o j @sZddlZddlZddlmZddlmZddlmZddZddZ e d kr+e dSdS) N) AMinidumpFile)hexdump) __banner__csddl}|jdd}|jddd|jddd dd |jd d d d|jdd dd|jdd dd|jdd dd|jdd dd|jdd dd|jdd dd|jdd dd|jdd dd|jdd d d|jd!d"d#d$d%d&|jd'd(d)d$d*d%d+|}|jdkrtjtjd,n|jd-krtjtjd,ntjd-d,t t t |j IdH}|}|js|jr|jdurt t|j|jdurt t|j|jdurt t|j|js|jr|jdurt t|j|jdurt t|j|js|jr.|jdurt t|j|jdur!t t|j|jdur.t t|j|js6|jrC|jdurCt t|j|jsK|jrX|jdurXt t|j|js`|jrz|jdurmt t|j|jdurzt t|j|js|jr|jdurt t|j|js|j r|j!durt t|j!|js|j"rt t|j"|j#r|$}|%|j#IdH|&|j'IdH}t t(||j#d.dSdS)/NrzA parser for minidumnp files) description minidumpfilez&path to the minidump file of lsass.exe)helpz-vz --verbosecount)actiondefaultz--header store_truezFile header info)r rz --modulesz List modulesz --threadsz List threadsz--memoryz List memoryz --sysinfoz Show sysinfoz --commentsz Show commentsz --exceptionzShow exception recordsz --handlesz List handlesz--misczShow misc infoz--allz Show all infoz-rz --read-addrcS t|dSNrintxr/root/aizidognhua/tmp/workspace/projects/ec89d86c-575f-41c9-af57-ac45cbdbf775/venv/lib/python3.10/site-packages/minidump/__amain__.py zrun..z4Dump a memory region from the process's addres space)typerz-sz --read-sizecSr r rrrrrrr )rr r)level)start))argparseArgumentParser add_argument parse_argsverboselogging basicConfigINFODEBUGprintrrparser get_readerallthreadsstr threads_ex thread_infomodulesunloaded_modulesmemorymemory_segmentsmemory_segments_64 memory_infosysinfo exceptioncomments comment_a comment_whandlesmisc misc_infoheader read_addrget_buffered_readermovepeek read_sizer)rparserargsmfreader buff_readerdatarrrrun s                    rFcCsttdS)N)asynciorFrrrrmain[srH__main__) r rGminidump.aminidumpfilerminidump.common_structsrminidump._versionrrFrH__name__rrrrs   N