win7下获取进程CPU，内存，IO等信息

首先感谢大神 luciferisnotsatan。让我知道了使用NtQuerySystemInformation这个方法获取相关的信息。网上大部分都是使用GetProcessMemoryInfo这个方法在获取，但是这个方法会受到win7权限影响。我测试了win7家庭版和旗舰版。家庭版中有一般所得进程是获取不到进程句柄的进而无法获取进程信息。旗舰版中360的相关进程无法获取。

后来又在网上专门搜索了下NtQuerySystemInformation，终于得到大神作品。http://www.cnblogs.com/einyboy/archive/2012/06/13/2548243.html。这段代码直接复制下来，在2010下面会有编译问题。所以整理了一下。得到如下代码

#include <windows.h>#include <stdio.h>#define SYSTEM_PERF_INFO             0x02#define SYSTEM_PROC_TIME             0x08#define SYSTEM_PAGE_INFO             0x12#define SYSTEM_CACHE_INFO            0x15#define NT_PROCESSTHREAD_INFO        0x05#define MAX_INFO_BUF_LEN             0x500000#define STATUS_SUCCESS               ((NTSTATUS)0x00000000L)#define STATUS_INFO_LENGTH_MISMATCH  ((NTSTATUS)0xC0000004L)typedef LONG  NTSTATUS;typedef DWORD SYSTEM_INFORMATION_CLASS;typedef struct _LSA_UNICODE_STRING{USHORT  Length;USHORT  MaximumLength;PWSTR   Buffer;}LSA_UNICODE_STRING,*PLSA_UNICODE_STRING;typedef LSA_UNICODE_STRING UNICODE_STRING, *PUNICODE_STRING;typedef struct _CLIENT_ID{HANDLE UniqueProcess;HANDLE UniqueThread;}CLIENT_ID;typedef CLIENT_ID *PCLIENT_ID;typedef LONG KPRIORITY;typedef struct _VM_COUNTERS{ULONG PeakVirtualSize;ULONG VirtualSize;ULONG PageFaultCount;ULONG PeakWorkingSetSize;ULONG WorkingSetSize;ULONG QuotaPeakPagedPoolUsage;ULONG QuotaPagedPoolUsage;ULONG QuotaPeakNonPagedPoolUsage;ULONG QuotaNonPagedPoolUsage;ULONG PagefileUsage;ULONG PeakPagefileUsage;}VM_COUNTERS,*PVM_COUNTERS;typedef enum _THREAD_STATE{StateInitialized,StateReady,StateRunning,StateStandby,StateTerminated,StateWait,StateTransition,StateUnknown}THREAD_STATE;typedef enum _KWAIT_REASON{Executive,FreePage,PageIn,PoolAllocation,DelayExecution,Suspended,UserRequest,WrExecutive,WrFreePage,WrPageIn,WrPoolAllocation,WrDelayExecution,WrSuspended,WrUserRequest,WrEventPair,WrQueue,WrLpcReceive,WrLpcReply,WrVertualMemory,WrPageOut,WrRendezvous,Spare2,Spare3,Spare4,Spare5,Spare6,WrKernel}KWAIT_REASON;typedef struct _SYSTEM_THREADS{LARGE_INTEGER KernelTime;LARGE_INTEGER UserTime;LARGE_INTEGER CreateTime;ULONG         WaitTime;PVOID         StartAddress;CLIENT_ID     ClientId;KPRIORITY     Priority;KPRIORITY     BasePriority;ULONG         ContextSwitchCount;THREAD_STATE  State;KWAIT_REASON  WaitReason;}SYSTEM_THREADS,*PSYSTEM_THREADS;typedef struct _SYSTEM_PROCESSES{ULONG          NextEntryDelta;ULONG          ThreadCount;ULONG          Reserved1[6];LARGE_INTEGER  CreateTime;LARGE_INTEGER  UserTime;LARGE_INTEGER  KernelTime;UNICODE_STRING ProcessName;KPRIORITY      BasePriority;ULONG          ProcessId;ULONG          InheritedFromProcessId;ULONG          HandleCount;ULONG          Reserved2[2];VM_COUNTERS    VmCounters;IO_COUNTERS    IoCounters;SYSTEM_THREADS Threads[1];}SYSTEM_PROCESSES,*PSYSTEM_PROCESSES;typedef DWORD    SYSTEM_INFORMATION_CLASS;typedef NTSTATUS (__stdcall *NTQUERYSYSTEMINFORMATION)                 (IN     SYSTEM_INFORMATION_CLASS,    IN OUT PVOID,    IN     ULONG,    OUT    PULONG OPTIONAL);NTQUERYSYSTEMINFORMATION NtQuerySystemInformation;typedef struct _SYSTEM_PERFORMANCE_INFORMATION{LARGE_INTEGER  IdleTime;LARGE_INTEGER  ReadTransferCount;LARGE_INTEGER  WriteTransferCount;LARGE_INTEGER  OtherTransferCount;ULONG          ReadOperationCount;ULONG          WriteOperationCount;ULONG          OtherOperationCount;ULONG          AvailablePages;ULONG          TotalCommittedPages;ULONG          TotalCommitLimit;ULONG          PeakCommitment;ULONG          PageFaults;ULONG          WriteCopyFaults;ULONG          TransitionFaults;ULONG          Reserved1;ULONG          DemandZeroFaults;ULONG          PagesRead;ULONG          PageReadIos;ULONG          Reserved2[2];ULONG          PagefilePagesWritten;ULONG          PagefilePageWriteIos;ULONG          MappedFilePagesWritten;ULONG          MappedFileWriteIos;ULONG          PagedPoolUsage;ULONG          NonPagedPoolUsage;ULONG          PagedPoolAllocs;ULONG          PagedPoolFrees;ULONG          NonPagedPoolAllocs;ULONG          NonPagedPoolFress;ULONG          TotalFreeSystemPtes;ULONG          SystemCodePage;ULONG          TotalSystemDriverPages;ULONG          TotalSystemCodePages;ULONG          SmallNonPagedLookasideListAllocateHits;ULONG          SmallPagedLookasideListAllocateHits;ULONG          Reserved3;ULONG          MmSystemCachePage;ULONG          PagedPoolPage;ULONG          SystemDriverPage;ULONG          FastReadNoWait;ULONG          FastReadWait;ULONG          FastReadResourceMiss;ULONG          FastReadNotPossible;ULONG          FastMdlReadNoWait;ULONG          FastMdlReadWait;ULONG          FastMdlReadResourceMiss;ULONG          FastMdlReadNotPossible;ULONG          MapDataNoWait;ULONG          MapDataWait;ULONG          MapDataNoWaitMiss;ULONG          MapDataWaitMiss;ULONG          PinMappedDataCount;ULONG          PinReadNoWait;ULONG          PinReadWait;ULONG          PinReadNoWaitMiss;ULONG          PinReadWaitMiss;ULONG          CopyReadNoWait;ULONG          CopyReadWait;ULONG          CopyReadNoWaitMiss;ULONG          CopyReadWaitMiss;ULONG          MdlReadNoWait;ULONG          MdlReadWait;ULONG          MdlReadNoWaitMiss;ULONG          MdlReadWaitMiss;ULONG          ReadAheadIos;ULONG          LazyWriteIos;ULONG          LazyWritePages;ULONG          DataFlushes;ULONG          DataPages;ULONG          ContextSwitches;ULONG          FirstLevelTbFills;ULONG          SecondLevelTbFills;ULONG          SystemCall;}SYSTEM_PERFORMANCE_INFORMATION,*PSYSTEM_PERFORMANCE_INFORMATION;typedef struct __SYSTEM_PROCESSOR_TIMES{LARGE_INTEGER IdleTime;LARGE_INTEGER KernelTime;LARGE_INTEGER UserTime;LARGE_INTEGER DpcTime;LARGE_INTEGER InterruptTime;ULONG         InterruptCount;}SYSTEM_PROCESSOR_TIMES,*PSYSTEM_PROCESSOR_TIMES;typedef struct _SYSTEM_PAGEFILE_INFORMATION{ULONG NetxEntryOffset;ULONG CurrentSize;ULONG TotalUsed;ULONG PeakUsed;UNICODE_STRING FileName;}SYSTEM_PAGEFILE_INFORMATION,*PSYSTEM_PAGEFILE_INFORMATION;typedef struct _SYSTEM_CACHE_INFORMATION{ULONG SystemCacheWsSize;ULONG SystemCacheWsPeakSize;ULONG SystemCacheWsFaults;ULONG SystemCacheWsMinimum;ULONG SystemCacheWsMaximum;ULONG TransitionSharedPages;ULONG TransitionSharedPagesPeak;ULONG Reserved[2];}SYSTEM_CACHE_INFORMATION,*PSYSTEM_CACHE_INFORMATION;DWORD EnumProcess(){PSYSTEM_PROCESSES  pSystemProc;HMODULE            hNtDll         = NULL;LPVOID             lpSystemInfo   = NULL;DWORD              dwNumberBytes  = MAX_INFO_BUF_LEN;DWORD              dwTotalProcess = 0;DWORD              dwReturnLength;NTSTATUS           Status;LONGLONG           llTempTime;__try{hNtDll = LoadLibrary("NtDll.dll");if(hNtDll == NULL){printf("LoadLibrary Error: %d\n",GetLastError());__leave;}NtQuerySystemInformation = (NTQUERYSYSTEMINFORMATION)GetProcAddress(hNtDll,"NtQuerySystemInformation");if(NtQuerySystemInformation == NULL){printf("GetProcAddress for NtQuerySystemInformation Error: %d\n",GetLastError());__leave;}lpSystemInfo = (LPVOID)malloc(dwNumberBytes);Status = NtQuerySystemInformation(NT_PROCESSTHREAD_INFO, lpSystemInfo, dwNumberBytes, &dwReturnLength);if(Status == STATUS_INFO_LENGTH_MISMATCH){printf("STATUS_INFO_LENGTH_MISMATCH\n");__leave;}else if(Status != STATUS_SUCCESS){printf("NtQuerySystemInformation