c++ - 申请卡住？

Question

是否可以编写一个 c++ 程序来为给定的 Windows 进程执行以下操作:

1) pause an application
2) copy the memory of that application to the HDD
3) kill the application
4) at a later point start the application in the exact same state it was before by loading the saved memory

人们出于多种原因想要这样做，我相信这对调试特别有帮助。

Answer 1

不，不可能。过程镜像中的一些值是内核句柄。当您恢复图像时，这些不会有相应的内核结构。不信你就信陈峰:Why can't the system hibernate just one process?

创建一个转储是可能的，参见 How to create a user-mode process dump file in Windows Vista and in Windows 7 , .dump或 MiniDumpWriteDump .多年来，开发人员已成功使用转储进行调试...