Process enumeration class

sudhir_Kumar

Rate me:

3.50/5 (6 votes)

6 Jun 2007CPOL2 min read

26.3K

1.1K

This class can be used for the enumeration of processes and modules.

Introduction

This article is regarding how to enumerate the processes running currently as well as enumerate the modules loaded in a particular process. There are two classes provided for these enumerations.

The Problem

During the development of certain software, we need many information about the processes and modules. This class can help to do this (e.g., if we need the version information of a process or module, this file class help you).

Basic Usage

This class exposes the complete interface for enumerating the processes, and the modules for a process.

There are two classes, CEnumProcessList and CModuleInfo. CEnumProcessList enumerates the processes and modules, and you can query for the module information with the CModuleInfo class.

The functions exposed by the CEnumProcessList class as public methods include:

No.	Function Name	Description
1	`CEnumProcessList`	This is the default constructor which enumerates all the running processes in the system.
2	`CEnumProcessList(DWORD dwProcessID);`	This constructor takes the Process ID as a parameter, and makes a list of modules that are loaded that are related to the process.
3	`BOOL GetModuleVersion(CString ModuleName,CString &VersionString);`	Returns the version of the the process/module that has been passed to the function. You have to query the version according to the list.
4	`BOOL SearchProcessOrModule(CString ModuleName,CModuleDetails* pModuleData);`	You can search for a process or a module with this function.
5	`BOOL HasFailed();`	Returns if the status indicates failure.
6	`POSITION GetHeadPosition();`
7	`CModuleDetails* GetNext(POSITION &Pos);`	Gets the next position in the list.
8	`DWORD LastError();`	Returns the last error occurred while processing on process or modules.
9	`static CString FormatError(DWORD dwError);`	Returns the formatted error.

How the Class Works

As the name suggests, when we create an object of CEnumProcessList with the default constructor, the class enumerates the current running processes in the system using the EnumProcesses function, and makes a list of them as CModuleInfo objects. The class uses the CModuleInfo class to store process information.

Now, we can query the class with the function like GetHeadPosition to get the elements from the list. To get the list of all modules loaded by a process, we have to use another constructor of the class with the parameter, process ID. This function will generate the list of all the modules loaded by the process .

Using this Class in Your Application

You need to add the ProcListP.h and ProcListP.CPP files in your project. Now, it depends where you want to use the class. The class can be used as given below:

//To get the list of all processes
CEnumProcessList * m_listp = new CEnumProcessList;
//This will genrate the list of all processes

for(POSITION modulePos = m_listp->GetHeadPosition();modulePos!=NULL;) 
{ 
    CModuleDetails* pModuleData = new CModuleDetails;
    pModuleData = m_listp->GetNext(modulePos); 
    //You can use it to extarct all the informatio about the process
}

//To genrate the list of all modules of a process

CEnumProcessList * m_listp =  newCEnumProcessList(pModuleInfo->pProcessID);
for(POSITION modulePos1 = m_listp->GetHeadPosition();modulePos1!=NULL;)
{
  CModuleDetails* pModuleData = new CModuleDetails;
  pModuleData = m_listp->GetNext(modulePos1);
 //You can use it to extarct all the informatio about the modules related to the process

}

Error Codes

You can query for errors with the functions provided with the class.

Future Improvements and/or Enhancements

MFC dependency
OS dependency
Custom error code can be defined for the class.
Other ways can also be implemented instead of only using psapi.lib.

License

This article, along with any associated source code and files, is licensed under The Code Project Open License (CPOL)

Written By

sudhir_Kumar

Systems Engineer

India

This member has not yet provided a Biography. Assume it's interesting and varied, and probably something to do with programming.

CProcessListDlg::~CProcessListDlg() { TRACE0("~CProcessListDlg()\n" ); int iNb1 = m_PtrModuleDetailsList.GetCount(); CString sNb1 = _T(""); sNb1.Format(_T("%i"), iNb1); //Convert int to CString TRACE0("~CProcessListDlg() : m_PtrModuleDetailsList.GetCount()=" + sNb1 + "\n" ); while (!m_PtrModuleDetailsList.IsEmpty()) { delete m_PtrModuleDetailsList.GetHead(); m_PtrModuleDetailsList.RemoveHead(); } int iNb2 = m_PtrEnumProcessList.GetCount(); CString sNb2 = _T(""); sNb2.Format(_T("%i"), iNb2); //Convert int to CString TRACE0("~CProcessListDlg() : m_ModulesList.GetCount()=" + sNb2 + "\n" ); while (!m_PtrEnumProcessList.IsEmpty()) { delete m_PtrEnumProcessList.GetHead(); m_PtrEnumProcessList.RemoveHead(); } }

