两个独立的进程之间,都具有4GB的虚拟内存空间
它们之间的通讯可以通过以下办法
1.两个进程之间相互发生消息,达到通讯目的,携带的信息很有限
#define WM_MYMSG WM_USER + 1 //自定义消息码
HWND hWnd = ::FindWindow(NULL, "目标程序窗口名");
::PostMessage(hWnd, WM_MYMSG, (WPARAM)1, (LPARAM)2);
2.向目标进程的内存空间写入数据
//在目标进程的空间申请内存,相当于new的功能
LPVOID VirtualAllocEx(
HANDLE hProcess, // process to allocate memory
LPVOID lpAddress, // desired starting address
SIZE_T dwSize, // size of region to allocate
DWORD flAllocationType, // type of allocation
DWORD flProtect // type of access protection
);
具体步骤
#define WM_MYMSG WM_USER + 1 //自定义消息码
HWND hWnd = ::FindWindow(NULL, "目标程序窗口名");
DWORD dwPID = 0;
GetWindowThreadProcessId(hWnd, &dwPID);
HANDLE hProcess = OpenProcess(PROCESS_ALL_ACCESS,
TRUE,
dwPID);
LPVOID lpMem = VirtualAllocEx( hProcess,
NULL,
4096,//分配空间大小
MEM_COMMIT,
PAGE_EXECUTE_READWRITE);
/*
x86分页大小为:4KB,API函数会自动取整,保证分配的空间大小为N*4KB,(比如分配10KB,其实API函数会自动取整为12KB)。
*/
DWORD dwWritedBytes = 0;
BOOL bRet = WriteProcessMemory( hProcess,
(LPVOID)lpMem,
"Hello World!",
sizeof("Hello World!"),
&dwWritedBytes );
//写入数据后立即向目标进程发送消息,携带数据块的地址lpMem
::SendMessage(hWnd, WM_MYMSG, (WPARAM)1, (LPARAM)lpMem);
//释放目标进程的内存地址
VirtualFreeEx(hProcess,
lpMem,
0,
MEM_RELEASE);