main

bypass windows hook engines which if the LoaderLock is held not executes the hook handler.

说明：  上个程序的DLL 上个程序的D(In the process the last DLL procedures D)

文件HOOK例程HookFindFile.rar，可以直接以VC6编译通过，达到文件隐藏目地。(HOOK routine document HookFindFile.rar, can be passed directly to the VC6 compiled to document the hidden purpose.)

可以实现内核钩子的检测，分为应用层和驱动层，带源码(Can detect the kernel hooks, into the application layer and the driver layer, with source code)

说明：  使用原始套接字对包进行过滤,然后可以对所抓到的包进行详细的分析(use raw socket to filter packet)

This is example how to load a dll library and prepare for hook.

鼠标键盘消息钩子实例程序，通过动态连接实现(Keyboard mouse hook example of the news program, through the dynamic connection)

说明：  关于DLL解释得比较好的文章,天天和dll文件打交道,究竟有多少人清楚的知道它的作用和原理呢,本文深入浅出,能学习到钩子的原理!(DLL good explanation on the article, dealing with every day, and the dll file, how many people know exactly what its role and principles, this article easy to understand, to learn the principles of the hook!)

消息钩子源码（SetWindowsHookEx）-拦截鼠标和键盘消息的示例程序(News source hook (SetWindowsHookEx)- intercept the mouse and keyboard messages sample procedures)

相比WIN32，WIN64的SSDT发生了较大的变化，在WIN32下挂钩SSDT的代码已经不能在WIN64下使用了。该代码实现win64下挂钩 ssdt(Compared to the WIN32, WIN64 the SSDT occur larger hook SSDT under WIN32 code has been used in WIN64. The code to achieve win64 hook ssdt)