A good tutorial on the idea behind API hooking. I found it very clear wihtout bogging into any detail as to how this can be applied to a rootkit.
http://jbremer.org/x86-api-hooking-demystified/
http://jbremer.org/x86-api-hooking-demystified/