maowengrui/anit-cheat
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix is_allow_process function win10 if fail

Browse Source
This commit is contained in:
maowenrui
2026-06-03 10:28:55 +08:00
parent 762cedc015
commit a514b17148
1 changed files with 4 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
Anti-Cheat_Driver/ob_reg_callback.cpp
+4 -2
View File
@@ -1,4 +1,5 @@
#include "ob_reg_callback.h" #include "ob_reg_callback.h"
#include "protect_filter.h"
void* reg_ob_callback_handle; void* reg_ob_callback_handle;
@@ -8,7 +9,8 @@ auto is_allow_process(PUNICODE_STRING image_file_name) -> BOOL
if (!image_file_name->Buffer) if (!image_file_name->Buffer)
return FALSE; return FALSE;
if (wcsstr(image_file_name->Buffer, L"\\System32\\taskmgr.exe")) if (wcsstr(image_file_name->Buffer, L"\\System32\\taskmgr.exe") ||
wcsstr(image_file_name->Buffer, L"\\System32\\Taskmgr.exe"))
return TRUE; return TRUE;
return FALSE; return FALSE;
@@ -32,7 +34,7 @@ auto ob_call_back::register_ob_reg_callback() -> NTSTATUS
if(is_allow_process(image_file_name)) if(is_allow_process(image_file_name))
goto end; goto end;
if (dwPid == ULongToHandle(1836)) if (protect_filter::is_protect_pid(HandleToLong(dwPid)))
{ {
pOperationInformation->Parameters->DuplicateHandleInformation.DesiredAccess = 0; pOperationInformation->Parameters->DuplicateHandleInformation.DesiredAccess = 0;
pOperationInformation->Parameters->DuplicateHandleInformation.OriginalDesiredAccess = 0; pOperationInformation->Parameters->DuplicateHandleInformation.OriginalDesiredAccess = 0;