上面代码的测试程序

完整的API HOOK技术演示完整源代码包！-API HOOK complete integrity of the source code technology demonstration package!

电脑桌面抓图（利用钩子使用F5键自动抓图)-desktop computer (using the hook automatically use the F5 key Previously)

vc全局钩子实现程序监控代码 一个学习hook的东东 很好的学习hook的东东欢迎大家来下载研究

There are numerous codes in the www to explain how to hook API functions inside a remote process. So, why creating another one ? This article is the first (I) part of a tool I m working on. This tools won t be too complex, so there is no need for a huge class hierarchy like in almost all other code, nor a hard coded assembly code. This tool is just a technical preview of what is possible to achieve, with QUICK and DIRTY "put your functions here" blocks.-There are numerous codes in the www to explain how to hook API functions inside a remote process. So, why creating another one This article is the first (I) part of a tool I m working on. This tools won t be too complex, so there is no need for a huge class hierarchy like in almost all other code, nor a hard coded assembly code. This tool is just a technical preview of what is possible to achieve, with QUICK and DIRTY "put your functions here" blocks.

常用的API函数整理-commonly used API functions collate

Detours是微软开发的一个函数库,可用于捕获系统API。 最近在做API hook相关的东西，用了inline hook后感觉不错，但是查找资料发现inline hook并不稳定 inline hook 的原理是在系统访问一个函数的时候先替换原函数入口处的内容跳转到自己设计的hook函数中，然后在自己函数中进行hook工作。可是在并行系统中，很可能有个线程就在这个时候调用了被自己改掉的系统函数，出现我们无法预期的结果。 所以打算学习一下inline hook升级版：detour库hook，其实hook过程原理基本一样，只是微软做了封装和相关的冲突检查，所以这种api hook稳定些。 这个是开发出来的可以编译使用的HOOK Function代码。

利用消息钩子在系统进程插入线程的改进版本-use of information systems in the process of improving the threaded insert version

学习Windows编程的同志一定要下载这个站长以前用钩子写的修改Windows界面的类似ctl3d.dll的程序，使你的Windows有些奇妙的变化，如给缺省按钮加图标等--Program writed by webmaster which uses hook to modify windows interface similar to ctl3d. It may take some changes in your windows, for example adding icons to system button etc

在win2000下屏蔽系统三键的控件，只要将Enable属性设置成True就可以了-shielding system under the three key controls, as long as the property is set to Enable True% on the