windows遍历进程的方法

#include <windows.h>
#include <tlhelp32.h>
#include <stdio.h>

int main() {
    PROCESSENTRY32 pe32{};
    pe32.dwSize = sizeof(PROCESSENTRY32);

    HANDLE hProcessSnap = CreateToolhelp32Snapshot(TH32CS_SNAPPROCESS, 0);
    if (INVALID_HANDLE_VALUE == hProcessSnap) {
        return 0;
    }

    BOOL bRet = Process32First(hProcessSnap, &pe32);
    while (bRet) {
        wprintf(L"Process ID: %lu, Process Name: %ws\n", pe32.th32ProcessID, pe32.szExeFile);
        bRet = Process32Next(hProcessSnap, &pe32);
    }
    CloseHandle(hProcessSnap);
    return 0;
}

#include <windows.h>
#include <winternl.h>
#include <stdio.h>

typedef NTSTATUS(NTAPI* pNtQuerySystemInformation)(
    SYSTEM_INFORMATION_CLASS SystemInformationClass,
    PVOID SystemInformation,
    ULONG SystemInformationLength,
    PULONG ReturnLength
);

int main() {
    pNtQuerySystemInformation NtQuerySystemInformation =
        (pNtQuerySystemInformation)GetProcAddress(
            GetModuleHandleW(L"ntdll.dll"),
            "NtQuerySystemInformation"
        );

    SYSTEM_PROCESS_INFORMATION* spi = nullptr;
    ULONG bufferSize = 0x1000;
    NTSTATUS status;

    do {
        bufferSize *= 2;
        spi = (SYSTEM_PROCESS_INFORMATION*)malloc(bufferSize);
        if (!spi) {
            return 0;
        }
        status = NtQuerySystemInformation(
            SystemProcessInformation,
            spi,
            bufferSize,
            nullptr
        );
        if (status == STATUS_INFO_LENGTH_MISMATCH) {
            free(spi);
            spi = nullptr;
        }
    } while (status == STATUS_INFO_LENGTH_MISMATCH);

    if (NT_SUCCESS(status)) {
        SYSTEM_PROCESS_INFORMATION* current = spi;
        while (current) {
            wprintf(L"Process ID: %lu, Process Name: %ws\n",
                current->UniqueProcessId,
                current->ImageName.Buffer);
            current = (SYSTEM_PROCESS_INFORMATION*)((BYTE*)current + current->NextEntryOffset);
        }
    }
    free(spi);
    return 0;
}

#include <windows.h>
#include <psapi.h>
#include <stdio.h>

int main() {
    DWORD pProcess[1024];
    DWORD cbNeeded;
    DWORD cProcesses;

    if (!EnumProcesses(pProcess, sizeof(pProcess), &cbNeeded)) {
        return 0;
    }

    cProcesses = cbNeeded / sizeof(DWORD);

    for (int index = 0; index < cProcesses; index++) {
        HANDLE hProcess = OpenProcess(
            PROCESS_QUERY_INFORMATION | PROCESS_VM_READ,
            FALSE,
            pProcess[index]
        );
        if (hProcess == NULL) {
            continue;
        }

        char szModName[MAX_PATH];
        if (GetModuleFileNameEx(hProcess, NULL, szModName, sizeof(szModName))) {
            printf("Process ID: %lu, Process Path: %s\n", pProcess[index], szModName);
        }

        CloseHandle(hProcess);
    }
    return 1;
}