Weapon pointer problem

This is what I get:

Code:

06918EB7   .  68 6439AC06   PUSH 06AC3964                                                                                              ;  ASCII "ReloadAnimRatio"
06918EBC   .  D998 24240000 FSTP DWORD PTR DS:[EAX+2424]
06918EC2   .  53            PUSH EBX
06918EC3   .  E8 38B61600   CALL 06A84500
06918EC8   .  83C4 08       ADD ESP,8
06918ECB   .  85C0          TEST EAX,EAX
06918ECD   .  74 46         JE SHORT 06918F15
06918ECF   .  8B48 04       MOV ECX,DWORD PTR DS:[EAX+4]
06918ED2   .  8B51 04       MOV EDX,DWORD PTR DS:[ECX+4]
06918ED5   .  8B0D A8872107 MOV ECX,DWORD PTR DS:[72187A8]
06918EDB   .  85C9          TEST ECX,ECX
06918EDD   .  8B6A 04       MOV EBP,DWORD PTR DS:[EDX+4]
06918EE0   .  74 0E         JE SHORT 06918EF0
06918EE2   .  A1 AC872107   MOV EAX,DWORD PTR DS:[72187AC]
06918EE7   .  2BC1          SUB EAX,ECX
06918EE9   .  C1F8 02       SAR EAX,2
06918EEC   .  3BF0          CMP ESI,EAX
06918EEE   .  72 08         JB SHORT 06918EF8
06918EF0   >  FFD7          CALL EDI
06918EF2   .  8B0D A8872107 MOV ECX,DWORD PTR DS:[72187A8]
06918EF8   >  55            PUSH EBP                                                                                                   ; /s = ""94,"",FF,"i",03,"",9A,"3",E8,"t"
06918EF9   .  8D3CB1        LEA EDI,DWORD PTR DS:[ECX+ESI*4]                                                                           ; |
06918EFC   .  90            NOP                                                                                                        ; |
06918EFD   .  E8 738E9A64   CALL MSVCR80.atof                                                                                          ; \atof
06918F02   .  D95C24 14     FSTP DWORD PTR SS:[ESP+14]
06918F06   .  D94424 14     FLD DWORD PTR SS:[ESP+14]
06918F0A   .  8B07          MOV EAX,DWORD PTR DS:[EDI]
06918F0C   .  D998 24240000 FSTP DWORD PTR DS:[EAX+2424]
06918F12   .  83C4 04       ADD ESP,4

It doesn't link any more to cshell :S

0x72187A8

idk is this?

Lol, I think you did something wrong.

Problem found, solved:

Code:

10128EB7   .  68 64392D10   PUSH 102D3964                                                                                              ;  ASCII "ReloadAnimRatio"
10128EBC   .  D998 24240000 FSTP DWORD PTR DS:[EAX+2424]
10128EC2   .  53            PUSH EBX
10128EC3   .  E8 38B61600   CALL 10294500
10128EC8   .  83C4 08       ADD ESP,8
10128ECB   .  85C0          TEST EAX,EAX
10128ECD   .  74 46         JE SHORT 10128F15
10128ECF   .  8B48 04       MOV ECX,DWORD PTR DS:[EAX+4]
10128ED2   .  8B51 04       MOV EDX,DWORD PTR DS:[ECX+4]
10128ED5   .  8B0D A887A210 MOV ECX,DWORD PTR DS:[10A287A8]
10128EDB   .  85C9          TEST ECX,ECX
10128EDD   .  8B6A 04       MOV EBP,DWORD PTR DS:[EDX+4]
10128EE0   .  74 0E         JE SHORT 10128EF0
10128EE2   .  A1 AC87A210   MOV EAX,DWORD PTR DS:[10A287AC]
10128EE7   .  2BC1          SUB EAX,ECX
10128EE9   .  C1F8 02       SAR EAX,2
10128EEC   .  3BF0          CMP ESI,EAX
10128EEE   .  72 08         JB SHORT 10128EF8
10128EF0   >  FFD7          CALL EDI
10128EF2   .  8B0D A887A210 MOV ECX,DWORD PTR DS:[10A287A8]
10128EF8   >  55            PUSH EBP                                                                                                   ; /s = ""C8,"",FE,"",FC,"",02,"",9A,"3",E8,"t"
10128EF9   .  8D3CB1        LEA EDI,DWORD PTR DS:[ECX+ESI*4]                                                                           ; |
10128EFC   .  90            NOP                                                                                                        ; |
10128EFD   .  E8 738E9641   CALL MSVCR80.atof                                                                                          ; \atof
10128F02   .  D95C24 14     FSTP DWORD PTR SS:[ESP+14]
10128F06   .  D94424 14     FLD DWORD PTR SS:[ESP+14]
10128F0A   .  8B07          MOV EAX,DWORD PTR DS:[EDI]
10128F0C   .  D998 24240000 FSTP DWORD PTR DS:[EAX+2424]
10128F12   .  83C4 04       ADD ESP,4

