UC知道VB中ReadProcessMemory无法读取地址
来源：百度知道 编辑：UC知道 时间：2024/05/05 07:18:03
'获得指定窗体的句柄
Private Declare Function FindWindow Lib "user32" Alias "FindWindowA" _
(ByVal lpClassName As String, ByVal lpWindowName As String) As Long
'返回句柄程序的 线程 或 进程 标示符(PID)
Private Declare Function GetWindowThreadProcessId Lib "user32" _
(ByVal hwnd As Long, lpdwProcessId As Long) As Long
'打开指定标示符进程，并返回进程句柄
Private Declare Function OpenProcess Lib "kernel32" _
(ByVal dwDesiredAccess As Long, ByVal bInheritHandle As Long, _
ByVal dwProcessId As Long) As Long
'通过进程句柄返回进程文件名
Private Declare Function GetModuleFileNameExA Lib "psapi.dll" _
(ByVal hProcess As Long, ByVal hModule As Long, _
ByVal lpFilename As String, ByVal nSize As Long) As Long
'读取进程内存
Private Declare Function ReadProcessMemory Lib "kernel32" (ByVal hProcess As Long, _
lpBaseAddress As Any, lpBuffer As Any, ByVal nSize As Long, _
lpNumberOfBytesWr
Private Declare Function FindWindow Lib "user32" Alias "FindWindowA" _
(ByVal lpClassName As String, ByVal lpWindowName As String) As Long
'返回句柄程序的 线程 或 进程 标示符(PID)
Private Declare Function GetWindowThreadProcessId Lib "user32" _
(ByVal hwnd As Long, lpdwProcessId As Long) As Long
'打开指定标示符进程，并返回进程句柄
Private Declare Function OpenProcess Lib "kernel32" _
(ByVal dwDesiredAccess As Long, ByVal bInheritHandle As Long, _
ByVal dwProcessId As Long) As Long
'通过进程句柄返回进程文件名
Private Declare Function GetModuleFileNameExA Lib "psapi.dll" _
(ByVal hProcess As Long, ByVal hModule As Long, _
ByVal lpFilename As String, ByVal nSize As Long) As Long
'读取进程内存
Private Declare Function ReadProcessMemory Lib "kernel32" (ByVal hProcess As Long, _
lpBaseAddress As Any, lpBuffer As Any, ByVal nSize As Long, _
lpNumberOfBytesWr
大哥 我照你给的代码完全复制了，timer1的inteval=1000
有结果啊，结果表明awc=1 就是ReadProcessMemory成功执行。
c不断的往上+4，就是他的进程句柄不断变化
b不变，就是它的进程标识不变
wc也不变 是一长整数，说明读取的地址数据不变