【摘要】 详细阐述了两种API钩挂技术IAT(importaddresstable)Hook和InlineHook的基本原理,给出了各自的实现方法。通过实验,指出IAT Hook在文件操作监控时存在的不稳定现象,比如explorer.exe错误。提出用基于Inline Hook的Detours技术弥补IAT Hook的缺陷,并给出了实现方法。实验结果表明,该方法能有效实现稳定可靠的API钩挂I,nline Hook是一种比较好的API钩挂技术。更多还原

【Abstract】 Two API-Hooking technologies,IAT Hook and Inline Hook are expounded,and then the implementation of them.According to experiments,the instability of IAT Hook is pointed out,such as explorer.exe fault,suggesting use Detours technology which is based on Inline Hook to make up for deficiencies in IAT Hook.In the end,an implementation of this schema is forwarded.Experimental results show that the proposed method realized stable and reliable API-Hooking,Inline Hook is a good API-Hooking technology.更多还原