| Modifier and Type | Class and Description |
|---|---|
| public static class | Tlhelp32.MODULEENTRY32W
Describes an entry from a list of the modules belonging to the specified process. |
| public static class | Tlhelp32.PROCESSENTRY32
Describes an entry from a list of the processes residing in the system address space when a snapshot was taken. |
| public static class | Tlhelp32.THREADENTRY32
Describes an entry from a list of the threads executing in the system when a snapshot was taken. |
| Modifier and Type | Field and Description |
|---|---|
| public static final int | |
| public static final WinDef. | TH32CS_INHERIT
Indicates that the snapshot handle is to be inheritable. |
| public static final WinDef. | TH32CS_SNAPALL
Includes all processes and threads in the system, plus the heaps and modules of the process specified in th32ProcessID. |
| public static final WinDef. | TH32CS_SNAPHEAPLIST
Includes all heaps of the process specified in th32ProcessID in the snapshot. |
| public static final WinDef. | TH32CS_SNAPMODULE
Used with Kernel32.CreateToolhelp32Snapshot Includes all modules of the process specified in th32ProcessID in the snapshot. |
| public static final WinDef. | TH32CS_SNAPMODULE32
Includes all 32-bit modules of the process specified in th32ProcessID in the snapshot when called from a 64-bit process. |
| public static final WinDef. | TH32CS_SNAPPROCESS
Includes all processes in the system in the snapshot. |
| public static final WinDef. | TH32CS_SNAPTHREAD
Includes all threads in the system in the snapshot. |
| MAX_MODULE_NAME32 | back to summary |
|---|---|
| public static final int MAX_MODULE_NAME32 | |
| TH32CS_INHERIT | back to summary |
|---|---|
| public static final WinDef. Indicates that the snapshot handle is to be inheritable. | |
| TH32CS_SNAPALL | back to summary |
|---|---|
| public static final WinDef. Includes all processes and threads in the system, plus the heaps and modules of the process specified in th32ProcessID. | |
| TH32CS_SNAPHEAPLIST | back to summary |
|---|---|
| public static final WinDef. Includes all heaps of the process specified in th32ProcessID in the snapshot. To enumerate the heaps, see Heap32ListFirst. | |
| TH32CS_SNAPMODULE | back to summary |
|---|---|
| public static final WinDef. Used with Kernel32.CreateToolhelp32Snapshot
| |
| TH32CS_SNAPMODULE32 | back to summary |
|---|---|
| public static final WinDef. Includes all 32-bit modules of the process specified in th32ProcessID in the snapshot when called from a 64-bit process. This flag can be combined with TH32CS_SNAPMODULE or TH32CS_SNAPALL. If the function fails with ERROR_BAD_LENGTH, retry the function until it succeeds. | |
| TH32CS_SNAPPROCESS | back to summary |
|---|---|
| public static final WinDef. Includes all processes in the system in the snapshot. To enumerate the processes, see Process32First. | |
| TH32CS_SNAPTHREAD | back to summary |
|---|---|
| public static final WinDef. Includes all threads in the system in the snapshot. To enumerate the threads, see Thread32First. | |
| Modifier and Type | Class and Description |
|---|---|
| public static class | Tlhelp32.MODULEENTRY32W.ByReference
A representation of a MODULEENTRY32 structure as a reference |
| Modifier and Type | Field and Description |
|---|---|
| public WinDef. | dwSize
The size of the structure, in bytes. |
| public WinDef. | GlblcntUsage
The load count of the module, which is not generally meaningful, and usually equal to 0xFFFF. |
| public WinDef. | hModule
A handle to the module in the context of the owning process. |
| public Pointer | modBaseAddr
The base address of the module in the context of the owning process. |
| public WinDef. | modBaseSize
The size of the module, in bytes. |
| public WinDef. | ProccntUsage
The load count of the module (same as GlblcntUsage), which is not generally meaningful, and usually equal to 0xFFFF. |
| public char[] | szExePath
The module path. |
| public char[] | szModule
The module name. |
| public WinDef. | th32ModuleID
This member is no longer used, and is always set to one. |
| public WinDef. | th32ProcessID
The identifier of the process whose modules are to be examined. |
| Access | Constructor and Description |
|---|---|
| public | |
| public |
| Modifier and Type | Method and Description |
|---|---|
| public String | |
| public String |
| dwSize | back to summary |
|---|---|
| public WinDef. The size of the structure, in bytes. Before calling the Module32First function, set this member to sizeof(MODULEENTRY32). If you do not initialize dwSize, Module32First fails. | |
| GlblcntUsage | back to summary |
|---|---|
| public WinDef. The load count of the module, which is not generally meaningful, and usually equal to 0xFFFF. | |
| hModule | back to summary |
|---|---|
| public WinDef. A handle to the module in the context of the owning process. | |
| modBaseAddr | back to summary |
|---|---|
| public Pointer modBaseAddr The base address of the module in the context of the owning process. | |
| modBaseSize | back to summary |
|---|---|
| public WinDef. The size of the module, in bytes. | |
| ProccntUsage | back to summary |
|---|---|
| public WinDef. The load count of the module (same as GlblcntUsage), which is not generally meaningful, and usually equal to 0xFFFF. | |
| szExePath | back to summary |
|---|---|
| public char[] szExePath The module path. | |
| szModule | back to summary |
|---|---|
| public char[] szModule The module name. | |
| th32ModuleID | back to summary |
|---|---|
| public WinDef. This member is no longer used, and is always set to one. | |
| th32ProcessID | back to summary |
|---|---|
| public WinDef. The identifier of the process whose modules are to be examined. | |
| MODULEENTRY32W | back to summary |
|---|---|
| public MODULEENTRY32W() | |
| MODULEENTRY32W | back to summary |
|---|---|
| public MODULEENTRY32W(Pointer memory) | |
| szExePath | back to summary |
|---|---|
