Help me How to works hack

#include <windows.h>
#include <stdio.h>
#include <d3d9.h>
#include <d3dx9.h>

#pragma comment(lib, "d3d9.lib")
#pragma comment(lib, "d3dx9.lib")

#define EndSceneEngine 0x00455ECF
DWORD retEndSceneEngine = ( EndSceneEngine + 0x8 );
 
#define DIPEngine 0x004B490D
DWORD retDIPEngine = ( DIPEngine + 0x8 );

#define Red     D3DCOLOR_ARGB( 255, 255, 255, 000 )
#define Green   D3DCOLOR_ARGB( 255, 000, 255, 000 )
#define Blue    D3DCOLOR_ARGB( 255, 000, 000, 255 )
#define Yellow  D3DCOLOR_ARGB( 255, 255, 255, 000 )
#define Black   D3DCOLOR_ARGB( 255, 000, 000, 000 )

typedef struct{
	int index;
	char * title;
	int *hack;
	int hackmaxval;
	int hacktype;
	DWORD HCOLOR;
}ITEM;

int hackcount;
int selector;
int x,y,w,h;
DWORD COLOR;

ITEM HACKITEM[99];
char hackrval[256];

int xFontOffSet = 15;
int hackopt1;
int MenuHeight = 10;
int show = 0;
int hack1, hack2, hack3;

LPDIRECT3DDEVICE9 pDevice;
LPD3DXFONT Font;

VOID StartFont()
{
    if( Font )
    {
        Font->Release();
        Font = NULL;
    }

    if( !Font )
    {
        D3DXCreateFontA( pDevice,
                        14,
                        0,
                        FW_BOLD,
                        1,
                        0,
                        DEFAULT_CHARSET,
                        OUT_DEFAULT_PRECIS,
                        DEFAULT_QUALITY,
                        DEFAULT_PITCH | FF_DONTCARE,
                        "Arial",
                        &Font );
    }
}

VOID WriteText(char pString[], INT x, INT y, DWORD color )
{    
    RECT rect;
    SetRect( &rect, x, y, x, y );
    Font->DrawTextA( NULL, pString, -1, &rect, DT_NOCLIP | DT_LEFT, color );
}

void CreateItem(int index, char * title, int *hack, int hackmaxval,int hacktype)
{
	hackcount++;
	HACKITEM[hackcount].index = index;
	HACKITEM[hackcount].hack = hack;
	HACKITEM[hackcount].hackmaxval = hackmaxval;
	HACKITEM[hackcount].hacktype = hacktype;
	WriteText(title, xFontOffSet, index*15,HACKITEM[hackcount].HCOLOR); //If you want to move the menu opts down do something like this (index*15)+20 and to move it left or right just add/subtract from font offset.
}

void RenderMenu()
{
	if(GetAsyncKeyState(VK_DOWN)&1) 
			selector++;

	if(GetAsyncKeyState(VK_UP)&1)
		if(selector > 1)
			selector--;

	if (GetAsyncKeyState(VK_RIGHT)<0)
	{
		for(int i=0;i < (hackcount+1);i++)
		{
           if(selector == HACKITEM[i].index)
		   {
			   if(*HACKITEM[i].hack < HACKITEM[i].hackmaxval)
					*HACKITEM[i].hack += 1;
		   }
		}
	}

	if (GetAsyncKeyState(VK_LEFT)<0)
	{
		for(int i=0;i < (hackcount+1);i++)
		{
           if(selector == HACKITEM[i].index)
		   {
			   *HACKITEM[i].hack = 0;
			   Sleep(20);
		   }
		}
	}
	
	for(int i=0;i < (hackcount+1);i++)
	{
		if(selector == HACKITEM[i].index)
			HACKITEM[i].HCOLOR = Green;
		else
			HACKITEM[i].HCOLOR = Red;
	}

	for(int i=1; i<(hackcount+1); i++)
	{
		if(HACKITEM[i].hacktype == 0)
		{
			if(*HACKITEM[i].hack == 1)  //to move the opts down do something like this (HACKITEM[i].index*15)+20 
				WriteText("On", xFontOffSet+100, HACKITEM[i].index*15,Yellow);
			else 
				WriteText("Off", xFontOffSet+100, HACKITEM[i].index*15,Red);
		}
	}

	for(int i=1; i<(hackcount+1); i++)
	{
		if(HACKITEM[i].hackmaxval >1 && HACKITEM[i].hacktype == 1)
		{
			sprintf_s(hackrval, "%i", *HACKITEM[i].hack);
			WriteText(hackrval, xFontOffSet+100, HACKITEM[i].index*15,Red);
		}
	}

