API tools faq
paste
Advertisement
Guest User

Untitled

a guest
Jul 6th, 2010
172
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 7.72 KB | None | 0 0
raw download clone embed print report
  1. ORIGINAL MEMORY OF SHOWFIREPATH (Address based on reference text strings)
  2.  
  3. ShowFirePath - 375175BA - 68 6C936D37 - PUSH cshell.376D936C
  4.  
  5.  
  6. 37517586 C3 RETN
  7. 37517587 CC INT3
  8. 37517588 CC INT3
  9. 37517589 CC INT3
  10. 3751758A CC INT3
  11. 3751758B CC INT3
  12. 3751758C CC INT3
  13. 3751758D CC INT3
  14. 3751758E CC INT3
  15. 3751758F CC INT3
  16. 37517590 C701 442E6937 MOV DWORD PTR DS:[ECX],cshell.37692E44
  17. 37517596 C3 RETN
  18. 37517597 CC INT3
  19. 37517598 CC INT3
  20. 37517599 CC INT3
  21. 3751759A CC INT3
  22. 3751759B CC INT3
  23. 3751759C CC INT3
  24. 3751759D CC INT3
  25. 3751759E CC INT3
  26. 3751759F CC INT3
  27. 375175A0 833D 20797E37 00 CMP DWORD PTR DS:[377E7920],0
  28. 375175A7 75 21 JNZ SHORT cshell.375175CA
  29. 375175A9 D905 60DD6F37 FLD DWORD PTR DS:[376FDD60]
  30. 375175AF A1 B0BF7837 MOV EAX,DWORD PTR DS:[3778BFB0]
  31. 375175B4 51 PUSH ECX
  32. 375175B5 D91C24 FSTP DWORD PTR SS:[ESP]
  33. 375175B8 6A 00 PUSH 0
  34. 375175BA 68 6C936D37 PUSH cshell.376D936C ; ASCII "ShowFirePath"
  35. 375175BF 50 PUSH EAX
  36. 375175C0 B9 1C797E37 MOV ECX,cshell.377E791C
  37. 375175C5 E8 16DCC3FF CALL cshell.371551E0
  38. 375175CA 833D 2C797E37 00 CMP DWORD PTR DS:[377E792C],0
  39. 375175D1 75 22 JNZ SHORT cshell.375175F5
  40. 375175D3 D905 70676937 FLD DWORD PTR DS:[37696770]
  41. 375175D9 51 PUSH ECX
  42. 375175DA 8B0D B0BF7837 MOV ECX,DWORD PTR DS:[3778BFB0] ; Engine.007D8FF8
  43. 375175E0 D91C24 FSTP DWORD PTR SS:[ESP]
  44. 375175E3 6A 00 PUSH 0
  45.  
  46. --------------------------------------------------------------------------------------------------------------------------------
  47.  
  48. WHEN SHOWFIREPATH IS TURNED ON (ShowFirePath 1)
  49.  
  50. 37517586 C3 RETN
  51. 37517587 CC INT3
  52. 37517588 CC INT3
  53. 37517589 CC INT3
  54. 3751758A CC INT3
  55. 3751758B CC INT3
  56. 3751758C CC INT3
  57. 3751758D CC INT3
  58. 3751758E CC INT3
  59. 3751758F CC INT3
  60. 37517590 C701 442E6937 MOV DWORD PTR DS:[ECX],cshell.37692E44
  61. 37517596 C3 RETN
  62. 37517597 CC INT3
  63. 37517598 CC INT3
  64. 37517599 CC INT3
  65. 3751759A CC INT3
  66. 3751759B CC INT3
  67. 3751759C CC INT3
  68. 3751759D CC INT3
  69. 3751759E CC INT3
  70. 3751759F CC INT3
  71. 375175A0 833D 20797E37 00 CMP DWORD PTR DS:[377E7920],0
  72. 375175A7 75 21 JNZ SHORT cshell.375175CA
  73. 375175A9 D905 60DD6F37 FLD DWORD PTR DS:[376FDD60]
  74. 375175AF A1 B0BF7837 MOV EAX,DWORD PTR DS:[3778BFB0]
  75. 375175B4 51 PUSH ECX
  76. 375175B5 D91C24 FSTP DWORD PTR SS:[ESP]
  77. 375175B8 6A 00 PUSH 0
  78. 375175BA 68 6C936D37 PUSH cshell.376D936C ; ASCII "ShowFirePath"
  79. 375175BF 50 PUSH EAX
  80. 375175C0 B9 1C797E37 MOV ECX,cshell.377E791C ; ASCII "@'î\nø}"
  81. 375175C5 E8 16DCC3FF CALL cshell.371551E0
  82. 375175CA 833D 2C797E37 00 CMP DWORD PTR DS:[377E792C],0
  83. 375175D1 75 22 JNZ SHORT cshell.375175F5
  84. 375175D3 D905 70676937 FLD DWORD PTR DS:[37696770]
  85. 375175D9 51 PUSH ECX
  86. 375175DA 8B0D B0BF7837 MOV ECX,DWORD PTR DS:[3778BFB0] ; Engine.007D8FF8
  87. 375175E0 D91C24 FSTP DWORD PTR SS:[ESP]
  88. 375175E3 6A 00 PUSH 0
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement
Public Pastes
Advertisement
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!