I can intercept the API from a c++ application, but I'm having trouble with .net applications. With C++ apps, I just get the module handle of the .exe and I can get the correct IMAGE_IMPORT_DESCRIPTOR for the specific dll using ImageDirectoryEntryToData(). But with .net, when I use the .exe as the module handle(as handle parameter for ImageDirectoryEntryToData()), I get mscoree.dll and the api functions I want to intercept are not in that dll. Anyone know which module to look into? I'm guessing that one of them calls GetProcAddress whenever an API is called.
Tek-Tips is the largest IT community on the Internet today!
Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!
-
Congratulations SkipVought on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!
How to intercept API calls from .net app when using IAT patching?
- Thread starter bmart102
- Start date
Similar threads
- Locked
- Question
