Understanding CShell dissasembly

I was looking in CShell.dll for the CharacterHiddenAlpha address.

I searched for the string and found these lines of code:

Code:

MOV EAX,DWORD PTR DS:[10C5284C]
MOV ECX,DWORD PTR DS:[10C52850]

FSTP DWORD PTR DS:[EAX+ECX+88]

I know the BasicPlayerInfo pointer is 0xC52850.

I have a few questions:
1) Why don't we need the 10 on the start of the BasicPlayerInfo pointer? Everyone uses 0xC52850 instead of 0x10C52850.

2) Why is the float value being stored at DS:[EAX+ECX+88]??? Why are EAX and ECX being added??? Shouldn't it just be DS:[ECX+88]???

this is probably because the software they are using is either out of date or set up so that it cant be reedited

Originally Posted by code17a

this is probably because the software they are using is either out of date or set up so that it cant be reedited

which question are u trying to answer???? and i dont think u get my question lol

ok i have the answer for your question one:
We calculate -10000000 because 10000000 is the Base Address of CShell.dll. When you add an log to your hack and then you logg the GetModuleHandle("CShell.dll") you got the CShell Base addres. But then the CShell base address is not 10000000. Thats why we make the pointer - base addres. In your Project you make CShell base Address + calculated pointer. If you have other questions you can ask me....

@-[I]fLuX

@_corn_

FSTP = Comparison Function,
then this comparing the adress of EAX With ECX (PlayerPointer) + the offset of when the ghost is stopped (0x88).

Originally Posted by luizimloko

FSTP = Comparison Function,
then this comparing the adress of EAX With ECX (PlayerPointer) + the offset of when the ghost is stopped (0x88).[/B][/COLOR][/FONT]

FSTP POPs a float from the float stack

Originally Posted by derh.acker

FSTP POPs a float from the float stack

yes fstp does not compare anything... it pops the float off float stack then stores in in the location specified... -.-

this:

Code:

FSTP DWORD PTR DS:[EAX+ECX+88]

stores the float value at DS:[EAX+ECX+88]

but i want to know why it adds EAX and ECX

@giniyat101 ? do u know

Understanding CShell dissasembly

Post a Reply

Similar Threads

Tags for this Thread