How to get DIP Pointer address
Hello guys !!
I Will release a tut for how to get DIP Function address From olly
What do you need
Olly
d3d9.dll "From C:\Windows\system32"
Step 1
Open d3d9.dll with olly and right click > Search for > Binary String
View B04OC2.png on ScreenSnapr
Step 2
Write at Hex + 0E this binary
Code:
C7 06 ?? ?? ?? ?? 89 86 ?? ?? ?? ?? 89 86
View HufI5u.png on ScreenSnapr
Step 3
Then u will get a code like that
Code:
4FE50F3C |. C706 286CDE4F MOV DWORD PTR DS:[ESI],d3d9.4FDE6C28
Take the address you have get "4FDE6C28"
now we should search for [4FDE6C28+82.*4]
by Click CTRL + G
Step 4
Then you will found code like that
Code:
4FE58845 |. 6A FF PUSH -1
4FE58847 |. 68 5816F54F PUSH d3d9.4FF51658 ; SE handler installation
4FE5884C |. 64:A1 00000000 MOV EAX,DWORD PTR FS:[0]
4FE58852 |. 50 PUSH EAX
4FF51658 That's the Dip Address
Thank + Rep if i helped you
![=]](/forum/images/emotions/=].gif)
.
@
giniyat101For Teach me that
Good bye
thank you :P
---------- Post added at 05:32 PM ---------- Previous post was at 05:24 PM ----------
after that i will make naked asm and include D3D SDK ?
just use oldschool sigscanner, way faster.
lol this tutorial its OOOOOOOOOOOOOOOOOOLLLLLLLLLLLLLLLLLLDDDDDDDDDDDDDD DDDDDDDDd
yu can use d3d9 test to
really idk
but i think Mid Func patched with last x trap update