miasm
Reverse engineering framework
miasm.loader.minidump_init.Minidump Class Reference
Inheritance diagram for miasm.loader.minidump_init.Minidump:
Collaboration diagram for miasm.loader.minidump_init.Minidump:

Public Member Functions

def __init__ (self, minidump_str)
 
def parse_content (self)
 
def build_memory (self)
 
def get (self, virt_start, virt_stop)
 

Public Attributes

 modulelist
 
 memory64list
 
 memorylist
 
 memoryinfolist
 
 systeminfo
 
 streams
 
 threads
 
 memory
 
 minidumpHDR
 

Detailed Description

Stand for a Minidump file

Here is a few limitation:
 - only < 4GB Minidump are supported (LocationDescriptor handling)
 - only Stream relative to memory mapping are implemented

Official description is available on MSDN:
https://msdn.microsoft.com/en-us/library/ms680378(VS.85).aspx

Constructor & Destructor Documentation

◆ __init__()

def miasm.loader.minidump_init.Minidump.__init__ (   self,
  minidump_str 
)

Member Function Documentation

◆ build_memory()

def miasm.loader.minidump_init.Minidump.build_memory (   self)
Build an easier to use memory view based on ModuleList and
Memory64List streams

◆ get()

def miasm.loader.minidump_init.Minidump.get (   self,
  virt_start,
  virt_stop 
)
Return the content at the (virtual addresses)
[virt_start:virt_stop]
Here is the caller graph for this function:

◆ parse_content()

def miasm.loader.minidump_init.Minidump.parse_content (   self)
Build structures corresponding to current content

Member Data Documentation

◆ memory

miasm.loader.minidump_init.Minidump.memory

◆ memory64list

miasm.loader.minidump_init.Minidump.memory64list

◆ memoryinfolist

miasm.loader.minidump_init.Minidump.memoryinfolist

◆ memorylist

miasm.loader.minidump_init.Minidump.memorylist

◆ minidumpHDR

miasm.loader.minidump_init.Minidump.minidumpHDR

◆ modulelist

miasm.loader.minidump_init.Minidump.modulelist

◆ streams

miasm.loader.minidump_init.Minidump.streams

◆ systeminfo

miasm.loader.minidump_init.Minidump.systeminfo

◆ threads

miasm.loader.minidump_init.Minidump.threads

The documentation for this class was generated from the following file: