zjgcjy/pykd
1
0
Fork 0
mirror of https://github.com/ivellioscolin/pykd.git synced 2025-04-21 04:13:22 +08:00
Code Issues Actions Packages Projects Releases Wiki Activity

[+] added: proclist.py sample

Browse Source 
git-svn-id: https://pykd.svn.codeplex.com/svn@53271 9b283d60-5439-405e-af05-b73fd8c4d996
This commit is contained in:
SND\kernelnet_cp 2010-07-29 17:49:35 +00:00
parent 4f95f0e722
commit 7c64eff59e
1 changed files with 32 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

32
samples/proclist.py Normal file
View File

@ -0,0 +1,32 @@
import sys
from pykd import *
def loadSymbols():
global nt
nt = loadModule( "nt" )
nt.PsActiveProcessHead = getOffset( "nt", "PsActiveProcessHead" )
def printStacks():
processList = typedVarList( nt.PsActiveProcessHead, "nt", "_EPROCESS", "ActiveProcessLinks" )
for process in processList:
dprintln( "".join( [ chr(i) for k, i in process.ImageFileName.items() ] ) )
return
if __name__ == "__main__":
if not isSessionStart():
createSession()
loadDump( sys.argv[1] )
dprintln( sys.argv[1] + " - loaded OK" )
loadSymbols()
printStacks()