Question

when doing this in c#

// get the current process
Process currentProcess  = System.Diagnostics.Process.GetCurrentProcess();

I can do

currentProcess.MainModule

Is there any similar function in c++?

Answer 1

Looking with ILSpy at the decompiled source of GetProcess() it says:

public static Process GetCurrentProcess()
{
    return new Process(".", false, NativeMethods.GetCurrentProcessId(), null);
}

With NativeMethods.GetCurrentProcessId() being declared as

[DllImport("kernel32.dll", CharSet = CharSet.Auto)]
public static extern int GetCurrentProcessId();

Which referes to the GetCurrentProcessId function.

The MainModule is defined as

public ProcessModule MainModule
{
    get
    {
        if (this.OperatingSystem.Platform == PlatformID.Win32NT)
        {
            this.EnsureState((Process.State)3);
            ModuleInfo firstModuleInfo = 
                NtProcessManager.GetFirstModuleInfo(this.processId);
            return new ProcessModule(firstModuleInfo);
        }
        ProcessModuleCollection processModuleCollection = this.Modules;
        this.EnsureState(Process.State.HaveProcessInfo);
        foreach (ProcessModule processModule in processModuleCollection)
        {
            if (processModule.moduleInfo.Id == this.processInfo.mainModuleId)
            {
                return processModule;
            }
        }
        return null;
    }
}

which in turn seems to get down to the EnumProcessModules native function.

So by both using the GetCurrentProcessId and the EnumProcessModules function you should be able to get a similar result to

currentProcess.MainModule