c++操作进程程序

#include <Windows.h>
#include <winternl.h>
#include <iostream>

using namespace std;

typedef NTSTATUS(NTAPI* QEURYINFORMATIONPROCESS)(
    IN HANDLE ProcessHandle,
    IN PROCESSINFOCLASS ProcessInformationClass,
    OUT PVOID ProcessInformation,
    IN ULONG ProcessInformationLength,
    OUT PULONG ReturnLength OPTIONAL
    );

int main()
{
    STARTUPINFO startupinfo = { 0 };
    PROCESS_INFORMATION processInformation = { 0 };
    BOOL bSucess = CreateProcess(TEXT("‪C:\\Windows\\py.exe"), NULL, NULL, NULL, FALSE, NULL, NULL, NULL, &startupinfo, &processInformation);

    if (bSucess)
    {
        cout << "Process started." << endl << "Process ID:\t" << processInformation.dwProcessId << endl;
        PROCESS_BASIC_INFORMATION pbi;
        ULONG uLength = 0;

        HMODULE hDll = LoadLibrary(TEXT("C:\\Windows\\System32\\ntdll.dll"));

        if (hDll)
        {
            QEURYINFORMATIONPROCESS QueryInformationProcess = (QEURYINFORMATIONPROCESS)GetProcAddress(hDll, "NtQueryInformationProcess");\

                if (QueryInformationProcess)
                {
                    NTSTATUS ntStatus = QueryInformationProcess(processInformation.hProcess,
                        PROCESSINFOCLASS::ProcessBasicInformation, &pbi, sizeof(pbi), &uLength);
                    if (NT_SUCCESS(ntStatus))
                    {
                        cout << "Process ID (from PCB):\t" << pbi.UniqueProcessId << endl;
                    }
                    else
                    {
                        cout << "Cannot open PCB!" << endl
                            << "Error code:\t" << GetLastError()
                            << endl;
                    }
                }
                else
                {
                    cout << "Cannot get"
                        << "NtQueryInformationProcess function!"
                        << endl << "Error code:\t"
                        << GetLastError() << endl;
                }

            FreeLibrary(hDll);

        }
        else
        {
            cout << "Cannot load ntdll.dll!" << endl
                << "Error code:\t" << GetLastError() << endl;
        }
    }
    else
    {
        cout << "Cannot start process!" << endl
            << "Error code:\t" << GetLastError() << endl;
    }
    return 0;

}

评论
添加红包

请填写红包祝福语或标题

红包个数最小为10个

红包金额最低5元

当前余额3.43前往充值 >
需支付:10.00
成就一亿技术人!
领取后你会自动成为博主和红包主的粉丝 规则
hope_wisdom
发出的红包
实付
使用余额支付
点击重新获取
扫码支付
钱包余额 0

抵扣说明:

1.余额是钱包充值的虚拟货币,按照1:1的比例进行支付金额的抵扣。
2.余额无法直接购买下载,可以购买VIP、付费专栏及课程。

余额充值