It is 0xA287AC

That is the good one.

Code:

_asm
{
   mov ecx,dword [0xA287A8]
   test ecx, ecx
   je. Not Loaded

   mov dword, [ecx+2424] 120,
   add esp,4
}

no reload addie, and 0xA287A8 is the true one

Reload is 2424,

But I get crossfire errors... Strage,
and if I inject a dll, it works for 14 seconds and afther that it quits :S.

Its a while loop with out any returns or breaks :S

10128EB7 . 68 64392D10 PUSH 102D3964 ; ASCII "ReloadAnimRatio"
10128EBC . D998 24240000 FSTP DWORD PTR DS:[EAX+2424]
10128EC2 . 53 PUSH EBX
10128EC3 . E8 38B61600 CALL 10294500
10128EC8 . 83C4 08 ADD ESP,8
10128ECB . 85C0 TEST EAX,EAX
10128ECD . 74 46 JE SHORT 10128F15
10128ECF . 8B48 04 MOV ECX,DWORD PTR DS:[EAX+4]
10128ED2 . 8B51 04 MOV EDX,DWORD PTR DS:[ECX+4]
10128ED5 . 8B0D A887A210 MOV ECX,DWORD PTR DS:[10A287A8]
10128EDB . 85C9 TEST ECX,ECX
10128EDD . 8B6A 04 MOV EBP,DWORD PTR DS:[EDX+4]
10128EE0 . 74 0E JE SHORT 10128EF0
10128EE2 . A1 AC87A210 MOV EAX,DWORD PTR DS:[10A287AC]
10128EE7 . 2BC1 SUB EAX,ECX
10128EE9 . C1F8 02 SAR EAX,2
10128EEC . 3BF0 CMP ESI,EAX
10128EEE . 72 08 JB SHORT 10128EF8
10128EF0 > FFD7 CALL EDI
10128EF2 . 8B0D A887A210 MOV ECX,DWORD PTR DS:[10A287A8]
10128EF8 > 55 PUSH EBP ; /s = ""C8,"",FE,"",FC,"",02,"",9A,"3",E8,"t"
10128EF9 . 8D3CB1 LEA EDI,DWORD PTR DS:[ECX+ESI*4] ; |
10128EFC . 90 NOP ; |
10128EFD . E8 738E9641 CALL MSVCR80.atof ; \atof
10128F02 . D95C24 14 FSTP DWORD PTR SS:[ESP+14]
10128F06 . D94424 14 FLD DWORD PTR SS:[ESP+14]
10128F0A . 8B07 MOV EAX,DWORD PTR DS:[EDI]
10128F0C . D998 24240000 FSTP DWORD PTR DS:[EAX+2424]
10128F12 . 83C4 04 ADD ESP,4

0x2424 is no reload
0xA287A8 is WeaponMgr