vc进程和模块查询

#include <Psapi.h>
#pragma comment(lib,"Psapi.lib")

//enum   process   to   find   a   certain   module
BOOL  IsAppRun(CString   modulename)
{
    DWORD   buf[4096];
    DWORD   num;
    TCHAR   filenamebuf[_MAX_PATH + 1];
    HMODULE   hModule;
    DWORD   cbReturned;
    BOOL   bret = FALSE;
    BOOL   bfound = FALSE;
    CString   msg;

    bret = EnumProcesses(buf, 4095, &num);
    if (!bret)
    {
        printf("Error   EnumProcesses");
        return FALSE;
    }

    for (int i = 0; i < (int)num; i++)
    {
        HANDLE   hProcess = OpenProcess(PROCESS_QUERY_INFORMATION | PROCESS_VM_READ, FALSE, buf[i]);
        if (hProcess == NULL)
            continue;
        bret = EnumProcessModules(hProcess, &hModule, sizeof(hModule), &cbReturned);
        if (bret)
        {
            DWORD   dwret = GetModuleFileNameEx(hProcess, hModule, filenamebuf, _MAX_PATH);
            CloseHandle(hProcess);
            if (dwret == 0)
            {
                msg.Format("%d", GetLastError());
                printf(msg);
                break;
            }
            else
            {
                TCHAR*   pfind = _tcsstr(filenamebuf, modulename);
                if (pfind)
                {
                    bfound = TRUE;
                    break;
                }
            }
        }
    }
    return bfound;
}

BOOL   IsAppRun(CString   modulename);

int _tmain(int argc, TCHAR* argv[], TCHAR* envp[])
{
    CString ModuleName("TSRun.exe");
    BOOL bfound = IsAppRun(ModuleName);
    if (bfound)
        printf("Found   it");
    else
        printf("Not   found");

    system("pause");
    return 0;
}