import os import sys from ctypes import * windll.kernel32.WriteProcessMemory.argtypes = [c_void_p, c_void_p, c_void_p, c_int, c_void_p] windll.kernel32.WriteProcessMemory.restype = c_void_p address1 = 0x00f9fea8 #i的地址 number1 = 0x140000000 lpNumberOfBytesWritten = c_size_t(0) PROCESS_ALL_ACCESS = (0x000F0000 | 0x00100000 | 0xFFF) hProcess = windll.kernel32.OpenProcess(PROCESS_ALL_ACCESS, False, 26848) #26848是下面C代码运行时进程的pid windll.kernel32.WriteProcessMemory(hProcess,c_char_p(address1),addressof(c_longlong(number1)),sizeof(c_longlong),byref(lpNumberOfBytesWritten))
C代码(用作测试)
#include <stdio.h> #include <Windows.h> int main() { LONGLONG i = 10; LONGLONG* x = &i; while (1) { printf("%d\n", *x); } return 0; }
Result:
会将 i的值会被修改成0x140000000的十进制数值
原文链接: https://www.cnblogs.com/strive-sun/p/11463197.html
欢迎关注
微信关注下方公众号,第一时间获取干货硬货;公众号内回复【pdf】免费获取数百本计算机经典书籍;
也有高质量的技术群,里面有嵌入式、搜广推等BAT大佬
原创文章受到原创版权保护。转载请注明出处:https://www.ccppcoding.com/archives/405121
非原创文章文中已经注明原地址,如有侵权,联系删除
关注公众号【高性能架构探索】,第一时间获取最新文章
转载文章受原作者版权保护。转载请注明原作者出处!