Question

我正在尝试创建一个程序，在用户定义的目录中找到下一个.exe文件并为其写一个标志（对于计算机安全类）。

它目前正在写0字节，我不知道为什么。

到目前为止，这是我的代码：

#define _CRT_SECURE_NO_WARNINGS
#include <iostream>
#include <Windows.h>
#include <fstream>

using namespace std;

typedef wchar_t wchar;

struct thePlague{
    long int origBytes;
    wchar_t flag[6];
};

void main() {
WIN32_FIND_DATA findFileData; //Windows structure that receives info about a found file or directory
HANDLE hFind = INVALID_HANDLE_VALUE; //Handle that holds whether or not a file was successfully found with FindNextFile
LARGE_INTEGER fileSize;
wchar szDir[MAX_PATH];
DWORD dwError = 0;

wchar directory[MAX_PATH];
wcout<<L"Please enter a directory: ";
wcin>>directory;

// Check that the input path plus 7 is not longer than MAX_PATH.
// 7 characters are for the "\*.exe" plus NULL appended below.
if (wcslen(directory) > (MAX_PATH - 7)) {
    wcout<<L"\nDirectory is too long\n";
    return;
}

wcout<<L"Target directory is: "<<directory<<endl;

// Prepare string for use with FindFile functions.  First, copy the
// string to a buffer, then append '\*' to the directory name.

wcscpy(szDir, directory);
wcscat(szDir, L"\\*.exe");

//Find the first file in the directory

hFind = FindFirstFile(szDir, &findFileData);

if (hFind == INVALID_HANDLE_VALUE) {
    wcout<<L"FindFirstFile Failed"<<GetLastError()<<endl;
    return;
}

do {
    fileSize.LowPart = findFileData.nFileSizeLow;
    fileSize.HighPart = findFileData.nFileSizeHigh;
    wcout<<findFileData.cFileName<<L" "<<fileSize.QuadPart<<L" bytes\n";

    DWORD dwBytesWritten = 0; //# of bytes written by WriteFile
    wchar_t *buffer = (wchar *)malloc(sizeof(thePlague)); //A buffer the size of our struct (infection flag)
    wofstream writeToBuffer(buffer, ios::binary); //Open the buffer for writing
    thePlague newVictim; //New infection flag

    writeToBuffer.write((const wchar_t*)&newVictim, sizeof(thePlague));
    writeToBuffer.close();

    DWORD dwErrorFlag;

    dwErrorFlag = WriteFile(hFind, //The handle holding the file we are writing to
              buffer, //The buffer holding what we want to write to the file, in this case a struct
              sizeof(thePlague), //How many bytes to write to the file
              &dwBytesWritten, //Where to store the # of bytes successfully written
              NULL //Where to write to incase of overlap
              );

    if (dwErrorFlag == false)
        wcout<<L"Error was: "<<GetLastError()<<endl;

    wcout<<L"# of bytes written: "<<dwBytesWritten<<endl;

} while(FindNextFile(hFind, &findFileData) != 0);


FindClose(hFind);
return;
}

当我跑步时，我得到：

Please enter a directory: C:\Infect
Target directory is: C:\Infect
hello.exe 65536 bytes
Error was: 6
# of bytes written: 0
Press any key to continue . . .

我知道这是一个ERROR_INVALID_HANDLE，但我该如何解决这个问题？

Answer 1

您需要在写入文件之前打开该文件。你的HANDLE hFind只是迭代目录/文件的句柄，而不是文件的打开句柄。

使用CreateFile（）打开文件

Answer 2

FindFirstFile返回搜索句柄，但WriteFile需要打开文件句柄。在使用CreateFile写入文件之前，请先使用WriteFile打开文件。

为什么我用WriteFile写0字节？

2 个答案: