Imgui又称为Dear ImGui,它是与平台无关的C++轻量级跨平台图形界面库,没有任何第三方依赖,可以将Imgui的源码直接加到项目中使用,也可以编译成dll, Imgui使用DX或者OpenGL进行界面渲染,Imgui主要用于游戏行业。
这里我们需要用到两个工具Detours-master(微软的hook库)和imgui-master,主要讲D3D9HOOK。
我们先来创建一个DLL项目。步骤如下:
1.选择新建项目
2.选择Windows桌面->动态链接库(DLL)->D3D9HOOK,点击确定
3.删除framework.h、pch.h以及pch.cpp文件。添加一个dllmain.h头文件
4.dllmain.cpp中要包含头文件添加#include
5. 配置
5.1 选择属性
5.2 修改运行库以及Spectre缓解,选择应用
5.3 配置include路径,点击“宏”,搜索DX,根据地址找到文件位置,将 $(DXSDK_DIR)include填入,应用
5.4 搜索DX,将$(DXSDK_DIR)Lib填入,搜索$(platformTarget),将$(DXSDK_DIR)lib\$(platformTarget)填入,应用
(图片注释:配置好会自动匹配x86/x64不需要再改)
5.5 新增d3d9.lib,d3dx9.lib这两个依赖项,应用
6. 配置好环境后,编译HOOK库(编译x86和x64两个版本)
X86:找到Visual Studio2017,打开“x86 Native Tools Prompt for VS 2017”,然后cd到路径里nmake进行编译
X64:找到Visual Studio2017,打开“适用于VS 2017的 x64 本机工具命令提示”,然后cd到路径里nmake进行编译
7.打开项目文件夹
8.新建一个目录Detours,将lib.x86、lib.x64和include复制过来(将lib.去掉方便后续识别)
9.新建筛选器,命名Detours
10.在Detours中添加现有项,选定两个头文件detours.h和detver.h
11.配置lib库
11.1选择属性
11.2 编辑包含目录,宏-包含目录-$(ProjectDir)Detours\include,应用
11.3编辑附加库目录,宏-附加库目录-$(ProjectDir)Detours\Lib\$(platformTarget),应用
11.4 编辑附加依赖项,添加detours.lib,应用
11.5 不使用预编译头
12.配置imgui
12.1在D3D9HOOK目录下,新建imgui文件夹,将imgui-master中backends里imgui_impl_dx9.cpp、imgui_impl_dx9.h和imgui_impl_win32.cpp、imgui_impl_win32.h;及主目录下所有.cpp和.h都复制到imgui文件夹中
12.2新建筛选器,命名imgui
12.3在imgui中添加现有项,选定目录下所有文件
12.4.dllmain.h中包含导进来的所有头文件
13.主线程imgui窗口的实现
typedef HRESULT (WINAPI * FuncReset)(IDirect3DDevice9 *pIDirect3DDevice9,D3DPRESENT_PARAMETERS *pPresentationParameters);
typedef HRESULT (WINAPI * FuncEndScene)(IDirect3DDevice9 *pIDirect3DDevice9);
typedef LRESULT(WINAPI * FuncWndProc)(const HWND, UINT, WPARAM, LPARAM);
HWND g_hWnd = NULL;
IDirect3D9 * g_IDirect3D9;
D3DPRESENT_PARAMETERS g_d3dpp;
IDirect3DDevice9* g_pIDirect3DDevice9;
FuncReset OldReset;
FuncEndScene OldEndScene;
FuncWndProc OldWndProc;
DWORD * dwDeviceVirtualTable = NULL;
extern LRESULT ImGui_ImplWin32_WndProcHandler(HWND hWnd, UINT message, WPARAM wParam, LPARAM lParam);
LRESULT WINAPI GrkWndProc(HWND hWnd, UINT message, WPARAM wParam, LPARAM lParam)
{
if (ImGui_ImplWin32_WndProcHandler(hWnd, message, wParam, lParam))
{
return TRUE;
}
return CallWindowProc(OldWndProc, hWnd, message, wParam, lParam);
}
VOID StartHook(PVOID * OldFunctionAddr, PVOID NewFunctionAddr)
{
DetourTransactionBegin();
DetourUpdateThread(GetCurrentThread());
DetourAttach(OldFunctionAddr, NewFunctionAddr);
DetourTransactionCommit();
}
VOID UnHook(PVOID * OldFunctionAddr, PVOID NewFunctionAddr)
{
DetourTransactionBegin();
DetourUpdateThread(GetCurrentThread());
DetourDetach(OldFunctionAddr, NewFunctionAddr);
DetourTransactionCommit();
