Package winappdbg :: Package win32 :: Module psapi

[frames] | no frames]

Module psapi

source code

Wrapper for psapi.dll in ctypes.

Classes

[hide private]

MODULEINFO

LPMODULEINFO

Functions

[hide private]

EnumDeviceDrivers()

source code

EnumProcesses()

source code

EnumProcessModules(hProcess)

source code

EnumProcessModulesEx(hProcess, dwFilterFlag=0)

source code

GetDeviceDriverBaseNameA(ImageBase)

source code

GetDeviceDriverBaseNameW(ImageBase)

source code

GetDeviceDriverFileNameA(ImageBase)

source code

GetDeviceDriverFileNameW(ImageBase)

source code

GetMappedFileNameA(hProcess, lpv)

source code

GetMappedFileNameW(hProcess, lpv)

source code

GetModuleFileNameExA(hProcess, hModule=None)

source code

GetModuleFileNameExW(hProcess, hModule=None)

source code

GetModuleInformation(hProcess, hModule, lpmodinfo=None)

source code

GetProcessImageFileNameA(hProcess)

source code

GetProcessImageFileNameW(hProcess)

source code

Variables

[hide private]

__revision__ = '$Id: psapi.py 618 2010-02-11 02:15:09Z qvasimo...

LIST_MODULES_DEFAULT = 0

LIST_MODULES_32BIT = 1

LIST_MODULES_64BIT = 2

LIST_MODULES_ALL = 3

GetDeviceDriverBaseName = GuessStringType(GetDeviceDriverBaseN...

GetDeviceDriverFileName = GuessStringType(GetDeviceDriverFileN...

GetMappedFileName = GuessStringType(GetMappedFileNameA, GetMap...

GetModuleFileNameEx = GuessStringType(GetModuleFileNameExA, Ge...

GetProcessImageFileName = GuessStringType(GetProcessImageFileN...

__package__ = 'winappdbg.win32'

Variables Details

[hide private]

revision

Value:

'$Id: psapi.py 618 2010-02-11 02:15:09Z qvasimodo $'

GetDeviceDriverBaseName

Value:

GuessStringType(GetDeviceDriverBaseNameA, GetDeviceDriverBaseNameW)

GetDeviceDriverFileName

Value:

GuessStringType(GetDeviceDriverFileNameA, GetDeviceDriverFileNameW)

GetMappedFileName

Value:

GuessStringType(GetMappedFileNameA, GetMappedFileNameW)

GetModuleFileNameEx

Value:

GuessStringType(GetModuleFileNameExA, GetModuleFileNameExW)

GetProcessImageFileName

Value:

GuessStringType(GetProcessImageFileNameA, GetProcessImageFileNameW)