| 39 | } |
| 40 | |
| 41 | bool ProcessHelper::IsReplacingTaskManager() { |
| 42 | CRegKey key; |
| 43 | if (ERROR_SUCCESS != key.Open(HKEY_LOCAL_MACHINE, ifeoKey + L"taskmgr.exe", KEY_READ)) |
| 44 | return false; |
| 45 | WCHAR value[MAX_PATH]; |
| 46 | ULONG count = _countof(value); |
| 47 | if (ERROR_SUCCESS != key.QueryStringValue(L"Debugger", value, &count)) |
| 48 | return false; |
| 49 | return ::_wcsicmp(GetProcessImageName(), value) == 0; |
| 50 | } |
| 51 | |
| 52 | bool ProcessHelper::ReplaceTaskManager(bool revert) { |
| 53 | CRegKey key; |
nothing calls this directly
no test coverage detected