From a1da1f744c7364509ddb6b5d409365ee4b7d4019 Mon Sep 17 00:00:00 2001 From: momo5502 Date: Wed, 18 May 2022 14:21:32 +0200 Subject: [PATCH] Remove steam parent spoofing as only T7 needs this --- src/client/component/arxan.cpp | 20 +------------------- 1 file changed, 1 insertion(+), 19 deletions(-) diff --git a/src/client/component/arxan.cpp b/src/client/component/arxan.cpp index cd8293b1..3f77095f 100644 --- a/src/client/component/arxan.cpp +++ b/src/client/component/arxan.cpp @@ -9,24 +9,6 @@ namespace arxan { namespace { - DWORD get_steam_pid() - { - static DWORD pid = 0; //234567;//GetCurrentProcessId(); - if (pid) return pid; - - HKEY hRegKey; - - if (RegOpenKeyExA(HKEY_CURRENT_USER, "Software\\Valve\\Steam\\ActiveProcess", 0, KEY_QUERY_VALUE, - &hRegKey) != ERROR_SUCCESS) - return pid; - - DWORD dwLength = sizeof(pid); - RegQueryValueExA(hRegKey, "pid", nullptr, nullptr, reinterpret_cast(&pid), &dwLength); - RegCloseKey(hRegKey); - - return pid; - } - utils::hook::detour nt_close_hook; utils::hook::detour nt_query_information_process_hook; @@ -49,7 +31,7 @@ namespace arxan GetWindowThreadProcessId(shell_window, &explorer_pid); } - static_cast(info)->Reserved3 = PVOID(DWORD64(get_steam_pid())); + static_cast(info)->Reserved3 = PVOID(DWORD64(explorer_pid)); } else if (info_class == 30) // ProcessDebugObjectHandle {