Advertisement
Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- # 15352 0x1AF91A490C4
- import ctypes
- kernel32 = ctypes.windll.kernel32
- PROCESS_QUERY_INFORMATION = 0x0400
- PROCESS_VM_READ = 0x0010
- pid = int(15352)
- hproc = kernel32.OpenProcess(PROCESS_QUERY_INFORMATION |PROCESS_VM_READ, False, pid)
- print(hproc)
- lpbaseaddr = 0x1AF91 # Works - returns b'\x00\x00\x00\x00\x00\x00\x00\x00'
- lpbaseaddr = 0x1AF91A490C4 # Doesn't work - returns the same error
- read_buff = ctypes.create_string_buffer(8)
- bytread = ctypes.c_ulong(0)
- kernel32.ReadProcessMemory(hproc, lpbaseaddr, read_buff, 8, ctypes.byref(bytread))
- print(read_buff.raw) #i also tried read_buff.value
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement