是否可以从32位应用程序读取64位进程的进程内存？ [英] Is it possible to read process memory of a 64 bit process from a 32bit app?

问题描述

在Windows 64位上，我有一个32位进程可以读取其他32位进程的内存，我希望它也能够读取64位进程。

On windows 64 bit, I've got a 32 bit process that reads the memory of other 32 bit processes, and I'd like it to be able to read 64 bit processes too.

ReadProcessMemory用于读取内存，但是有32位限制。有什么方法可以在64位进程上执行与ReadProcessMemory等效的操作吗？

ReadProcessMemory is being used to read the memory, but it has a 32 bit limitation. Is there any way of doing the equivalent of a ReadProcessMemory on a 64 bit process?

我知道我可以编写64位进程并将其从32位进程启动为做这项工作，但我想知道是否还有其他选择，这样我就不需要编写64位进程了。

I know I could write a 64 bit process and launch that from my 32 bit process to do the work, but I'm wondering if there's some other option so that I don't need to write a 64 bit process.

谢谢。

推荐答案

无法解决此问题。一种解决方案是停止使用WOW64仿真器并编写一个64位进程。另一种解决方案是使用IPC而不是直接读取内存。

There's no way to get around this. One solution is to stop using the WOW64 emulator and write a 64 bit process. Another solution is to use IPC rather than direct memory reading.

这篇关于是否可以从32位应用程序读取64位进程的进程内存？的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！