Handle to the Process

NTFSD
1

hi all,
how can i get a handle to the existing process.
for example… how can i get the handle of AcroRd32.exe if it is currently executing.
is there any method to access the contents of the exe file that is already loaded to the memory by the System process.

here my aim is to read the PE header of the EXE file that is already loaded in memory.
here i have the process name and path of that exe in hard disk.

thanks all,
bye from vaseef

Sneak preview the all-new Yahoo.com. It’s not radically different. Just radically better.

2

There is an OpenProcess function.

Maxim Shatskih, Windows DDK MVP
StorageCraft Corporation
xxxxx@storagecraft.com
http://www.storagecraft.com

----- Original Message -----
From: “vaseef -”
To: “Windows File Systems Devs Interest List”
Sent: Friday, May 19, 2006 2:50 PM
Subject: [ntfsd] Handle to the Process

> hi all,
> how can i get a handle to the existing process.
> for example… how can i get the handle of AcroRd32.exe if it is currently
executing.
> is there any method to access the contents of the exe file that is already
loaded to the memory by the System process.
>
> here my aim is to read the PE header of the EXE file that is already loaded
in memory.
> here i have the process name and path of that exe in hard disk.
>
> thanks all,
> bye from vaseef
>
>
> ---------------------------------
> Sneak preview the all-new Yahoo.com. It’s not radically different. Just
radically better.
> —
> Questions? First check the IFS FAQ at
https://www.osronline.com/article.cfm?id=17
>
> You are currently subscribed to ntfsd as: xxxxx@storagecraft.com
> To unsubscribe send a blank email to xxxxx@lists.osr.com