我尝试在任务管理器 Windows 中获取所有项目，但我得到的所有项目 - 空行。我使用 RAD Studio XE7
procedure wtff(hwn: Thandle);
var
ListView: HWND;
ProcessId: DWORD;
Process: Thandle;
Size: Cardinal;
MemLocal: Pointer;
MemRemote: Pointer;
NumBytes: NativeUInt;
IconIndex: Integer;
IconLabel: string;
begin
ProcessId := 0;
ListView := FindWindowEx(hwn, 0, 'SysListView32', nil);
GetWindowThreadProcessId(ListView, @ProcessId);
Process := OpenProcess(PROCESS_VM_OPERATION or PROCESS_VM_READ or
PROCESS_VM_WRITE, False, ProcessId);
if (Process <> 0) then
try
Size := SizeOf(TLVItem) + SizeOf(Char) * MAX_PATH + 1;
MemLocal := VirtualAlloc(nil, Size, MEM_RESERVE or MEM_COMMIT,
PAGE_READWRITE);
MemRemote := VirtualAllocEx(Process, nil, Size, MEM_RESERVE or MEM_COMMIT,
PAGE_READWRITE);
if Assigned(MemLocal) and Assigned(MemRemote) then
// If Assigned memory
try
for IconIndex := 0 to SendMessage(ListView, LVM_GETITEMCOUNT,
0, 0) - 1 do
begin
ZeroMemory(MemLocal, SizeOf(TLVItem));
with PLVItem(MemLocal)^ do
begin
mask := LVIF_TEXT;
iItem := IconIndex;
pszText :=
LPTSTR(Cardinal(MemRemote) + Cardinal(SizeOf(TLVItem)));
cchTextMax := MAX_PATH;
end;
NumBytes := 0;
if WriteProcessMemory(Process, MemRemote, MemLocal, Size, NumBytes)
and Boolean(SendMessage(ListView, LVM_GETITEM, 0,
LPARAM(MemRemote))) and ReadProcessMemory(Process, MemRemote,
MemLocal, Size, NumBytes) then
begin
// Getting the text
IconLabel :=
string(PChar(Cardinal(MemLocal) + Cardinal(SizeOf(TLVItem))));
if CaseSensitive then
begin
IconLabel := LowerCase(IconLabel);
aText := LowerCase(aText);
end;
Form1.Memo1.Lines.Add(IconLabel);
/// ADD IN MEMO
end;
end;
except
end;
if Assigned(MemRemote) then
VirtualFreeEx(Process, MemRemote, 0, MEM_RELEASE);
if Assigned(MemLocal) then
VirtualFree(MemLocal, 0, MEM_RELEASE);
finally
CloseHandle(Process);
end;
end;
所以，在备忘录中我只看到很多空行。