windows系统调用 遍历进程的虚拟地址

 #include "iostream"
 #include "windows.h"
 #include "shlwapi.h"
 #include  "iomanip"
 #pragma comment(lib,"shlwapi.lib")
 using namespace std;

 inline bool TestSet(DWORD dwTarget,DWORD dwMask){
     return ((dwTarget&dwMask)==dwMask);
 }

 #define SHOWMASK(dwTarget,type)\
     if(TestSet(dwTarget,PAGE_##type))\
 {cout<<","<<#type;}

 void ShowProtection(DWORD dwTarget)
 {
     SHOWMASK(dwTarget,READONLY);
     SHOWMASK(dwTarget,GUARD);
     SHOWMASK(dwTarget,NOCACHE);
     SHOWMASK(dwTarget,READWRITE);
     SHOWMASK(dwTarget,WRITECOPY);
     SHOWMASK(dwTarget,EXECUTE);
     SHOWMASK(dwTarget,EXECUTE_READ);
     SHOWMASK(dwTarget,EXECUTE_READWRITE);
     SHOWMASK(dwTarget,EXECUTE_WRITECOPY);
     SHOWMASK(dwTarget,NOACCESS);
 }

 void WalkVM(HANDLE hProcess){
     SYSTEM_INFO si;
     ZeroMemory(&si,sizeof(si));
     GetSystemInfo(&si);

     MEMORY_BASIC_INFORMATION mbi;
     ZeroMemory(&mbi,sizeof(mbi));

     LPCVOID pBlock=(LPVOID)si.lpMinimumApplicationAddress;
     while(pBlock<si.lpMaximumApplicationAddress){
         if(VirtualQueryEx(
             hProcess,
             pBlock,
             &mbi,
             sizeof(mbi)
             )==sizeof(mbi)){
                 LPCVOID pEnd=(PBYTE)pBlock+mbi.RegionSize;
                 TCHAR szSize[MAX_PATH];
                 StrFormatByteSize(mbi.RegionSize,szSize,MAX_PATH);

                 cout.fill('');
                 cout<<hex<<setw()<<(DWORD)pBlock
                     <<"-"
                     <<hex<<setw()<<(DWORD)pEnd
                     <<(strlen(szSize)==?"(":"(")<<szSize
                     <<")";

                 switch(mbi.State){
                     case MEM_COMMIT:
                     printf("Committed");
                     break;
                     case MEM_FREE:
                     printf("Free");
                     break;
                     case MEM_RESERVE:
                     printf("Reserved");
                     break;

                 }

                 if(mbi.Protect==&&mbi.State!=MEM_FREE){
                     mbi.Protect=PAGE_READONLY;
                 }
                 ShowProtection(mbi.Protect);

                 switch(mbi.Type){
                     case MEM_IMAGE:
                         printf(",Image");
                         break;
                     case MEM_MAPPED:
                         printf(",Mapped");
                         break;
                     case MEM_PRIVATE:
                         printf(",Private");
                         break;
                 }

                 TCHAR szFilename[MAX_PATH];
                 if(GetModuleFileName((HMODULE)pBlock,
                     szFilename,
                     MAX_PATH
                     )>){
                     PathStripPath(szFilename);
                     printf(",Module:%s",szFilename);
                 }
                 printf("\n");
                 pBlock=pEnd;
         }
     }
 }

 void main(){

     WalkVM(GetCurrentProcess());
     getchar();
 }