MCPcopy Create free account
hub / github.com/NtQuery/Scylla / getProcessByName

Method getProcessByName

Scylla/ProcessAccessHelp.cpp:623–651  ·  view source on GitHub ↗

Source from the content-addressed store, hash-verified

621}
622
623DWORD ProcessAccessHelp::getProcessByName(const WCHAR * processName)
624{
625 DWORD dwPID = 0;
626 HANDLE hProcessSnap = CreateToolhelp32Snapshot(TH32CS_SNAPPROCESS, 0);
627 PROCESSENTRY32W pe32;
628 pe32.dwSize = sizeof(PROCESSENTRY32W);
629
630 if( !Process32FirstW( hProcessSnap, &pe32 ) )
631 {
632#ifdef DEBUG_COMMENTS
633 Scylla::debugLog.log(L"getProcessByName :: Error getting first Process");
634#endif
635 CloseHandle( hProcessSnap );
636 return 0;
637 }
638
639 do
640 {
641 if(!_wcsicmp(pe32.szExeFile, processName))
642 {
643 dwPID = pe32.th32ProcessID;
644 break;
645 }
646 } while(Process32NextW(hProcessSnap, &pe32));
647
648 CloseHandle(hProcessSnap);
649
650 return dwPID;
651}
652
653bool ProcessAccessHelp::getProcessModules(HANDLE hProcess, std::vector<ModuleInfo> &moduleList)
654{

Callers

nothing calls this directly

Calls 1

logMethod · 0.80

Tested by

no test coverage detected