unit ProcessInfo;
interface
uses
  Windows, Messages, SysUtils, Variants, Classes,
  Graphics, Controls, Forms,Dialogs, StdCtrls, tlhelp32;
Type
  TThreadInfo = Record
    ftCreationTime: TFileTime;
    dwUnknown1: DWORD;
    dwStartAddress: DWORD;
    dwOwningPID: DWORD;
    dwThreadID: DWORD;
    dwCurrentPriority: DWORD;
    dwBasePriority: DWORD;
    dwContextSwitches: DWORD;
    dwThreadState: DWORD;
    dwUnknown2: DWORD;
    dwUnknown3: DWORD;
    dwUnknown4: DWORD;
    dwUnknown5: DWORD;
    dwUnknown6: DWORD;
    dwUnknown7: DWORD;
  End;
  TProcessInfo = Record
    dwOffset: DWORD;
    dwThreadCount: DWORD;
    dwUnkown1: Array[ 0 .. 5 ] Of DWORD;
    ftCreationTime: TFileTime;
    dwUnkown2: DWORD;
    dwUnkown3: DWORD;
    dwUnkown4: DWORD;
    dwUnkown5: DWORD;
    dwUnkown6: DWORD;
    pszProcessName: pwideChar;
    dwBasePriority: DWORD;
    dwProcessID: DWORD;
    dwParentProcessID: DWORD;
    dwHandleCount: DWORD;
    dwUnkown7: DWORD;
    dwUnkown8: DWORD;
    dwVirtualBytesPeak: DWORD;
    dwVirtualBytes: DWORD;
    dwPageFaults: DWORD;
    dwWorkingSetPeak: DWORD;
    dwWorkingSet: DWORD;
    dwUnkown9: DWORD;
    dwPagedPool: DWORD;
    dwUnkown10: DWORD;
    dwNonPagedPool: DWORD;
    dwPageFileBytesPeak: DWORD;
    dwPageFileBytes: DWORD;
    dwPrivateBytes: DWORD;
    dwUnkown11: DWORD;
    dwUnkown12: DWORD;
    dwUnkown13: DWORD;
    dwUnkown14: DWORD;
    ati: Array[ 0 .. 0 ] Of TThreadInfo;
  End;
Type
  PProcessInfo = ^TProcessInfo;
  PThreadInfo = ^TThreadInfo;
Type
  tFuncNtQsI = Function(a: Longint; Buffer: Pointer; SizeBuffer: Longint; Tmp:
    Longint): Longint; stdcall;
type
  TForm1 = class(TForm)
    ProcessList: TMemo;
    Button1: TButton;
    Button2: TButton;
    procedure Button1Click(Sender: TObject);
    procedure Button2Click(Sender: TObject);
  private
    { Private declarations }
  public
    { Public declarations }
  end;
var
  Form1: TForm1;
implementation
{$R *.dfm}

procedure TForm1.Button1Click(Sender: TObject);
Var
  pInfo: PProcessInfo;
  buf: Array[ 0 .. 20479 ] Of Char;
  h: THandle;
  ff: tFuncNtQsI;
  ss: pchar;
  i, k: Integer;
Begin
  If Win32Platform = VER_PLATFORM_WIN32_NT Then
  Begin
    ProcessList.Lines.Clear;
    h := LoadLibrary('NTDLL.DLL');
    If h >  0  Then
    Begin
      @ff := GetProcAddress(h, 'NtQuerySystemInformation');
      If @ff <> Nil Then
      Begin
        ff( 5 , @buf,  20480 ,  0 );
        pInfo := @buf;
        Repeat
          Try
            If pInfo^.pszProcessName <> Nil Then
              ProcessList.Lines.Add(WideCharToString(pInfo^.pszProcessName));
            pInfo := Ptr(Integer(pInfo) + pInfo^.dwOffset);
          Except
            break;
          End;
        Until pInfo^.dwOffset =  0 ;
      End;
      FreeLibrary(h);
    End;
  End;
end;

procedure TForm1.Button2Click(Sender: TObject);
var
  han : THandle;
  ProcStruct : PROCESSENTRY32; // from  "tlhelp32"  in uses clause
  sID : string;
begin
  ProcessList.Lines.Clear;
  han := CreateToolhelp32Snapshot( TH32CS_SNAPALL,  0  );
  if han =  0  then
    exit;
  ProcStruct.dwSize := sizeof( PROCESSENTRY32 );
  if Process32First( han, ProcStruct ) then
    begin
      repeat
        sID := ExtractFileName( ProcStruct.szExeFile );
        ProcessList.Lines.Add(sId);
      until not Process32Next( han, ProcStruct );
    end;
  CloseHandle( han );
end;

end.