Error: %d\n",GetLastError());__leave;}printf("%-20s%6s%7s%8s%6s%7s%7s%13s\n","ProcessName","PID","PPID","WsSize","Prio.","Thread","Handle","CPU Time");printf("--------------------------------------------------------------------------\n");pSystemProc = (PSYSTEM_PROCESSES)lpSystemInfo;while(pSystemProc->NextEntryDelta != 0){if(pSystemProc->ProcessId != 0){wprintf(L"%-20s",pSystemProc->ProcessName.Buffer);}else{wprintf(L"%-20s",L"System Idle Process");}printf("%6d",pSystemProc->ProcessId);printf("%7d",pSystemProc->InheritedFromProcessId);printf("%7dK",pSystemProc->VmCounters.WorkingSetSize/1024);printf("%6d",pSystemProc->BasePriority);printf("%7d",pSystemProc->ThreadCount);printf("%7d",pSystemProc->HandleCount);llTempTime  = pSystemProc->KernelTime.QuadPart + pSystemProc->UserTime.QuadPart;llTempTime /= 10000;printf("%3d:",llTempTime/(60*60*1000));llTempTime %= 60*60*1000;printf("%.2d:",llTempTime/(60*1000));llTempTime %= 60*1000;printf("%.2d.",llTempTime/1000);llTempTime %= 1000;printf("%.3d",llTempTime);printf("\n");dwTotalProcess ++;pSystemProc = (PSYSTEM_PROCESSES)((char *)pSystemProc + pSystemProc->NextEntryDelta);}printf("--------------------------------------------------------------------------\n");printf("\nTotal %d Process(es) !\n\n",dwTotalProcess);printf("PID\t ==> Process Identification\n");printf("PPID\t ==> Parent Process Identification\n");printf("WsSize\t ==> Working Set Size\n");printf("Prio.\t ==> Base Priority\n");printf("Thread\t ==> Thread Count\n");printf("Handle\t ==> Handle Count\n");printf("CPU Time ==> Processor Time\n");}__finally{if(lpSystemInfo != NULL){free(lpSystemInfo);}if(hNtDll != NULL){FreeLibrary(hNtDll);}}return 0;}DWORD SpeciProcess(DWORD dwPID){PSYSTEM_PROCESSES  pSystemProc    = NULL;PSYSTEM_THREADS    pSystemThre    = NULL; HMODULE            hNtDll         = NULL;LPVOID             lpSystemInfo   = NULL;DWORD              dwNumberBytes  = MAX_INFO_BUF_LEN;DWORD              dwTotalProcess = 0;DWORD              dwReturnLength;NTSTATUS           Status;LONGLONG           llTempTime;ULONG              ulIndex;__try{hNtDll = LoadLibrary("NtDll.dll");if(hNtDll == NULL){printf("LoadLibrary Error: %d\n",GetLastError());__leave;}NtQuerySystemInformation = (NTQUERYSYSTEMINFORMATION)GetProcAddress(hNtDll,"NtQuerySystemInformation");if(NtQuerySystemInformation == NULL){printf("GetProcAddress for NtQuerySystemInformation Error: %d\n",GetLastError());__leave;}lpSystemInfo = (LPVOID)malloc(dwNumberBytes);Status = NtQuerySystemInformation(NT_PROCESSTHREAD_INFO, lpSystemInfo, dwNumberBytes, &dwReturnLength);if(Status == STATUS_INFO_LENGTH_MISMATCH){printf("STATUS_INFO_LENGTH_MISMATCH\n");__leave;}else if(Status != STATUS_SUCCESS){printf("NtQuerySystemInformation Error: %d\n",GetLastError());__leave;}pSystemProc = (PSYSTEM_PROCESSES)lpSystemInfo;while(pSystemProc->NextEntryDelta != 0){if(pSystemProc->ProcessId == dwPID){printf("ProcessName:\t\t ");if(pSystemProc->ProcessId != 0){wprintf(L"%-20s\n",pSystemProc->ProcessName.Buffer);}else{wprintf(L"%-20s\n",L"System Idle Process");}printf("ProcessID:\t\t %d\t\t",pSystemProc->ProcessId);printf("ParentProcessID:\t%d\n",pSystemProc->InheritedFromProcessId);printf("KernelTime:\t\t ");llTempTime  = pSystemProc->KernelTime.QuadPart;llTempTime /= 10000;printf("%d:",llTempTime/(60*60*1000));llTempTime %= 60*60*1000;printf("%.2d:",llTempTime/(60*1000));llTempTime %= 60*1000;printf("%.2d.",llTempTime/1000);llTempTime %= 1000;printf("%.3d\t",llTempTime);printf("UserTime:\t\t");llTempTime  = pSystemProc->UserTime.QuadPart;llTempTime /= 