public String szExePath()
| |
| szModule | back to summary |
|---|---|
public String szModule()
| |
| Access | Constructor and Description |
|---|---|
| public | |
| public |
| ByReference | back to summary |
|---|---|
| public ByReference() | |
| ByReference | back to summary |
|---|---|
| public ByReference(Pointer memory) | |
| Modifier and Type | Class and Description |
|---|---|
| public static class |
| Modifier and Type | Field and Description |
|---|---|
| public WinDef. | cntThreads
The number of execution threads started by the process. |
| public WinDef. | cntUsage
This member is no longer used and is always set to zero. |
| public WinDef. | dwFlags
This member is no longer used, and is always set to zero. |
| public WinDef. | dwSize
The size of the structure, in bytes. |
| public WinDef. | pcPriClassBase
The base priority of any threads created by this process. |
| public char[] | szExeFile
The name of the executable file for the process. |
| public BaseTSD. | th32DefaultHeapID
This member is no longer used and is always set to zero. |
| public WinDef. | th32ModuleID
This member is no longer used and is always set to zero. |
| public WinDef. | th32ParentProcessID
The identifier of the process that created this process (its parent process). |
| public WinDef. | th32ProcessID
The process identifier. |
| Access | Constructor and Description |
|---|---|
| public | |
| public |
| cntThreads | back to summary |
|---|---|
| public WinDef. The number of execution threads started by the process. | |
| cntUsage | back to summary |
|---|---|
| public WinDef. This member is no longer used and is always set to zero. | |
| dwFlags | back to summary |
|---|---|
| public WinDef. This member is no longer used, and is always set to zero. | |
| dwSize | back to summary |
|---|---|
| public WinDef. The size of the structure, in bytes. Before calling the Process32First function, set this member to sizeof(PROCESSENTRY32). If you do not initialize dwSize, Process32First fails. | |
| pcPriClassBase | back to summary |
|---|---|
| public WinDef. The base priority of any threads created by this process. | |
| szExeFile | back to summary |
|---|---|
| public char[] szExeFile The name of the executable file for the process. To retrieve the full path to the executable file, call the Module32First function and check the szExePath member of the MODULEENTRY32 structure that is returned. However, if the calling process is a 32-bit process, you must call the QueryFullProcessImageName function to retrieve the full path of the executable file for a 64-bit process. | |
| th32DefaultHeapID | back to summary |
|---|---|
| public BaseTSD. This member is no longer used and is always set to zero. | |
| th32ModuleID | back to summary |
|---|---|
| public WinDef. This member is no longer used and is always set to zero. | |
| th32ParentProcessID | back to summary |
|---|---|
| public WinDef. The identifier of the process that created this process (its parent process). | |
| th32ProcessID | back to summary |
|---|---|
| public WinDef. The process identifier. | |
| PROCESSENTRY32 | back to summary |
|---|---|
| public PROCESSENTRY32() | |
| PROCESSENTRY32 | back to summary |
|---|---|
| public PROCESSENTRY32(Pointer memory) | |
| Access | Constructor and Description |
|---|---|
| public | |
| public |
| ByReference | back to summary |
|---|---|
| public ByReference() | |
| ByReference | back to summary |
|---|---|
| public ByReference(Pointer memory) | |
| Modifier and Type | Class and Description |
|---|---|
| public static class |
| Modifier and Type | Field and Description |
|---|---|
| public int | cntUsage
This member is no longer used and is always set to zero. |
| public int | dwFlags
This member is no longer used and is always set to zero. |
| public int | dwSize
The size of the structure, in bytes. |
| public int | th32OwnerProcessID
The identifier of the process that created the thread. |
| public int | th32ThreadID
The thread identifier, compatible with the thread identifier returned by the CreateProcess function. |
| public NativeLong | tpBasePri
The kernel base priority level assigned to the thread. |
| public NativeLong | tpDeltaPri
This member is no longer used and is always set to zero. |
| Access | Constructor and Description |
|---|---|
| public | |
| public |
| cntUsage | back to summary |
|---|---|
| public int cntUsage This member is no longer used and is always set to zero. | |
| dwFlags | back to summary |
|---|---|
| public int dwFlags This member is no longer used and is always set to zero. | |
| dwSize | back to summary |
|---|---|
| public int dwSize The size of the structure, in bytes. Before calling the Thread32First function, set this member to sizeof(THREADENTRY32). If you do not initialize dwSize, Thread32First fails. | |
| th32OwnerProcessID | back to summary |
|---|---|
| public int th32OwnerProcessID The identifier of the process that created the thread. | |
| th32ThreadID | back to summary |
|---|---|
| public int th32ThreadID The thread identifier, compatible with the thread identifier returned by the CreateProcess function. | |
| tpBasePri | back to summary |
|---|---|
| public NativeLong tpBasePri The kernel base priority level assigned to the thread. The priority is a number from 0 to 31, with 0 representing the lowest possible thread priority. For more information, see KeQueryPriorityThread. | |
| tpDeltaPri | back to summary |
|---|---|
| public NativeLong tpDeltaPri This member is no longer used and is always set to zero. | |
| THREADENTRY32 | back to summary |
|---|---|
| public THREADENTRY32() | |
| THREADENTRY32 | back to summary |
|---|---|
| public THREADENTRY32(Pointer memory) | |
| Access | Constructor and Description |
|---|---|
| public | |
| public |
| ByReference | back to summary |
|---|---|
| public ByReference() | |
| ByReference | back to summary |
|---|---|
| public ByReference(Pointer memory) | |