WINDOWS进程堆枚举

来源:互联网 发布:物流标签打印软件 编辑:程序博客网 时间:2024/05/17 22:39
HANDLE hSnap = CreateToolhelp32Snapshot(TH32CS_SNAPHEAPLIST, 3264);if (hSnap == INVALID_HANDLE_VALUE){printf("Error Snap\n");return 0;}HEAPLIST32 heap;HEAPENTRY32 HeapEntry;HeapEntry.dwSize = sizeof(HeapEntry);heap.dwSize = sizeof(heap);BOOL bResultFlg = Heap32ListFirst(hSnap, &heap);BOOL bHeapFlg;if (bResultFlg){do {bHeapFlg = Heap32First(&HeapEntry, heap.th32ProcessID, heap.th32HeapID);if (bHeapFlg){do {printf("Address = %X, size = %d\n", HeapEntry.dwAddress, HeapEntry.dwBlockSize);bHeapFlg = Heap32Next(&HeapEntry);} while(bHeapFlg);printf("\n\n");}bResultFlg = Heap32ListNext(hSnap, &heap);} while(bResultFlg);}CloseHandle(hSnap);

原创粉丝点击