Windows：判断进程32/64位

shanql

已于 2023-04-21 00:43:47 修改

阅读量811

点赞数

分类专栏： Win32/MFC 文章标签： 64位进程

于 2023-04-21 00:42:27 首次发布

本文链接：https://blog.csdn.net/s634772208/article/details/130278813

版权

Win32/MFC 专栏收录该内容

43 篇文章 3 订阅

订阅专栏

IsWow64Process

BOOL IsWow64Process(
  [in]  HANDLE hProcess,
  [out] PBOOL  Wow64Process
);

判断进程是否为64位（运行在WOW64 or an Intel64 of x64 processor）

为了在不支持此函数的系统中运行正常，请调用GetProcAddress从Kernel32.dll中查询此函数地址，查询成功后，即可进行调用。注：不能用此技术去检测当前系统是32位还是64位，因为32位或64位的Kernel32.dll中均有此函数 IsWow64Process。
此函数支持的系统最低版本：
Windows Vista, Windows XP with SP2
Windows Server 2008, Windows Server 2003 with SP1

例子

#include <windows.h>
#include <tchar.h>

typedef BOOL(WINAPI *LPFN_ISWOW64PROCESS) (HANDLE, PBOOL);

LPFN_ISWOW64PROCESS fnIsWow64Process;

BOOL IsWow64()
{
	BOOL bIsWow64 = FALSE;

	//IsWow64Process is not available on all supported versions of Windows.
	//Use GetModuleHandle to get a handle to the DLL that contains the function
	//and GetProcAddress to get a pointer to the function if available.

	fnIsWow64Process = (LPFN_ISWOW64PROCESS)GetProcAddress(
		GetModuleHandle(TEXT("kernel32")), "IsWow64Process");

	if (NULL != fnIsWow64Process)
	{
		if (!fnIsWow64Process(GetCurrentProcess(), &bIsWow64))
		{
			//handle error
		}
	}
	return bIsWow64;
}

int main(void)
{
	if (IsWow64())
		_tprintf(TEXT("The process is running under WOW64.\n"));
	else
		_tprintf(TEXT("The process is not running under WOW64.\n"));

	return 0;
}