HANDLE CreateToolhelp32Snapshot(
DWORD dwFlags,
DWORD th32ProcessID)
Takes a snapshot of the specified processes in the system, as well as the heaps, modules, and threads used by these processes. Returns INVALID_HANDLE_VALUE on failure. The handle is closed automatically when the script object is destroyed.
BOOL Heap32First(
LPHEAPENTRY32 lphe,
DWORD th32ProcessID,
ULONG_PTR th32HeapID)
Retrieves information about the first block of a heap that has been allocated by a process.
BOOL Heap32ListFirst(
HANDLE hSnapshot,
LPHEAPLIST32 lphl)
Retrieves information about the first heap that has been allocated by a specified process.
BOOL Heap32ListNext(
HANDLE hSnapshot,
LPHEAPLIST32 lphl)
Retrieves information about the next heap that has been allocated by a process.
BOOL Heap32Next(
LPHEAPENTRY32 lphe)
Retrieves information about the next block of a heap that has been allocated by a process.
BOOL Module32First(
HANDLE hSnapshot,
LPMODULEENTRY32 lpme)
Retrieves information about the first module associated with a process.
BOOL Module32Next(
HANDLE hSnapshot,
LPMODULEENTRY32 lpme)
Retrieves information about the next module associated with a process or thread.
BOOL Process32First(
HANDLE hSnapshot,
LPPROCESSENTRY32 lppe)
Retrieves information about the first process encountered in a system snapshot.
BOOL Process32Next(
HANDLE hSnapshot,
LPPROCESSENTRY32 lppe)
Retrieves information about the next process recorded in a system snapshot.
BOOL Thread32First(
HANDLE hSnapshot,
LPTHREADENTRY32 lpte)
Retrieves information about the first thread of any process encountered in a system snapshot.
BOOL Thread32Next(
HANDLE hSnapshot,
LPTHREADENTRY32 lpte)
Retrieves information about the next thread of any process encountered in the system memory snapshot.