| 网站首页 | 业界新闻 | 小组 | 威客 | 人才 | 下载频道 | 博客 | 代码贴 | 在线编程 | 编程论坛
欢迎加入我们,一同切磋技术
用户名:   
 
密 码:  
共有 537 人关注过本帖
标题:获取进程模块
只看楼主 加入收藏
rs369007
Rank: 2
等 级:论坛游民
帖 子:30
专家分:11
注 册:2009-2-25
结帖率:66.67%
收藏
 问题点数:0 回复次数:0 
获取进程模块
   
程序代码:
// 获取进程的pid、加载模块

#include <windows.h>
#include <stdio.h>
#include <tlhelp32.h>

DWORD name2processID(char *img_name,int flag);
int help_info();

int main(int argc,char *argv[])
{
    char *name;
    int i=1,pro_number=argc-1;
    DWORD pro_id[pro_number];

    if( argc==1 )
        help_info();
    else if ( 0 == strcmp(argv[1] , "-h"))
        help_info();
    else if ( 0 == strcmp(argv[1] , "-l"))
        name2processID(NULL,1);
    else if ( 0 == strcmp(argv[1] , "-m"))
        if(argc == 2)
        {
            printf("[+]missing ProcessName.\n");
            return -1;
        }
        else
            name2processID(argv[2],2);
    else if ( 0 == strcmp(argv[2] , "-m"))
        name2processID(argv[1],2);
    else if ( argv[1][0] == '-')
    {   
        printf("unknown parameter.");
        return -1;
    }
    else{
    while(i<=pro_number)
    {
        pro_id[i-1]=name2processID(argv[i],0);
        ++i;
    }
   
    i=1;
    printf("\n[+]processname        processpid\n");
    while(i<=pro_number)
    {   
        printf("\n--%s \t\t  %d\n",argv[i],pro_id[i-1]);
        ++i;
    }
    }
    return 0;
}


DWORD name2processID(char *img_name, int flag)
{
    HANDLE    process_snap =
        CreateToolhelp32Snapshot(TH32CS_SNAPPROCESS, 0);//获得快照句柄
    if(process_snap == (HANDLE)-1)
        return 0;
    //pe32中的dwSize字段必须赋初值,否则在执行Process32First函数时会出错
    PROCESSENTRY32 process_enter;    [local]1[/local]
        process_enter.dwSize = sizeof(PROCESSENTRY32);//列举所有进程信息
    if(!Process32First(process_snap,&process_enter))
        return -1;
    if( 1 == flag )
    {
        printf("[pid]\t\t [FileName]\n");
        do {
            printf("%d\t\t %s\n",process_enter.th32ProcessID,process_enter.szExeFile);
        }while (Process32Next(process_snap,&process_enter));
    }
   
    else if ( 0 == flag)
    {
        do {
            if(0 == strcmpi(img_name, process_enter.szExeFile))
            return process_enter.th32ProcessID;   
        }while (Process32Next(process_snap,&process_enter));
    }
    else if ( 2 == flag)
    {
        HANDLE hSnapshot;
        MODULEENTRY32 hMod;
        hMod.dwSize=sizeof(MODULEENTRY32);
        do {
            if(0 == strcmpi(img_name, process_enter.szExeFile))
            break;
        }while (Process32Next(process_snap,&process_enter));
        hSnapshot=CreateToolhelp32Snapshot(TH32CS_SNAPMODULE, process_enter.th32ProcessID);
        if(TRUE == Module32First(hSnapshot, &hMod))
        {
            printf("\n+ProcessPid = %d \n",process_enter.th32ProcessID);
            printf("[Module name] \t\t [Module Full Path]\n");
            do {
                printf("\n%s \t\t %s",hMod.szModule,hMod.szExePath);
            }while(Module32Next(hSnapshot, &hMod));
            puts("\n");
        }
    }
    else
        return -1;
    CloseHandle(process_snap);
    return 0;
}

int help_info()
{
    char help[]=
        "\n[write by rs]\n\n"
        "Options:\n"
        "-h            to get this info.\n"
        "-l         to list all the process and it's pid\n"
        "-m processname     to list All the Modules in a Processes.\n\n"
        "Usage:       getpid -m ProcessName\n"
               "           getpid -l\n"
        "         getpid  [processname] [processname] ...\n";   
    puts(help);
    return 0;
} 
   


getpid.rar (6.6 KB)
搜索更多相关主题的帖子: 获取 进程 模块 
2010-03-11 16:14
快速回复:获取进程模块
数据加载中...
 
   



关于我们 | 广告合作 | 编程中国 | 清除Cookies | TOP | 手机版

编程中国 版权所有,并保留所有权利。
Powered by Discuz, Processed in 0.020094 second(s), 9 queries.
Copyright©2004-2024, BCCN.NET, All Rights Reserved