.版本 2



HOOK_Process32Next.停止Hook ()

返回值 ＝ api_Process32Next (hSnapshot, lppe)

原进程名 ＝ 指针到文本 (lppe ＋ 36) 实际应用中 换用效率高的代码

输出调试文本 (原进程名)

新进程名 ＝ “yinkirby”

写到内存 (新进程名, lppe ＋ 36, ) 实际应用中 换用效率高的代码

HOOK_Process32Next.开始Hook ()

返回 (返回值)

-. Version 2 HOOK_Process32Next. Stop Hook () return value = api_Process32Next (hSnapshot, lppe) process name = pointer to the original text (lppe+ 36) ' for the practical application of the code with high efficiency output debug text (the original process name) the new process name = " yinkirby"　write memory (the new process name, lppe+ 36,) ' for the practical application of the code with high efficiency HOOK_Process32Next. Start Hook () return (return value)