#include <iostream>
#include <windows.h>
#include <tchar.h>
#include <iomanip>
int count;
using namespace std;

void WatchDog()
{
    DWORD cbBytes;
    char file_name[MAX_PATH]; //捕获的文件名
    char file_rename[MAX_PATH]; //重命名
    char notify[1024];
    cout << "File Watcher ver 0.1 By YFStudio" << endl << endl;
    cout << "Please Input The Path:";
    char* path;
    cin >> path;
    TCHAR *dir = _T(path);

    HANDLE dirHandle = CreateFile(dir,
        GENERIC_READ | GENERIC_WRITE | FILE_LIST_DIRECTORY,
        FILE_SHARE_READ | FILE_SHARE_WRITE,
        NULL,
        OPEN_EXISTING,
        FILE_FLAG_BACKUP_SEMANTICS,
        NULL);

    if (dirHandle == INVALID_HANDLE_VALUE) //无法获取路径的句柄(无效的句柄)
    {
        cout << "Start Error!Error Code" + GetLastError() << endl;//我也是第一次知道有这种写法...而且这个居然能过编译
    }

    memset(notify, 0, strlen(notify));
    FILE_NOTIFY_INFORMATION *pnotify = (FILE_NOTIFY_INFORMATION*)notify;

    cout << "Start Monitor..." << endl;

    while (true)
    {
        if (ReadDirectoryChangesW(dirHandle, &notify, 1024, true,
            FILE_NOTIFY_CHANGE_FILE_NAME | FILE_NOTIFY_CHANGE_DIR_NAME | FILE_NOTIFY_CHANGE_SIZE,
            &cbBytes, NULL, NULL))
        {
            //转换文件名为多字节字符串
            if (pnotify->FileName)
            {
                memset(file_name, 0, strlen(file_name));
                WideCharToMultiByte(CP_ACP, 0, pnotify->FileName, pnotify->FileNameLength / 2, file_name, 99, NULL, NULL);
            }

            //获取重命名的文件名并转换
            if (pnotify->NextEntryOffset != 0 && (pnotify->FileNameLength > 0 && pnotify->FileNameLength < MAX_PATH))
            {
                PFILE_NOTIFY_INFORMATION p = (PFILE_NOTIFY_INFORMATION)((char*)pnotify + pnotify->NextEntryOffset);
                memset(file_rename, 0, sizeof(file_rename));
                WideCharToMultiByte(CP_ACP, 0, p->FileName, p->FileNameLength / 2, file_rename, 99, NULL, NULL);
            }

            //判断操作
            switch (pnotify->Action)
            {
                case FILE_ACTION_ADDED://文件创建
                    cout << setw(5) << "File Add:" << setw(5) << file_name << endl;
                    break;

                case FILE_ACTION_MODIFIED://文件修改,一些主动防御程序可以在这里对文件安全性进行判断
                    cout << "File Modified:" << setw(5) << file_name << endl;
                    break;

                case FILE_ACTION_REMOVED://文件删除
                    count++;
                    cout << setw(5) << "File Removed:" << setw(5) << file_name << endl;
                    break;

                case FILE_ACTION_RENAMED_OLD_NAME://重命名
                    cout << "File Renamed:" << setw(5) << file_name << "->" << file_rename << endl;
                    break;

                default:
                    cout << "Unknown Opt" << endl;
            }
        }
    }

    CloseHandle(dirHandle);
}

int main()
{
    WatchDog();
    return 0;
}