KillExplorerHighCPUThread.dpr

program KillExplorerHighCPUThread;

{$APPTYPE CONSOLE}

uses
  Windows,
  SysUtils,
  TLHelp32,
  Math;

// 定义缺失的常量
const
  THREAD_TERMINATE = $0001;
  THREAD_QUERY_INFORMATION = $0040;

// 显式声明OpenThread函数（确保兼容性）
function OpenThread(dwDesiredAccess: DWORD; bInheritHandle: BOOL; dwThreadId: DWORD): THandle; stdcall; external 'kernel32.dll' name 'OpenThread';

type
  // 自定义线程信息记录
  TThreadInfo = record
    ThreadID: DWORD;
    CPUTime: Int64;
    CPUUsage: Double;
  end;
  TThreadInfoArray = array of TThreadInfo;

// 获取进程ID
function GetProcessID(const ProcessName: string): DWORD;
var
  Snapshot: THandle;
  ProcessEntry: TProcessEntry32;
begin
  Result := 0;
  Snapshot := CreateToolhelp32Snapshot(TH32CS_SNAPPROCESS, 0);
  if Snapshot <> INVALID_HANDLE_VALUE then
  begin
    ProcessEntry.dwSize := SizeOf(TProcessEntry32);
    if Process32First(Snapshot, ProcessEntry) then
    begin
      repeat
        if AnsiCompareText(ExtractFileName(ProcessEntry.szExeFile), ProcessName) = 0 then
        begin
          Result := ProcessEntry.th32ProcessID;
          Break;
        end;
      until not Process32Next(Snapshot, ProcessEntry);
    end;
    CloseHandle(Snapshot);
  end;
end;

// 获取指定进程的所有线程
function GetProcessThreads(ProcessID: DWORD): TThreadInfoArray;
var
  Snapshot: THandle;
  ThreadEntry: TThreadEntry32;
  i: Integer;
begin
  SetLength(Result, 0);
  Snapshot := CreateToolhelp32Snapshot(TH32CS_SNAPTHREAD, 0);
  if Snapshot <> INVALID_HANDLE_VALUE then
  begin
    ThreadEntry.dwSize := SizeOf(TThreadEntry32);
    if Thread32First(Snapshot, ThreadEntry) then
    begin
      repeat
        if ThreadEntry.th32OwnerProcessID = ProcessID then
        begin
          SetLength(Result, Length(Result) + 1);
          Result[High(Result)].ThreadID := ThreadEntry.th32ThreadID;
          Result[High(Result)].CPUTime := 0;
          Result[High(Result)].CPUUsage := 0;
        end;
      until not Thread32Next(Snapshot, ThreadEntry);
    end;
    CloseHandle(Snapshot);
  end;
end;

// 获取线程的CPU时间
function GetThreadCPUTime(ThreadID: DWORD): Int64;
var
  ThreadHandle: THandle;
  CreationTime, ExitTime, KernelTime, UserTime: TFileTime;
  SystemTime: TSystemTime;
begin
  Result := 0;
  ThreadHandle := OpenThread(THREAD_QUERY_INFORMATION, False, ThreadID);
  if ThreadHandle <> 0 then
  begin
    if GetThreadTimes(ThreadHandle, CreationTime, ExitTime, KernelTime, UserTime) then
    begin
      // 把文件时间转换为系统时间
      FileTimeToSystemTime(KernelTime, SystemTime);
      Result := SystemTime.wMilliseconds + SystemTime.wSecond * 1000 +
                SystemTime.wMinute * 60 * 1000 + SystemTime.wHour * 60 * 60 * 1000;
      
      FileTimeToSystemTime(UserTime, SystemTime);
      Result := Result + SystemTime.wMilliseconds + SystemTime.wSecond * 1000 +
                SystemTime.wMinute * 60 * 1000 + SystemTime.wHour * 60 * 60 * 1000;
    end;
    CloseHandle(ThreadHandle);
  end;
end;

