pykd/samples/proclist.py

32 lines
567 B
Python
Raw Normal View History

import sys
from pykd import *
def loadSymbols():
global nt
nt = loadModule( "nt" )
def processInfo():
processList = typedVarList( nt.PsActiveProcessHead, "nt", "_EPROCESS", "ActiveProcessLinks" )
for process in processList:
dprintln( "".join( [ chr(i) for i in process.ImageFileName.values() ] ) )
return
if __name__ == "__main__":
if not isSessionStart():
createSession()
loadDump( sys.argv[1] )
dprintln( sys.argv[1] + " - loaded OK" )
loadSymbols()
processInfo()