是否可以从 32 位应用程序读取 64 位进程的进程内存? [英] Is it possible to read process memory of a 64 bit process from a 32bit app?

问题描述

在 windows 64 位上，我有一个 32 位进程读取其他 32 位进程的内存，我希望它也能够读取 64 位进程.

On windows 64 bit, I've got a 32 bit process that reads the memory of other 32 bit processes, and I'd like it to be able to read 64 bit processes too.

ReadProcessMemory 用于读取内存，但它有 32 位限制.有什么方法可以在 64 位进程上执行等效于 ReadProcessMemory 的操作吗?

ReadProcessMemory is being used to read the memory, but it has a 32 bit limitation. Is there any way of doing the equivalent of a ReadProcessMemory on a 64 bit process?

我知道我可以编写一个 64 位进程并从我的 32 位进程启动它来完成这项工作，但我想知道是否还有其他选择，这样我就不需要编写 64 位进程.

I know I could write a 64 bit process and launch that from my 32 bit process to do the work, but I'm wondering if there's some other option so that I don't need to write a 64 bit process.

谢谢.

推荐答案

没有办法解决这个问题.一种解决方案是停止使用 WOW64 模拟器并编写 64 位进程.另一种解决方案是使用 IPC 而不是直接读取内存.

There's no way to get around this. One solution is to stop using the WOW64 emulator and write a 64 bit process. Another solution is to use IPC rather than direct memory reading.

这篇关于是否可以从 32 位应用程序读取 64 位进程的进程内存?的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！