vb枚举进程

最新推荐文章于 2021-06-17 07:45:46 发布

miaozk2006

最新推荐文章于 2021-06-17 07:45:46 发布

阅读量408

点赞数

本文链接：https://blog.youkuaiyun.com/miaozk2006/article/details/82417099

版权

这段代码展示了如何使用VB来枚举系统中的进程，并获取它们的模块文件名。通过调用API函数EnumProcesses, OpenProcess, GetModuleFileNameExA等，可以遍历并打印出每个进程的详细信息。此外，还提供了多个VB相关教程链接，涵盖资源管理、WindowsMediaPlayer、系统环境变量、加密算法、文件操作、进程控制等方面。" 111493928,10293400,Python与Java跨语言gRPC实战：多线程与微服务,"['gRPC', 'Python开发', 'Java开发', '微服务', '跨语言通信']

摘要生成于 C知道，由 DeepSeek-R1 满血版支持，前往体验 >

写了一个进程枚举代码，未实现ring0级的进程枚举。代码如下：

Option Explicit
Private Declare Function EnumProcesses Lib "psapi.dll" (lpidProcess As Long, ByVal cb As Long, cbNeeded As Long) As Long
Private Declare Function GetModuleFileNameExA Lib "psapi.dll" (ByVal hProcess As Long, ByVal hModule As Long, ByVal ModuleName As String, ByVal nSize As Long) As Long
Private Declare Function OpenProcess Lib "kernel32" (ByVal dwDesiredAccess As Long, ByVal bInheritHandle As Long, ByVal dwProcessId As Long) As Long
Private Const PROCESS_ALL_ACCESS = &H1F0FFF
Private Declare Function CloseHandle Lib "kernel32" (ByVal hObject As Long) As Long

Sub Main()
    Dim i As Long
    Dim strFileName As String
    Dim hMod As Long, pId(1024) As Long, hProcess As Long, dwNeeded As Long, dwTemp As Long

    EnumProcesses pId(0), 1024 * 4, dwNeeded
    For i = 1 To dwNeeded
        If pId(i) = 0 Then Exit For
        hProcess = OpenProcess(PROCESS_ALL_ACCESS, 0, pId(i))
        If hProcess <> 0 Then
            strFileName = String(200, vbNullChar)
            strFileName = Left(strFileName, GetModuleFileNameExA(hProcess, 0, strFileName, Len(strFileName)))
            CloseHandle hProcess
            If Len(strFileName) > 0 Then Debug.Print strFileName
        End If
    Next
End Sub

摘自：枚举进程

★VB部分相关文章推荐：★