// 计算线程的CPU使用率
procedure CalculateCPUUsage(var Threads: TThreadInfoArray; Interval: Integer);
var
  i: Integer;
  InitialTimes, FinalTimes: array of Int64;
  SystemTime: TSystemTime;
  TotalSystemTime: Int64;
begin
  SetLength(InitialTimes, Length(Threads));
  SetLength(FinalTimes, Length(Threads));
  
  // 获取初始CPU时间
  for i := 0 to High(Threads) do
    InitialTimes[i] := GetThreadCPUTime(Threads[i].ThreadID);
  
  // 等待一段时间，以便计算CPU使用率
  Sleep(Interval);
  
  // 获取最终CPU时间
  for i := 0 to High(Threads) do
    FinalTimes[i] := GetThreadCPUTime(Threads[i].ThreadID);
  
  // 获取系统总时间
  GetLocalTime(SystemTime);
  TotalSystemTime := SystemTime.wMilliseconds + SystemTime.wSecond * 1000 +
                     SystemTime.wMinute * 60 * 1000 + SystemTime.wHour * 60 * 60 * 1000;
  
  // 计算每个线程的CPU使用率
  for i := 0 to High(Threads) do
  begin
    if FinalTimes[i] > InitialTimes[i] then
    begin
      Threads[i].CPUTime := FinalTimes[i] - InitialTimes[i];
      // 计算CPU使用率百分比
      Threads[i].CPUUsage := (Threads[i].CPUTime / Interval) * 100;
    end;
  end;
end;

// 终止指定线程
function TerminateThreadByID(ThreadID: DWORD): Boolean;
var
  ThreadHandle: THandle;
begin
  Result := False;
  ThreadHandle := OpenThread(THREAD_TERMINATE, False, ThreadID);
  if ThreadHandle <> 0 then
  begin
    Result := TerminateThread(ThreadHandle, 0);
    CloseHandle(ThreadHandle);
  end;
end;

var
  ExplorerPID:  Integer;
  Threads:  TThreadInfoArray;
       MaxCPUUsage : double;
     MaxCPUThreadIndex : Integer;
    i : Integer;
begin
  try
    Writeln('正在查找explorer.exe进程...');
    ExplorerPID := GetProcessID('explorer.exe');
    if ExplorerPID = 0 then
    begin
      Writeln('未找到explorer.exe进程!');
      Exit;
    end;

    Writeln('找到explorer.exe进程，PID: ', ExplorerPID);
    Writeln('正在分析线程CPU使用率...');
    
    Threads := GetProcessThreads(ExplorerPID);
    if Length(Threads) = 0 then
    begin
      Writeln('未找到explorer.exe的线程!');
      Exit;
    end;
    
    // 计算CPU使用率，采样间隔为1000毫秒
    CalculateCPUUsage(Threads, 1000);

    // 找出CPU使用率最高的线程
     MaxCPUUsage := 0.0;
     MaxCPUThreadIndex := -1;
    for  i := 0 to High(Threads) do
    begin
      if Threads[i].CPUUsage > MaxCPUUsage then
      begin
        MaxCPUUsage := Threads[i].CPUUsage;
        MaxCPUThreadIndex := i;
      end;
    end;
    
    if MaxCPUThreadIndex >= 0 then
    begin
      Writeln('CPU使用率最高的线程:');
      Writeln('  线程ID: ', Threads[MaxCPUThreadIndex].ThreadID);
      Writeln('  CPU使用率: ', Format('%.2f%%', [Threads[MaxCPUThreadIndex].CPUUsage]));
      
      if Threads[MaxCPUThreadIndex].CPUUsage >= 2.0 then
      begin
        Writeln('CPU使用率超过2%，准备终止线程...');
        if TerminateThreadByID(Threads[MaxCPUThreadIndex].ThreadID) then
          Writeln('线程终止成功!')
        else
          Writeln('线程终止失败! 可能缺少权限。');
      end
      else
        Writeln('CPU使用率低于2%，跳过终止操作。');
    end
    else
      Writeln('未找到符合条件的线程!');
      
  except
    on E: Exception do
      Writeln('错误: ', E.Message);
  end;
  
  ReadLn; // 等待用户按键
end.