The MASM Forum

General => The Campus => Topic started by: irnix on February 25, 2014, 05:57:47 AM

Title: API hooking Questions
Post by: irnix on February 25, 2014, 05:57:47 AM
Ok basically I decided to study win32 programming in assembly because of hooking and the rest. I am made to understand the steps followed when hooking a process / function for instance MessageBoxA or NtdllQuerrySystemInformation etc. We must follow the samee steps

So I came across this simple messagebox hook in masm32 http://blog.csdn.net/purpleendurer/article/details/893857 since I am starting this for the first time, what do you fellows think of some hooking like this? Is this the correct way to hook it? Kindly help.
Title: Re: API hooking Questions
Post by: Vortex on February 25, 2014, 07:15:08 AM
Hi irnix,

You have to read the forum rules. API hooking is a sensitive subject :

http://masm32.com/board/index.php?topic=4.0
Title: Re: API hooking Questions
Post by: K_F on February 25, 2014, 08:41:36 AM
I don't see why his request is a problem as this info/and examples of hooks is 'splattered' all over the MSDN and net ?
Title: Re: API hooking Questions
Post by: Vortex on February 25, 2014, 09:02:01 AM
Quote from: K_F on February 25, 2014, 08:41:36 AM
I don't see why his request is a problem as this info/and examples of hooks is 'splattered' all over the MSDN and net ?

So why is he asking assistance from the forum members? By the way, advertising here some "grey" techniques can trigger the interest of some other people having different intentions.
Title: Re: API hooking Questions
Post by: K_F on February 25, 2014, 09:22:50 AM
Maybe redirecting him/her to msdn would be easier..
Besides openly asking for 'grey' things is not a sign of an evil do'er, but more of an amateur or person asking for something they don't know about ?
Title: Re: API hooking Questions
Post by: Vortex on February 26, 2014, 06:11:33 AM
Quote from: K_F on February 25, 2014, 09:22:50 AM
Maybe redirecting him/her to msdn would be easier..
Besides openly asking for 'grey' things is not a sign of an evil do'er, but more of an amateur or person asking for something they don't know about ?

There is a thin line between curiosity for grey and evildoing. This is why we have here a set of forum rules. And how many amateurs did you see mentioning about NtQuerySystemInformation? ::)
Title: Re: API hooking Questions
Post by: hutch-- on February 26, 2014, 10:13:03 AM
 :biggrin: