This is hilarious. This guy is straight out of dailywtf.

Hi Chris, Sorry for posting in two message forums. I didn't know which one is the right place. I was getting a 301 to a 404 page. http://www.codeproject.com/script/common/404.aspx?aspxerrorpath=/kb/dotnet/clrmethodinjection.aspx I cleared my cache and it seems to be working now. Thanks Ziad

My article used to be here for over two years but now it is gone. Was it deleted by accident or was there a reason? CLR Injection: Runtime Method Replacer[^] Thanks Ziad

My article used to be here for over two years but now it is gone. Was it deleted by accident or was there a reason? http://www.codeproject.com/script/common/404.aspx?aspxerrorpath=/kb/dotnet/clrmethodinjection.aspx[] Thanks Ziad

Runtime Call Wrapepers are for COM. This is just a normal C++ class exposed in the export table. In C++ calling methods on a class use a calling convention called ThisCall. With ThisCall the "this" pointer gets passed into the method via the ECX register and everything else is the same as STD call. .Net supports this. You can specify this calling convention in the DllImport attribute. How the constructor and destructor get called is something else. When you specify ThisCall in the DllImport attribute the first parameter of the method must be a pointer to "This". The names are going to be mangled in the export table. Use a program like dependency walker to see what they are. Here is a good post I found on this site. How to Marshal a C++ Class[^]

modified on Friday, October 1, 2010 2:38 PM