Search - PID - CodeBus

Search - PID - List

[Hook api] driver DL : 0: 用DDDK编写驱动,修改SSDT表HOOK NTDebugActiveProcess函数钩子函数中可以判断PID号,决定是否放行,放行则在钩子函数中调用原来的NTDebugActiveProcess函数.否则直接返回False.HOOK成功后所有调用DebugActiveProcess的程序将会失效.当然可以按照你的需要HOOK更多的系统服务函数.同一服务函数的服务号在每个操作系统版本中是不同的.下面附件中编译完成的驱动请在WinXP SP2的环境下测试.否则可能会导致直接重启
Date : 2008-10-13 Size : 3.62kb User : 张京
[Hook api] driver DL : 0: 用DDDK编写驱动,修改SSDT表HOOK NTDebugActiveProcess函数钩子函数中可以判断PID号,决定是否放行,放行则在钩子函数中调用原来的NTDebugActiveProcess函数.否则直接返回False.HOOK成功后所有调用DebugActiveProcess的程序将会失效.当然可以按照你的需要HOOK更多的系统服务函数.同一服务函数的服务号在每个操作系统版本中是不同的.下面附件中编译完成的驱动请在WinXP SP2的环境下测试.否则可能会导致直接重启-Used to prepare DDDK drive, modify SSDT Table HOOK NTDebugActiveProcess function hook function can determine the PID number, decide whether to release, release in the hook function to call the original function NTDebugActiveProcess. False.HOOK Otherwise, after the success of a direct return all calls DebugActiveProcess procedures will be failure. You can, of course, in accordance with the needs of more system services HOOK function. the same service function of the service in each of the operating system versions are different. following the completion of the annex to compile drivers in WinXP SP2 test environment. or else may lead to the resumption of direct
Date : 2025-12-20 Size : 3kb User : 张京
[Hook api] Inline-Hook_NtOpenProcess DL : 0: 一段INLINE-HOOK的代码，以及一个循环检测是否改写，可在直接调用。【给HookOn传入一个PID即可】。-INLINE-HOOK section of the code, as well as a cycle of test re-evaluated, in direct call. 【HookOn into a PID to be】.
Date : 2025-12-20 Size : 2kb User : MagicCrow
[Hook api] Change+PID DL : 0: Source Code Change PID Proce-Source Code Change PID Process
Date : 2025-12-20 Size : 10kb User : james E.
[Hook api] zhuruqi DL : 0: dll注入的基本方法，列子中通过动态调用dll的方式，将zhuruqi.dll加载到qq.exe的内存中，当然要首先从进程列表中取得qq.exe的pid号。写的不好，但是原理上能通，而且注释了，以后会慢慢改进。-dll into the basic method, the dynamic call dll Liezi by the way, will be loaded into qq.exe zhuruqi.dll memory, of course, must first obtain qq.exe from the process list the pid number. Badly written, but the principle can pass, and annotation, and the future will slowly improve.
Date : 2025-12-20 Size : 4.97mb User : 工序龙
[Hook api] xunzai.com_pid DL : 0: 能劫持淘宝网天商城和各大导航页面后台更改pid-Can hijack Taobao Mall of days and the major navigation page background change pid
Date : 2025-12-20 Size : 261kb User : 阿明
[Hook api] PID-=InjectToolz DL : 0: 此源码是PID注入的源码。帮助用户注入目标进程。-This source is injected PID source. Help users inject the target process.
Date : 2025-12-20 Size : 62kb User : 薄慕颜
[Hook api] CaMFC-plug-the-preparation DL : 0: MFC外挂程序编写，包括获取游戏PID、获取窗口句柄、获取游戏数据、修改游戏数据达到外挂制作目的-MFC plug-in programming, including access to the game PID, to obtain the window handle, to get the game data, modify the game data to plug production purpose
Date : 2025-12-20 Size : 1.6mb User : 王鹏