Finding Direct3D Device Pointer

No one better not try linking me to this tutorial: http://www.mpgh.net/forum/279-call-d...e-pointer.html

I have been there, I have searched for days, and I have asked people and no one will f*cking help me, at least the little help they attempt to give is completely useless. I am on the brink of snapping, and all I want to do is find the Direct3D Device Pointer in Left 4 Dead 2. Now, I have attempted Void's tutorial with Olly, well, I don't get past step 1 because there is absolutely no calls to "Direct3DCreate9", I tried something HD told me using c++ and doing Direct3DCreate9 then taking the IDirect3D handle or whatever and adding 0x40 to it. Not quite sure what he was telling me to do, but it obviously didn't work. And at this point I have searched my ass off in olly for any sign of it. I asked one of my friends about finding it, and he lol'd then copy/pasted a section of ASM into our conversation
then stopped replying. I can see in that code that they put the pointer in ecx. But, that's not from l4d2, and he wont explain how the hell he found it. Now I would absolutely love it if someone just came out and posted the pointer, but I would like it more if someone could actually help me find it, so I can find future pointers.
Thanks in advance
~lilneo

DirectX 9 device pointer will also be resolved using the following scan:

[php]
bool bCompare(const BYTE* pData, const BYTE* bMask, const char* szMask)
{
for( ; *szMask; ++szMask, ++pData, ++bMask)
if(*szMask == 'x' && *pData != *bMask)
return false;
return (*szMask) == NULL;
}


DWORD FindPattern(DWORD dValor,DWORD dLer,BYTE *bMaskara,char * szMaskara)
{
for (DWORD i=0; i < dLer; i++)
if (bCompare((PBYTE)(dValor + i), bMaskara, szMaskara))
return (DWORD)(dValor + i);
return false;
}

DWORD dwDXDevice = FindPattern((DWORD)GetModuleHandle("d3d9.dll"), 0x128000, (PBYTE)"\xC7\x06\x00\x00\x00\x00\x89\x86\x00\x00\x 00\x00\x89\x86", "xx????xx????xx");

[/php]
The virtual table function listing can be found by adding 2 to the device pointer (ie, (dwDXDevice + 2))

Not sure who made the bCompare and FindPattern functions, but credits to them.

Well, there's a myriad of reasons it could be crashing. Like all good experiment we'll need a control. Try testing the same technique in a test environment. Then if it does not work in the game we know the game is doing something different.

No look up DirectX9 Test Enviroment. There are applications made to test menu, and D3d code in before we put it in games. Just testing your code in a game would be silly and hard as hell to debug.

http://www.mpgh.net/forum/31-c-c/115...ml#post1535040

May be worth adding that you're doing it for left 4 dead 2
* modified source engine(no code available besides a reverse engineered SDK that isn't even close to completion)
* Valve Anti Cheat(external AC that resides inside steam, doesn't prevent you from doing things as far as i'm aware)

The thing I was refering to on steam was "Direct3DCreate9", the return value of that is the direct3d object pointer. CreateDevice is the 16th virtual function, thus 16*0x4 = 0x40.
So you look for something along the lines of
mov ECX, addy
call [ECX+0x40]

Then see where EAX is mov'd into and voila, you have your device pointer.
This is the method I used for CoD:MW2 btw.

L4D2 is special as in they don't load d3d9 lib directly, but rather through a dll of theirs.
I believe what they do is load up launcher.dll, then call launchermain.
launchermain will load up all other DLL's and starts up their factories.
The key dll to find is vgui2.dll, which does all the gui related stuff. I asume they either load d3d9 from vgui dll OR they load it from the matsystem(material system) dll.

If you're unable to figure it out lemme know on steam and i'll see what I can do.

wow, i am not going to ask how you even found that out. lol.