A forum for reverse engineering, OS internals and malware analysis 

Ask your beginner questions here.
 #10322  by listito
 Tue Dec 13, 2011 12:59 am
Hi,

Sorry if this is a too much noob question, but i've hooked a function in another process successfully with dll injection, no problem 'til now, but what if i want to create a window into the hooked process, pause the execution flow, and wait for the user to put something in a textbox and click a button to continue the execution flow, i dont know how to do it because probably another thread is going to create the window, would setting a hardware breakpoint instead of ring3 hooking a good option to solve this problem?

thanks
 #10328  by Brock
 Tue Dec 13, 2011 8:11 am
Sounds to me like you need to hook window creation APIs(s) and alternatively subclass the button created for the click event or additionally hook SendMessage and/or PostMessage and catch these events as well. No need to pause execution of the program, just understand internal events and how each one takes place at a given time