Hooking Direct X Endscene in Direct X 11 game

Question

I have to do some memory reading in a game and some injection. However, to avoid race conditions, I need to inject my ASM code into the endscene.

Previously I have used this code:

uint D3D9_Device;
D3D9_Device = Memory.Read<uint>(Memory.BaseAddress + Direct3D9__Device);
D3D9_Device = Memory.Read<uint>(D3D9_Device + Direct3D9__Device__OffsetA);
D3D9_Device = Memory.Read<uint>(D3D9_Device);
D3D9_Device = Memory.Read<uint>(D3D9_Device + Direct3D9__Device__OffsetB);

To access the Dx9 device, and find the endscene using reversed offsets.

However, in windows 7, directx 11 is forced, which means that this read fails and gives a null object.

Any idea how I might perform a hook into the endscene of a game when DirectX 11 is in use?

Answer 1

You should be IAT hooking GetProcAddress and calls to D3DCreate, capturing the device pointer and hooking the VFTable from there. dunno how you 'reversed' the COM vftable offsets (these are predefined by how COM dlls are build, you need only count up the virtual methods defined in the DX SDK headers, start at 0, then multiply by sizeof(INT_PTR) to get the offset), but the way your reading them looks wrong too (you've got one too many indirections).

Try having a look at something like MSDetours, it has an example on COM object hooking. you can also give this question a read through too