进程的监听

#include "stdafx.h"
#include "Windows.h"
#include "tlhelp32.h"
#include "process.h"

void main()
{
    //获取进程信息快照，如果要获取进程列表则第二个参数为0
    HANDLE handle;
    while(1)
    {
        handle = CreateToolhelp32Snapshot(TH32CS_SNAPPROCESS,0); //获取线程列表
        if(handle == INVALID_HANDLE_VALUE)
        {
            cout<<"CreateToolhelp32Snapshot start is fail..."<<endl;
            getchar();
            return ;
        }
        cout<<"监听开始..."<<endl;
        PROCESSENTRY32 pe32;
        pe32.dwSize = sizeof(PROCESSENTRY32);
    
        //获取第一个进程的句柄
        BOOL bMore = Process32First(handle,&pe32);  //获取第一个线程句柄放到pe32
        int i = 0;
        cout<<"PID\t线程数\t进程名字"<<endl;
        
        while(bMore)
        {
            wchar_t *ch = pe32.szExeFile;   //szExeFile Window下的宽字节
            cout<<pe32.th32ProcessID<<"\t"<<pe32.cntThreads<<"\t";
            wcout<<ch<<endl;  //输出的时候注意
            //如果用printf则需要用wprintf(L"%s\n",ch);
            i++;
            bMore = Process32Next(handle,&pe32);
        }
        CloseHandle(handle);
        Sleep(500);  //线程挂起500ms
        system("cls");
    }

    getchar();
    return;
}