Location:
Search - ToolHelp A
Search list
Description: 利用ToolHelpAPI枚举进程信息 附带说明 详见压缩包内文档-Use ToolHelpAPI enumeration process detailed information included in the Notes document compression bag
Platform: |
Size: 76800 |
Author: enze |
Hits:
Description: 前两天有个朋友想让我帮做个ApiHook的东西，公司的网较慢，只能搜国内网站，结果搜了n个没有完整原代码，极度郁闷，现转一个codeproject的原代码，以后也方便自己下载使用。
说明一下，这个代码在CodeProject有下，代码我大致翻了一下，只挂引入表的函数，注入有SetWindowHookEx和CreateRemoteThread两种方式，进程枚举也区分了不同系统下使用的psai和toolhelp，另外为了获得Process的创建消息，做了一个驱动来注册回调函数，总的来说，在注入部分做得相当棒，如果想挂各种函
数，可以结合detour使用。
-A couple of days ago a friend wanted me to help be a ApiHook things, the company' s Net slow, can only be found internally website, the results of the n-found no complete source code, an extremely depressing, it is a codeproject to the original code, after Convenience also download their own use. Explain that this code has CodeProject, the code I am generally turned a little, only linked to the introduction of the function table into SetWindowHookEx and CreateRemoteThread have two ways, the process of enumeration to distinguish between the different systems are used psai and toolhelp, the other in order to Process to create access to the message, make a drive to register a callback function, in general, has done quite a part in the injection rod, if want to hang a variety of functions, can be combined to use detour.
Platform: |
Size: 68608 |
Author: szg |
Hits:
Description: 代码我大致翻了一下，只挂引入表的函数，注入有SetWindowHookEx和CreateRemoteThread两种方式，进程枚举也区分了不同系统下使用的psai和toolhelp，另外为了获得Process的创建消息，做了一个驱动来注册回调函数，总的来说，在注入部分做得相当棒，如果想挂各种函
数，可以结合detour使用。
-Code more or less turned me a little, only linked to the introduction of the function table into SetWindowHookEx and CreateRemoteThread have two ways, the process of enumeration to distinguish between the different systems are used psai and toolhelp, the other in order to obtain the creation of Process message, make a driver to register a callback function, in general, has done quite a part in the injection rod, if want to hang a variety of functions, can be combined to use detour.
Platform: |
Size: 7168 |
Author: winj |
Hits:
Description: 个ApiHook的东西
这个代码在CodeProject有下，只挂引入表的函数，注入有SetWindowHookEx和CreateRemoteThread两种方式，进程枚举也区分了不同系统下使用的psai和toolhelp，另外为了获得Process的创建消息，做了一个驱动来注册回调函数，总的来说，在注入部分做得相当棒，如果想挂各种函
数，可以结合detour使用。
-This code has CodeProject, only linked to the introduction of the function table into SetWindowHookEx and CreateRemoteThread are two ways, the process of enumeration to distinguish between the different systems are used psai and toolhelp, another founder of Process in order to obtain information, so a driver to register a callback function, in general, has done quite a part in the injection rod, if you want to hang a variety of functions can be combined with the use of detour.
Platform: |
Size: 67584 |
Author: chenxq |
Hits:
Description: VC++写的APIHook实例源代码，大致翻了一下，只挂引入表的函数，注入有SetWindowHookEx和CreateRemoteThread两种方式，进程枚举也区分了不同系统下使用的psai和toolhelp，另外为了获得Process的创建消息，做了一个驱动来注册回调函数，总的来说，在注入部分做得相当棒，如果想挂各种函数，可以结合detour使用。-VC++ to write the source code examples APIHook generally turned a bit, only linked to the introduction of the function table, there SetWindowHookEx and CreateRemoteThread into two ways, the process of enumeration to distinguish between the different systems are used psai and toolhelp, the other in order to obtain Process the creation of news, so a drive to register a callback function, in general, has done quite a part in the injection rod, if you want to hang a variety of functions can be combined with the use of detour.
Platform: |
Size: 71680 |
Author: Massachusetts |
Hits:
Description: 这个代码在CodeProject有下，代码我大致翻了一下，只挂引入表的函数，注入有SetWindowHookEx和CreateRemoteThread两种方式，进程枚举也区分了不同系统下使用的psai和toolhelp，另外为了获得Process的创建消息，做了一个驱动来注册回调函数，总的来说，在注入部分做得相当棒，如果想挂各种函
数，可以结合detour使用。-Under this code in CodeProject with the code I generally turned a bit, only the introduction of the table hung a function of injection there SetWindowHookEx and CreateRemoteThread in two ways, the process of enumeration is also a distinction between different systems using the psai and toolhelp, another Process in order to obtain the create a message, made a drive to register a callback function, in general, at some done quite into the stick, if you want to hang a variety of letter
Number, can combine to use detour.
Platform: |
Size: 68608 |
Author: 望里 |
Hits: