Skip to content

Instantly share code, notes, and snippets.

@rsmudge
Created March 18, 2016 20:47
Show Gist options
  • Save rsmudge/20e69b0191a7786f9777 to your computer and use it in GitHub Desktop.
Save rsmudge/20e69b0191a7786f9777 to your computer and use it in GitHub Desktop.
# getexplorerpid($bid, &callback);
sub getexplorerpid {
bps($1, lambda({
local('$pid $name $entry');
foreach $entry (split("\n", $2)) {
($name, $pid) = split("\\s+", $entry);
if ($name eq "explorer.exe") {
# $1 is our Beacon ID, $pid is the PID of explorer.exe
[$callback: $1, $pid];
}
}
}, $callback => $2));
}
# example to use this...
alias explorer {
getexplorerpid($1, {
blog($1, "The PID is: $2");
});
}
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment