how to get all handles of process
-
In Process Explorer software have function view handles of process i don't know how to get handles same that function someone give me idea>? thanks so much sorry if my english is not good
-
In Process Explorer software have function view handles of process i don't know how to get handles same that function someone give me idea>? thanks so much sorry if my english is not good
-
In Process Explorer software have function view handles of process i don't know how to get handles same that function someone give me idea>? thanks so much sorry if my english is not good
If you want to retrieve the number of opened handles by given process you can use GetProcessHandleCount[^]. Note that minimum supported clients for this function are Windows Vista and Windows XP with SP1. If you want to support older windows versions you can use NtQuerySystemInformation[^]. Look for
SYSTEM_PROCESS_INFORMATION class
and read the documentation carefully before using this function. I hope this helps. -
If you want to retrieve the number of opened handles by given process you can use GetProcessHandleCount[^]. Note that minimum supported clients for this function are Windows Vista and Windows XP with SP1. If you want to support older windows versions you can use NtQuerySystemInformation[^]. Look for
SYSTEM_PROCESS_INFORMATION class
and read the documentation carefully before using this function. I hope this helps.thanks. i 'll research...do you have a help document for me?
-
thanks very clearly :).. i'll try
-
thanks. i 'll research...do you have a help document for me?
Well I already gave you the link to the documentations of two APIs. The usage of
GetProcessHandleCount
is trivial, documentation says everything you need. ForNtQuerySystemInformation
you can check out this[^] thread, where you will find a sample code that actually retrieves Handle Count, Thread Count, etc. The example code actually uses ZwQuerySystemInformation[^] function but in fact this does not change anything for you, the usage is exactly the same. P.S. If you actually want to know the difference between 'Nt' and "Zw' prefixed native API functions, have a look at this interesting article[^]. :)