Description: Can achieve PE HOOK. This method for the interception, analysis of other core-driven function call is used more. The principle is based on PE format to export table to replace the corresponding function of the implementation.
- [apihook_Code] - A DLL file by modifying the IAT table to
- [yC1.3src] - I think this the first time every one ca
- [HOOK] - Hook import table and export table, impo
- [HOOK] - HOOK API, no contact for a man is concer
- [Registry_protection] - State in the core to intercept registry
- [hook] - Drive-level code to hide the process, in
- [WindowsSystem] - windows system source code. Mainly relat
File list (Check if you may need any files):
PEHOOK.doc
Download