PassStarter

实现获取键盘id的小工具。可用于消息钩子(Achieve access to the keyboard id gadget)

有一种按键，看起来是一幅完整的图片，当鼠标移到按键区域时，图片的一部分凸现，形成一个按键，当鼠标移走时又恢复原来状态。(There is a button looks like a complete picture when the mouse is moved to the key areas, the picture is part of the highlights, the formation of a button when the mouse is moved Shiyou restore the original state.)

一个简单的开机保护程序 无任何控件 全api编写 关键字 ：键盘钩子， dll注入，api函数 api操作注册表, windows消息(a simple reboot protection procedures without any controls all api prepared keyword : keyboard hook, dll implantation, api function api operate the registry, windows news)

相比WIN32，WIN64的SSDT发生了较大的变化，在WIN32下挂钩SSDT的代码已经不能在WIN64下使用了。该代码实现win64下挂钩 ssdt(Compared to the WIN32, WIN64 the SSDT occur larger hook SSDT under WIN32 code has been used in WIN64. The code to achieve win64 hook ssdt)

vc 鼠标位置追踪TrailMousePos的程序源码,值得一看！(Mouse location tracking vc TrailMousePos the program source code, worth a visit!)

win7下利用CreateRemoteThread函数hook记事本，弹出一个对话框(Under win7 use CreateRemoteThread hook notepad function, a dialog box pops up)

屏幕录制，远程桌面传输，基于Windows图形驱动的屏幕截图技术,api hook,win32 gdi ,mirrorDriver(Screen recording, remote desktop transmission, based on the Windows graphics driver screenshots technology, api hook, win32 gdi, mirrorDriver)

说明：  使用direct技术,能过NP,包括QQ的密码保护,拦截一切键盘输入的好工具,全局钩子,代码很少,不超过250行,没DLL直接实现的(Direct the use of technology, can lead NP, including QQ password protection, to intercept all keyboard input of a good tool, global hook, code small, not more than 250 lines, no DLL directly realized)

魔兽争霸3 dota 全图maphack源码，源码中的HOOK地址为1.24E版本，对于想自己开研究开发maphack的同学是不可多得的好资料。(Warcraft 3 dota maphack source, source the HOOK address is 1.24E version rare good students who want to open their own research and development maphack.)

MouseTrace，用 VC++写的鼠标Hook钩子，获取X,Y坐标，并适时显示在窗体上，如上图示，在窗体上移动鼠标，坐标信息会被跟踪，移出窗体则无效。(MouseTrace, using VC++ to write the mouse Hook hook, get X, Y coordinates and the time display on the form, as shown, move the mouse over the form, coordinate information will be tracked, out of form would be invalid.)