2012-04-10 13:47:38 +08:00
|
|
|
|
|
|
|
import sys
|
|
|
|
from pykd import *
|
|
|
|
|
|
|
|
def processInfo():
|
|
|
|
|
|
|
|
nt = module( "nt" )
|
|
|
|
|
|
|
|
processList = typedVarList( nt.PsActiveProcessHead, "nt!_EPROCESS", "ActiveProcessLinks" )
|
|
|
|
|
|
|
|
for process in processList:
|
|
|
|
print "".join( [chr(i) for i in process.ImageFileName if i != 0] )
|
|
|
|
|
2012-05-18 00:06:25 +08:00
|
|
|
def run():
|
2012-04-10 13:47:38 +08:00
|
|
|
|
|
|
|
if not isWindbgExt():
|
|
|
|
if not loadDump( sys.argv[1] ):
|
|
|
|
dprintln( sys.argv[1] + " - load failed" )
|
|
|
|
return
|
|
|
|
|
|
|
|
if not isKernelDebugging():
|
|
|
|
dprintln( "not a kernel debugging" )
|
|
|
|
return
|
|
|
|
|
|
|
|
processInfo()
|
|
|
|
|
|
|
|
if __name__ == "__main__":
|
2012-11-22 17:11:55 +08:00
|
|
|
run()
|
2012-04-10 13:47:38 +08:00
|
|
|
|
|
|
|
|