2011年11月3日

采用个hook技术对writefile函数进行拦截

摘要: DLL部分:View Code #include <windows.h>#include <ImageHlp.h>#include <TlHelp32.h>#pragma comment(lib,"ImageHlp")#pragma data_seg("Shared")HHOOK hhk = NULL;#pragma data_seg()#pragma comment(linker, "/Section:Shared,rws")HMODULE hmodThisDll;#define MyName & 阅读全文

posted @ 2011-11-03 01:47 zhxfl 阅读(1184) 评论(0) 推荐(0) 编辑

通过文件句柄获取文件的路径

摘要: View Code #include "StdAfx.h"#include <stdio.h>#include <windows.h>typedef struct _IO_STATUS_BLOCK{ LONG Status; LONG Information;} IO_STATUS_BLOCK, *PIO_STATUS_BLOCK;typedef struct _FILE_NAME_INFORMATION{ ULONG FileNameLength; WCHAR FileName[MAX_PATH];} FILE_NAME_INFORMATION;F 阅读全文

posted @ 2011-11-03 01:24 zhxfl 阅读(1282) 评论(0) 推荐(0) 编辑

导航