Get a process name from isallowed function

c++ / delphi package - dll injection and api hooking
Post Reply
SteelX
Posts: 5
Joined: Fri Oct 08, 2004 3:02 pm

Get a process name from isallowed function

Post by SteelX »

I tried to take the process name from "LPCWSTR appNameW" in isallowed function but nothing happened . could i make that?
with "LPWSTR cmdLineW" ,only i take the path and the name. but i just get only the name

:sorry:
madshi
Site Admin
Posts: 10764
Joined: Sun Mar 21, 2004 5:25 pm

Post by madshi »

I'm sorry, but I don't really understand your question. I guess you're talking about modifying one of my demo projects? Which one in detail? And what exactly do you want to do/change?
SteelX
Posts: 5
Joined: Fri Oct 08, 2004 3:02 pm

Post by SteelX »

In your demo project, hook process creation, you get the app path and name, with cmdLineW in isallowed function(this for win xp, 2000).
well, i want get only the app name. i think that may succeed with appNameW or not?

can you show me how to make that?


sorry about my bad english ..because it's not my naturally language

i speak spanish.. 8)

i try to use your demo project ..but not for bad stuff..just for my university project...
thank's for your help
madshi
Site Admin
Posts: 10764
Joined: Sun Mar 21, 2004 5:25 pm

Post by madshi »

No, appNameW is nil/NULL most of the time. Instead you need to parse cmdLineW.
Post Reply