有谁用过ReadProcessMemory()函数？

[zhouxh]

给我一个实例好吗？谢谢！

[wjf]

实例暂时没有,告诉你怎么用吧!
BOOL ReadProcessMemory(
HANDLE hProcess, // handle to the process whose memory is read
LPCVOID lpBaseAddress,
// address to start reading
LPVOID lpBuffer, // address of buffer to place read data
DWORD nSize, // number of bytes to read
LPDWORD lpNumberOfBytesRead
// address of number of bytes read
);

假设有进程A,B;进程B要读取进程A地址空间内的一段数据DATA(假设地址为ADDR,长度为LEN).

hProcess指的是目的进程A的进程句柄.(即进程B首先要获取进程A的句柄);
lpBaseAddress目的进程A地址空间内ADDR;
lpBuffer进程B内的缓冲区;
nSize为要读取的数据长度;
lpNumberOfBytesRead为返回的数据长度;

...
BYTE data[LEN];
DWORD dwret = 0;
ReadProcessMemory(进程A的句柄, ADDR, data, LEN, &dwret);
...