[Windows]_[初级]_[使用命令行工具tasklist]

最新推荐文章于 2024-06-09 08:45:00 发布

原创最新推荐文章于 2024-06-09 08:45:00 发布 · 2.7k 阅读

0 ·

CC 4.0 BY-SA版权

文章标签：

#tasklist #显示进程 #模块加载 #dll #依赖

开发工具专栏收录该内容

45 篇文章

订阅专栏

本文介绍如何使用Windows内置命令tasklist/M来查看当前运行进程的DLL依赖情况，这对于开发人员检查和调试应用程序非常有用。文中还提供了如何针对特定进程如Foxmail和包含QQ组件的进程进行DLL依赖分析的具体实例。

场景:

1.开发时需要分析运行文件的dll依赖,判断依赖是否正确.

2.windows自带的工具命令没有像Linux那样用的频繁，会用工具命令的话对提高工作效率也是有帮助的。

3.也可以用vs自带的工具dumpbin /DEPENDENTS [file]

显示所有正在运行的进程的dll依赖，好像它不能指定显示某个exe的的依赖:

tasklist /M

Foxmail.exe                   4880 ntdll.dll, kernel32.dll, KERNELBASE.dll,
                                   user32.dll, GDI32.dll, LPK.dll, USP10.dll,
                                   msvcrt.dll, advapi32.dll, sechost.dll,
                                   RPCRT4.dll, oleaut32.dll, ole32.dll,
                                   msimg32.dll, version.dll, mpr.dll,
                                   comctl32.dll, SHLWAPI.dll, shell32.dll,
                                   wsock32.dll, WS2_32.dll, NSI.dll,
                                   imm32.dll, MSCTF.dll, winspool.drv,
                                   comdlg32.dll, iphlpapi.dll, WINNSI.DLL,
                                   secur32.dll, SSPICLI.DLL, winmm.dll,
                                   gdiplus.dll, oleacc.dll, Winhttp.dll,
                                   webio.dll, Ntdsapi.dll, Sensapi.dll,
                                   apphelp.dll, AcLayers.DLL, USERENV.dll,
                                   profapi.dll, olepro32.dll, CRYPTBASE.dll,
                                   uxtheme.dll, TSVulFW.DAT, PSAPI.DLL,
                                   Wtsapi32.dll, libcef.dll, urlmon.dll,
                                   api-ms-win-downlevel-ole32-l1-1-0.dll,
                                   api-ms-win-downlevel-shlwapi-l1-1-0.dll,
                                   api-ms-win-downlevel-advapi32-l1-1-0.dll,
                                   api-ms-win-downlevel-user32-l1-1-0.dll,
                                   api-ms-win-downlevel-version-l1-1-0.dll,
                                   api-ms-win-downlevel-normaliz-l1-1-0.dll,
                                   normaliz.DLL, iertutil.dll, WININET.dll,
                                   dhcpcsvc.DLL, SETUPAPI.dll, CFGMGR32.dll,
                                   DEVOBJ.dll, CRYPT32.dll, MSASN1.dll,
                                   FoxBugReport.dll, icudt.dll, ffmpegsumo.dll
et.exe                        1128 ntdll.dll, kernel32.dll, KERNELBASE.dll,
                                   user32.dll, GDI32.dll, LPK.dll, USP10.dll,
                                   msvcrt.dll, advapi32.dll, sechost.dll,
                                   RPCRT4.dll, oleaut32.dll, ole32.dll,
                                   version.dll, msimg32.dll, kso10.dll,

显示加载qq模块的进程：

tasklist /M  qq*

映像名称                       PID 模块
========================= ======== ============================================
explorer.exe                  2712 QQPINYIN.IME
RTX.exe                       3316 QQNW.dll, QQPINYIN.IME
QQProtect.exe                 3416 QQProtectEngine.dll, QQProtect.dll
QQ.exe                        3440 QQVip.dll, QQPet.dll, QQRing.dll,
                                   QQShow.dll, QQGame.dll
firefox.exe                   6140 QQPINYIN.IME