Failed to find symbol when using C# runtime.

kubo / plthook

Hook function calls by replacing PLT(Procedure Linkage Table) entries.

745 stars 152 forks source link

Failed to find symbol when using C# runtime. #27

Open ArtBlnd opened 4 years ago

ArtBlnd commented 4 years ago

We have existing DLL that works on C++, C# both runtime. and we wanted to hook on WSASocketW, WSASocketA but it works fine with C++ base but not working on C# base. (same DLL implementation, but loaded from another executable) I can see there is WSASocket functions on C++ base using plthook_enum but C# one does not.

maybe there is difference between IAT mapping on .NET runtime?

kubo commented 4 years ago

Could you post sample code? I'm not familiar with C#.

ArtBlnd commented 4 years ago

I have lots of works left so I'll post it later ASAP