Static extern int GetWindowText(IntPtr hWnd, StringBuilder lpWindowText, int nMaxCount) Static extern bool EnumDesktopWindows(IntPtr hDesktop, EnumDesktopWindowsDelegate lpfn, IntPtr lParam) Std::wstring targetTitle = L"Kalkulator" ĮnumDesktopWindows(0, &EnumWindowsProc, (LPARAM)targetTitle.c_str()) MessageBox(0, (std::wstring(L"Znaleziono okno o nazwie: ") + title).c_str(), L"Informacja", MB_ICONINFORMATION)
PL: Program sprawdza czy okno określonegoĭesktop windows to check specified window titleīOOL CALLBACK EnumWindowsProc(HWND hwnd, LPARAM lParam) The behavior on detection of a tool window must be programmed as desired. A message is displayed when a desktop window with the specified title is detected. Calling the EnumDesktopWindows function that interacts with the windows of the current desktop (giving it the address of the callback function). Create an EnumWindowsProc callback that compares the retrieved title ( GetWindowText) of the current window with the string searched. This method is by no means new, but I would like to present it on simple examples in three programming languages (C++, C#.NET and 圆4 Assembly) so that novice programmers who need it will have a strong anchor point. One can make the application to close unexpectedly (with or without a warning message) or simply cause it to malfunction to make reverse analysis of its code difficult. If a given tool is detected, the analyzed application may change its execution flow, i.e. debugger, disassembler, sandbox, hex editor, etc.) is running. The idea is to detect whether a window of a specific tool (e.g. This blueprint describes a simple and well-known method against reverse code engineering (RCE).
0 kommentar(er)
