zjgcjy/pykd
1
0
Fork 0
mirror of https://github.com/ivellioscolin/pykd.git synced 2025-04-21 04:13:22 +08:00
Code Issues Actions Packages Projects Releases Wiki Activity

[0.1.x] ~fix: using getOffset (alpc_conn.py)

Browse Source 
git-svn-id: https://pykd.svn.codeplex.com/svn@76560 9b283d60-5439-405e-af05-b73fd8c4d996
This commit is contained in:
SND\EreTIk_cp 2012-05-23 09:36:56 +00:00 committed by Mikhail I. Izmestev
parent 7e5d195ec9
commit aaf35f3515
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
snippets/alpc_conn.py
View File

@ -26,7 +26,7 @@ def main():
""" """
argc_ = len(sys.argv) argc_ = len(sys.argv)
if (1 == argc_): if (1 == argc_):
portTypeAddr = getOffset("nt", "AlpcPortObjectType") portTypeAddr = getOffset("nt!AlpcPortObjectType")
if (0 != portTypeAddr): if (0 != portTypeAddr):
objTable = typedVar("nt!_EPROCESS", getCurrentProcess()).ObjectTable objTable = typedVar("nt!_EPROCESS", getCurrentProcess()).ObjectTable
lstAlpcPorts = ntobj.getListByHandleTable(objTable, ptrPtr(portTypeAddr)) lstAlpcPorts = ntobj.getListByHandleTable(objTable, ptrPtr(portTypeAddr))