ListGUI

注册表钩子，可防止非法修改电脑注册表，请站长审核开通帐号．(Hook registry, computer registry to prevent illegal modifications, please head audited accounts opened.)

枚举当前进程信息 c#进程基本信息 也可读取其他功能 稍加修改即可(Enumerated the current process information process of c# basic information )

AMF消息格式说明，包含各种格式的消息。(AMF message format that contains a variety of formatted messages.)

Dialogic CTC 说明CTC编程C_API(Dialogic CTC CTC Programming note C_API)

内核查看器并有恢复功能，如果你喜欢的话可以告诉我(kernel viewer)

取键盘指示灯状态源码，例程程序调用API函数实现取键盘指示灯状态。(Take the keyboard LED status source , routine program calls API functions take keyboard LED status .)

HOOK SSDT Hook系统服务描述表.查看SSDT.是个好东西哈哈(HOOK SSDT that s may be is you need)

Vb 开发方便使用的键盘、鼠标钩子 hook(Vb development, easy to use keyboard, mouse hook, hook)

用DDDK编写驱动,修改SSDT表HOOK NTDebugActiveProcess函数 钩子函数中可以判断PID号,决定是否放行,放行则在钩子函数中调用原来的NTDebugActiveProcess函数.否则直接返回False.HOOK成功后所有调用DebugActiveProcess的程序将会失效.当然可以按照你的需要HOOK更多的系统服务函数.同一服务函数的服务号在每个操作系统版本中是不同的.下面附件中编译完成的驱动请在WinXP SP2的环境下测试.否则可能会导致直接重启(Used to prepare DDDK drive, modify SSDT Table HOOK NTDebugActiveProcess function hook function can determine the PID number, decide whether to release, release in the hook function to call the original function NTDebugActiveProcess. False.HOOK Otherwise, after the success of a direct return all calls DebugActiveProcess procedures will be failure. You can, of course, in accordance with the needs of more system services HOOK function. the same service function of the service in each of the operating system versions are different. following the completion of the annex to compile drivers in WinXP SP2 test environment. or else may lead to the resumption of direct)

使用SSDTHOOK实现防止进程结束的功能，供大家参考(Use SSDTHOOK realize the function of preventing the end of the process, for your reference)