Results 1 to 6 of 6
  1. #1
    topblast's Avatar
    Join Date
    Mar 2010
    Gender
    male
    Location
    Far from around you Programmer: C++ | VB | C# | JAVA
    Posts
    3,607
    Reputation
    149
    Thanks
    5,052
    My Mood
    Cool

    Hook CreateWindowEX / WindowProc

    Well the title kinda say it. I wanna hook CreateWindowEx() to get the info i need for WindowProc. Can someone help me out or just a hook of WindowProc that is all i want.
    I just like programming, that is all.

    Current Stuff:

    • GPU Programmer (Cuda)
    • Client/Server (Cloud Server)
    • Mobile App Development

  2. #2
    Astral Witch's Avatar
    Join Date
    Dec 2010
    Gender
    male
    Posts
    106
    Reputation
    13
    Thanks
    30
    use GetProcAddress to get the address of the function and use any method of hooking to get what you need.

  3. The Following User Says Thank You to Astral Witch For This Useful Post:

    topblast (01-19-2011)

  4. #3
    whit's Avatar
    Join Date
    Jan 2010
    Gender
    male
    Posts
    7,159
    Reputation
    490
    Thanks
    2,253
    Didnt you post this already ?

    Hmm maybe of been someone else..

  5. #4
    why06's Avatar
    Join Date
    Jul 2009
    Gender
    male
    Location
    IBM
    Posts
    4,304
    Reputation
    170
    Thanks
    2,203
    My Mood
    Flirty
    Quote Originally Posted by whit View Post
    Didnt you post this already ?

    Hmm maybe of been someone else..
    Nope it was him. I remember.

    "Every gun that is made, every warship launched, every rocket fired signifies, in the final sense, a theft from those who hunger and are not fed, those who are cold and are not clothed. This world in arms is not spending money alone. It is spending the sweat of its laborers, the genius of its scientists, the hopes of its children. The cost of one modern heavy bomber is this: a modern brick school in more than 30 cities. It is two electric power plants, each serving a town of 60,000 population. It is two fine, fully equipped hospitals. It is some fifty miles of concrete pavement. We pay for a single fighter plane with a half million bushels of wheat. We pay for a single destroyer with new homes that could have housed more than 8,000 people. This is, I repeat, the best way of life to be found on the road the world has been taking. This is not a way of life at all, in any true sense. Under the cloud of threatening war, it is humanity hanging from a cross of iron."
    - Dwight D. Eisenhower

  6. #5
    topblast's Avatar
    Join Date
    Mar 2010
    Gender
    male
    Location
    Far from around you Programmer: C++ | VB | C# | JAVA
    Posts
    3,607
    Reputation
    149
    Thanks
    5,052
    My Mood
    Cool
    Quote Originally Posted by why06 View Post


    Nope it was him. I remember.
    Yea, I could not understand what u said to much. I tried and it FAILED.
    I just like programming, that is all.

    Current Stuff:

    • GPU Programmer (Cuda)
    • Client/Server (Cloud Server)
    • Mobile App Development

  7. #6
    .::SCHiM::.'s Avatar
    Join Date
    Sep 2010
    Gender
    male
    Posts
    733
    Reputation
    180
    Thanks
    880
    My Mood
    Twisted
    Quote Originally Posted by topblast View Post


    Yea, I could not understand what u said to much. I tried and it FAILED.
    You mean an inlinehook right? Because inline is much easier with api's then using IAT

    Just make a signature scan of what you want to hook, and then patch it to your own location:
    Windows functions (api's) all have a preamble in front of them, I don't know what anymore so here I'm making something up :P Look it up in olly
    Pseudo:

    Code:
    {
    char *sig = { 0x8b, 0xAB, 0x30, 0x3d, 0x00 };
    DWORD HookPlace = SignatureScaning($#@, sig, @%@, %#T);
    memcpy( HookPlace, pointer to buffer containing little endian jump to hook funcion, size of pointer);
    Last edited by .::SCHiM::.; 01-20-2011 at 12:04 AM.

    I'm SCHiM

    Morals derive from the instinct to survive. Moral behavior is survival behavior above the individual level.

    Polymorphic engine
    Interprocess callback class
    SIN
    Infinite-precision arithmetic
    Hooking dynamic linkage
    (sloppy)Kernel mode Disassembler!!!

    Semi debugger