Hook in d9d9 windows 8

**dreek1** · 07-27-2013

I was taking a good look in the windows 8 D3D9 and found this .....
Can you inform me whether the hook is correct?

thanks....

Code:

72CC8F0F   8BFF             MOV EDI,EDI
72CC8F11   55               PUSH EBP
72CC8F12   8BEC             MOV EBP,ESP
72CC8F14   83EC 0C          SUB ESP,0C
72CC8F17   56               PUSH ESI
72CC8F18   8B75 08          MOV ESI,DWORD PTR SS:[EBP+8]
72CC8F1B   8D46 28          LEA EAX,DWORD PTR DS:[ESI+28]
72CC8F1E   50               PUSH EAX
72CC8F1F   FF15 2C25E672    CALL DWORD PTR DS:[<&KERNEL32.Interlocke>; KERNEL32.InterlockedDecrement
72CC8F25   85C0             TEST EAX,EAX
72CC8F27   0F85 5F010000    JNZ d3d9.72CC908C
72CC8F2D   53               PUSH EBX
72CC8F2E   57               PUSH EDI
72CC8F2F   68 F080E572      PUSH d3d9.72E580F0
72CC8F34   FF15 2025E672    CALL DWORD PTR DS:[<&KERNEL32.EnterCriti>; ntdll.RtlEnterCriticalSection
72CC8F3A   FF0D 1082E572    DEC DWORD PTR DS:[72E58210]
72CC8F40   8B1D CC24E672    MOV EBX,DWORD PTR DS:[<&KERNEL32.LocalFr>; KERNEL32.LocalFree
72CC8F46   75 18            JNZ SHORT d3d9.72CC8F60
72CC8F48   33FF             XOR EDI,EDI
72CC8F4A   8B87 8498E572    MOV EAX,DWORD PTR DS:[EDI+72E59884]
72CC8F50   85C0             TEST EAX,EAX
72CC8F52   0F85 39010000    JNZ d3d9.72CC9091
72CC8F58   83C7 08          ADD EDI,8
72CC8F5B   83FF 60          CMP EDI,60
72CC8F5E  ^72 EA            JB SHORT d3d9.72CC8F4A
72CC8F60   68 F080E572      PUSH d3d9.72E580F0
72CC8F65   FF15 1C25E672    CALL DWORD PTR DS:[<&KERNEL32.LeaveCriti>; ntdll.RtlLeaveCriticalSection
72CC8F6B   8365 F8 00       AND DWORD PTR SS:[EBP-8],0
72CC8F6F   837E 2C 00       CMP DWORD PTR DS:[ESI+2C],0
72CC8F73   0F86 DD000000    JBE d3d9.72CC9056
72CC8F79   8D86 DC020000    LEA EAX,DWORD PTR DS:[ESI+2DC]
72CC8F7F   8945 F4          MOV DWORD PTR SS:[EBP-C],EAX
72CC8F82   8D86 94240000    LEA EAX,DWORD PTR DS:[ESI+2494]
72CC8F88   8D8E 444A0000    LEA ECX,DWORD PTR DS:[ESI+4A44]
72CC8F8E   8945 FC          MOV DWORD PTR SS:[EBP-4],EAX
72CC8F91   894D 08          MOV DWORD PTR SS:[EBP+8],ECX
72CC8F94   8B79 CC          MOV EDI,DWORD PTR DS:[ECX-34]
72CC8F97   85FF             TEST EDI,EDI
72CC8F99   74 08            JE SHORT d3d9.72CC8FA3
72CC8F9B   E8 17FFFFFF      CALL d3d9.72CC8EB7
72CC8FA0   8B4D 08          MOV ECX,DWORD PTR SS:[EBP+8]
72CC8FA3   8B39             MOV EDI,DWORD PTR DS:[ECX]
72CC8FA5   85FF             TEST EDI,EDI
72CC8FA7   0F85 C7010000    JNZ d3d9.72CC9174
72CC8FAD   8B7D FC          MOV EDI,DWORD PTR SS:[EBP-4]
72CC8FB0   837F E0 00       CMP DWORD PTR DS:[EDI-20],0
72CC8FB4   0F85 C4010000    JNZ d3d9.72CC917E
72CC8FBA   833F 00          CMP DWORD PTR DS:[EDI],0
72CC8FBD   0F85 C5010000    JNZ d3d9.72CC9188
72CC8FC3   8B87 40120000    MOV EAX,DWORD PTR DS:[EDI+1240]
72CC8FC9   85C0             TEST EAX,EAX
72CC8FCB   0F85 C0010000    JNZ d3d9.72CC9191
72CC8FD1   8B87 60120000    MOV EAX,DWORD PTR DS:[EDI+1260]
72CC8FD7   85C0             TEST EAX,EAX