}
HRESULT WINAPI GrkReset(IDirect3DDevice9 *pIDirect3DDevice9, D3DPRESENT_PARAMETERS *d3dpp)
{
UnHook((PVOID*)(&OldReset), GrkReset);
ImGui_ImplDX9_InvalidateDeviceObjects();
HRESULT bRet = pIDirect3DDevice9->Reset(d3dpp);
ImGui_ImplDX9_CreateDeviceObjects();
StartHook((PVOID*)(&OldReset), GrkReset);
return bRet;
}
HRESULT WINAPI GrkEndScene(IDirect3DDevice9 *pIDirect3DDevice9)
{
UnHook((PVOID*)(&OldEndScene), GrkEndScene);
static bool bFlag = TRUE;
if (bFlag)
{
bFlag = FALSE;
IMGUI_CHECKVERSION();
ImGui::CreateContext();
ImGuiIO & io = ImGui::GetIO();
io.ConfigFlags = ImGuiConfigFlags_NoMouseCursorChange;
io.WantSaveIniSettings = false;
io.IniFilename = NULL;
ImGui::StyleColorsClassic();
ImFontConfig imfConfig;
imfConfig.FontDataOwnedByAtlas = false;
ImGui_ImplWin32_Init(g_hWnd);
ImGui_ImplDX9_Init(pIDirect3DDevice9);
OldWndProc = (WNDPROC)SetWindowLongPtr(g_hWnd, GWL_WNDPROC, (LONG_PTR)GrkWndProc);
}
HRESULT hRet = pIDirect3DDevice9->EndScene();
ImGui_ImplDX9_NewFrame();
ImGui_ImplWin32_NewFrame();
ImGui::NewFrame();
ImGui::SetNextWindowPos(ImVec2(0, 0), ImGuiCond_FirstUseEver);
ImGui::SetNextWindowSize(ImVec2(300, 300));
ImGui::Begin("GrkTools");
ImGui::End();
ImGui::EndFrame();
ImGui::Render();
ImGui_ImplDX9_RenderDrawData(ImGui::GetDrawData());
StartHook((PVOID*)(&OldEndScene), GrkEndScene);
return hRet;
}
DWORD WindowThreadCallBack(LPVOID lpBuffer)
{
g_hWnd = FindWindowA("Direct3DWindowClass", NULL);
g_IDirect3D9 = Direct3DCreate9(D3D_SDK_VERSION);
memset(&g_d3dpp, 0, sizeof(g_d3dpp));
g_d3dpp.Windowed = TRUE;
g_d3dpp.SwapEffect = D3DSWAPEFFECT_DISCARD;
g_d3dpp.BackBufferFormat = D3DFMT_UNKNOWN;
g_d3dpp.EnableAutoDepthStencil = TRUE;
g_d3dpp.AutoDepthStencilFormat = D3DFMT_D16;
HRESULT hRet = g_IDirect3D9->CreateDevice(D3DADAPTER_DEFAULT, D3DDEVTYPE_HAL, g_hWnd, D3DCREATE_SOFTWARE_VERTEXPROCESSING, &g_d3dpp, &g_pIDirect3DDevice9);
dwDeviceVirtualTable = (DWORD *)*(DWORD *)g_pIDirect3DDevice9;
OldReset = (FuncReset)dwDeviceVirtualTable[16];
OldEndScene = (FuncEndScene)dwDeviceVirtualTable[42];
StartHook((PVOID*)(&OldReset), GrkReset);
StartHook((PVOID*)(&OldEndScene), GrkEndScene);
return 0;
}
BOOL APIENTRY DllMain( HMODULE hModule,
DWORD ul_reason_for_call,
LPVOID lpReserved
)
{
switch (ul_reason_for_call)
{
case DLL_PROCESS_ATTACH:
CreateThread(NULL, NULL, (LPTHREAD_START_ROUTINE)WindowThreadCallBack, NULL, NULL, NULL);
break;
case DLL_THREAD_ATTACH:
break;
case DLL_THREAD_DETACH:
break;
case DLL_PROCESS_DETACH:
break;
}
return TRUE;
}
14.测试
14.1打开文件夹,把动态链接库D3D9HOOK.dll粘贴到桌面上
14.2打开pick,启动代码注入器,将动态链接库D3D9HOOK.dll进行注入