void CProcessListDlg::OnSelchangedTree(NMHDR* pNMHDR, LRESULT* pResult) { m_ListCtrl.DeleteAllItems(); pCtrl.SetRedraw(FALSE); NM_TREEVIEW* pNMTreeView = (NM_TREEVIEW*)pNMHDR; CModuleDetails *pModuleInfo = reinterpret_cast<CModuleDetails *> (pCtrl.GetItemData( pNMTreeView->itemNew.hItem )); CString strText; if(pModuleInfo) { CEnumProcessList * m_listp = new CEnumProcessList(pModuleInfo->pProcessID); m_PtrEnumProcessList.AddTail(m_listp); //<---- CHANGE / ADD if ( m_listp->Get_m_hProcess() != NULL ) //<---- CHANGE / ADD { //<---- CHANGE / ADD for(POSITION modulePos1 = m_listp->GetHeadPosition(); modulePos1 != NULL;) { CModuleDetails* pModuleData = new CModuleDetails; m_PtrModuleDetailsList.AddTail(pModuleData); //<---- CHANGE / ADD pModuleData = m_listp->GetNext(modulePos1); int nIndex = m_ImageList.Add(pModuleData->GetAssociatedIcon()); nIndex = nIndex ? nIndex :20; HTREEITEM hProcessModu = pCtrl.InsertItem(pModuleData->GetFullFileName(),nIndex,nIndex,pNMTreeView->itemNew.hItem); pCtrl.SetItemData( hProcessModu, reinterpret_cast<DWORD>(pModuleData)); } } //<---- CHANGE / ADD if(pModuleInfo->IsProcessTrue()) GetDlgItem(IDC_BUTTON1)->EnableWindow(TRUE); else GetDlgItem(IDC_BUTTON1)->EnableWindow(FALSE); } if(pModuleInfo) { m_ListCtrl.InsertItem(LVIF_TEXT|LVIF_STATE, 0,_T("Module Name"),0, LVIS_SELECTED,0, 0); m_ListCtrl.SetItemText(0, 1, pModuleInfo->GetModuleName()); m_ListCtrl.InsertItem(LVIF_TEXT|LVIF_STATE, 1,_T("Module Path"),0, LVIS_SELECTED,0, 0); m_ListCtrl.SetItemText(1, 1, pModuleInfo->GetFullFileName()); m_ListCtrl.InsertItem(LVIF_TEXT|LVIF_STATE, 2,_T("Version"),0, LVIS_SELECTED,0, 0); m_ListCtrl.SetItemText(2, 1, pModuleInfo->GetFileVersion()); m_ListCtrl.InsertItem(LVIF_TEXT|LVIF_STATE, 3,_T("File Size"),0, LVIS_SELECTED,0, 0); CString strFileSize; strFileSize.Format(_T("%ld"),pModuleInfo->GetFileSize()); m_ListCtrl.SetItemText(3, 1,strFileSize); m_ListCtrl.InsertItem(LVIF_TEXT|LVIF_STATE, 4,_T("Company"),0, LVIS_SELECTED,0, 0); m_ListCtrl.SetItemText(4, 1, pModuleInfo->GetCompanyName()); m_ListCtrl.InsertItem(LVIF_TEXT|LVIF_STATE, 5,_T("Product Name"),0, LVIS_SELECTED,0, 0); m_ListCtrl.SetItemText(5, 1, pModuleInfo->GetProductName()); m_ListCtrl.InsertItem(LVIF_TEXT|LVIF_STATE, 6,_T("Description"),0, LVIS_SELECTED,0, 0); m_ListCtrl.SetItemText(6, 1, pModuleInfo->GetFileDescription()); CString strPID; strPID.Format(_T("%.6d"), pModuleInfo->pProcessID); m_ListCtrl.InsertItem(LVIF_TEXT|LVIF_STATE, 7,_T("ProcessID"),0, LVIS_SELECTED,0, 0); m_ListCtrl.SetItemText(7, 1, strPID); } pCtrl.SetRedraw(TRUE); *pResult = 0; }

