rootkit检测应用程序的是否被hook，里面包含了源码。包含应用层和驱动层代码。-rootkit detection application procedures whether the hook, which contains the source code. Includes application layer and layer-driven code.

This code sample illustrates a Winsock 2 layered service provider (LSP). An LSP is a method of inserting a layer between the Winsock 2 API and applications. This is achieved by creating a DLL which implements the