2009-10-11, 04:24 AM
I realized sometime today SOM is just using the WinAPI DrawText() routine, which was kinda the only game in town back then other than rolling your own text rasterizer.
That should've been obvious to me given the DrawText import string in the SOM.exe text section. But I wasn't convinced SOM was using GDI over DX. So anyway,
I was pretty stumped on whether it was possible or not to catch SOM's DrawText calls. So the question kinda grabbed hold of me... and after two or three hours I was successful in hooking the DrawText entrypoint thanks to this project (https://easyhook.codeplex.com/)
Don't ask me how their stuff works, but it is very hacker like. I don't think the library uses any approved Microsoft measures, but it works... probably via some back doors MS has left open for itself.
These last three posts are very huge deals... you guys are going to owe me all the possibilities this stuff will open up
PS: This hooking technique can be used for other stuff. I'm not sure what all I could think off. One thing it can do is change text without physically modifying the SOM.exe file. But it can also probably do things like tell SOM to look into different folders for it's files depending on some configuration option. Who knows what all else.
That should've been obvious to me given the DrawText import string in the SOM.exe text section. But I wasn't convinced SOM was using GDI over DX. So anyway,
I was pretty stumped on whether it was possible or not to catch SOM's DrawText calls. So the question kinda grabbed hold of me... and after two or three hours I was successful in hooking the DrawText entrypoint thanks to this project (https://easyhook.codeplex.com/)
Don't ask me how their stuff works, but it is very hacker like. I don't think the library uses any approved Microsoft measures, but it works... probably via some back doors MS has left open for itself.
These last three posts are very huge deals... you guys are going to owe me all the possibilities this stuff will open up
PS: This hooking technique can be used for other stuff. I'm not sure what all I could think off. One thing it can do is change text without physically modifying the SOM.exe file. But it can also probably do things like tell SOM to look into different folders for it's files depending on some configuration option. Who knows what all else.