admin管理员组

文章数量:1516870

#include <Windows.h>
#include <Psapi.h>
#include <iostream>
#pragma comment(lib, "psapi.lib")
using namespace std;
BOOL CALLBACK EnumWindowsProc(HWND hwnd, LPARAM lParam)
{
	if (GetParent(hwnd) == NULL && IsWindowVisible(hwnd))
	{
		char WindowText[100] = {0};
		::GetWindowTextA(hwnd, WindowText, 100);
		if (strlen(WindowText) != 0)
		{
			std::cout << WindowText <<std::endl;
			char szClassName[100] = {0};
			::GetClassNameA(hwnd, szClassName, 100);
			cout<< szClassName <<endl;
			DWORD dwPID = 0;
			GetWindowThreadProcessId(hwnd, &dwPID);
			cout<< "PID: "<<dwPID <<endl;
			HANDLE hProcess = OpenProcess(PROCESS_ALL_ACCESS, FALSE, dwPID);
			cout<< "PHandle: "<<hProcess<< endl;
			HMODULE hMod = NULL;
			DWORD dwcbNeeded = 0;
			if (EnumProcessModules(hProcess, &hMod, sizeof(hMod), &dwcbNeeded))
			{
				char szPath[MAX_PATH] = {0};
				GetModuleFileNam

本文标签: 内核解密编程