5i%ddlZddlZddlZddlZddlZddlmZddlmZddl Tddl Tddl m Z ddl mZGddZGd d ZdS) N)MinidumpHeaderAMinidumpFileReader)*)MINIDUMP_STREAM_TYPE)MINIDUMP_DIRECTORYc*eZdZdZddZd dZdZdS) AsyncFilec>||_t|d|_dS)Nrb)filenameopenfhandle)selfr s L/home/kali/Ninja/venv/lib/python3.11/site-packages/minidump/aminidumpfile.py__init__zAsyncFile.__init__s$-h%%$,,,c:K|j|SN)rread)rns rrzAsyncFile.reads   1  rrc<K|j||Sr)rseek)rrbegs rrzAsyncFile.seeks   1c " ""rc4|jSr)rtellrs rrzAsyncFile.tell s     rN)r)r)__name__ __module__ __qualname__rrrrrrr r sZ&&&####rr ceZdZdZedZed dZedZedZdZ dZ d Z d Z d Z d S) AMinidumpFilecd|_d|_d|_g|_d|_d|_d|_d|_d|_d|_ d|_ d|_ d|_ d|_ d|_d|_d|_d|_dSr)r file_handleheader directories threads_exthreadsmodulesmemory_segmentsmemory_segments_64sysinfo comment_a comment_w exceptionhandlesunloaded_modules misc_info memory_info thread_infors rrzAMinidumpFile.__init__$s$-$$+$$/$,$,$ $$,$.$.$.$,$$.$$rcKt}||_t||_|d{V|Sr)r$r r r&_parse)r mfs rparsezAMinidumpFile.parse9sJ""+X&&".  )rcvKt}||_||_|d{V|S)z External file handle must be an object that exposes basic file IO functionality that you'd get by python's file buffer (read, seek, tell etc.) N)r$r r&r8)r&r r9s rparse_externalzAMinidumpFile.parse_externalAsD ""+".  )rcjKttj|d{VSr)r$ parse_buffioBytesIO)datas r parse_byteszAMinidumpFile.parse_bytesMs6'' 4(8(899 9 9 9 9 9 99rcXt}||_||Sr)r$r&r8)bufferr9s rr?zAMinidumpFile.parse_buffQs$"".))+++ )rc t|Srrrs r get_readerzAMinidumpFile.get_readerXs T " ""rcrK|d{V|d{VdSr)_AMinidumpFile__parse_header!_AMinidumpFile__parse_directoriesrs rr8zAMinidumpFile._parse[sT    """""""""""rcpKtj|jd{V|_t d|jjD]}|j|jj|dzzdd{Vtj|jd{V}|r|j |o|j|jj|dzzdd{V|j dd{V}t |dd}tjd|zdS)Nr littleF) byteordersignedz+Found Unknown UserStream directory Type: %x)raparser&r'rangeNumberOfStreamsrStreamDirectoryRvarr(appendrint from_bytesloggingdebug)ri minidump_dirtuser_stream_type_values r__parse_headerzAMinidumpFile.__parse_header_sm$+D,<========$+ DK/ 0 0 \ \a   t{=BF K KKKKKKKK*1$2BCCCCCCCC<\L))))     >R G L LLLLLLLL##A&&&&&&&&A ^^A8e^TT M?CYZ[[[[ \ \rcK|jD]}|jtjkr.t jd|jj|jjfzF|jtj kr.t jd|jj|jjfz|jtj kr.t jd|jj|jjfz|jtj krZt jd|jj|jjfzt ||jd{V|_;|jtjkrZt jd|jj|jjfzt" ||jd{V|_|jtjkrZt jd|jj|jjfzt( ||jd{V|_|jtjkrZt jd|jj|jjfzt. ||jd{V|_|jtjkrZt jd|jj|jjfzt4 ||jd{V|_|jtjkrZt jd |jj|jjfzt: ||jd{V|_f|jtjkrZt jd |jj|jjfzt> ||jd{V|_ |jtj!krZt jd |jj|jjfztB ||jd{V|_"D|jtj#krZt jd |jj|jjfztH ||jd{V|_%|jtj&krZt jd |jj|jjfztN ||jd{V|_("|jtj)krCt jd|jj|jjfzt jdz|jtj*krZt jd|jj|jjfztV ||jd{V|_,|jtj-krZt