module2.bas

来自「用vb写的能够查看所有系统进程和进程所加载的模块」· BAS 代码 · 共 47 行

Attribute VB_Name = "Module2"
Option Explicit
   
  Public Declare Function CreateToolhelp32Snapshot Lib "Kernel32" (ByVal lFlags As Long, ByVal lProcessID As Long) As Long
  Public Declare Function Process32First Lib "Kernel32" (ByVal hSnapShot As Long, uProcess As PROCESSENTRY32) As Long
  Public Declare Function Process32Next Lib "Kernel32" (ByVal hSnapShot As Long, uProcess As PROCESSENTRY32) As Long
  Public Declare Sub CloseHandle Lib "Kernel32" (ByVal hPass As Long)
   
  Public Const TH32CS_SNAPHEAPLIST = &H1
  Public Const TH32CS_SNAPPROCESS = &H2
  Public Const TH32CS_SNAPTHREAD = &H4
  Public Const TH32CS_SNAPMODULE = &H8
  Public Const TH32CS_SNAPALL = (TH32CS_SNAPHEAPLIST Or TH32CS_SNAPPROCESS Or TH32CS_SNAPTHREAD Or TH32CS_SNAPMODULE)
  Public Const TH32CS_INHERIT = &H80000000
  Public Const MAX_PATH       As Integer = 260
  Public Type PROCESSENTRY32
          dwSize   As Long
          cntUsage   As Long
          th32ProcessID   As Long
          th32DefaultHeapID   As Long
          th32ModuleID   As Long
          cntThreads   As Long
          th32ParentProcessID   As Long
          pcPriClassBase   As Long
          dwFlags   As Long
          szExeFile   As String * MAX_PATH
  End Type
   
  Public Function EnumProc(ByRef strProc() As String) As Long
          Dim i     As Long
          Dim j     As Long
          Dim hSnapShot     As Long
          Dim uProcess     As PROCESSENTRY32
           
          hSnapShot = CreateToolhelp32Snapshot(TH32CS_SNAPALL, 0&)
          uProcess.dwSize = Len(uProcess)
          i = Process32First(hSnapShot, uProcess)
           
          Do While i
                  ReDim Preserve strProc(j) As String
                  strProc(j) = Left$(uProcess.szExeFile, IIf(InStr(1, uProcess.szExeFile, Chr$(0)) > 0, InStr(1, uProcess.szExeFile, Chr$(0)) - 1, 0)) & Chr(0) & uProcess.th32ProcessID
                  i = Process32Next(hSnapShot, uProcess)
                  j = j + 1
          Loop
          CloseHandle hSnapShot
  End Function