Interface to a process. Contains threads and modules snapshots. @group Properties: get_pid, is_alive, is_debugged, is_wow64, get_arch, get_bits, get_filename, get_exit_code, get_start_time, get_exit_time, get_running_time, get_services, get_dep_policy, get_p
| 80 | |
| 81 | |
| 82 | class Process(_ThreadContainer, _ModuleContainer): |
| 83 | """ |
| 84 | Interface to a process. Contains threads and modules snapshots. |
| 85 | |
| 86 | @group Properties: |
| 87 | get_pid, is_alive, is_debugged, is_wow64, get_arch, get_bits, |
| 88 | get_filename, get_exit_code, |
| 89 | get_start_time, get_exit_time, get_running_time, |
| 90 | get_services, get_dep_policy, get_peb, get_peb_address, |
| 91 | get_entry_point, get_main_module, get_image_base, get_image_name, |
| 92 | get_command_line, get_environment, |
| 93 | get_command_line_block, |
| 94 | get_environment_block, get_environment_variables, |
| 95 | get_handle, open_handle, close_handle |
| 96 | |
| 97 | @group Instrumentation: |
| 98 | kill, wait, suspend, resume, inject_code, inject_dll, clean_exit |
| 99 | |
| 100 | @group Disassembly: |
| 101 | disassemble, disassemble_around, disassemble_around_pc, |
| 102 | disassemble_string, disassemble_instruction, disassemble_current |
| 103 | |
| 104 | @group Debugging: |
| 105 | flush_instruction_cache, debug_break, peek_pointers_in_data |
| 106 | |
| 107 | @group Memory mapping: |
| 108 | take_memory_snapshot, generate_memory_snapshot, iter_memory_snapshot, |
| 109 | restore_memory_snapshot, get_memory_map, get_mapped_filenames, |
| 110 | generate_memory_map, iter_memory_map, |
| 111 | is_pointer, is_address_valid, is_address_free, is_address_reserved, |
| 112 | is_address_commited, is_address_guard, is_address_readable, |
| 113 | is_address_writeable, is_address_copy_on_write, is_address_executable, |
| 114 | is_address_executable_and_writeable, |
| 115 | is_buffer, |
| 116 | is_buffer_readable, is_buffer_writeable, is_buffer_executable, |
| 117 | is_buffer_executable_and_writeable, is_buffer_copy_on_write |
| 118 | |
| 119 | @group Memory allocation: |
| 120 | malloc, free, mprotect, mquery |
| 121 | |
| 122 | @group Memory read: |
| 123 | read, read_char, read_int, read_uint, read_float, read_double, |
| 124 | read_dword, read_qword, read_pointer, read_string, read_structure, |
| 125 | peek, peek_char, peek_int, peek_uint, peek_float, peek_double, |
| 126 | peek_dword, peek_qword, peek_pointer, peek_string |
| 127 | |
| 128 | @group Memory write: |
| 129 | write, write_char, write_int, write_uint, write_float, write_double, |
| 130 | write_dword, write_qword, write_pointer, |
| 131 | poke, poke_char, poke_int, poke_uint, poke_float, poke_double, |
| 132 | poke_dword, poke_qword, poke_pointer |
| 133 | |
| 134 | @group Memory search: |
| 135 | search, search_bytes, search_hexa, search_text, search_regexp, strings |
| 136 | |
| 137 | @group Processes snapshot: |
| 138 | scan, clear, __contains__, __iter__, __len__ |
| 139 |
no outgoing calls
no test coverage detected