mirror of
https://github.com/vxunderground/VX-API
synced 2026-06-06 16:54:55 +00:00
vxunderground
105 lines
2.6 KiB
C++
105 lines
2.6 KiB
C++
#include "Win32Helper.h"
|
|
|
|
#include <psapi.h>
|
|
|
|
BOOL IsProcessRunningA(_In_ PCHAR ProcessNameWithExtension, _In_ BOOL IsCaseSensitive)
|
|
{
|
|
HANDLE hProcess = NULL;
|
|
|
|
DWORD ProcessIdArray[1024] = { 0 };
|
|
DWORD ProcessIdArraySize = 0;
|
|
DWORD NumberOfBytesReturned = 0;
|
|
|
|
if (!EnumProcesses(ProcessIdArray, sizeof(ProcessIdArray), &NumberOfBytesReturned))
|
|
return FALSE;
|
|
|
|
ProcessIdArraySize = NumberOfBytesReturned / sizeof(DWORD);
|
|
|
|
for (DWORD dwIndex = 0; dwIndex < ProcessIdArraySize; dwIndex++)
|
|
{
|
|
HMODULE Module = NULL;
|
|
CHAR ProcessStringName[MAX_PATH] = { 0 };
|
|
|
|
if (ProcessIdArray[dwIndex] == 0)
|
|
continue;
|
|
|
|
hProcess = OpenProcess(PROCESS_QUERY_INFORMATION | PROCESS_VM_READ, FALSE, ProcessIdArray[dwIndex]);
|
|
if (hProcess == NULL)
|
|
continue;
|
|
|
|
if (!EnumProcessModules(hProcess, &Module, sizeof(Module), &NumberOfBytesReturned))
|
|
continue;
|
|
|
|
if (GetModuleBaseNameA(hProcess, Module, ProcessStringName, sizeof(ProcessStringName) / sizeof(WCHAR)) == 0)
|
|
continue;
|
|
|
|
if (hProcess)
|
|
CloseHandle(hProcess);
|
|
|
|
if (!IsCaseSensitive)
|
|
{
|
|
PCHAR String1 = CaplockStringA(ProcessNameWithExtension);
|
|
PCHAR String2 = CaplockStringA(ProcessStringName);
|
|
|
|
if (StringCompareA(String1, String2) == 0)
|
|
return TRUE;
|
|
}
|
|
else {
|
|
if (StringCompareA(ProcessStringName, ProcessNameWithExtension) == 0)
|
|
return TRUE;
|
|
}
|
|
}
|
|
|
|
return FALSE;
|
|
}
|
|
|
|
BOOL IsProcessRunningW(_In_ PWCHAR ProcessNameWithExtension, _In_ BOOL IsCaseSensitive)
|
|
{
|
|
HANDLE hProcess = NULL;
|
|
|
|
DWORD ProcessIdArray[1024] = { 0 };
|
|
DWORD ProcessIdArraySize = 0;
|
|
DWORD NumberOfBytesReturned = 0;
|
|
|
|
if (!EnumProcesses(ProcessIdArray, sizeof(ProcessIdArray), &NumberOfBytesReturned))
|
|
return FALSE;
|
|
|
|
ProcessIdArraySize = NumberOfBytesReturned / sizeof(DWORD);
|
|
|
|
for (DWORD dwIndex = 0; dwIndex < ProcessIdArraySize; dwIndex++)
|
|
{
|
|
HMODULE Module = NULL;
|
|
WCHAR ProcessStringName[MAX_PATH] = { 0 };
|
|
|
|
if (ProcessIdArray[dwIndex] == 0)
|
|
continue;
|
|
|
|
hProcess = OpenProcess(PROCESS_QUERY_INFORMATION | PROCESS_VM_READ, FALSE, ProcessIdArray[dwIndex]);
|
|
if (hProcess == NULL)
|
|
continue;
|
|
|
|
if (!EnumProcessModules(hProcess, &Module, sizeof(Module), &NumberOfBytesReturned))
|
|
continue;
|
|
|
|
if (GetModuleBaseNameW(hProcess, Module, ProcessStringName, sizeof(ProcessStringName) / sizeof(WCHAR)) == 0)
|
|
continue;
|
|
|
|
if (hProcess)
|
|
CloseHandle(hProcess);
|
|
|
|
if (!IsCaseSensitive)
|
|
{
|
|
PWCHAR String1 = CaplockStringW(ProcessNameWithExtension);
|
|
PWCHAR String2 = CaplockStringW(ProcessStringName);
|
|
|
|
if (StringCompareW(String1, String2) == 0)
|
|
return TRUE;
|
|
}
|
|
else {
|
|
if (StringCompareW(ProcessStringName, ProcessNameWithExtension) == 0)
|
|
return TRUE;
|
|
}
|
|
}
|
|
|
|
return FALSE;
|
|
} |