AMF-Format

进程防杀，，HOOk由 taskmsg 发出的消息(The process of anti-kill,, HOOk message issued by the taskmsg)

过GPK驱动保护,经典，简洁，网上转载，值得一学(Over GPK drive protection, classic, simple, online reprint is worth learning)

win32 Hook api 钩子与API截获 (win32 Hook api)

内核查看器并有恢复功能，如果你喜欢的话可以告诉我(kernel viewer)

本站推出截获和替换Win32 API的开发包HookAPI源码1.62版本(Site launch intercepted and replacement of Win32 API development kit HookAPI source version 1.62)

简易的API HOOK源码 摘自中国铁道出版社《Windows黑客技术解密与攻防--C语言篇》(The simple API HOOK Open Source From China Railway Press Windows hacking techniques decryption and offensive and defensive- C language papers)

先从键盘输入一个文本文件的文件名(约定：字符数≤127字节，可含路径)和一个字符串(约定：字符数≤20字节，其中不含空格、TAB等，后面称之为Str)，再在屏幕上显示该文件的内容。要求显示完内容后，在屏幕上输出文件的行数(行之间以’ ’为分隔、每行的长度不定但均≤200个字节)、字符串Str在文件中第1次出现的行号和最后一次出现的行号(查找时不区分大小写、不跨行查找，若未找到，则行号显示为-1)。 (Start with the keyboard input of a text file name (convention: the number of characters to ≤ 127 bytes, and can contain the path) and a string (convention: the number of characters ≤ 20 bytes, which contain spaces, TAB, followed by call Str), the contents of the file is displayed on the screen. Requests display content on the screen the number of rows of the output file (the line between ' n' separated, each line has a variable length but ≤ 200 bytes) string Str file a (find the line number and the last line number is not case-sensitive, cross-bank does not find, If you do not find the line number is displayed as-1).)

命名管道的封装MFC类,含客户端和服务器端(A named pipe to encapsulate the MFC class, including client and server)

有一种按键，看起来是一幅完整的图片，当鼠标移到按键区域时，图片的一部分凸现，形成一个按键，当鼠标移走时又恢复原来状态。(There is a button looks like a complete picture when the mouse is moved to the key areas, the picture is part of the highlights, the formation of a button when the mouse is moved Shiyou restore the original state.)

全局HOOK一个经典例子,再加一些本人的小修改,希望对跟我一样初学者有帮助.(HOOK A classic example of the overall situation, together with some small modifications, I hope, like me have to help beginners.)