Windows:判断进程32/64位

IsWow64Process

BOOL IsWow64Process(
  [in]  HANDLE hProcess,
  [out] PBOOL  Wow64Process
);

判断进程是否为64位(运行在WOW64 or an Intel64 of x64 processor

  1. 为了在不支持此函数的系统中运行正常,请调用GetProcAddressKernel32.dll中查询此函数地址,查询成功后,即可进行调用。注:不能用此技术去检测当前系统是32位还是64位,因为32位或64位的Kernel32.dll中均有此函数 IsWow64Process

  2. 此函数支持的系统最低版本:
    Windows Vista, Windows XP with SP2
    Windows Server 2008, Windows Server 2003 with SP1

例子

#include <windows.h>
#include <tchar.h>

typedef BOOL(WINAPI *LPFN_ISWOW64PROCESS) (HANDLE, PBOOL);

LPFN_ISWOW64PROCESS fnIsWow64Process;

BOOL IsWow64()
{
    
    
	BOOL bIsWow64 = FALSE;

	//IsWow64Process is not available on all supported versions of Windows.
	//Use GetModuleHandle to get a handle to the DLL that contains the function
	//and GetProcAddress to get a pointer to the function if available.

	fnIsWow64Process = (LPFN_ISWOW64PROCESS)GetProcAddress(
		GetModuleHandle(TEXT("kernel32")), "IsWow64Process");

	if (NULL != fnIsWow64Process)
	{
    
    
		if (!fnIsWow64Process(GetCurrentProcess(), &bIsWow64))
		{
    
    
			//handle error
		}
	}
	return bIsWow64;
}

int main(void)
{
    
    
	if (IsWow64())
		_tprintf(TEXT("The process is running under WOW64.\n"));
	else
		_tprintf(TEXT("The process is not running under WOW64.\n"));

	return 0;
}


参看

https://learn.microsoft.com/en-us/windows/win32/api/wow64apiset/nf-wow64apiset-iswow64process

猜你喜欢

转载自blog.csdn.net/s634772208/article/details/130278813
今日推荐