CreateProcess

鎖定

BOOL CreateProcess
(
LPCTSTR lpApplicationName,
LPTSTR lpCommandLine,
LPSECURITY_ATTRIBUTES lpProcessAttributes,
LPSECURITY_ATTRIBUTES lpThreadAttributes,
BOOL bInheritHandles,
DWORD dwCreationFlags,
LPVOID lpEnvironment,
LPCTSTR lpCurrentDirectory,
LPSTARTUPINFO lpStartupInfo,
LPPROCESS_INFORMATIONlpProcessInformation
);

#include <stdio.h>
#include <windows.h>
int main(int argc, char *argv[]) {
  char szCommandLine[] = "notepad";
  STARTUPINFO si = {sizeof(si)};
  PROCESS_INFORMATION pi;
  si.dwFlags = STARTF_USESHOWWINDOW; //指定wShowWindow成員有效
  si.wShowWindow = TRUE; //此成員設為TRUE的話則顯示新建進程的主窗口
  BOOL bRet = CreateProcess(NULL, //不在此指定可執行文件的文件名
                            szCommandLine, //命令行參數
                            NULL,          //默認進程安全性
                            NULL,          //默認線程安全性
                            FALSE, //指定當前進程內句柄不可以被子進程繼承
                            CREATE_NEW_CONSOLE, //為新進程創建一個新的控制枱窗口
                            NULL, //使用本進程的環境變量
                            NULL, //使用本進程的驅動器和目錄
                            &si, &pi);
  if (bRet) {
    //不使用的句柄最好關掉
    CloseHandle(pi.hThread);
    CloseHandle(pi.hProcess);
    printf("新進程的ID號：%d\n", pi.dwProcessId);
    printf("新進程的主線程ID號：%d\n", pi.dwThreadId);
  }
  return 0;
}

//不同的Windows系統notepad的路徑可能會有出入，改一下路徑即可（Win7x64親測通過）
#include <iostream>
#include <stdlib.h>
#include <windows.h>
using namespace std;
int main() {
  //一些必備參數設置
  STARTUPINFO si;
  memset(&si, 0,
         sizeof(STARTUPINFO)); //初始化si在內存塊中的值（詳見memset函數）
  si.cb = sizeof(STARTUPINFO);
  si.dwFlags = STARTF_USESHOWWINDOW;
  si.wShowWindow = SW_SHOW;
  PROCESS_INFORMATION pi; //必備參數設置結束
  if (!CreateProcess(TEXT("c:\\windows\\system32\\notepad.exe"), NULL, NULL,
                     NULL, FALSE, 0, NULL, NULL, &si, &pi)) {
    cout << "CreateFail!" << endl;
    exit(1);
  } else {
    cout << "Success!" << endl;
  }
  //不使用的句柄最好關掉
  CloseHandle(pi.hThread);
  CloseHandle(pi.hProcess);
  return 0;
}

// MFC代碼

// 因為win7開始後更多的使用管理員權限，所以CreateProcessWithLogonW更多的被使用。
// 同樣的功能的還有CreateProcessAsUser和CreateProcessWithTokenW。

    //頭文件添加略去了(includeWindows.h)，配合管道讀取回傳值

    //參考了MSDN相關條目，自行修改和DEBUG可用

    BOOL
    CreateMyProcess(CString strCommand, DWORD &dwReturn, CString &strLog,
                    CString strPwd) {
  HANDLE hToken;
  dwReturn = -1;
  s trLog = _T("");
  //嘗試登陸管理員賬户
  if (!LogonUserW(_T("Administrator"), NULL, s trPwd, LOGON32_LOGON_INTERACTIVE,
                  LOGON32_PROVIDER_DEFAULT, &hToken)) {
    intiError = GetLastError();
    strLog.Format(_T("ErrorOnLogonUserW(),errorcodeis%d."), iError);
    return FALSE;
  }
  BOOL blResult = FALSE;
  SECURITY_ATTRIBUTES sa;
  HANDLEhRead, hWrite;
  sa.nLength = sizeof(SECURITY_ATTRIBUTES);
  sa.lpSecurityDescriptor = NULL;
  sa.bInheritHandle = TRUE; //創建管道
  if (!CreatePipe(&hRead, &hWrite, &sa, 0)) {
    strLog = _T("ErrorOnCreatePipe()");
    return FALSE;
  }
  STARTUPINFOsi = {sizeof(si)}; //將cb成員初始化為sizeof(si)，其他成員初始化為0
  ::GetStartupInfo(&si);
  si.hStdError = hWrite;
  si.hStdOutput = hWrite;
  si.wShowWindow = SW_HIDE;
  si.dwFlags = STARTF_USESHOWWINDOW | STARTF_USESTDHANDLES;
  PROCESS_INFORMATIONpi;
  CStringstrInfo = _T("");
  ZeroMemory(&pi, sizeof(pi)); //管理員方式啓動進程
  if (!CreateProcessWithLogonW(_T("Administrator"), NULL, strPwd,
                               LOGON_WITH_PROFILE, NULL, strCommand.GetBuffer(),
                               CREATE_UNICODE_ENVIRONMENT, NULL, NULL, &si,
                               &pi)) {
    intiError = GetLastError();
    strLog.Format(_T("ErrorOnCreateProcessWithLogonW(),errorcodeis%d."),
                  iError);
    CloseHandle(hWrite);
    CloseHandle(hRead);
    returnFALSE;
  }
  CloseHandle(hWrite);
  charbuffer[4096] = {0};
  DWORDbytesRead = 0; //讀取回傳值
  while (true) {
    if (ReadFile(hRead, buffer, 4095, &bytesRead, NULL) == NULL)
      break; //獲取了回傳值，處理回傳值
    Sleep(100);
  } //資源清理
  CloseHandle(hRead);
  CloseHandle(hToken);
  WaitForSingleObject(pi.hProcess, INFINITE);
  GetExitCodeProcess(pi.hProcess, &dwReturn);
  CloseHandle(pi.hProcess);
  CloseHandle(pi.hThread);
  return TRUE;
}