| Back to logs list
141529 2010 年 12 月 15 日 21:24 Reading (loading. ..) Comments (0) Category: Debugging
in use CreateProcess to create the process, the need to pass a pointer to the structure of
STARTUPINFO,
but often we do not set one by one,
new new balance shoes, the value of its structure,
even without the other will ignore the value to 0,
new balance running shoes,
Night excerpt - Qzone log,
and so did ollydbg,
Happy Kitchen Raiders - Qzone log,
we can use GetStartupInfo check the startup information,
if a lot is shell32's to run the program in the ShellExecute, ShellExecute will not clear the value)
STARTUPINFO another point ollydbg will set in dwFlags STARTF_FORCEOFFFEEDBACK, the explorer will not
////////////////////////
/ / ex
# include
# include
# pragma comment (linker, > STARTUPINFO si;
GetStartupInfo (& si);
if (
(si.dwX! = 0) | |
(si.dwY,
new balance 574! = 0) | |
(si.dwXCountChars,
new balance mens! = 0) | |
(si.dwYCountChars! = 0) | |
(si.dwFillAttribute,
new balance sneakers! = 0) | |
; (si.dwXSize! = 0) | |
(si.dwYSize! = 0) | |
( si.dwFlags & STARTF_FORCEOFFFEEDBACK)
)
{
MessageBox (NULL, 0);
}
else
{
MessageBox (NULL, ,
Be careful with what you wish for,
new balance shoes, 0);
}
return 0;
}
tags you can use the check run the program windows debug
Hybrid Mode