72CC8FD9   0F85 BA010000    JNZ d3d9.72CC9199
72CC8FDF   8B7D F4          MOV EDI,DWORD PTR SS:[EBP-C]
72CC8FE2   837F F4 00       CMP DWORD PTR DS:[EDI-C],0
72CC8FE6   74 05            JE SHORT d3d9.72CC8FED
72CC8FE8   FF77 F4          PUSH DWORD PTR DS:[EDI-C]
72CC8FEB   FFD3             CALL EBX
72CC8FED   833F 00          CMP DWORD PTR DS:[EDI],0
72CC8FF0   74 04            JE SHORT d3d9.72CC8FF6
72CC8FF2   FF37             PUSH DWORD PTR DS:[EDI]
72CC8FF4   FFD3             CALL EBX
72CC8FF6   837F 14 00       CMP DWORD PTR DS:[EDI+14],0
72CC8FFA   74 05            JE SHORT d3d9.72CC9001
72CC8FFC   FF77 14          PUSH DWORD PTR DS:[EDI+14]
72CC8FFF   FFD3             CALL EBX
72CC9001   8B87 88FEFFFF    MOV EAX,DWORD PTR DS:[EDI-178]
72CC9007   85C0             TEST EAX,EAX
72CC9009   0F85 5D010000    JNZ d3d9.72CC916C
72CC900F   8B0D 1882E572    MOV ECX,DWORD PTR DS:[72E58218]          ; GDI32.D3DKMTCloseAdapter
72CC9015   8B47 24          MOV EAX,DWORD PTR DS:[EDI+24]
72CC9018   85C9             TEST ECX,ECX
72CC901A   74 0D            JE SHORT d3d9.72CC9029
72CC901C   85C0             TEST EAX,EAX
72CC901E   74 09            JE SHORT d3d9.72CC9029
72CC9020   8945 F4          MOV DWORD PTR SS:[EBP-C],EAX
72CC9023   8D45 F4          LEA EAX,DWORD PTR SS:[EBP-C]
72CC9026   50               PUSH EAX
72CC9027   FFD1             CALL ECX
72CC9029   8B55 F8          MOV EDX,DWORD PTR SS:[EBP-8]
72CC902C   8B4D 08          MOV ECX,DWORD PTR SS:[EBP+8]
72CC902F   8B45 FC          MOV EAX,DWORD PTR SS:[EBP-4]
72CC9032   42               INC EDX
72CC9033   83C1 04          ADD ECX,4
72CC9036   05 88010000      ADD EAX,188
72CC903B   81C7 E0020000    ADD EDI,2E0
72CC9041   8955 F8          MOV DWORD PTR SS:[EBP-8],EDX
72CC9044   894D 08          MOV DWORD PTR SS:[EBP+8],ECX
72CC9047   8945 FC          MOV DWORD PTR SS:[EBP-4],EAX
72CC904A   897D F4          MOV DWORD PTR SS:[EBP-C],EDI
72CC904D   3B56 2C          CMP EDX,DWORD PTR DS:[ESI+2C]
72CC9050  ^0F82 3EFFFFFF    JB d3d9.72CC8F94
72CC9056   3935 708CE572    CMP DWORD PTR DS:[72E58C70],ESI
72CC905C   0F84 7AE10300    JE d3d9.72D071DC
72CC9062   8B86 984A0000    MOV EAX,DWORD PTR DS:[ESI+4A98]
72CC9068   85C0             TEST EAX,EAX
72CC906A   0F85 31010000    JNZ d3d9.72CC91A1
72CC9070   8D46 04          LEA EAX,DWORD PTR DS:[ESI+4]
72CC9073   8378 18 00       CMP DWORD PTR DS:[EAX+18],0
72CC9077   74 07            JE SHORT d3d9.72CC9080
72CC9079   50               PUSH EAX
72CC907A   FF15 2425E672    CALL DWORD PTR DS:[<&KERNEL32.DeleteCrit>; ntdll.RtlDeleteCriticalSection
72CC9080   2B76 FC          SUB ESI,DWORD PTR DS:[ESI-4]
72CC9083   74 03            JE SHORT d3d9.72CC9088
72CC9085   56               PUSH ESI
72CC9086   FFD3             CALL EBX
72CC9088   5F               POP EDI
72CC9089   33C0             XOR EAX,EAX
72CC908B   5B               POP EBX
72CC908C   5E               POP ESI
72CC908D   C9               LEAVE
72CC908E   C2 0400          RETN 4