Function GetVersionFromProcessMemory

UEVersionScanner/UEVersionScanner.cpp:116–145

}

std::string GetVersionFromProcessMemory(HANDLE hProcess) {
    HMODULE hMod;
    DWORD cbNeeded;
    if (EnumProcessModules(hProcess, &hMod, sizeof(hMod), &cbNeeded)) {
        MODULEINFO modInfo = { 0 };
        if (GetModuleInformation(hProcess, hMod, &modInfo, sizeof(modInfo))) {
            std::vector<char> buffer(modInfo.SizeOfImage);
            SIZE_T bytesRead;
            if (ReadProcessMemory(hProcess, modInfo.lpBaseOfDll, buffer.data(), modInfo.SizeOfImage, &bytesRead)) {
                std::vector<std::string> markers = { "Unreal Engine 4.", "Unreal Engine 5.", "FEngineVersion", "EngineVersion" };
                for (const auto& marker : markers) {
                    size_t markerLen = marker.length();
                    for (size_t i = 0; i < buffer.size() - markerLen; i++) {
                        if (memcmp(buffer.data() + i, marker.c_str(), markerLen) == 0) {
                            std::string found(marker);
                            size_t maxExtra = 32;
                            size_t j = i + markerLen;
                            while (j < buffer.size() && (j - (i + markerLen)) < maxExtra && isprint(buffer[j])) {
                                found.push_back(buffer[j]);
                                j++;
                            }
                            return found;
                        }
                    }
                }
            }
        }
    }
    return "";
}

bool IsProcessRunning(const std::string& exeName, DWORD& processID) {
    HANDLE hSnapshot = CreateToolhelp32Snapshot(TH32CS_SNAPPROCESS, 0);