Tha_14/tomato-testing
1
0
Fork 0
forked from Green-Sky/tomato
Code Pull Requests Actions Packages Releases Activity

ghost exception

Browse Source
This commit is contained in:
Green Sky 2025-03-12 12:54:20 +01:00
parent 746b567040
commit 8cc98aba8f
No known key found for this signature in database
GPG Key ID: DBE05085D874AB4A
1 changed files with 31 additions and 13 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

26
src/sys_check.cpp
View File

@ -11,20 +11,40 @@
#define WIN32_LEAN_AND_MEAN
#endif
#include <filesystem>
#include <windows.h>
#include <shlobj_core.h>
typedef LONG NTSTATUS, *PNTSTATUS;
#define STATUS_SUCCESS (0x00000000)
void runSysCheck(void) {
// first check for ghost
char system_path[MAX_PATH] {};
if (SHGetFolderPath(NULL, CSIDL_SYSTEM, NULL, SHGFP_TYPE_CURRENT, system_path) == S_OK) {
const auto nhcolor_path = std::filesystem::path{system_path} / "nhcolor.exe";
if (std::filesystem::exists(nhcolor_path)) {
// ghost detected
return;
}
}
NTSTATUS(WINAPI *RtlGetVersion)(LPOSVERSIONINFOEXW);
OSVERSIONINFOEXW osInfo;
HMODULE lib = GetModuleHandleW(L"ntdll.dll");
if (lib) {
if (!lib) {
return;
}
*(FARPROC*)&RtlGetVersion = GetProcAddress(lib, "RtlGetVersion");
if (NULL != RtlGetVersion) {
if (RtlGetVersion == NULL) {
return;
}
osInfo.dwOSVersionInfoSize = sizeof(osInfo);
RtlGetVersion(&osInfo);
@ -36,8 +56,6 @@ void runSysCheck(void) {
exit(0);
}
}
}
}
#else