pykd

1
from pykd import *
2

3
def main():
4
    pass
5

6
def listCritSections():
7

8
    ntdll = module("ntdll")
9

10
    dbglst = ntdll.typedVarList( ntdll.RtlCriticalSectionList, "_RTL_CRITICAL_SECTION_DEBUG", "ProcessLocksList" )
11
    
12
    crtlst = [ ntdll.typedVar( "_RTL_CRITICAL_SECTION", x.CriticalSection ) for x in dbglst ]
13
    
14
    for crtsec in crtlst:
15
        dprintln("")
16
        dprintln( "CRITICAL SECTION  address = %#x ( %s ) " % ( crtsec, findSymbol( crtsec ) ) )
17
        dprintln( "  Owning thread = %x" % crtsec.OwningThread )
18
        dprintln( "  Lock count = %d" % crtsec.LockCount )
19
        
20

21
def run():
22

23
    while True:
24

25
        if isKernelDebugging():
26
            dprintln( "not a user debugging" )
27
            break 
28
        
29
        listCritSections()        
30

31
        break
32

33
if __name__ == "__main__":
34
    run()