOV ECX,DWORD PTR DS:[119BF914]
10362102  |. 50             |PUSH EAX
10362103  |. D95C0F 3C      |FSTP DWORD PTR DS:[EDI+ECX+3C]
10362107  |. FF15 B0069510  |CALL DWORD PTR DS:[109506B0]
1036210D  |. 8B0D 14F99B11  |MOV ECX,DWORD PTR DS:[119BF914]
10362113  |. D95C0F 40      |FSTP DWORD PTR DS:[EDI+ECX+40]
10362117  |. 83C4 0C        |ADD ESP,0C

Dimensão x
Dimensão y
Dimensão z