Hooking DirectX EndScene from an injected DLL
You install a system wide hook. (SetWindowsHookEx) With this done, you get to be loaded into every process. Now when the hook is called, you look for a loaded d3d9.dll. If one is loaded, you create a temporary D3D9 object, and walk the vtable to get the address of the EndScene method. Then you can … Read more