init

Anit-Cheat_DLL/active_check.h

@@ -1,5 +1,37 @@
 #pragma once
 #include "Base.h"
+#define MAX_PROCESS_HANDLE_RESULTS 256
+
+typedef struct _PROCESS_BASIC_INFORMATION_CUSTOM
+{
+	NTSTATUS ExitStatus;
+	PVOID PebBaseAddress;
+	ULONG_PTR AffinityMask;
+	LONG BasePriority;
+	ULONG_PTR UniqueProcessId;
+	ULONG_PTR InheritedFromUniqueProcessId;
+
+} PROCESS_BASIC_INFORMATION_CUSTOM,
+* PPROCESS_BASIC_INFORMATION_CUSTOM;
+
+typedef struct _PROCESS_HANDLE_RESULT
+{
+	DWORD ProcessId;
+	DWORD TargetProcessId;
+	ULONG_PTR HandleValue;
+	ULONG GrantedAccess;
+	char ProcessName[MAX_PATH];
+
+} PROCESS_HANDLE_RESULT;
+
+typedef struct _PROCESS_HANDLE_RESULTS
+{
+	DWORD Count;
+	PROCESS_HANDLE_RESULT Items[MAX_PROCESS_HANDLE_RESULTS];
+
+} PROCESS_HANDLE_RESULTS;
+
+
 
 namespace active_check
 {
@@ -18,4 +50,6 @@ namespace active_check
 	//检测远程软件进程
 	auto check_remote_app_process() -> bool;
 
+	//检测已打开的进程句柄的进程
+	auto ScanProcessHandles(DWORD CurrentProcessId, PROCESS_HANDLE_RESULTS* Results)->BOOL;
 }