Skip to content

improve memdump dotnet#1868

Draft
psolvx wants to merge 4 commits intotklengyel:mainfrom
psolvx:fix/memdump-dotnet
Draft

improve memdump dotnet#1868
psolvx wants to merge 4 commits intotklengyel:mainfrom
psolvx:fix/memdump-dotnet

Conversation

@psolvx
Copy link
Contributor

@psolvx psolvx commented Mar 12, 2026

  • adds drakvuf_get_function_argument_ex which allows to override 32bit calling convention to fastcall or thiscall
  • uses fastcall for memdump AssemblyNative::LoadImage hook
  • splits memdump wanted_hooks to 32 and 64 bit versions and adds --json-clr-64 option for 64bit clr.dll profile
  • fixes copy_proc_data_from_priv not copying bitness field
  • fixes win_get_pid_from_handle and win_get_tid_from_handle returning false when self pseudo handle is resolved to current pid

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant