查找进程线程的起始地址,例如ProcessHacker C#?

时间:2018-12-16 16:04:09

标签: c# process targetprocess

如何在像Process Hacker一样运行的程序的线程中找到起始地址和目的地?

Process pc = Process.GetProcessesByName("notepad")[0];
        ProcessThreadCollection PTC = pc.Threads;
        foreach (ProcessThread PT in PTC)
        {
            listBox1.Items.Add(PT.StartAddress);
        }

这仅导致线程起始地址。

我想做这样的事情;

enter image description here

1 个答案:

答案 0 :(得分:0)

简单地说,我达到了以下结果;

        listBox1.Items.Clear();
        Process pc = Process.GetProcessesByName("winrar")[0];
        ProcessModuleCollection pmc = pc.Modules;
        foreach(ProcessModule pm2 in pmc)
        {
            listBox1.Items.Add(pm2.ModuleName + "!" + pm2.BaseAddress);
        }