10000;printf("%d:",llTempTime/(60*60*1000));llTempTime %= 60*60*1000;printf("%.2d:",llTempTime/(60*1000));llTempTime %= 60*1000;printf("%.2d.",llTempTime/1000);llTempTime %= 1000;printf("%.3d\n",llTempTime);printf("Privilege:\t\t %d%%\t\t",(pSystemProc->KernelTime.QuadPart * 100)/(pSystemProc->KernelTime.QuadPart + pSystemProc->UserTime.QuadPart));printf("User:\t\t\t%d%%\n",(pSystemProc->UserTime.QuadPart * 100)/(pSystemProc->KernelTime.QuadPart + pSystemProc->UserTime.QuadPart));printf("ThreadCount:\t\t %d\t\t",pSystemProc->ThreadCount);printf("HandleCount:\t\t%d\n",pSystemProc->HandleCount);printf("BasePriority:\t\t %-2d\t\t",pSystemProc->BasePriority);printf("PageFaultCount:\t\t%d\n\n",pSystemProc->VmCounters.PageFaultCount);printf("PeakWorkingSetSize(K):\t %-8d\t",pSystemProc->VmCounters.PeakWorkingSetSize/1024);printf("WorkingSetSize(K):\t%-8d\n",pSystemProc->VmCounters.WorkingSetSize/1024);printf("PeakPagedPool(K):\t %-8d\t",pSystemProc->VmCounters.QuotaPeakPagedPoolUsage/1024);printf("PagedPool(K):\t\t%-8d\n",pSystemProc->VmCounters.QuotaPagedPoolUsage/1024);printf("PeakNonPagedPook(K):\t %-8d\t",pSystemProc->VmCounters.QuotaPeakNonPagedPoolUsage/1024);printf("NonePagedPook(K):\t%-8d\n",pSystemProc->VmCounters.QuotaNonPagedPoolUsage/1024);printf("PeakPagefile(K):\t %-8d\t",pSystemProc->VmCounters.PeakPagefileUsage/1024);printf("Pagefile(K):\t\t%-8d\n",pSystemProc->VmCounters.PagefileUsage/1024);printf("PeakVirtualSize(K):\t %-8d\t",pSystemProc->VmCounters.PeakVirtualSize/1024);printf("VirtualSize(K):\t\t%-8d\n\n",pSystemProc->VmCounters.VirtualSize/1024);printf("ReadTransfer:\t\t %-8d\t",pSystemProc->IoCounters.ReadTransferCount);printf("ReadOperationCount:\t%-8d\n",pSystemProc->IoCounters.ReadOperationCount);printf("WriteTransfer:\t\t %-8d\t",pSystemProc->IoCounters.WriteTransferCount);printf("WriteOperationCount:\t%-8d\n",pSystemProc->IoCounters.WriteOperationCount);printf("OtherTransfer:\t\t %-8d\t",pSystemProc->IoCounters.OtherTransferCount);printf("OtherOperationCount:\t%-8d\n\n",pSystemProc->IoCounters.OtherOperationCount);printf("%-5s%3s%4s%5s%5s%11s%12s%12s%7s%6s%9s\n","TID","Pri","BPr","Priv","User","KernelTime","UserTime","StartAddr","CSwitC","State","WtReason");printf("-------------------------------------------------------------------------------\n");for(ulIndex = 0; ulIndex < pSystemProc->ThreadCount; ulIndex++){pSystemThre = &pSystemProc->Threads[ulIndex];printf("%-5d",pSystemProc->Threads[ulIndex].ClientId.UniqueThread);printf("%3d",pSystemProc->Threads[ulIndex].Priority);printf("%4d",pSystemProc->Threads[ulIndex].BasePriority);printf("%4d%%",(pSystemProc->Threads[ulIndex].KernelTime.QuadPart * 100)/(pSystemProc->KernelTime.QuadPart + pSystemProc->UserTime.QuadPart));printf("%4d%%",(pSystemProc->Threads[ulIndex].UserTime.QuadPart * 100)/(pSystemProc->KernelTime.QuadPart + pSystemProc->UserTime.QuadPart));llTempTime  = pSystemProc->Threads[ulIndex].KernelTime.QuadPart;llTempTime /= 10000;printf("%2d:",llTempTime/(60*60*1000));llTempTime %= 60*60*1000;printf("%.2d.",llTempTime/(60*1000));llTempTime %= 60*1000;printf("%.2d.",llTempTime/1000);llTempTime %= 100;printf("%.2d ",llTempTime);llTempTime  = pSystemProc->Threads[ulIndex].UserTime.QuadPart;llTempTime /= 10000;printf("%2d:",llTempTime/(60*60*1000));llTempTime %= 60*60*1000;printf("%.2d.",llTempTime/(60*1000));llTempTime %= 60*1000;printf("%.2d.",llTempTime/1000);llTempTime %= 100;printf("%.2d ",llTempTime);printf(" 0x%.8X",pSystemProc->Threads[ulIndex].StartAddress);printf("%7d",pSystemProc->Threads[ulIndex].ContextSwitchCount);switch(pSystemProc->Threads[ulIndex].State){case