How To Make A D3D Hook [ Complete Tutorial ]

[Swag]

i can use it for d3d menu ?

This is only DIP, for menu you need endscene and reset, so no

[goold1]

This is only DIP, for menu you need endscene and reset, so no

pReset = (oReset)DetourFunction((PBYTE)vtbl[82], (PBYTE)Reset, 5);
pEndScene = (oEndScene) DetourFunction((PBYTE) vtbl[42], (PBYTE)EndScene,5);
This is Reset And EndScene Only ? ^^

[Swag]

pReset = (oReset)DetourFunction((PBYTE)vtbl[82], (PBYTE)Reset, 5);
pEndScene = (oEndScene) DetourFunction((PBYTE) vtbl[42], (PBYTE)EndScene,5);
This is Reset And EndScene Only ? ^^

That are detected ones.

[goold1]

Where IS Undetected ones

[poplm2]

Credits to LowHertz for the MakeJMP function, all that is required is a reference for pointers and machine code, I suggest you redo it with your own material.

To further correct this thread;

You find the DirectX device pointer, then never use it, therefore making it useless, and probably optimized out.

You jump back to you're original patch point, so you will loop infinity, ie: 0x01: jmp 0x01 or jmp $.

You will want to jump back to dwBackup + 5, or if you modify lowhertz's function to not set NOP to the rest of the instructions, you can just set dwBackup to PatchLocation + PatchLen.

[Dead(H)ell]

Credits to LowHertz for the MakeJMP function, all that is required is a reference for pointers and machine code, I suggest you redo it with your own material.

To further correct this thread;

You find the DirectX device pointer, then never use it, therefore making it useless, and probably optimized out.

You jump back to you're original patch point, so you will loop infinity, ie: 0x01: jmp 0x01 or jmp $.

You will want to jump back to dwBackup + 5, or if you modify lowhertz's function to not set NOP to the rest of the instructions, you can just set dwBackup to PatchLocation + PatchLen.

what is lowhertz? lol and idk wat ur talkin about lol

[poplm2]

what is lowhertz? lol and idk wat ur talkin about lol

way to fail bro.

[Dead(H)ell]

way to fail bro.

fail of what? lol idk whos lowhertz and bout dat jmp back i got u but whos lowhertz i nvr heard of em on mpgh :S

[HyperShooter]

fail of what? lol idk whos lowhertz and bout dat jmp back i got u but whos lowhertz i nvr heard of em on mpgh :S

@Dead(H)ell
Acting dumb huh? Midfunction is originally found by ntkid inspired by Shad0w_'s dx9 hook for win7 2 years ago, then lowHertz & disavow posted midfunction tutorials to public last year. Without ntkid's post about wddm hook your fucking tutorial will never exists.

Original posters:
[Coding] Lower LVL D3D | WDDM Research
[Source] Another wddm hook
[Source] Midfunction Hook (v2)
[Tutorial] Mid-Function hook, that big deal ?

You don't deserve the credits.

[Dead(H)ell]

@HyperShooter loooool yh lol i m acting dumb..QQ more if u want but i got that hook from another forum and it wasnt a good one so @Coder[Vb10e] helped me when he showed me his hook u could ask him so shut up and stop being just ruiner cuz idk why ur doing that its useless cuz i didnt know those ppl posted those things and lol why the heck should i look back to a 2 year old thread ? QQer just Shut Up

[Fly3r]

@Dead(H)ell
He is just pointing out the truth.
And what do you mean "why the heck should i look back to a 2 year old thread" ? What the ---- are you saying ? ofc you would look at a thread that old.
Cause thats from where everything started. What i mean is that some people made their own hooks and some couldnt.So those threads made them understand how it works and helped them made their own or get the one they had working. Understood?

[TurnOff]

Hello, @Dead(H)ell !

I put the codes what you said, but the debugging, it gives me error:

"Unable to start the program 'c:/ ... /NoRec.dll'

The system can not find the file Specified" ?!

What should I do?

Please tell me, I really want to do a hack!

P.S : I have C++ "BOOK" , is translated, but is not verry good translated (in my language...)!

[Dead(H)ell]

@Dead(H)ell
He is just pointing out the truth.
And what do you mean "why the heck should i look back to a 2 year old thread" ? What the ---- are you saying ? ofc you would look at a thread that old.
Cause thats from where everything started. What i mean is that some people made their own hooks and some couldnt.So those threads made them understand how it works and helped them made their own or get the one they had working. Understood?

Yup i got u but u dont get me i said i got that hook un detailed and un explained from another forum its "gordensys" or smth like dat then me and @Coder[Vb10e] @ @Afonso122 [ my bro] deatiled it 2gether changed strings and addies and others..thats what i mean i never knew those threads were on mpgh i am not that curious to look except in page 1 in the threads

---------- Post added at 06:06 PM ---------- Previous post was at 06:03 PM ----------

Hello, @Dead(H)ell !

I put the codes what you said, but the debugging, it gives me error:

"Unable to start the program 'c:/ ... /NoRec.dll'

The system can not find the file Specified" ?!

What should I do?

Please tell me, I really want to do a hack!

P.S : I have C++ "BOOK" , is translated, but is not verry good translated (in my language...)!

yup this error is normal in vc++ 2010 + or vs 2010 + dont worry just go to the folder of ur project and then select debug or release what eva u want and then start ur hack

[BlackLite]

Note* : Must Read ALL !

This tutorial is for WindowsXP only , For windows 7 you have to change these

DrawIndexPrimitive Found at 7241A2E0

Means DIP will be example of that
Thanks DirecTx_ for help

DWORD DIPRet;
__declspec(naked) void myDip()
{
	static LPDIRECT3DDEVICE9 pDevice;
	static D3DPRIMITIVETYPE pType;
	static D3DPRIMITIVETYPE nBaseVertIndex;
	static D3DPRIMITIVETYPE nMinIndex;
	static D3DPRIMITIVETYPE nNumVertices;
	static D3DPRIMITIVETYPE nStartIndex;
	static D3DPRIMITIVETYPE nPrimitiveCount;

	__asm mov dword ptr ss:[ebp-10],esp; 

	__asm mov esi, dword ptr ss:[ebp+0x8]; 
	__asm mov pDevice esi; 

	__asm mov esi, dword ptr ss:[ebp+0x0C]; 
	__asm mov pType, esi;

	__asm mov esi, dword ptr ss:[ebp+0x10]; 
	__asm mov nBaseVertIndex, esi; 

	__asm mov esi, dword ptr ss:[ebp+0x14]; 
	__asm mov nMinIndex, esi; 
	__asm mov esi, dword ptr ss:[ebp+0x18]; 
	__asm mov nNumVertices, esi; 

	__asm mov esi, dword ptr ss:[ebp+0x1C]; 
	__asm mov nStartIndex, esi;
	__asm mov esi, dword ptr ss:[ebp+0x20]; 
	__asm mov nPrimitiveCount,esi; 
	if(pDevice)
		myDIP(pDevice,pType,nBaseVertIndex,nMinIndex,nNumVertices,nStartIndex,nPrimitiveCount); //Call real DIP

	__asm jmp DIPRet; //jmp to hook
}

[nunox10]

Hum... I think im kind 75% done to making a hack lol. Its a noob question but, do we really need to hook to make hack works?? Or depends on what im gonna hack?