pydbg学习

#以前在window xp下学习过一段时间pydbg，现在在window 7 下发现有些新问题，将pydbg实现windbg中一条简单的“bu”命令测试了下：

#在此留个记号，免得下次有的从头再来 

# coding gb2312 -*-


from ctypes import *
from pydbg import *
from pydbg.defines import *
from pefile import *
import sys


def handler_UpdateMarkupContentsVersion(dbg):
	print "************"
	print "edx=%08x"%dbg.get_register("edx")
	print "eax=%08x"%dbg.get_register("eax")


	buf = dbg.read_process_memory(dbg.get_register("edx"),0x100)


	for i in range(0,0x100):
		print "%02x "%ord(buf[i]),
		if (i%16)==15:
			print ""


	print "************"
	sys.stdout.flush()


	return DBG_CONTINUE




def my_event_handler_load_dll(dbg):
	last_dll = dbg.get_system_dll(-1)
	print "loading:%s from %s into: %08x size: %x"%(last_