StateInitialized:printf("%6s","Init.");break;case StateReady:printf("%6s","Ready");break;case StateRunning:printf("%6s","Run");break;case StateStandby:printf("%6s","StBy.");break;case StateTerminated:printf("%6s","Term.");break;case StateWait:printf("%6s","Wait");break;case StateTransition:printf("%6s","Tran.");break;case StateUnknown:printf("%6s","Unkn.");break;default:printf("%6s","Unkn.");break;}switch(pSystemProc->Threads[ulIndex].WaitReason){case Executive:printf(" %-8s","Executi.");break;case FreePage:printf(" %-8s","FreePag.");break;case PageIn:printf(" %-8s","PageIn");break;case PoolAllocation:printf(" %-8s","PoolAll.");break;case DelayExecution:printf(" %-8s","DelayEx.");break;case Suspended:printf(" %-8s","Suspend.");break;case UserRequest:printf(" %-8s","UserReq.");break;case WrExecutive:printf(" %-8s","WrExect.");break;case WrFreePage:printf(" %-8s","WrFrePg.");break;case WrPageIn:printf(" %-8s","WrPageIn");break;case WrPoolAllocation:printf(" %-8s","WrPoolA.");break;case WrSuspended:printf(" %-8s","WrSuspe.");break;case WrUserRequest:printf(" %-8s","WrUsReq.");break;case WrEventPair:printf(" %-8s","WrEvent.");break;case WrQueue:printf(" %-8s","WrQueue");break;case WrLpcReceive:printf(" %-8s","WrLpcRv.");break;case WrLpcReply:printf(" %-8s","WrLpcRp.");break;case WrVertualMemory:printf(" %-8s","WrVerMm.");break;case WrPageOut:printf(" %-8s","WrPgOut.");break;case WrRendezvous:printf(" %-8s","WrRende.");break;case WrKernel:printf(" %-8s","WrKernel");break;default:printf(" %-8s","Unknown");break;}printf("\n");}printf("-------------------------------------------------------------------------------\n\n");printf("Total %d Thread(s) !\n\n",ulIndex);dwTotalProcess ++;break;}pSystemProc = (PSYSTEM_PROCESSES)((char *)pSystemProc + pSystemProc->NextEntryDelta);}}__finally{if(dwTotalProcess == 0){printf("Could not found the %d Process !\n",dwPID);}else{printf("TID:\t\t====>\tThread Identification\n");printf("Pri:\t\t====>\tPriority\n");printf("BPr:\t\t====>\tBase Priority\n");printf("Priv:\t\t====>\tPrivilege\n");printf("StartAddr:\t====>\tThread Start Address\n");printf("CSwitC:\t\t====>\tContext Switch Count\n");printf("WtReason:\t====>\tWait Reason\n");}if(lpSystemInfo != NULL){free(lpSystemInfo);}if(hNtDll != NULL){FreeLibrary(hNtDll);}}return 0;}VOID Start(){printf("T-PMList, by TOo2y\n");printf("E-mail: [e-mail]\n");printf("HomePage: www.safechina.net\n");printf("Date: 05-10-2003\n\n");return ;}VOID Usage(){printf("Usage:\tT-PMList  [-e] | [-s PID]\n");printf("  -e\t  Enumerate All Processes\n");printf("  -s PID  Show Special Process Information with PID\n\n");return ;}DWORD PerfInfo(){SYSTEM_PERFORMANCE_INFORMATION SystemPerfInfo;HMODULE         hNtDll = NULL;DWORD           dwNumberBytes;DWORD           dwReturnLength;NTSTATUS        Status;LONGLONG        llTempTime;__try{hNtDll = LoadLibrary("NtDll.dll");if(hNtDll == NULL){printf("LoadLibrary Error: %d\n",GetLastError());__leave;}NtQuerySystemInformation = (NTQUERYSYSTEMINFORMATION)GetProcAddress(hNtDll,"NtQuerySystemInformation");if(NtQuerySystemInformation == NULL){printf("GetProcAddress for NtQuerySystemInformation Error: %d\n",GetLastError());__leave;}dwNumberBytes = sizeof(SYSTEM_PERFORMANCE_INFORMATION);Status = NtQuerySystemInformation(SYSTEM_PERF_INFO, &SystemPerfInfo, dwNumberBytes, &dwReturnLength);if(Status != STATUS_SUCCESS){printf("NtQuerySystemInformation for Performance Error: %d\n",GetLastError());__leave;}printf("IdleTime:\t\t");llTempTime  = SystemPerfInfo.IdleTime.QuadPart;llTempTime /= 10000;printf("%d:",llTempTime/(60*60*1000));llTempTime %= 