poizan42 / soswow64

windbg/dbgeng extension for debugging 64-bit dumps of 32-bit .NET processes.
Other
80 stars 11 forks source link

Failed patching DbgEng!X86MachineInfo #5

Open disshishkov opened 3 years ago

disshishkov commented 3 years ago
.load soswow64
Successfully hooked IDebugControl::GetExecutingProcessorType.
Failed patching DbgEng!X86MachineInfo::ConvertCanonContextToTarget, stack related commands may not work correctly.

WinDbg 10.0.19041.685 dbgeng.zip

MrXhh commented 3 years ago

can use wow64exts

reference:如何分析64位系统上32位程序的dump