阅读:1126回复:1
各位大侠门,在2000下获得进程名怎么不行的呀(附代码)?
INT GetProcessFileName(char* buf)
{ DWORD dwAddress = (DWORD)PsGetCurrentProcess(); if(dwAddress == 0 || dwAddress == 0xFFFFFFFF) return 1; dwAddress += 0x1B0; if((dwAddress = *(DWORD*)dwAddress) == 0) return 1; dwAddress += 0x10; if((dwAddress = *(DWORD*)dwAddress) == 0) return 1; dwAddress += 0x3C; if((dwAddress = *(DWORD*)dwAddress) == 0) return 1; KdPrint(("Current Process Full Path Name: %wsn", (char *)dwAddress)); strcpy(buf,(char *)dwAddress); return 0; } 我这样在2000下调用是总是过一会就死机的不知道为什 |
|
沙发#
发布于:2004-11-09 17:04
参考一下filemon的source
|
|