Description: This code has CodeProject, only linked to the introduction of the function table into SetWindowHookEx and CreateRemoteThread are two ways, the process of enumeration to distinguish between the different systems are used psai and toolhelp, another founder of Process in order to obtain information, so a driver to register a callback function, in general, has done quite a part in the injection rod, if you want to hang a variety of functions can be combined with the use of detour.
To Search:
File list (Check if you may need any files):
Code
....\Common
....\......\Common.h
....\......\CustomMessages.h
....\......\IniFile.cpp
....\......\IniFile.h
....\......\LockMgr.cpp
....\......\LockMgr.h
....\......\LogFile.h
....\......\ModuleInstance.cpp
....\......\ModuleInstance.h
....\......\SysUtils.h
....\HookSrv
....\.......\ApplicationScope.cpp
....\.......\ApplicationScope.h
....\.......\HookSrv.cpp
....\.......\HookSrv.dsp
....\.......\HookSrv.h
....\.......\HookSrv.rc
....\.......\LimitSingleInstance.cpp
....\.......\LimitSingleInstance.h
....\.......\MainFrm.cpp
....\.......\MainFrm.h
....\.......\res
....\.......\...\HookSrv.rc2
....\.......\...\trayicon.ico
....\.......\Resource.h
....\.......\StdAfx.cpp
....\.......\StdAfx.h
....\.......\TrayIcon.cpp
....\.......\TrayIcon.h
....\HookSystem.dsw
....\HookTool
....\........\ApiHook.cpp
....\........\ApiHook.h
....\........\HookTool.cpp
....\........\HookTool.def
....\........\HookTool.dsp
....\........\Injector.cpp
....\........\Injector.h
....\........\Interlocked.h
....\........\ModuleScope.cpp
....\........\ModuleScope.h
....\........\NtDriverController.cpp
....\........\NtDriverController.h
....\........\NtInjectorThread.cpp
....\........\NtInjectorThread.h
....\........\NtProcessMonitor.cpp
....\........\NtProcessMonitor.h
....\NTProcDrv
....\.........\NTProcDrv.c
....\.........\NTProcDrv.dsp
....\TestApp
....\.......\TestApp.cpp
....\.......\TestApp.dsp