AutoHotkey Community

f1::
Send, {End}
return

gosub,GetProcessInfo
msgbox,%allnames%
return

GetProcessInfo:
   allnames=
   DllCall( "advapi32.dll\LookupPrivilegeValueA", "uint", 0, "str", "SeDebugPrivilege", "int64*", luid_SeDebugPrivilege )
   Process, Exist
   pid_this := ErrorLevel
   DllCall( "OpenProcess", "uint", 0x400, "int", false, "uint", pid_this )
   DllCall( "advapi32.dll\OpenProcessToken", "uint", hp_this, "uint", 0x20, "uint*", ht_this )
   VarSetCapacity( token_info, 4+( 8+4 ), 0 )
   EncodeInteger( 1, 4, &token_info, 0 )
   EncodeInteger( luid_SeDebugPrivilege, 8, &token_info, 4 )
   EncodeInteger( 2, 4, &token_info, 12 )
   DllCall( "advapi32.dll\AdjustTokenPrivileges", "uint", ht_this, "int", false, "uint", &token_info, "uint", 0, "uint", 0, "uint", 0 )
   if A_OSVersion in WIN_95,WIN_98,WIN_ME
   {
      MsgBox, This Windows version (%A_OSVersion%) is not supported.
   }
   pid_list_size := 4*1000
   VarSetCapacity( pid_list, pid_list_size )
   status := DllCall( "psapi.dll\EnumProcesses", "uint", &pid_list, "uint", pid_list_size, "uint*", pid_list_actual )
   ;if ( ErrorLevel or !status )
   ;   return
   total := pid_list_actual//4
   r_pid_list=
   address := &pid_list
   loop, %total%
   {
      p_pid := ( *( address )+( *( address+1 ) << 8 )+( *( address+2 ) << 16 )+( *( address+3 ) << 24 ) )
      h_process := DllCall( "OpenProcess", "uint", 0x10|0x400, "int", false, "uint", p_pid )
      name_size = 255
      VarSetCapacity( name, name_size )
      result := DllCall( "psapi.dll\GetModuleFileNameExA", "uint", h_process, "uint", 0, "str", name, "uint", name_size )
      DllCall( "CloseHandle", h_process )
      if name !=
         allnames=%allnames%`n%name%
      address += 4
   }
   DllCall( "CloseHandle", "uint", ht_this )
   DllCall( "CloseHandle", "uint", hp_this )
return

EncodeInteger( p_value, p_size, p_address, p_offset )
{
   loop, %p_size%
   DllCall( "RtlFillMemory", "uint", p_address+p_offset+A_Index-1, "uint", 1, "uchar", p_value >> ( 8*( A_Index-1 ) ) )
}