	if(selector < 1)
		selector = 1;

	if(selector > hackcount)
		selector = 1;

	hackcount = 0;
}

void BuildMenu(char * menuname, int x, int y, int h, int w, DWORD TITLECOL, DWORD BACKCOLOR, DWORD BORDERCOLOR)
{
	if(GetAsyncKeyState(VK_INSERT)&1) show=(!show);
	
	if(!show) 
	{
		WriteText(menuname, 5, 2, TITLECOL);
		return;
	}

	WriteText(menuname, x+10, y+2, TITLECOL);
	
	CreateItem(1,"Hack 1", &hack1, 1, 0);
	CreateItem(2,"Hack 2", &hack2, 1, 0); 
	CreateItem(3,"Hack 3", &hack3, 1, 0);

	RenderMenu();
}

/*void MemoryHackHere()
{
	//load modules & continue with hacks

	if(hack1)
	{

	}

	if(hack2)
	{

	}

	//do not put sleep()
}
*/

__declspec( naked ) HRESULT WINAPI EndSceneMidfunction( )
{
    __asm
    {
            MOV ECX, DWORD PTR DS:[EAX]
            MOV EDX, DWORD PTR DS:[ECX + 0xA8]
            MOV DWORD PTR DS:[pDevice], EAX
            PUSHAD
    }

	//================================================================================== font
        StartFont();

	//================================================================================== menu
	BuildMenu("LoadGamers23 D3D Menu Crossfire 17/9/2012",0,0,180,200,Red,Black,Green);
    
	//================================================================================== hack
	//MemoryHackHere();

    __asm
    {
        POPAD
        JMP retEndSceneEngine
    }
}

__declspec( naked ) HRESULT WINAPI DIPMidfunction( )
{
        __asm
        {
                MOV EDX, DWORD PTR DS:[EAX]
                MOV EDX, DWORD PTR DS:[EDX + 0x148]
                MOV DWORD PTR DS:[pDevice], EAX
                PUSHAD
        }
 
		//Chams
		if( hack3 )
		{
			pDevice->SetRenderState( D3DRS_ZENABLE, D3DZB_FALSE );
                        pDevice->SetRenderState( D3DRS_AMBIENT, Green );
		}
 
        __asm
        {
                POPAD
                JMP retDIPEngine
        }
}

VOID *DetourCreate( BYTE *src, CONST BYTE *dst, CONST INT len )
{
    BYTE *jmp =( BYTE * ) malloc( len + 5 );
    DWORD dwBack;

    VirtualProtect( src, len, PAGE_READWRITE, &dwBack );
    memcpy( jmp, src, len );    
    jmp += len;
    jmp[0] = 0xE9;
    *( DWORD * )( jmp + 1 ) = ( DWORD )( src + len - jmp ) - 5;

    src[0] = 0xE9;
    *( DWORD * )( src + 1 ) = ( DWORD )( dst - src ) - 5;
    for( INT i = 5; i < len; i++ )
        src[i] = 0x90;
    VirtualProtect( src, len, dwBack, &dwBack );

    return( jmp - len );
}

DWORD WINAPI StartRoutine( LPVOID )
{
    while( TRUE )
    {
        if( memcmp( ( VOID * )EndSceneEngine, ( VOID * )( PBYTE )"\x8B\x08", 2 ) == 0
         && memcmp( ( VOID * )DIPEngine     , ( VOID * )( PBYTE )"\x8B\x10", 2 ) == 0 )
        {
            Sleep( 100 );
            DetourCreate( ( PBYTE )EndSceneEngine, ( PBYTE )EndSceneMidfunction, 8 );
	    DetourCreate( ( PBYTE )DIPEngine     , ( PBYTE )DIPMidfunction     , 8 );
        }

        Sleep( 50 );
    }
 
    return 0;
}

BOOL WINAPI DllMain( HMODULE hDll, DWORD dwReason, LPVOID lpReserved )
{ 
    if( dwReason == DLL_PROCESS_ATTACH )
    {
        DisableThreadLibraryCalls( hDll );
        //MessageBox( 0, "LoadGamers23 D3D Menu", "Crossfire", 0 );
        CreateThread( 0, 0, (LPTHREAD_START_ROUTINE)StartRoutine, 0, 0, 0 );
    }
 
    return TRUE;
}