枚举进程 模块 堆栈

void walkProcess()
{
    HANDLE hSnap = CreateToolhelp32Snapshot( TH32CS_SNAPPROCESS, 0 );
    if(hSnap == INVALID_HANDLE_VALUE)
        return;
    PROCESSENTRY32 p32;
    p32.dwSize = sizeof(PROCESSENTRY32);
    if( !Process32First( hSnap, &p32 ) )
      {
        CloseHandle( hSnap );
        return;
      }
    do
    {
            wprintf( TEXT("\n  Process ID        = %ld"), p32.th32ProcessID );
            wprintf( TEXT("\n  Thread count      = %d"),   p32.cntThreads );
            wprintf( TEXT("\n  Parent process ID = %ld"), p32.th32ParentProcessID );
            wprintf( TEXT("\n  Priority base     = %d"), p32.pcPriClassBase );
            wprintf(TEXT("\n exepath = %s"),p32.szExeFile);
    }while(Process32Next(hSnap,&p32));
    CloseHandle( hSnap );
}

void walkThread(DWORD pid)
{
    HANDLE snap = CreateToolhelp32Snapshot( TH32CS_SNAPTHREAD, pi