从job文件里获取可执行路径

元始天尊

1. typedef struct _JOB_FILE_HEADER
   
2. {
   
3. WORD ProductInfo;//System Product Info
   
4. WORD FileVersion;//File Version
   
5. GUID Guid;//UUID
   
6. WORD PathOffset;//Application Name Offset
   
7. WORD TriggerOffset;//Trigger Offset
   
8. WORD ErrorRetryCount;//Error Retry Count
   
9. WORD ErrorRetryInterval;//Error Retry Interval
   
10. WORD IdleDeadline;
    
11. WORD IdleWait;
    
12. DWORD Priority;
    
13. DWORD MaximumRuntime;
    
14. DWORD ExitCode;
    
15. DWORD Status;
    
16. DWORD Flags;
    
17. 
    
18. }JOB_FILE_HEADER,*PJOB_FILE_HEADER;
    
19. 
    
20. bool GetPathFromJobFile(wstring& path)
    
21. {
    
22. HANDLE hTaskFile = CreateFile(_T("c:\\windows\\tasks\\At1.job"), GENERIC_READ, FILE_SHARE_READ |FILE_SHARE_WRITE,
    
23.   NULL, OPEN_EXISTING, FILE_ATTRIBUTE_NORMAL, NULL);
    
24. if(hTaskFile != INVALID_HANDLE_VALUE)
    
25. {
    
26.   DWORD FileSize = GetFileSize(hTaskFile, NULL);
    
27.   BYTE* buf = new BYTE[FileSize];
    
28.   PJOB_FILE_HEADER pjfh = (PJOB_FILE_HEADER)buf;
    
29.   if(buf && (FileSize > sizeof(JOB_FILE_HEADER) + 8))
    
30.   {
    
31.    DWORD nread = 0;
    
32.    ReadFile(hTaskFile, buf, FileSize, &nread, NULL);
    
33.    if(nread && pjfh->PathOffset == 0x46)
    
34.    {
    
35.     path = (wchar_t*)(buf+pjfh->PathOffset);
    
36.    }
    
37.    
    
38.   }
    
39.   if(buf)
    
40.    delete []buf;
    
41.   CloseHandle(hTaskFile);
    
42. }
    
43. return false;
    
44. }

复制代码