//------------------------------------------------------------------------------------------ BOOL CProcessListDlg::LoadProcesses() { pCtrl.DeleteAllItems(); pCtrl.SetRedraw(FALSE); int m_nInitialImageCount = 1; const int nNewImageCount = m_ImageList.GetImageCount(); for( int nIndex = nNewImageCount; nIndex > m_nInitialImageCount; --nIndex ) { VERIFY( m_ImageList.Remove( nIndex - 1 )); } HTREEITEM root = pCtrl.InsertItem(_T("Processes List"),0,0,NULL); CEnumProcessList * m_listp = new CEnumProcessList; m_PtrEnumProcessList.AddTail(m_listp); //<---- CHANGE / ADD for(POSITION modulePos = m_listp->GetHeadPosition();modulePos!=NULL;) { CModuleDetails* pModuleData = new CModuleDetails; m_PtrModuleDetailsList.AddTail(pModuleData); //<---- CHANGE / ADD pModuleData = m_listp->GetNext(modulePos); int nIndex = m_ImageList.Add(pModuleData->GetAssociatedIcon()); nIndex = nIndex ? nIndex :20; HTREEITEM hProcess = pCtrl.InsertItem(pModuleData->GetModuleName(),nIndex,nIndex,root); pCtrl.SetItemData(hProcess, reinterpret_cast<DWORD>(pModuleData)); } pCtrl.SetRedraw(TRUE); pCtrl.Expand(root,TVE_EXPAND); return TRUE; }

<pre>void CProcessListDlg::OnSelchangedTree(NMHDR* pNMHDR, LRESULT* pResult) { m_ListCtrl.DeleteAllItems(); pCtrl.SetRedraw(FALSE); NM_TREEVIEW* pNMTreeView = (NM_TREEVIEW*)pNMHDR; CModuleDetails *pModuleInfo = reinterpret_cast<CModuleDetails *> (pCtrl.GetItemData( pNMTreeView->itemNew.hItem )); CString strText; if(pModuleInfo) { CEnumProcessList * m_listp = new CEnumProcessList(pModuleInfo->pProcessID); if ( m_listp->Get_m_hProcess() != NULL ) //Modification Here <----- { for(POSITION modulePos1 = m_listp->GetHeadPosition();modulePos1!=NULL;) { CModuleDetails* pModuleData = new CModuleDetails; pModuleData = m_listp->GetNext(modulePos1); int nIndex = m_ImageList.Add(pModuleData->GetAssociatedIcon()); nIndex = nIndex ? nIndex :20; HTREEITEM hProcessModu = pCtrl.InsertItem(pModuleData->GetFullFileName(),nIndex,nIndex,pNMTreeView->itemNew.hItem); pCtrl.SetItemData( hProcessModu, reinterpret_cast<DWORD>(pModuleData)); } } if(pModuleInfo->IsProcessTrue()) GetDlgItem(IDC_BUTTON1)->EnableWindow(TRUE); else GetDlgItem(IDC_BUTTON1)->EnableWindow(FALSE); } if(pModuleInfo) { m_ListCtrl.InsertItem(LVIF_TEXT|LVIF_STATE, 0,"Module Name",0, LVIS_SELECTED,0, 0); m_ListCtrl.SetItemText(0, 1, pModuleInfo->GetModuleName()); m_ListCtrl.InsertItem(LVIF_TEXT|LVIF_STATE, 1,"Module Path",0, LVIS_SELECTED,0, 0); m_ListCtrl.SetItemText(1, 1, pModuleInfo->GetFullFileName()); m_ListCtrl.InsertItem(LVIF_TEXT|LVIF_STATE, 2,"Version",0, LVIS_SELECTED,0, 0); m_ListCtrl.SetItemText(2, 1, pModuleInfo->GetFileVersion()); m_ListCtrl.InsertItem(LVIF_TEXT|LVIF_STATE, 3,"File Size",0, LVIS_SELECTED,0, 0); CString strFileSize; strFileSize.Format("%ld",pModuleInfo->GetFileSize()); m_ListCtrl.SetItemText(3, 1,strFileSize); m_ListCtrl.InsertItem(LVIF_TEXT|LVIF_STATE, 4,"Company",0, LVIS_SELECTED,0, 0); m_ListCtrl.SetItemText(4, 1, pModuleInfo->GetCompanyName()); m_ListCtrl.InsertItem(LVIF_TEXT|LVIF_STATE, 5,"Product Name",0, LVIS_SELECTED,0, 0); m_ListCtrl.SetItemText(5, 1, pModuleInfo->GetProductName()); m_ListCtrl.InsertItem(LVIF_TEXT|LVIF_STATE, 6,"Description",0, LVIS_SELECTED,0, 0); m_ListCtrl.SetItemText(6, 1, pModuleInfo->GetFileDescription()); CString strPID; strPID.Format("%.6d", pModuleInfo->pProcessID); m_ListCtrl.InsertItem(LVIF_TEXT|LVIF_STATE, 7,"ProcessID",0, LVIS_SELECTED,0, 0); m_ListCtrl.SetItemText(7, 1, strPID); } pCtrl.SetRedraw(TRUE); *pResult = 0; }

Use Ctrl+Left/Right to switch messages, Ctrl+Up/Down to switch threads, Ctrl+Shift+Left/Right to switch pages.