获取java进程的堆内存镜像_java - 使用JNA获取正在运行的进程 - 堆栈内存溢出

我正在尝试获取Windows机器上所有当前正在运行的进程的列表。

我正在尝试通过JNA的Winapi调用EapiProcesses-> OpenProcess-> GetModuleBaseNameW-> CloseHandle尝试OpenProcess调用时失败。 GetLastError返回5(ERROR_ACCESS_DENIED)。

这是我的代码：

public static final int PROCESS_QUERY_INFORMATION = 0x0400;

public static final int PROCESS_VM_READ = 0x0010;

public static final int PROCESS_VM_WRITE = 0x0020;

public static final int PROCESS_VM_OPERATION = 0x0008;

public interface Psapi extends StdCallLibrary {

Psapi INSTANCE = (Psapi) Native.loadLibrary("Psapi", Psapi.class);

boolean EnumProcesses(int[] ProcessIDsOut, int size, int[] BytesReturned);

DWORD GetModuleBaseNameW(Pointer hProcess, Pointer hModule, byte[] lpBaseName, int nSize);

}

public interface Kernel32 extends StdCallLibrary {

Kernel32 INSTANCE = (Kernel32) Native.loadLibrary("Kernel32", Kernel32.class);

Pointer OpenProcess(int dwDesiredAccess, boolean bInheritHandle, int dwProcessId);

boolean CloseHandle(Pointer hObject);

}

public static void main(String[] args) {

int[] processlist = new int[1024];

int[] dummylist = new int[1024];

Psapi.INSTANCE.EnumProcesses(processlist, 1024, dummylist);

for (int pid : processlist) {

System.out.println(pid);

Pointer ph = Kernel32.INSTANCE.OpenProcess(PROCESS_VM_READ, false, pid);

try {

Thread.sleep(1000);

} catch (Exception ignore) {

}

System.err.println(com.sun.jna.platform.win32.Kernel32.INSTANCE.GetLastError()); //

System.err.println(ph); //

if (ph != null) {

byte[] filename = new byte[512];

Psapi.INSTANCE.GetModuleBaseNameW(ph, new Pointer(0), filename, 512);

try {

Thread.sleep(1000);

} catch (Exception ignore) {

}

System.err.println(Native.toString(filename));

Kernel32.INSTANCE.CloseHandle(ph);

}

}

}