获得系统中运行的程序及使用的DLL文件

     在microsoft visual studio中供给了一个不妨察看暂时运转的步调的东西process viewer 不妨察看体例中暂时运转的步调，底下我来引见在你的步调中怎样实行这种功效。     windows供给了一系列的api因变量不妨创造暂时的步调、模块、线程的“快速照相”(snapshot) 运用那些“快速照相”因变量就不妨赢得暂时的步调、模块等的消息。     底下实行的办法：     1、在form第11中学介入一个commandbutton控件、两个listbox控件     2、在form第11中学介入如次代码： private declare function createtoolhelp32snapshot lib "kernel32" _         (byval dwflags as long, byval th32processid as long) as long private declare function process32first lib "kernel32" _         (byval hsnapshot as long, lppe as processentry32) as long private declare function process32next lib "kernel32" _         (byval hsnapshot as long, lppe as processentry32) as long private declare function module32first lib "kernel32" _         (byval hsnapshot as long, lppe as moduleentry32) as long private declare function module32next lib "kernel32" _         (byval hsnapshot as long, lppe as moduleentry32) as long private declare function closehandle lib "kernel32" (byval _         hobject as long) as long private declare function sendmessage lib "user32" alias _         "sendmessagea" (byval hwnd as long, byval wmsg as _         long, byval wparam as long, lparam as any) as long private type processentry32     dwsize as long     cntusage as long     th32processid as long     th32defaultheapid as long     th32moduleid as long     cntthreads as long     th32parentprocessid as long     pcpriclassbase as long     dwflags as long     szexefile as string * 1024 end type private type moduleentry32     dwsize as long     th32moduleid as long     th32processid as long     glblcntusage as long     proccntusage as long     modbaseaddr as byte     modbasesize as long     hmodule as long     szmodule as string * 256     szexepath as string * 1024 end type const lb_sethorizontalextent = &h194 const th32cs_snapheaplist = &h1 const th32cs_snapprocess = &h2 const th32cs_snapthread = &h4 const th32cs_snapmodule = &h8 const th32cs_snapall = (th32cs_snapheaplist or th32cs_snapprocess _                         or th32cs_snapthread or th32cs_snapmodule) const th32cs_inherit = &h80000000 dim myentry(100) as processentry32 private sub command1_click()     dim my as processentry32     dim l as long        list1.clear     l = sendmessage(list1.hwnd, &h194, 640, 0)     '创造当出息序快速照相     l = createtoolhelp32snapshot(th32cs_snapprocess, 0)     if l then         my.dwsize = 1060         if (process32first(l, my)) then '遍历第一个步调             '遍历一切步调直到归来值为false             do                 list1.additem (trim$(my.szexefile))                 myentry(list1.listcount - 1) = my             loop until (process32next(l, my) < 1) end if '封闭快速照相句柄 closehandle l end if end sub private sub form_load() command1_click end sub private sub list1_click() dim l as long dim mm as moduleentry32 dim lm as long dim astr as string if myentry(list1.listindex).th32processid <> 0 then         l = sendmessage(list2.hwnd, &h194, 640, 0)         list2.clear                  '按照步调快速照相句柄创造步调的模块句柄         lm = createtoolhelp32snapshot(th32cs_snapmodule, _             myentry(list1.listindex).th32processid)         if lm > 0 then             mm.dwsize = len(mm)             '赢得第一个模块             if module32first(lm, mm) then                 '遍历一切模块领会归来值为false                 do                     if myentry(list1.listindex).th32processid = _                         mm.th32processid then                                                  astr = left$(mm.szmodule, (instr(1, _                             mm.szmodule, chr(0)) - 1))                                                  list2.additem astr                     end if                 loop until (module32next(lm, mm) < 1) end if closehandle (lm) end if end if end sub 运路途序，list第11中学就列出暂时运转的一切的步调的称呼及路途，点击个中任一个列表， 在list第22中学就会列出这个步调所运用的dll的文献名。按下command1从新赢得体例中运转的步调。 上头不过经过大略的步调引见了“快速照相”的创造和运用，只有稍加变革，就不妨赢得诸如 步调的线程数、模块尺寸、模块在外存的基地方等消息。 之上步调在windows95、vb5.0下运转经过。