以下代码运行正常，没有蓝屏也没报错，但就是用X64dbg查看内存地址的值没有任何变化，为什么会这样？

是不是这个是写入到虚拟内存的？而不是物理内存？如何才能写入到目标进程的物理内存？

BOOLEAN SafeCopyMemory(PVOID pDestination, PVOID pSourceAddress, SIZE_T SizeOfCopy)

{

PMDL pMdl = NULL;

PVOID pSafeAddress = NULL;

if (!MmIsAddressValid(pDestination) || !MmIsAddressValid(pSourceAddress))

return FALSE;

pMdl = IoAllocateMdl(pDestination, (ULONG)SizeOfCopy, FALSE, FALSE, NULL);

if (!pMdl)

return FALSE;

__try

{

MmProbeAndLockPages(pMdl, KernelMode, IoReadAccess);

}

__except (EXCEPTION_EXECUTE_HANDLER)

{

IoFreeMdl(pMdl);

return FALSE;

}

pSafeAddress = MmGetSystemAddressForMdlSafe(pMdl, NormalPagePriority);

if (!pSafeAddress)

return FALSE;

__try

{

RtlMoveMemory(pSafeAddress, pSourceAddress, SizeOfCopy);

}

__except (EXCEPTION_EXECUTE_HANDLER)

{

;

}

MmUnlockPages(pMdl);

IoFreeMdl(pMdl);

return TRUE;

}

[课程]Android-CTF解题方法汇总！