最近一段时间由于使用MinHook的API挂钩不稳定，经常因为挂钩地址错误而导致宿主进程崩溃。听同事介绍了一款智能强大的挂钩引擎EasyHook。它比微软的detours好的一点是它的x64注入支持是免费开源的。不想微软的detours，想搞x64还得购买。
　　EasyHook提供了两种模式的注入管理。一种是托管代码的注入，另一种是非托管代码的注入。我是学习C++的，所以直接学习了例子中的非托管项目UnmanagedHook。里面给了一个简单的挂钩MessageBeep API的示例(Due to the instability of API hooks using MinHook in the recent period, the host process crashes often because of the hook address error. Listen to a colleague introduced a powerful and powerful hook engine EasyHook. It's better than Microsoft's detours that its x64 injection support is free open source. Don't want Microsoft's detours, want to make x64 have to buy.
Well, the gossip does not say much, first download the EasyHook development library, of course, interested students can download the source for learning. Download address: http://easyhook.codeplex.com/releases/view/24401. This is the 2.6 version I gave.
EasyHook provides two patterns of injection management. One is the injection of managed code, and the other is the injection of unmanaged code. I was learning C++, so I learned directly from the unmanaged project UnmanagedHook in the example. It gives an example of a simple hook MessageBeep API)