-
Notifications
You must be signed in to change notification settings - Fork 84
/
Copy pathminidump_type.ps1
37 lines (35 loc) · 1.38 KB
/
minidump_type.ps1
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
# Decode a given MINIDUMP_TYPE enumerated value into human-readable symbols
# > .\minidump_type.ps1 -minidump_type 7
# MiniDumpWithDataSegs, MiniDumpWithFullMemory, MiniDumpWithHandleData
Param(
[Parameter(Mandatory)][Int]$minidump_type
)
# see https://docs.microsoft.com/en-us/windows/win32/api/minidumpapiset/ne-minidumpapiset-minidump_type
[Flags()] enum MINIDUMP_TYPE {
MiniDumpNormal = 0x0
MiniDumpWithDataSegs = 0x1
MiniDumpWithFullMemory = 0x2
MiniDumpWithHandleData = 0x4
MiniDumpFilterMemory = 0x8
MiniDumpScanMemory = 0x10
MiniDumpWithUnloadedModules = 0x20
MiniDumpWithIndirectlyReferencedMemory = 0x40
MiniDumpFilterModulePaths = 0x80
MiniDumpWithProcessThreadData = 0x100
MiniDumpWithPrivateReadWriteMemory = 0x200
MiniDumpWithoutOptionalData = 0x400
MiniDumpWithFullMemoryInfo = 0x800
MiniDumpWithThreadInfo = 0x1000
MiniDumpWithCodeSegs = 0x2000
MiniDumpWithoutAuxiliaryState = 0x4000
MiniDumpWithFullAuxiliaryState = 0x8000
MiniDumpWithPrivateWriteCopyMemory = 0x10000
MiniDumpIgnoreInaccessibleMemory = 0x20000
MiniDumpWithTokenInformation = 0x40000
MiniDumpWithModuleHeaders = 0x80000
MiniDumpFilterTriage = 0x100000
MiniDumpWithAvxXStateContext = 0x200000
MiniDumpWithIptTrace = 0x400000
MiniDumpScanInaccessiblePartialPages = 0x800000
};
Write-Host ([MINIDUMP_TYPE]$minidump_type);