60*60*1000;printf("%.2d:",llTempTime/(60*1000));llTempTime %= 60*1000;printf("%.2d.",llTempTime/1000);llTempTime %= 1000;printf("%.3d\n",llTempTime);printf("ReadOperationCount:\t%-10d\t",SystemPerfInfo.ReadOperationCount);printf("ReadTransferCount:\t%d\n",SystemPerfInfo.ReadTransferCount);printf("WriteOperationCount:\t%-10d\t",SystemPerfInfo.WriteOperationCount);printf("WriteTransferCount:\t%d\n",SystemPerfInfo.WriteTransferCount);printf("OtherOperationCount:\t%-10d\t",SystemPerfInfo.OtherOperationCount);printf("OtherTransferCount:\t%d\n",SystemPerfInfo.OtherTransferCount);printf("AvailablePages:\t\t%-10d\t",SystemPerfInfo.AvailablePages);printf("TotalCommittedPage:\t%d\n",SystemPerfInfo.TotalCommittedPages);printf("CommitLimit:\t\t%-10d\t",SystemPerfInfo.TotalCommitLimit);printf("PeakCommitment:\t\t%d\n",SystemPerfInfo.PeakCommitment);printf("PageFault:\t\t%-10d\t",SystemPerfInfo.PageFaults);printf("WriteCopyFault:\t\t%d\n",SystemPerfInfo.WriteCopyFaults);printf("TransitionFault:\t%-10d\t",SystemPerfInfo.TransitionFaults);printf("DemandZeroFault:\t%d\n",SystemPerfInfo.DemandZeroFaults);printf("PagesRead:\t\t%-10d\t",SystemPerfInfo.PagesRead);printf("PageReadIos:\t\t%d\n",SystemPerfInfo.PageReadIos);printf("PagesWritten:\t\t%-10d\t",SystemPerfInfo.PagefilePagesWritten);printf("PageWriteIos:\t\t%d\n",SystemPerfInfo.PagefilePageWriteIos);printf("MappedFilePagesWritten:\t%-10d\t",SystemPerfInfo.MappedFilePagesWritten);printf("MappedFileWriteIos:\t%d\n",SystemPerfInfo.MappedFileWriteIos);printf("PagedPoolUsage:\t\t%-10d\t",SystemPerfInfo.PagedPoolUsage);printf("NonPagedPoolUsage:\t%d\n",SystemPerfInfo.NonPagedPoolUsage);printf("PagedPoolAllocs:\t%-10d\t",SystemPerfInfo.PagedPoolAllocs);printf("NonPagedPoolAllocs:\t%d\n",SystemPerfInfo.NonPagedPoolAllocs);printf("PagedPoolFrees:\t\t%-10d\t",SystemPerfInfo.PagedPoolFrees);printf("NonPagedPoolFrees:\t%d\n",SystemPerfInfo.NonPagedPoolFress);printf("SystemCodePage:\t\t%-10d\t",SystemPerfInfo.SystemCodePage);printf("TotalSystemCodePage:\t%d\n",SystemPerfInfo.TotalSystemCodePages);printf("TotalFreeSysPTE:\t%-10d\t",SystemPerfInfo.TotalFreeSystemPtes);printf("TotalSystemDriverPages:\t%d\n",SystemPerfInfo.TotalSystemDriverPages);printf("PagedPoolPage:\t\t%-10d\t",SystemPerfInfo.PagedPoolPage);printf("SystemDriverPage:\t%d\n",SystemPerfInfo.SystemDriverPage);printf("FastReadWait:\t\t%-10d\t",SystemPerfInfo.FastReadWait);printf("FastReadNoWait:\t\t%d\n",SystemPerfInfo.FastReadNoWait);printf("FastReadNoPossible:\t%-10d\t",SystemPerfInfo.FastReadNotPossible);printf("FastReadResourceMiss:\t%d\n",SystemPerfInfo.FastReadResourceMiss);printf("FastMdlReadWait:\t%-10d\t",SystemPerfInfo.FastMdlReadWait);printf("FastMdlReadNoWait:\t%d\n",SystemPerfInfo.FastMdlReadNoWait);printf("FastMdlReadNotPossible:\t%-10d\t",SystemPerfInfo.FastMdlReadNotPossible);printf("FastMdlReadResourceMiss:%d\n",SystemPerfInfo.FastMdlReadResourceMiss);printf("MapDataWait:\t\t%-10d\t",SystemPerfInfo.MapDataWait);printf("MapDataNoWait:\t\t%d\n",SystemPerfInfo.MapDataNoWait);printf("MapDataWaitMiss:\t%-10d\t",SystemPerfInfo.MapDataWaitMiss);printf("MapDataNoWaitMiss:\t%d\n",SystemPerfInfo.MapDataNoWaitMiss);printf("ReadAheadIos:\t\t%-10d\t",SystemPerfInfo.ReadAheadIos);printf("PinMappedDataCount:\t%d\n",SystemPerfInfo.PinMappedDataCount);printf("PinReadWait:\t\t%-10d\t",SystemPerfInfo.PinReadWait);printf("PinReadNoWait:\t\t%d\n",SystemPerfInfo.PinReadNoWait);printf("PinReadWaitMiss:\t%-10d\t",SystemPerfInfo.PinReadWaitMiss);printf("PinReadNoWaitMiss:\t%d\n",SystemPerfInfo.PinReadNoWaitMiss);printf("CopyReadWait:\t\t%-10d\t",SystemPerfInfo.CopyReadWait);printf("CopyReadNoWait:\t\t%d\n",SystemPerfInfo.CopyReadNoWait);printf("CopyReadWaitMiss:\t%-10d\t",SystemPerfInfo.CopyReadWaitMiss);printf("CopyReadNoWaitMiss:\t%-10d\n",SystemPerfInfo.CopyReadNoWaitMiss);printf("MdlReadWait:\t\t%-10d\t",SystemPerfInfo.MdlReadWait);printf("MdlReadNoWait:\t\t%d\n",SystemPerfInfo.MdlReadNoWait);printf("MdlReadWaitMiss:\t%-10d\t",SystemPerfInfo.MdlReadWaitMiss);printf("MdlReadNoWaitMiss:\t%d\n",SystemPerfInfo.MdlReadNoWaitMiss);printf("LazyWriteIos:\t\t%-10d\t",SystemPerfInfo.LazyWriteIos);printf("LazyWritePages:\t\t%d\n",SystemPerfInfo.LazyWritePages);printf("DataPages:\t\t%-10d\t",SystemPerfInfo.DataPages);printf("DataFlushes:\t\t%d\n",SystemPerfInfo.DataFlushes);printf("FirstLevelTbFills:\t%-10d\t",SystemPerfInfo.FirstLevelTbFills);printf("SecondLevelTbFills:\t%d\n",SystemPerfInfo.SecondLevelTbFills);printf("ContextSwitches:\t%-10d\t",SystemPerfInfo.ContextSwitches);printf("SytemCall:\t\t%d\n",SystemPerfInfo.SystemCall);printf("MemorySystemCachePage:\t\t\t%d\n",SystemPerfInfo.MmSystemCachePage);printf("SmallPagedLookasideListAllocateHits:\t%d\n",SystemPerfInfo.SmallPagedLookasideListAllocateHits);printf("SmallNonPagedLookasideListAllocateHits:\t%d\n",SystemPerfInfo.SmallNonPagedLookasideListAllocateHits);}__finally{if(hNtDll != NULL){FreeLibrary(hNtDll);}}return 0;}DWORD ProcTime(){SYSTEM_PROCESSOR_TIMES  SystemProcTime;HMODULE                 hNtDll = NULL;DWORD                   dwNumberBytes;DWORD                   dwReturnLength;NTSTATUS                Status;LONGLONG                llTempTime;__try{hNtDll = LoadLibrary("NtDll.dll");if(hNtDll == NULL){printf("LoadLibrary Error: %d\n",GetLastError());__leave;}NtQuerySystemInformation = (NTQUERYSYSTEMINFORMATION)GetProcAddress(hNtDll,"NtQuerySystemInformation");if(NtQuerySystemInformation == NULL){printf("GetProcAddress for NtQuerySystemInformation Error: %d\n",GetLastError());__leave;}dwNumberBytes = sizeof(SYSTEM_PROCESSOR_TIMES);NtQuerySystemInformation = (NTQUERYSYSTEMINFORMATION)GetProcAddress(hNtDll,"NtQuerySystemInformation");if(NtQuerySystemInformation == NULL){printf("GetProcAddress Error: %d\n",GetLastError());__leave;}Status = NtQuerySystemInformation(SYSTEM_PROC_TIME, &SystemProcTime, dwNumberBytes, &dwReturnLength);if(Status != STATUS_SUCCESS){printf("NtQuerySystemInformation for Processor Time Error: %d\n",GetLastError());__leave;}printf("IdleTime:\t\t");llTempTime  = SystemProcTime.IdleTime.QuadPart;llTempTime /= 10000;printf("%d:",llTempTime/(60*60*1000));llTempTime %= 60*60*1000;printf("%.2d:",llTempTime/(60*1000));llTempTime %= 60*1000;printf("%.2d.",llTempTime/1000);llTempTime %= 1000;printf("%.3d\n",llTempTime);printf("KernelTime:\t\t");llTempTime  = SystemProcTime.KernelTime.QuadPart;llTempTime /= 10000;printf("%d:",llTempTime/(60*60*1000));llTempTime %= 60*60*1000;printf("%.2d:",llTempTime/(60*1000));llTempTime %= 60*1000;printf("%.2d.",llTempTime/1000);llTempTime %= 1000;printf("%.3d\n",llTempTime);printf("UserTime:\t\t");llTempTime  = SystemProcTime.UserTime.QuadPart;llTempTime /= 10000;printf("%d:",llTempTime/(60*60*1000));llTempTime %= 60*60*1000;printf("%.2d:",llTempTime/(60*1000));llTempTime %= 60*1000;printf("%.2d.",llTempTime/1000);llTempTime %= 1000;printf("%.3d\n",llTempTime);printf("DpcTime:\t\t");llTempTime  = SystemProcTime.DpcTime.QuadPart;llTempTime /= 10000;printf("%d:",llTempTime/(60*60*1000));llTempTime %= 60*60*1000;printf("%.2d:",llTempTime/(60*1000));llTempTime %= 60*1000;printf("%.2d.",llTempTime/1000);llTempTime %= 1000;printf("%.3d\n",llTempTime);printf("InterruptTime:\t\t");llTempTime  = SystemProcTime.InterruptTime.QuadPart;llTempTime /= 10000;printf("%d:",llTempTime/(60*60*1000));llTempTime %= 60*60*1000;printf("%.2d:",llTempTime/(60*1000));llTempTime %= 60*1000;printf("%.2d.",llTempTime/1000);llTempTime %= 1000;printf("%.3d\n",llTempTime);printf("InterruptCount:\t\t%d\n",SystemProcTime.InterruptCount);}__finally{if(hNtDll != NULL){FreeLibrary(hNtDll);}}return 0;}DWORD PagefileInfo(){PSYSTEM_PAGEFILE_INFORMATION   pSystemPagefileInfo;PVOID                          pBuffer;HMODULE                        hNtDll = NULL;DWORD                          dwNumberBytes;DWORD                          dwReturnLength;NTSTATUS                       Status;__try{hNtDll = LoadLibrary("NtDll.dll");if(hNtDll == NULL){printf("LoadLibrary Error: %d\n",GetLastError());__leave;}NtQuerySystemInformation = (NTQUERYSYSTEMINFORMATION)GetProcAddress(hNtDll,"NtQuerySystemInformation");if(NtQuerySystemInformation == NULL){printf("GetProcAddress for NtQuerySystemInformation Error: %d\n",GetLastError());__leave;}dwNumberBytes = MAX_INFO_BUF_LEN;pBuffer = (LPVOID)malloc(dwNumberBytes);Status  = NtQuerySystemInformation(SYSTEM_PAGE_INFO, pBuffer, dwNumberBytes, &dwReturnLength);if(Status != STATUS_SUCCESS){printf("NtQuerySystemInformation for Pagefile Error: %d\n",GetLastError());__leave;}pSystemPagefileInfo = (PSYSTEM_PAGEFILE_INFORMATION)pBuffer;do{printf("CurrentPagefileSize:\t%d\n",pSystemPagefileInfo->CurrentSize);printf("TotalPagefileUsed:\t%d\n",pSystemPagefileInfo->TotalUsed);printf("PeakPagefileUsed:\t%d\n",pSystemPagefileInfo->PeakUsed);wprintf(L"PagefileFileName:\t%s\n",pSystemPagefileInfo->FileName.Buffer);pSystemPagefileInfo = (PSYSTEM_PAGEFILE_INFORMATION)((char *)pBuffer + pSystemPagefileInfo->NetxEntryOffset);}while(pSystemPagefileInfo->NetxEntryOffset != 0);}__finally{if(pBuffer != NULL){free(pBuffer);}if(hNtDll  != NULL){FreeLibrary(hNtDll);}}return 0;}DWORD CacheInfo(){SYSTEM_CACHE_INFORMATION       SystemCacheInfo;HMODULE                        hNtDll = NULL;DWORD                          dwNumberBytes;DWORD                          dwReturnLength;NTSTATUS                       Status;__try{hNtDll = LoadLibrary("NtDll.dll");if(hNtDll == NULL){printf("LoadLibrary Error: %d\n",GetLastError());__leave;}NtQuerySystemInformation = (NTQUERYSYSTEMINFORMATION)GetProcAddress(hNtDll,"NtQuerySystemInformation");if(NtQuerySystemInformation == NULL){printf("GetProcAddress for NtQuerySystemInformation Error: %d\n",GetLastError());__leave;}dwNumberBytes = sizeof(SYSTEM_CACHE_INFORMATION);Status  = NtQuerySystemInformation(SYSTEM_CACHE_INFO, &SystemCacheInfo, dwNumberBytes, &dwReturnLength);if(Status != STATUS_SUCCESS){printf("NtQuerySystemInformation for Cache Error: %d\n",GetLastError());__leave;}printf("CacheWorkingSetSize:\t\t%d(KB)\n",SystemCacheInfo.SystemCacheWsSize/1024);printf("CacheWorkingSetPeakSize:\t%d(KB)\n",SystemCacheInfo.SystemCacheWsPeakSize/1024);printf("CacheWorkingSetFaults:\t\t%d\n",SystemCacheInfo.SystemCacheWsFaults);printf("CacheWorkingSetMinimum:\t\t%d\n",SystemCacheInfo.SystemCacheWsMinimum);printf("CacheWorkingSetMaximum:\t\t%d\n",SystemCacheInfo.SystemCacheWsMaximum);printf("TransitionSharedPages:\t\t%d\n",SystemCacheInfo.TransitionSharedPages);printf("TransitionSharedPagesPeak:\t%d\n",SystemCacheInfo.TransitionSharedPagesPeak);}__finally{if(hNtDll != NULL){FreeLibrary(hNtDll);}}return 0;}void main(){EnumProcess();SpeciProcess(3416);  //自己找个进程IDPerfInfo();ProcTime();PagefileInfo();CacheInfo();}

以上代码只是在win7的家庭版和旗舰版上测试过了。可以得到类似任务管理器器的效果。上面的那一大堆结构体定义据说会随着Windows的版本变化。因为手头没有其他Windows系统，所以还没测试。