vb.net Process32First和Module32First

Friend Const PROCESS_ALL_ACCESS = &H1F0FFF = 2035711 Friend Const PROCESS_VM_READ = &H10 Friend Const PROCESS_VM_WRITE = &H20 Friend Const PAGE_READONLY = &H2 Friend Const PAGE_READWRITE = &H4 Friend Const TH32CS_SNAPHEAPLIST = &H1 ‘在快照中包含在th32ProcessID中指定的进程的所有的堆。 Friend Const TH32CS_SNAPPROCESS = &H2 ‘在快照中包含系统中所有的进程。 Friend Const TH32CS_SNAPTHREAD = &H4 ‘在快照中包含系统中所有的线程。 Friend Const TH32CS_SNAPMODULE = &H8 ‘在快照中包含在th32ProcessID中指定的进程的所有的模块。 Friend Const TH32CS_GETALLMODS = &H80000000

Declare Function Process32First Lib "KERNEL32.DLL " (ByVal handle As IntPtr,ByRef pe As PROCESSENTRY32) As Integer
Declare Function Process32Next Lib "KERNEL32.DLL " (ByVal handle As IntPtr,ByRef pe As PROCESSENTRY32) As Integer
Declare Function CreateToolhelp32Snapshot Lib "KERNEL32.DLL " (ByVal flags As Integer,ByVal processid As Integer) As IntPtr
Declare Function CloseHandle Lib "KERNEL32.DLL " (ByVal handle As IntPtr) As Integer
Declare Function Module32First Lib "kernel32" Alias "Module32FirstW" (ByVal hSnapshot As IntPtr,ByRef lppe As MODULEENTRY32) As Boolean
Declare Function Module32Next Lib "kernel32" (ByVal hSnapshot As IntPtr,ByVal lppe As MODULEENTRY32) As Integer

<StructLayout(LayoutKind.Sequential,CharSet:=CharSet.Auto)>
Public Structure MODULEENTRY32
Public dwSize As Integer
Public th32ModuleID As Integer
Public th32ProcessID As Integer
Public GlblcntUsage As Integer
Public ProccntUsage As Integer
Public modBaseAddr As IntPtr
Public modBaseSize As Integer
Public hModule As IntPtr
<MarshalAs(UnmanagedType.ByValTStr,SizeConst:=256)>
Public szModule As String
<MarshalAs(UnmanagedType.ByValTStr,SizeConst:=260)>

Public szExePath As String
End Structure
<StructLayout(LayoutKind.Sequential)>
Public Structure ProcessEntry32
Public dwSize As Integer
Public cntUsage As Integer
Public th32ProcessID As Integer
Public th32DefaultHeapID As IntPtr
Public th32ModuleID As Integer
Public cntThreads As Integer
Public th32ParentProcessID As Integer
Public pcPriClassBase As Integer
Public dwFlags As Integer
<MarshalAs(UnmanagedType.ByValTStr,SizeConst:=260)>
Public szExeFile As String
End Structure
注:<StructLayout(LayoutKind.Sequential,CharSet:=CharSet.Auto)>说明符不能丢,丢了就会报命令长度不正确的错误
Private Sub Pro32first()
Dim kzhw As IntPtr
kzhw = CreateToolhelp32Snapshot(TH32CS_SNAPPROCESS,0)
If kzhw.ToInt32 > 0 Then
Dim mp As ProcessEntry32 = Nothing
mp.dwSize = Marshal.SizeOf(mp)
If (Process32First(kzhw,mp) > 0) Then ‘遍历第一个进程
Do
ListBox2.Items.Add(mp.szExeFile)
Loop While Process32Next(kzhw,mp) > 0 ‘遍历所有进程知道返回值为False
End If
End If
End Sub
Private Sub Mod32first()
Dim kzhw As IntPtr
Dim pid As Integer = 3176
kzhw = CreateToolhelp32Snapshot(TH32CS_SNAPMODULE,pid)

If kzhw.ToInt32 > 0 Then
        Dim mp As MODULEENTRY32 = Nothing
        mp.dwSize = Marshal.SizeOf(mp)
        ‘ MsgBox(Module32First(kzhw,mp))
        If Module32First(kzhw,mp) Then
            ListBox1.Items.Add("进程ID:" & mp.th32ProcessID)
            ListBox1.Items.Add("szModule:" & mp.szModule)
            ListBox1.Items.Add("dwSize:" & mp.dwSize)
            ListBox1.Items.Add("modBaseAddr:" & mp.modBaseAddr.ToString)
        End If
    End If
End Sub

相关文章

Format[$] ( expr [ , fmt ] ) format 返回变体型 format$ 强...
VB6或者ASP 格式化时间为 MM/dd/yyyy 格式,竟然没有好的办...
在项目中添加如下代码:新建窗口来显示异常信息。 Namespace...
转了这一篇文章,原来一直想用C#做k3的插件开发,vb没有C#用...
Sub 分列() ‘以空格为分隔符,连续空格只算1个。对所选...
  窗体代码 1 Private Sub Text1_OLEDragDrop(Data As Dat...