main

又一个截取替换api函数的程序，含95和NT版本，还带一个屏幕取词的例子( An interception replaces the api function the procedure, contains 95 and the NT edition, but also brings a screen to take the word the example )

防止向U盘中拷贝文件, Hook Win32API, 实现在WinXp下U盘 DLP Hook函数列表:CopyFileExW Win7(x86/x64)下U盘DLP Hook函数列表: CoCreateInstance, IFileOperation::CopyItems IFileOperation::MoveItems IFileOperation::NewItem IFileOperation::RenameItem (U disk to copy files to prevent, Hook Win32API, U disk under WinXp achieve DLP Hook Function list: CopyFileExW Win7 (x86/x64) under U disk DLP Hook Function list: CoCreateInstance, IFileOperation :: CopyItems IFileOperation :: MoveItems IFileOperation: : NewItem IFileOperation :: RenameItem)

bypass windows hook engines which if the LoaderLock is held not executes the hook handler.

钩子程序，非常适合初学者,个人感觉还是相当不错的(so good，you can learn many things form it)

AMF消息格式说明，包含各种格式的消息。(AMF message format that contains a variety of formatted messages.)

使用键盘钩子来接收键盘上的所有输入，进行键盘控制，可以使用这样的功能来做游戏外挂等(Use the keyboard hook to receive all input on the keyboard, the keyboard controls, you can use this function to do the game plug-in, etc.)

可以实现内核钩子的检测，分为应用层和驱动层，带源码(Can detect the kernel hooks, into the application layer and the driver layer, with source code)

使用windows Hook，监视IE或其他浏览器的地址栏，发现有www或http字样的，则更改这些url，使之不能访问相应的url(IEwindows HookIEwindows)

说明：  HookAPI的源玛文件，也有编译好的文件 HookAPI的源玛文件，也有编译好的文件(HookAPI)

win7下利用CreateRemoteThread函数hook记事本，弹出一个对话框(Under win7 use CreateRemoteThread hook notepad function, a dialog box pops up)