[Windows]_[初级]_[使用命令行工具tasklist]

来源:互联网 发布:gas mask mac 编辑:程序博客网 时间:2024/06/07 02:07


场景:

1.开发时需要分析运行文件的dll依赖,判断依赖是否正确.

2.windows自带的工具命令没有像Linux那样用的频繁,会用工具命令的话对提高工作效率也是有帮助的。

3.也可以用vs自带的工具dumpbin /DEPENDENTS [file]

显示所有正在运行的进程的dll依赖,好像它不能指定显示某个exe的的依赖:

tasklist /M

Foxmail.exe                   4880 ntdll.dll, kernel32.dll, KERNELBASE.dll,                                   user32.dll, GDI32.dll, LPK.dll, USP10.dll,                                   msvcrt.dll, advapi32.dll, sechost.dll,                                   RPCRT4.dll, oleaut32.dll, ole32.dll,                                   msimg32.dll, version.dll, mpr.dll,                                   comctl32.dll, SHLWAPI.dll, shell32.dll,                                   wsock32.dll, WS2_32.dll, NSI.dll,                                   imm32.dll, MSCTF.dll, winspool.drv,                                   comdlg32.dll, iphlpapi.dll, WINNSI.DLL,                                   secur32.dll, SSPICLI.DLL, winmm.dll,                                   gdiplus.dll, oleacc.dll, Winhttp.dll,                                   webio.dll, Ntdsapi.dll, Sensapi.dll,                                   apphelp.dll, AcLayers.DLL, USERENV.dll,                                   profapi.dll, olepro32.dll, CRYPTBASE.dll,                                   uxtheme.dll, TSVulFW.DAT, PSAPI.DLL,                                   Wtsapi32.dll, libcef.dll, urlmon.dll,                                   api-ms-win-downlevel-ole32-l1-1-0.dll,                                   api-ms-win-downlevel-shlwapi-l1-1-0.dll,                                   api-ms-win-downlevel-advapi32-l1-1-0.dll,                                   api-ms-win-downlevel-user32-l1-1-0.dll,                                   api-ms-win-downlevel-version-l1-1-0.dll,                                   api-ms-win-downlevel-normaliz-l1-1-0.dll,                                   normaliz.DLL, iertutil.dll, WININET.dll,                                   dhcpcsvc.DLL, SETUPAPI.dll, CFGMGR32.dll,                                   DEVOBJ.dll, CRYPT32.dll, MSASN1.dll,                                   FoxBugReport.dll, icudt.dll, ffmpegsumo.dllet.exe                        1128 ntdll.dll, kernel32.dll, KERNELBASE.dll,                                   user32.dll, GDI32.dll, LPK.dll, USP10.dll,                                   msvcrt.dll, advapi32.dll, sechost.dll,                                   RPCRT4.dll, oleaut32.dll, ole32.dll,                                   version.dll, msimg32.dll, kso10.dll,


显示加载qq模块的进程:

tasklist /M  qq*

映像名称                       PID 模块========================= ======== ============================================explorer.exe                  2712 QQPINYIN.IMERTX.exe                       3316 QQNW.dll, QQPINYIN.IMEQQProtect.exe                 3416 QQProtectEngine.dll, QQProtect.dllQQ.exe                        3440 QQVip.dll, QQPet.dll, QQRing.dll,                                   QQShow.dll, QQGame.dllfirefox.exe                   6140 QQPINYIN.IME







0 0