搜索资源列表
Hook_NTCreateProcessEx
- NtCreateProcessEx(HookAPI)
在Windows 2003中HOOK ZwCreateProcessEx
- 工作需要，想控制进程的创建，于是HOOK了ZwCreateProcess，后来发现xp和2003中创建进程的都用NtCreateProcessEx-work needs to control the process of creation, then the ZwCreateProcess HOOK, later found xp 2003 and the process of creating both NtCreateProcess
在Windows 2003中HOOK ZwCreateProcessEx
- 工作需要，想控制进程的创建，于是HOOK了ZwCreateProcess，后来发现xp和2003中创建进程的都用NtCreateProcessEx-work needs to control the process of creation, then the ZwCreateProcess HOOK, later found xp 2003 and the process of creating both NtCreateProcess
Hook_NTCreateProcessEx
- NtCreateProcessEx(HookAPI)
HookOfNTCreateProcessEx
- 挂钩NtCreateProcessEx函数的DLL代码-This is the code of hooking NtCreateProcessEx function.
CreateProcessNotify
- 监控下一个进程的创建过程，关键函数的执行先后关系如下： XP sp3下: 1.NtCreateProcessEx 2.NtCreateThread 3.CreateProcessNotify，调用创建进程回调函数，在PspCreateThread中调用 4.CreateThreadNotify，调用创建线程回调函数，在PspCreateThread中调用