bla bla bla [0x0000000] -> this is your pointer. bla bla bla [ECX + 0xSomething] -> 0xSomething is your offset
10043B7A 68 B8554C10 PUSH CShell.104C55B8 ; ASCII "FogEnable 0" 10043B7F FFD2 CALL EDX 10043B81 83C4 04 ADD ESP,0x4 10043B84 53 PUSH EBX 10043B85 E8 46F3FDFF CALL CShell.10022ED0 10043B8A 8BC8 MOV ECX,EAX 10043B8C E8 BF5F2F00 CALL CShell.10339B50 10043B91 8B0D B89EF410 MOV ECX,DWORD PTR DS:[0x10F49EB8] 10043B97 3BCB CMP ECX,EBX 10043B99 74 06 JE SHORT CShell.10043BA1 10043B9B 53 PUSH EBX 10043B9C E8 1F0D2600 CALL CShell.102A48C0 10043BA1 E8 DA893000 CALL CShell.1034C580 10043BA6 80B8 10870D00 00 CMP BYTE PTR DS:[EAX+0xD8710],0x0 10043BAD 74 52 JE SHORT CShell.10043C01 10043BAF 6A 04 PUSH 0x4 10043BB1 E8 8A3D0800 CALL CShell.100C7940 10043BB6 A1 44A25910 MOV EAX,DWORD PTR DS:[0x1059A244] == Pointer 10043BBB 8B88 04020000 MOV ECX,DWORD PTR DS:[EAX+0x204] == Offset
