Detect Directx Hooks

[djwilliams]

I was wondering if anyone would have ideas on how to detect what processes are hooked to DirectX/Direct3D. Any help/ideas would be wonderful.

Thanks.

[holo13x]

what the problem with directX

[djwilliams]

No problem. I want to be able to detect and list all applications actively running that is hooked into DirectX

[matonga]

This is a really complex one.

You would need to instance pretty all DirectX interfaces, then make a list of every .dll loaded and their's memory address ranges (maybe through WMI), then check every method pointer against these address ranges. You'll also need to disassemble every first 10 bytes (more or less) of code pointed by each method, and resolve any CALL / JMP FAR calls.

I dunno if there is a program to do this already. I know madCodeHook can hook into COM interfaces (such as DirectX) but this is an uncommon practice (AFAIK).

[djwilliams]

sounds too complicated. but i have to do it.

[ChristianS]

to hook directX : http://www.codeproject.com/KB/system/Hooki...irectX_COM.aspx

but you, you want to know which window use directX !?

[djwilliams]

Yea I want to know all windows using it.

[matonga]

You meant processes which are using DirectX? Ouch, haha, forget my last post.

[keane]

You would have to inject some code into the target process,

Then use GetModuleHandle to look for these DLLs: http://www.toymaker.info/Games/html/d3dx_dlls.html and some of the default dlls.

Edited June 2, 2009 by keane