I need help !!!

First, i'm sorry for my bad english. Ok, now i had dump Cshell by Olly Debug then found some text String but i don't know where is Addy and where is Address.
_Ex1 : No Fall Damage.

1011DE80 68 3C5F2B10 PUSH CShell.102B5F3C ; ASCII "DistFallDamageStartFrom"
1011DE85 52 PUSH EDX
1011DE86 E8 75A81500 CALL CShell.10278700
1011DE8B 83C4 08 ADD ESP,8
1011DE8E 3BC7 CMP EAX,EDI
1011DE90 74 1B JE SHORT CShell.1011DEAD
1011DE92 8B40 04 MOV EAX,DWORD PTR DS:[EAX+4]
1011DE95 8B48 04 MOV ECX,DWORD PTR DS:[EAX+4]
1011DE98 8B41 04 MOV EAX,DWORD PTR DS:[ECX+4]
1011DE9B 50 PUSH EAX
1011DE9C 90 NOP
1011DE9D E8 D33E0368 CALL MSVCR80.atof
1011DEA2 8B15 24E3A110 MOV EDX,DWORD PTR DS:[10A1E324] // I think this is address.
1011DEA8 D91A FSTP DWORD PTR DS:[EDX]
1011DEAA 83C4 04 ADD ESP,4
1011DEAD 8B4C24 2C MOV ECX,DWORD PTR SS:[ESP+2C]
1011DEB1 3BCF CMP ECX,EDI
1011DEB3 74 0D JE SHORT CShell.1011DEC2
1011DEB5 8B4424 30 MOV EAX,DWORD PTR SS:[ESP+30]
1011DEB9 2BC1 SUB EAX,ECX
1011DEBB C1F8 02 SAR EAX,2
1011DEBE 3BE8 CMP EBP,EAX
1011DEC0 72 0A JB SHORT CShell.1011DECC
1011DEC2 90 NOP
1011DEC3 E8 CCAB0168 CALL MSVCR80._invalid_parameter_noinfo
1011DEC8 8B4C24 2C MOV ECX,DWORD PTR SS:[ESP+2C]
1011DECC 8B04A9 MOV EAX,DWORD PTR DS:[ECX+EBP*4]

Ex2: I don't know what it's function name

10126B65 68 386B2B10 PUSH CShell.102B6B38 ; ASCII "DamageFactorByDistance"
10126B6A 52 PUSH EDX
10126B6B E8 901B1500 CALL CShell.10278700
10126B70 83C4 08 ADD ESP,8
10126B73 85C0 TEST EAX,EAX
10126B75 74 4A JE SHORT CShell.10126BC1
10126B77 8B40 04 MOV EAX,DWORD PTR DS:[EAX+4]
10126B7A 8B48 04 MOV ECX,DWORD PTR DS:[EAX+4]
10126B7D 8B59 04 MOV EBX,DWORD PTR DS:[ECX+4]
10126B80 8B0D 40E3A110 MOV ECX,DWORD PTR DS:[10A1E340]// I think this is address
10126B86 85C9 TEST ECX,ECX
10126B88 74 0E JE SHORT CShell.10126B98
10126B8A A1 44E3A110 MOV EAX,DWORD PTR DS:[10A1E344]
10126B8F 2BC1 SUB EAX,ECX
10126B91 C1F8 02 SAR EAX,2
10126B94 3BE8 CMP EBP,EAX
10126B96 72 0C JB SHORT CShell.10126BA4
10126B98 90 NOP
10126B99 E8 F61E0168 CALL MSVCR80._invalid_parameter_noinfo
10126B9E 8B0D 40E3A110 MOV ECX,DWORD PTR DS:[10A1E340]
10126BA4 53 PUSH EBX
10126BA5 8D3CA9 LEA EDI,DWORD PTR DS:[ECX+EBP*4]
10126BA8 90 NOP
10126BA9 E8 C7B10268 CALL MSVCR80.atof
10126BAE D95C24 14 FSTP DWORD PTR SS:[ESP+14]
10126BB2 D94424 14 FLD DWORD PTR SS:[ESP+14]
10126BB6 8B17 MOV EDX,DWORD PTR DS:[EDI]
10126BB8 D99A 14080000 FSTP DWORD PTR DS:[EDX+814]// This is addy.
10126BBE 83C4 04 ADD ESP,4
10126BC1 8B4424 14 MOV EAX,DWORD PTR SS:[ESP+14]

_Thanks so much who can help me !!! And i have 1 question left, what's text string name of function Speed.

0xA1E324 is the offset.
Now you need to search the addy.

0x106C? @Takari

Sorry, i can't found addy, i think it's mayby 0x2C ? But there are two 0x2C how can i select the right addy ??? I have one question, what is string name of No Recoil ??? Plez help me.

Originally Posted by Nemo[4ever]

Sorry, i can't found addy, i think it's mayby 0x2C ? But there are two 0x2C how can i select the right addy ??? I have one question, what is string name of No Recoil ??? Plez help me.

ASM .

i now ASM but where ? i don't know so i ask another people in mpgh. If i know why i go here i create a new thread ?

I need help !!!

Post a Reply

Tags for this Thread