lpEnumFunc
[in] Pointer to an application-defined callback function.
lParam
[in] Specifies an application-defined value to be passed to the callback function.
Return Value
If the function succeeds, the return value is nonzero.
If the function fails, the return value is zero. To get extended error information, call GetLastError.
If EnumWindowsProc returns zero, the return value is also zero. In this case, the callback function should call SetLastError to obtain a meaningful error code to be returned to the caller of EnumWindows.
hwnd
[in] Handle to a top-level window.
lParam
[in] Specifies the application-defined value given in EnumWindows or EnumDesktopWindows.
Return Value
To continue enumeration, the callback function must return TRUE; to stop enumeration, it must return FALSE.
这段代码的功能是:枚举系统中所有的窗口,如果发现某个窗口的类名为OLLY、OWL_ 、FileMOnC中的一个,则向该窗口发送WM_CLOSE消息。
过这段代码的方法:在0046865E处F2下断,Shift + F9运行。F2取消断点,在00468671处新建EIP(右键---> new origin here)。这样OD就不会被关闭了。
(使用修改版的OD或者使用插件隐藏OD,OD不会被关闭)