枚举进程及其调用动态链接看（进程快照）

最新推荐文章于 2019-10-04 13:57:16 发布

原创最新推荐文章于 2019-10-04 13:57:16 发布 · 788 阅读

0 ·

CC 4.0 BY-SA版权

文章标签：

#structure #thread #access #object #class #each

WINDOWS 开发专栏收录该内容

88 篇文章

订阅专栏

本文介绍了一个使用CreateToolhelp32Snapshot获取系统中所有进程快照的示例程序，并展示了如何遍历这些进程并获取每个进程的详细信息，包括进程名、进程ID、线程数等。

摘要生成于 C知道，由 DeepSeek-R1 满血版支持，前往体验 >

BOOL GetProcessList( );
BOOL ListProcessModules( DWORD dwPID );
BOOL ListProcessThreads( DWORD dwOwnerPID );
void printError( TCHAR* msg );

void printError( TCHAR* msg );

void   main(   )
{
GetProcessList(   );
}
BOOL GetProcessList( )
{
HANDLE hProcessSnap;
HANDLE hProcess;
PROCESSENTRY32 pe32;
DWORD dwPriorityClass;

// Take a snapshot of all processes in the system.
hProcessSnap = CreateToolhelp32Snapshot( TH32CS_SNAPPROCESS, 0 );
if( hProcessSnap == INVALID_HANDLE_VALUE )
{
printError( "CreateToolhelp32Snapshot (of processes)" );
return( FALSE );
}

// Set the size of the structure before using it.
pe32.dwSize = sizeof( PROCESSENTRY32 );

// Retrieve information about the first process,
// and exit if unsuccessful
if( !Process32First( hProcessSnap, &pe32 ) )
{
    printError( "Process32First" ); // Show cause of failure
    CloseHandle( hProcessSnap );     // Must clean up the snapshot object!
    return( FALSE );
}

// Now walk the snapshot of processes, and
// display information about each process in turn
do
{
    printf( "/n/n=====================================================" );
    printf( "/nPROCESS NAME: %s", pe32.szExeFile );
    printf( "/n-----------------------------------------------------" );

    // Retrieve the priority class.
    dwPriorityClass = 0;
    hProcess = OpenProcess( PROCESS_ALL_ACCESS, FALSE, pe32.th32ProcessID );
    if( hProcess == NULL )
      printError( "OpenProcess" );
    else
    {
      dwPriorityClass = GetPriorityClass( hProcess );
      if( !dwPriorityClass )
        printError( "GetPriorityClass" );
      CloseHandle( hProcess );
    }

    printf( "/n process ID        = 0x%08X", pe32.th32ProcessID );
    printf( "/n thread count      = %d",   pe32.cntThreads );
    printf( "/n parent process ID = 0x%08X", pe32.th32ParentProcessID );
    printf( "/n Priority Base     = %d", pe32.pcPriClassBase );
    if( dwPriorityClass )
      printf( "/n Priority Class    = %d", dwPriorityClass );

    // List the modules and threads associated with this process
    ListProcessModules( pe32.th32ProcessID );
    ListProcessThreads( pe32.th32ProcessID );

} while( Process32Next( hProcessSnap, &pe32 ) );

CloseHandle( hProcessSnap );
return( TRUE );
}