= dwCurrentProcessId) { return ((PFNTERMINATEPROCESS)(PROC)g_OpenProcess)(dwDesiredAccess BOOL DWORD dwProcessId) { typedef HANDLE (WINAPI *PFNTERMINATEPROCESS)(DWORD BOOL bInheritHandle
#include <windows.h> #include "APIHook.h" extern CAPIHook g_OpenProcess; // 自定义OpenProcess函数 #pragma data_seg("YCIShared") HHOOK g_hHook = NULL; DWORD dwCurrentProcessId=0; #pragma data_seg() HANDLE WINAPI Hook_OpenProcess(DWORD dwDesiredAccess (PROC)Hook_OpenProcess);
答案补充
上面就是用C#写得啊
"OpenProcess" dwProcessId); } return 0; } // 挂钩OpenProcess函数 CAPIHook g_OpenProcess("kernel32.dll" bInheritHandle DWORD); if(dwProcessId
C#hookapi
最新推荐文章于 2021-10-09 17:09:00 发布