ZwQuerySystemInformation枚举进程线程的软件源码

'Demo - Vizee@[HDHacker]
'updata:20100719
Private Declare Function ZwQuerySystemInformation Lib "ntdll" (ByVal SystemInformationClass As Long, SystemInformation As Any, ByVal SystemInformationLength As Long, ReturnLength As Long) As Long
Private Declare Sub RtlMoveMemory Lib "ntdll" (Target As Any, ByVal pSource As Long, ByVal Length As Long)
Private Declare Sub GetMem4 Lib "msvbvm60" (ByVal Address As Long, Value As Any)
Private Declare Function GetVersion Lib "kernel32" () As Long

Private Type UNICODE_STRING
     Length As Integer
    MaxLength As Integer
    pszImageName As Long
End Type

Private Type CLIENT_ID
     ProcessId As Long
    ThreadId As Long
End Type

Private Type SYSTEM_PROCESS_INFORMATION 'XP but 2k
    NextEntryOffset As Long
    NumberOfThreads As Long
    Reserved1(47) As Byte
    ImageName As UNICODE_STRING
     Reserved2 As Long
    UniqueProcessId As Long
    HandleCount As Long
    Reserved3 As Long
    Reserved4(10) As Long
    PeakPagefileUsage As Long
    PrivatePageCount As Long