Windows核心编程：第4章 进程

Github

https://github.com/gongluck/Windows-Core-Program.git

//第4章 进程.cpp: 定义应用程序的入口点。
//

#include "stdafx.h"
#include "第4章 进程.h"

#include <shellapi.h>
#pragma warning(disable:4996)//GetVersionEx

int APIENTRY wWinMain(_In_ HINSTANCE hInstance,
                     _In_opt_ HINSTANCE hPrevInstance,
                     _In_ LPWSTR    lpCmdLine,
                     _In_ int       nCmdShow)
{
	HMODULE hModule = GetModuleHandle(nullptr);//获取主调进程的可执行文件的基地址(只检查主调进程的地址空间)
	HMODULE hMoudle2 = nullptr;
	GetModuleHandleEx(GET_MODULE_HANDLE_EX_FLAG_FROM_ADDRESS, (LPTSTR)wWinMain, &hMoudle2);//获取wWinMain所在模块的基地址,对于dll很有用的

	//获取模块路径
	TCHAR moudlename[_MAX_PATH] = { 0 };
	DWORD dret = GetModuleFileName(hMoudle2, moudlename, sizeof(moudlename));
	dret = GetLongPathName(moudlename, moudlename, sizeof(moudlename));

	TCHAR* cmdline = GetCommandLine();
	int argsnum = 0;
	PWSTR* ppArgv = CommandLineToArgvW(GetCommandLineW(), &argsnum);//切分命令行参数
	for (int i = 0; i < argsnum; ++i)
	{
		ppArgv[i];//第i个参数
	}
	HeapFree(GetProcessHeap(), 0, ppArgv);
	ppArgv = nullptr;

	LPTSTR envirstr = GetEnvironmentStrings();//获取完整的环境变量字符串
	FreeEnvironmentStrings(envirstr);
	envirstr = nullptr;

	//获取一个环境变量
	DWORD len = GetEnvironmentVariable(TEXT("一个环境变量名"), nullptr, 0);
	PTSTR pszvalue = new TCHAR[len];
	GetEnvironmentVariable(TEXT("一个环境变量名"), pszvalue, len);
	//扩展环境变量字符串
	len = ExpandEnvironmentStrings(pszvalue, nullptr, 0);
	PTSTR pszvalue2 = new TCHAR[len];
	ExpandEnvironmentStrings(pszvalue, pszvalue2, len);
	delete[] pszvalue2;
	delete[] pszvalue;
	pszvalue = nullptr;

	SetEnvironmentVariable(TEXT("一个环境变量名"), TEXT("1"));//添加or修改
	SetEnvironmentVariable(TEXT("一个环境变量名"), nullptr);//删除

	//工作目录
	len = GetCurrentDirectory(0, nullptr);
	PTSTR dir = new TCHAR[len];
	GetCurrentDirectory(len, dir);
	delete[] dir;
	dir = nullptr;

	dir = new TCHAR[_MAX_PATH];
	GetFullPathName(TEXT("Windows核心编程.sln"), _MAX_PATH, dir, nullptr);//不好用,但这个函数可以获取每个驱动器对应的当前目录~
	delete[] dir;
	dir = nullptr;

	//系统版本
	OSVERSIONINFOEX ver = { 0 };
	ver.dwOSVersionInfoSize = sizeof(ver);
	GetVersionEx((LPOSVERSIONINFO)&ver);

	//比较版本差异
	//构造一个版本
	OSVERSIONINFOEX osver = { 0 };
	osver.dwOSVersionInfoSize = sizeof(osver);
	osver.dwMajorVersion = 6;
	osver.dwPlatformId = VER_PLATFORM_WIN32_NT;
	//比较标记
	DWORDLONG condition = 0;
	VER_SET_CONDITION(condition, VER_MAJORVERSION, VER_EQUAL);//要求VER_MAJORVERSION相等
	VER_SET_CONDITION(condition, VER_MINORVERSION, VER_EQUAL);
	VER_SET_CONDITION(condition, VER_PLATFORMID, VER_EQUAL);
	//比较版本
	BOOL verret = VerifyVersionInfo(&osver, VER_MAJORVERSION | VER_MINORVERSION | VER_PLATFORMID, condition);//返回FALSE，用GetLastError查看原因

	////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////
	SECURITY_ATTRIBUTES sap, sat;
	sap.nLength = sizeof(sap);
	sap.lpSecurityDescriptor = nullptr;
	sap.bInheritHandle = TRUE;//进程可继承
	sat.nLength = sizeof(sat);
	sat.lpSecurityDescriptor = nullptr;
	sat.bInheritHandle = FALSE;//线程不可继承
	STARTUPINFO si = { sizeof(si) };
	PROCESS_INFORMATION pi;
	TCHAR processcmd[] = TEXT("README.TXT");
	BOOL bret = CreateProcess(TEXT("C:\WINDOWS\SYSTEM32\NOTEPAD.EXE"), processcmd, &sap, &sat, TRUE/*新进程继承句柄*/, CREATE_SUSPENDED | NORMAL_PRIORITY_CLASS, nullptr, nullptr, &si, &pi);
	//此时进程内核引用计数==2
	ResumeThread(pi.hThread);
	TerminateProcess(pi.hProcess, 10);//(异步)终止进程
	WaitForSingleObject(pi.hProcess, INFINITE);
	GetExitCodeProcess(pi.hProcess, &dret);//==1
	CloseHandle(pi.hProcess);//==0
	CloseHandle(pi.hThread);//==0

	//手动提升进程权限
	SHELLEXECUTEINFO sei = { sizeof(sei) };
	sei.lpVerb = TEXT("runas");//特权提升
	sei.lpFile = TEXT("NOTEPAD.EXE");
	sei.lpParameters = TEXT("README.TXT");
	sei.nShow = SW_SHOWNORMAL;
	sei.fMask = SEE_MASK_NOCLOSEPROCESS;//使返回进程句柄
	bret = ShellExecuteEx(&sei);

	//进程令牌
	HANDLE htoken = nullptr;
	bret = OpenProcessToken(sei.hProcess, TOKEN_QUERY, &htoken);
	TOKEN_ELEVATION_TYPE elevationtype;//获取启动类型
	bret = GetTokenInformation(htoken, TokenElevationType, &elevationtype, sizeof(elevationtype), &len);
	CloseHandle(htoken);
	htoken = nullptr;

	bret = CloseHandle(sei.hProcess);//SEE_MASK_NOCLOSEPROCESS

	system("pause");
	return 0;
}