antiprocdump.cpp

此为本书的配套光盘.本书结合实例

/*--------------------------------------------------------------
   AntiProcDump.cpp -- 窗口方法检测应用程序
   此处代码检测ProcDump 1.62是否运行
                           (c) www.pediy.com code by段钢, 2003
  --------------------------------------------------------------*/

#include <windows.h>

HINSTANCE hInst;

BOOL CALLBACK EnumWindowsProc(HWND hwnd,LPARAM lParam );
bool isprocdumprunning = false;


int WINAPI WinMain (HINSTANCE hInstance, HINSTANCE hPrevInstance,
                    PSTR szCmdLine, int iCmdShow)
{
	hInst = hInstance;
	EnumWindows((WNDENUMPROC) EnumWindowsProc,(LPARAM) 0);

	if (isprocdumprunning) MessageBox(NULL,"Procdump detected !","OK!",MB_ICONINFORMATION);
	else MessageBox(NULL,"Procdump NOT detected !","OK!",MB_ICONINFORMATION);

	return 0;
}


BOOL CALLBACK EnumWindowsProc(HWND hwnd,LPARAM lParam )
{
	char windowtitle[100];
	char procdumptitle[] = "ProcDump32 (C) 1998, 1999, 2000 G-RoM, Lorian & Stone"; // ProcDump的窗口标题字符
	GetWindowText(hwnd,windowtitle,100);

	if (strcmp(windowtitle,procdumptitle)==0)
	{
		isprocdumprunning=true;
		return false;
	}

	return true;
}