# Get the address of id, and then using some reverse engineering of Python object

# formats in memory, we know that the actual function pointer is at offset 0x30

id_addr = id(id)+0x30




# overwrite the id() function pointer!

w64(id_addr, 0x4142434445464748)