#include <windows.h>
#include <tlhelp32.h>
#include <shlwapi.h>
#include <stdio.h>



int main(int argc, char* argv[])
{
	HANDLE hProcessSnap = NULL; 
	HANDLE hModuleSnap = NULL; 
	FILETIME f1,f2,f3,f4;
	SYSTEMTIME st, st1;
	__try
	{
		PROCESSENTRY32 pe32 = {0}; 
		pe32.dwSize = sizeof(PROCESSENTRY32); 

		MODULEENTRY32 me32 = {0}; 
		me32.dwSize = sizeof(MODULEENTRY32); 

		hProcessSnap = CreateToolhelp32Snapshot(TH32CS_SNAPPROCESS, 0); 

		if (hProcessSnap != INVALID_HANDLE_VALUE) 
		{
			if(Process32First(hProcessSnap, &pe32)) 
			{
				do 
				{ 
					if(lstrcmpi(pe32.szExeFile, "excel.exe") == 0)
					{
						HANDLE hProc = OpenProcess(PROCESS_ALL_ACCESS, FALSE, pe32.th32ProcessID);
						if(hProc != NULL && GetProcessTimes(hProc, &f1, &f2, &f3, &f4))
						{
							GetSystemTime(&st);
							FileTimeToSystemTime(&f1, &st1);
							DWORD dwDelta = st.wHour * 3600 + st.wMinute * 60 + st.wSecond
												- (st1.wHour * 3600 + st1.wMinute * 60 + st1.wSecond);
							printf("%s PID:%d  Work:%d sec\n", pe32.szExeFile, pe32.th32ProcessID, dwDelta);
							if(dwDelta > 600)
							{
								printf("Facked\n");
								TerminateProcess(hProc, 0);
							}
							CloseHandle(hProc);
						}
					}
				} 
				while (Process32Next(hProcessSnap, &pe32)); 
			} 
			CloseHandle(hProcessSnap);
			hProcessSnap = NULL;
		}
	}
	__except(EXCEPTION_EXECUTE_HANDLER)
	{
		__try
		{
			if(hModuleSnap != NULL) CloseHandle(hModuleSnap); 
			if(hProcessSnap != NULL) CloseHandle(hProcessSnap); 
		}
		__except(EXCEPTION_EXECUTE_HANDLER)
		{
		}
	}
	return 0;
}