自己写的API－Hook。hook的函数是CreateProcessA和CreateProcessW。就是说可以检测进程创建。还有2处不完善。一个是创建程序的路径没能很好的显示。另一个退出时有点系统异常。-himself wrote the API - Hook. The hook function is CreateProcessA and CreateProcessW. Say can detect the creation process. There are two imperfect.

HOOK API，hook的CreateProcess，使用的jump方式，学习之用-HOOK API, hook CreateProcess, use the jump mode, learning to use