How to get DIP Pointer address

Hello guys !!
I Will release a tut for how to get DIP Function address From olly

What do you need

Olly
d3d9.dll "From C:\Windows\system32"

Step 1

Open d3d9.dll with olly and right click > Search for > Binary String

View B04OC2.png on ScreenSnapr

Step 2

Write at Hex + 0E this binary

Code:

C7 06 ?? ?? ?? ?? 89 86 ?? ?? ?? ?? 89 86

View HufI5u.png on ScreenSnapr

Step 3

Then u will get a code like that

Code:

4FE50F3C  |. C706 286CDE4F  MOV DWORD PTR DS:[ESI],d3d9.4FDE6C28

Take the address you have get "4FDE6C28"
now we should search for [4FDE6C28+82.*4]
by Click CTRL + G

Step 4

Then you will found code like that

Code:

4FE58845  |. 6A FF          PUSH -1
4FE58847  |. 68 5816F54F    PUSH d3d9.4FF51658                       ;  SE handler installation
4FE5884C  |. 64:A1 00000000 MOV EAX,DWORD PTR FS:[0]
4FE58852  |. 50             PUSH EAX

4FF51658 That's the Dip Address

Thank + Rep if i helped you

.
@giniyat101For Teach me that
Good bye

thank you :P

---------- Post added at 05:32 PM ---------- Previous post was at 05:24 PM ----------

after that i will make naked asm and include D3D SDK ?

Originally Posted by darkness99

thank you :P

---------- Post added at 05:32 PM ---------- Previous post was at 05:24 PM ----------

after that i will make naked asm and include D3D SDK ?

i found the crossfire eu DIP now ...

what to do ? i added naked asm and add code then what have i do to add it ? void class d3d hacks ?

---------- Post added at 05:49 PM ---------- Previous post was at 05:41 PM ----------

now ?

Code:

__declspec(naked) void DrawIndexedPrimitive ( ) { _asm { mov eax,dword ptr [ebp + 0x8] mov pDevice,eax pushad call Render popad push -1 push 73A3B9E8 mov eax, dword ptr fs:[0] push eax jmp DIP } }

Originally Posted by darkness99

i found the crossfire eu DIP now ...

what to do ? i added naked asm and add code then what have i do to add it ? void class d3d hacks ?

---------- Post added at 05:49 PM ---------- Previous post was at 05:41 PM ----------

now ?

Code:

__declspec(naked) void DrawIndexedPrimitive ( ) { _asm { mov eax,dword ptr [ebp + 0x8] mov pDevice,eax pushad call Render popad push -1 push 73A3B9E8 mov eax, dword ptr fs:[0] push eax jmp DIP } }

there isnt a crossfire NA DIP and another one for EU they are both the same lol