零度x's blog

void GetWindowCommandLine(char *buffer,DWORD pid)
{
 CHAR *P=::GetCommandLine();
 char *pEvn;
 char *pAddr;
 char *pFunction;
 pFunction=(char *)::GetCommandLine;
 memcpy(&pAddr,pFunction+1,sizeof(char *));
 DWORD dwRet;
 HANDLE hProcess=::OpenProcess(PROCESS_ALL_ACCESS, false,pid);
 ::ReadProcessMemory(hProcess, pAddr,&pEvn, sizeof(DWORD),&dwRet);
 char Buff[512];
 ::ReadProcessMemory(hProcess, pEvn, Buff, 512, &dwRet);
 strcpy(buffer,Buff);
 CloseHandle(hProcess);
}

阅读全文