1

我正在使用此代码暂停进程。我在这里找到它http://www.codeproject.com/KB/threads/pausep.aspx

BOOL SuspendResumeThreadList(DWORD dwOwnerPID, bool bResumeThread) 
{ 
    HANDLE        hThreadSnap = NULL; 
    BOOL          bRet        = FALSE; 
    THREADENTRY32 te32        = {0}; 

    hThreadSnap = CreateToolhelp32Snapshot(TH32CS_SNAPTHREAD, 0); 
    if (hThreadSnap == INVALID_HANDLE_VALUE) 
        return (FALSE); 

    te32.dwSize = sizeof(THREADENTRY32); 

    if (Thread32First(hThreadSnap, &te32)) 
    { 
        do 
        { 
            if (te32.th32OwnerProcessID == dwOwnerPID) 
            {
                HANDLE hThread = OpenThread(THREAD_SUSPEND_RESUME, FALSE, te32.th32ThreadID);
                if (bResumeThread)
                {
                    //cout << _T("Resuming Thread 0x") << cout.setf( ios_base::hex ) << te32.th32ThreadID << '\n';
                    ResumeThread(hThread);
                }
                else
                {
                    //cout << _T("Suspending Thread 0x") << cout.setf( ios_base::hex ) << te32.th32ThreadID << '\n';
                    SuspendThread(hThread);
                }
                CloseHandle(hThread);
            } 
        }
        while (Thread32Next(hThreadSnap, &te32)); 
        bRet = TRUE; 
    } 
    else 
        bRet = FALSE;   
    CloseHandle (hThreadSnap); 
    return (bRet); 
}

现在我想要一种方法来查找进程是否被暂停？？？请帮我。

4

1 回答 1

3

如果我没记错的话，您可以为此目的使用NtQuerySystemInformation 。NtQuerySystemInformation您可以通过SYSTEM_PROCESS_INFORMATION遍历数组SYSTEM_PROCESS_INFORMATION并查找目标进程的 PID 来获得结构。您可以在此处SYSTEM_PROCESS_INFORMATION找到Wine 来源的详细说明。获得进程信息结构后，只需查看可以检查线程状态的位置。有关结构和枚举的更多详细信息，请查看 Wine 来源。SYSTEM_THREAD_INFORMATION

于 2010-12-22T16:03:37.150 回答