forum.EE2.eu

Code: Select all

std::wstring GetProcessPathByPIDWs(DWORD PID)
{
	ErrorCode14J_FailureStep = 5;
	wstring ProcessPathToReturn = L"";
	HANDLE Handle = OpenProcess(
		PROCESS_QUERY_INFORMATION | PROCESS_VM_READ,
		FALSE,
		PID /* This is the PID, you can find one from windows task manager */
	);
	if (Handle)
	{
		ErrorCode14J_FailureStep = 6;
		wchar_t Buffer[MAX_PATH];

		//Fucking Winddows XP
		HANDLE  hReturnHandle = NULL;
		HMODULE hNtDllModule = NULL;

		typedef DWORD(WINAPI* MonaGetModuleFileNameExW)(
			HANDLE  hProcess,
			HMODULE hModule,
			LPWSTR  lpFilename,
			DWORD   nSize
			);
		MonaGetModuleFileNameExW funcGetModuleFileNameExW = NULL;
		bool LoadedK32GetModuleFileNameExW = false;
		if((hNtDllModule = GetModuleHandleW(L"kernel32.dll"))) {
			ErrorCode14J_FailureStep = 7;
			if (funcGetModuleFileNameExW = (MonaGetModuleFileNameExW)GetProcAddress(hNtDllModule, "K32GetModuleFileNameExW")) {
				LoadedK32GetModuleFileNameExW = true;
				ErrorCode14J_FailureStep = 8;
			}
		}
		if (!LoadedK32GetModuleFileNameExW) {
			ErrorCode14J_FailureStep = 9;
			if ((hNtDllModule = GetModuleHandleW(L"Psapi.dll"))) {
				ErrorCode14J_FailureStep = 10;
				if (funcGetModuleFileNameExW = (MonaGetModuleFileNameExW)GetProcAddress(hNtDllModule, "GetModuleFileNameExW")) {
					LoadedK32GetModuleFileNameExW = true;
					ErrorCode14J_FailureStep = 11;
				}
			}
		}

		if (LoadedK32GetModuleFileNameExW) {
			ErrorCode14J_FailureStep = 12;
			if (funcGetModuleFileNameExW(Handle, 0, Buffer, MAX_PATH))
			//if (GetModuleFileNameExW(Handle, 0, Buffer, MAX_PATH))
			{
				ErrorCode14J_FailureStep = 13;
				// At this point, buffer contains the full path to the executable
				ProcessPathToReturn = Buffer;

			}
			else
			{
				ErrorCode14J_FailureStep = 14;
				// You better call GetLastError() here
			}
		}
		CloseHandle(Handle);
	}
	return ProcessPathToReturn;
}