jd|jj|jjfzt\ ||jd{V|_/X|jtj0krZt jd|jj|jjfztb ||jd{V|_2|jtj3krt jd|jj|jjfzth ||jd{V|_5t jtm|j5\|jtj7krCt jd|jj|jjfzt jd|jtj8krBt jd|jj|jjfzt jdn|jtj9krBt jd|jj|jjfzt jdn|jtj:krBt jd|jj|jjfzt jdn8t jd|jj;|jj|jjfzdS)NzFound UnusedStream @%x Size: %dz"Found ReservedStream0 @%x Size: %dz"Found ReservedStream1 @%x Size: %dz#Found ThreadListStream @%x Size: %dz#Found ModuleListStream @%x Size: %dz#Found MemoryListStream @%x Size: %dz#Found SystemInfoStream @%x Size: %dz%Found ThreadExListStream @%x Size: %dz%Found Memory64ListStream @%x Size: %dz!Found CommentStreamA @%x Size: %dz!Found CommentStreamW @%x Size: %dz"Found ExceptionStream @%x Size: %dz#Found HandleDataStream @%x Size: %dz&Found FunctionTableStream @%x Size: %dz3Parsing of this stream type is not yet implemented!z+Found UnloadedModuleListStream @%x Size: %dz!Found MiscInfoStream @%x Size: %dz'Found MemoryInfoListStream @%x Size: %dz'Found ThreadInfoListStream @%x Size: %dz)Found SystemMemoryInfoStream @%x Size: %dzISystemMemoryInfoStream parsing is not implemented (Missing documentation)z'Found JavaScriptDataStream @%x Size: %dzGJavaScriptDataStream parsing is not implemented (Missing documentation)z*Found ProcessVmCountersStream @%x Size: %dzJProcessVmCountersStream parsing is not implemented (Missing documentation)zFound TokenStream @%x Size: %dz>TokenStream parsing is not implemented (Missing documentation)z+Found Unknown Stream! Type: %s @%x Size: %d)>> M6#,:JCLLa9bbccc  .>>> M6#,:JCLLa9bbccc  .??? M73<;KS\Mb:ccddd+2238HIIIIIIIIDL  .??? M73<;KS\Mb:ccddd+2238HIIIIIIIIDL  .??? M73<;KS\Mb:ccddd!3!:!:3@P!Q!QQQQQQQD  .??? M73<;KS\Mb:ccddd+2238HIIIIIIIIDL  .AAA M9S\=Ms|Od>> M6#,:JCLLa9bbccc(//T5EFFFFFFFFDN  .??? M73<;KS\Mb:ccddd188d>NOOOOOOOODL  .BBB M:cl>NPSP\Pe=ffggg MGHHH  .GGG M?3gghhh3::3@PQQQQQQQQD  .CCC M;s|?OQTQ]Qf>gghhh3::3@PQQQQQQQQD M#d&''(((  .EEE M=AQSVS_Sh@iijjj M]^^^  .CCC M;s|?OQTQ]Qf>gghhh M[\\\\ .FFF M>#,BRTWT`TiAjjkkk M^____ .::: M2cl6F H]5^^___ MRSSSS M?3>CVX[XdXhjmjvjCAABBBSmmrczd}|t|jz }|t|jz }|jD]}|t|dzz }|jD]}|t|dzz }|j|jD]}|t|dzz }|j|jD]}|t|dzz }|S)Nz== Minidump File ==  )rr'r.r(r+r,r-)rr\rmodsegments r__str__zAMinidumpFile.__str__s!s4;!s4<!  cC411 \cC411 %&wG tAA ()wG tAA (rN)r;)rr r!r staticmethodr:r=rCr?rGr8rIrJrr"rrr$r$#s*  ,     ,  ::,:  , ###### \ \ \ooob     rr$)r@sysenumstructrXminidump.headerrminidump.aminidumpreaderrminidump.streamsminidump.common_structsminidump.constantsrminidump.directoryrr r$r"rrrs ******888888%%%%333333111111        K K K K K K K K K K r