国外的进程保护源码 hook api

---------------------------------------------------------------------------- StickyApp32 v1.0 Copyright 1997, 1998 Yariv Kaplan WWW.INTERNALS.COM ---------------------------------------------------------------------------- StickyApp32 is a small visual basic application which demonstrates a machanism for fooling the Windows NT task manager. It does this by establishing a hook on the OpenProcess API and modifying the return value of this function. When the user attempts to terminate StickyApp32, task manager pops up with an error message and cancels the operation. ---------------------------------------------------------------------------- LEGAL STUFF ---------------------------------------------------------------------------- The following terms apply to all files associated with the software unless explicitly disclaimed in individual files. The author hereby grants permission to use, copy, modify, distribute, and license this software and its documentation for any purpose, provided that existing copyright notices are retained in all copies and that this notice is included verbatim in any distributions. No written agreement, license, or royalty fee is required for any of the authorized uses. Modifications to this software may be copyrighted by their authors and need not follow the licensing terms described here, provided that the new terms are clearly indicated on the first page of each file where they apply. IN NO EVENT SHALL THE AUTHOR OR DISTRIBUTORS BE LIABLE TO ANY PARTY FOR DIRECT, INDIRECT, SPECIAL, INCIDENTAL, OR CONSEQUENTIAL DAMAGES ARISING OUT OF THE USE OF THIS SOFTWARE, ITS DOCUMENTATION, OR ANY DERIVATIVES THEREOF, EVEN IF THE AUTHOR HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. THE AUTHOR AND DISTRIBUTORS SPECIFICALLY DISCLAIM ANY WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, AND NON-INFRINGEMENT. THIS SOFTWARE IS PROVIDED ON AN "AS IS" BASIS, AND THE AUTHOR AND DISTRIBUTORS HAVE NO OBLIGATION TO PROVIDE MAINTENANCE, SUPPORT, UPDATES, ENHANCEMENTS, OR MODIFICATIONS. I can be reached at: yariv@internals.com Yariv Kaplan