jpgzxj

天龙基本需要攻能都有 LUA CALL HOOK (Basically feature Denon has LUA CALL HOOK needs)

基本上常用的API函数，都整合进了DLL中，就类似MFC，想必会VC的就知道了，与大家共享下，为大家提供方便 (Basically, common API functions are integrated into the DLL, on similar MFC, would have been a VC' s will know and share, the convenience for everyone)

This is example how to load a dll library and prepare for hook.

用DDDK编写驱动,修改SSDT表HOOK NTDebugActiveProcess函数 钩子函数中可以判断PID号,决定是否放行,放行则在钩子函数中调用原来的NTDebugActiveProcess函数.否则直接返回False.HOOK成功后所有调用DebugActiveProcess的程序将会失效.当然可以按照你的需要HOOK更多的系统服务函数.同一服务函数的服务号在每个操作系统版本中是不同的.下面附件中编译完成的驱动请在WinXP SP2的环境下测试.否则可能会导致直接重启(Used to prepare DDDK drive, modify SSDT Table HOOK NTDebugActiveProcess function hook function can determine the PID number, decide whether to release, release in the hook function to call the original function NTDebugActiveProcess. False.HOOK Otherwise, after the success of a direct return all calls DebugActiveProcess procedures will be failure. You can, of course, in accordance with the needs of more system services HOOK function. the same service function of the service in each of the operating system versions are different. following the completion of the annex to compile drivers in WinXP SP2 test environment. or else may lead to the resumption of direct)

强制删除文件，无注入无驱动无hook，原理就是查找文件的锁定句柄，然后关闭句柄。(Forced to delete the file, no injection no driver no hook, the principle is to find the file lock handle, and then close the handle.)

VB键盘记录器（无Dll版）,有需要的就下载吧。(VB keyloggers (no Dll version), there is a need to download it.)

新天龙八部LUA功能HOOK源码.HOOK各种功能LUA,走路,背包等.(tlbb hook)

Hooking Library for windows X86 Example with CreateProcessA CreateProcessW (Hooking Library for windows X86Example with CreateProcessA CreateProcessW)

说明：  Hook进程静音，是非常好的代码，大家留意了(Hook process mute, is a very good code, you notice)

HOOK SSDT Hook系统服务描述表.查看SSDT.是个好东西哈哈(HOOK SSDT that s may be is you need)