One of these magics was, on nearly every platform, to provide its own declarations for every library function and system call it planned to use, rather than including the standard headers.
其中最奇妙的事情之一是，在几乎每个平台上都为计划要处理的每个库函数和系统调用都提供自己的声明，而不是包括标准的头文件。
In terms of the way it is called, there is no difference between a system call and a library function.
就调用方式而言，系统调用与库函数之间没有区别。
An example of a library function that does have an associated system call is the fopen function declared in stdio.h.
有相关系统调用的库函数的一个示例是stdio . h中声明的fopen函数。
An example of a library function that does not have an associated system call is the strlen function declared in string.h.
没有相关系统调用的库函数的一个示例是string . h中声明的strlen函数。
System call probes, or syscall probes, are probes used to probe functions in the libc library as well as the kenel.
系统调用探测（即syscall 探测）用来探测libc库和内核中的函数。
Library call signatures are more application oriented than system call signatures. Library call signatures can be used to detect attacks that cause perturbation in the application code.
语言库调用特征比系统调用特征更能直接地反映应用级的代码。
Enumerate all ApiHook source, routine program combined with special features easy language support library, call the Api function to enumerate system processes the ApiHook.
枚举系统所有apihook源码，例程程序结合易语言特殊功能支持库，调用API函数实现枚举系统进程中的ApiHook。
Enumerate all ApiHook source, routine program combined with special features easy language support library, call the Api function to enumerate system processes the ApiHook.
枚举系统所有apihook源码，例程程序结合易语言特殊功能支持库，调用API函数实现枚举系统进程中的ApiHook。
应用推荐