u find DIP right...
open your crossfire.. in login menu alt+tab.. open ollydbg.. file and attach your crossfire.. klik right.. view cshell.. ctrl + B.. (if xtrap detected u need crossfirebypass)
hex :
8B 10 8B 92 ?? ?? ?? ?? 51 8B 4C 24 ?? 55 51 6A ?? 6A ?? 50 FF D2 8B 43 ?? 8B 8C 24
example :
004B4A37 8B01 MOV EAX,DWORD PTR DS:[ECX]
004B4A39 8B4C24 18 MOV ECX,DWORD PTR SS:[ESP+18]
004B4A3D 8B10 MOV EDX,DWORD PTR DS:[EAX] <===== This DIP enggin 004B4A3D and 8B10 *
004B4A3F 8B92 48010000 MOV EDX,DWORD PTR DS:[EDX+148] <===== MOV EDX,DWORD PTR DS:[EDX+148]
004B4A45 51 PUSH ECX
004B4A46 8B4C24 20 MOV ECX,DWORD PTR SS:[ESP+20]
004B4A4A 55 PUSH EBP
* Example for if( memcmp( ( VOID * )DIPEngine, ( VOID * )( PBYTE )"\x8B\x10", 2 ) == 0 )
if this helps you. click thanks ..