NULL0B / ClrAnalyzer

.NET library for hooking and dumping Clr

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

ClrAnalyzer

.NET library for hooking and dumping Clr

The article with the descripntion can be found here

The video with the demo of usage can be found here

The 🇷🇺 video from the DotNet meetup can be found here with the 🇬🇧 slides

Example of output

native size of code: 8
IL code: 000001C923D7B380
===
IL_0000: ldarg.0
IL_0001: call <0x06000002>
IL_0006: nop
IL_0007: ret
===
method attribs: 4800000
===
	CORINFO_FLG_CONSTRUCTOR: This method is an instance or type initializer
	CORINFO_FLG_NOSECURITYWRAP: The method requires no security checks
===
native size of code: 12
IL code: 000001C923D7A5F0
===
IL_0000: nop
IL_0001: ldarg.1
IL_0002: conv.r8
IL_0003: call <0x0a00000e>
IL_0008: stloc.0
IL_0009: ldloc.0
IL_000a: conv.i4
IL_000b: ldarg.2
IL_000c: mul
IL_000d: stloc.1
IL_000e: br.s IL_0010
IL_0010: ldloc.1
IL_0011: ret
===
method attribs: 14000050
===
	CORINFO_FLG_FINAL
	CORINFO_FLG_VIRTUAL
	CORINFO_FLG_NOSECURITYWRAP: The method requires no security checks
	CORINFO_FLG_DONT_INLINE: The method should not be inlined
===
native size of code: 14
IL code: 000001C923D7AAC0
===
IL_0000: nop
IL_0001: ldarg.1
IL_0002: conv.r8
IL_0003: call <0x0a00000e>
IL_0008: stloc.0
IL_0009: ldloc.0
IL_000a: conv.i4
IL_000b: ldarg.2
IL_000c: mul
IL_000d: ldc.i4.2
IL_000e: mul
IL_000f: stloc.1
IL_0010: br.s IL_0012
IL_0012: ldloc.1
IL_0013: ret
===
method attribs: 4000060
===
	CORINFO_FLG_SYNCH
	CORINFO_FLG_VIRTUAL
	CORINFO_FLG_NOSECURITYWRAP: The method requires no security checks
===
native size of code: 20
IL code: 000001C923D7B070
===
IL_0000: nop
IL_0001: ldarg.0
IL_0002: conv.r8
IL_0003: call <0x0a00000e>
IL_0008: stloc.0
IL_0009: ldloc.0
IL_000a: conv.i4
IL_000b: ldarga.s 0x01
IL_000d: ldarg.0
IL_000e: call <0x0a00000f>
IL_0013: call <0x0a000010>
IL_0018: mul
IL_0019: ldc.i4.3
IL_001a: mul
IL_001b: stloc.1
IL_001c: br.s IL_001e
IL_001e: ldloc.1
IL_001f: ret
===
method attribs: 4010008
===
	CORINFO_FLG_STATIC
	CORINFO_FLG_FORCEINLINE: The method should be inlined if possible
	CORINFO_FLG_NOSECURITYWRAP: The method requires no security checks
===

About

.NET library for hooking and dumping Clr


Languages

Language:C++ 68.9%Language:C# 22.2%Language:C 8.9%