在python里使用WriteProcessMemory修改內存地址上的值

import os
import sys
from ctypes import *

windll.kernel32.WriteProcessMemory.argtypes = [c_void_p, c_void_p, c_void_p, c_int, c_void_p]
windll.kernel32.WriteProcessMemory.restype = c_void_p
address1 = 0x00f9fea8 #i的地址
number1 = 0x140000000
lpNumberOfBytesWritten = c_size_t(0)
PROCESS_ALL_ACCESS = (0x000F0000 | 0x00100000 | 0xFFF)
hProcess = windll.kernel32.OpenProcess(PROCESS_ALL_ACCESS, False, 26848) #26848是下面C代碼運行時進程的pid
windll.kernel32.WriteProcessMemory(hProcess,c_char_p(address1),addressof(c_longlong(number1)),sizeof(c_longlong),byref(lpNumberOfBytesWritten))

 

C代碼（用作測試）

#include <stdio.h>
#include <Windows.h>
int main()
{
    LONGLONG i = 10;
    LONGLONG* x = &i;

    while (1) 
    {
        printf("%d\n", *x);
    }

    return 0;

}

 

Result:

會將 i的值會被修改成0x140000000的十進制數值