C# / MemorySharp: Injecting managed DLL into the WoW-Process?

[mskc33]

I am looking to inject my managed DLL (build using .NET 4.0) into the WoW-Process and running my bot from there. MemorySharp seem to be the best tool to accomplish this.

var proc = Process.GetProcessesByName("Wow").FirstOrDefault();
var ms = new MemorySharp(proc.Id);

var module = ms.Modules.Inject(Path.Combine(Application.StartupPath, "LoadMe.dll"));
var func = module.FindFunction("Init"); // Crashes here, cannot find the function with GetProcAddress

func.Execute();

module.Dispose();
ms.Dispose();
proc.Dispose();

public class LoadMe {
    public LoadMe() {
        MessageBox.Show(string.Format("Hello from constructor inside {0}", Process.GetCurrentProcess().ProcessName));
    }

    // static or not does not seem to make a difference
    public void Init() {
        MessageBox.Show(string.Format("Hello from Init inside {0}", Process.GetCurrentProcess().ProcessName));
    }
}

I can confirm that this DOES inject the module, but I am unable to create a new instance of my class "public class LoadMe" or call the static/non-static method "public void Init()".
Do I have to spawn a new CLR/AppDomain in order to do this?
(DomainWrapper/DomainWrapper at master * lolp1/DomainWrapper * GitHub)

Has anybody done something similar and could help me out here? I'd appreciate it!

[lolp1]

...
Do I have to spawn a new CLR/AppDomain in order to do this?

You need to host the CLR and resolve your app domain.

[Jadd]

Just use DllExports. It will load the CLR for you. Then you can load it via export call, just like you are trying to do.

[DllExport("Init", CallingConvention.WinApi)]
public static void Init() {
    ...
}

[mskc33]

Just use DllExports. It will load the CLR for you. Then you can load it via export call, just like you are trying to do.

[DllExport("Init", CallingConvention.WinApi)]
public static void Init() {
    ...
}

Thanks for the quick reply!
Sadly, that does not seem to work. Actually I cannot even call the "MessageBoxW" function from "kernel32", it seems. There is an example on their website which doesnt work for me (Binarysharp :: Products - MemorySharp)

For some reason, it seems like I cannot call any functions.

var proc = Process.GetProcessesByName("Wow").FirstOrDefault();
var ms = new MemorySharp(proc.Id);

// Neither of those work:
var func = ms["user32"]["MessageBox"];
// var func = ms["kernel32"]["MessageBoxW"];
func.Execute(0, "Hey", "Title", 0);

An unhandled exception of type 'System.ComponentModel.Win32Exception' occurred in MemorySharp.dll
Additional information: Couldn't get the function address of MessageBoxW.

// Edit: I got it to "find" the MessageBoxW-Function by setting my build output to strictly x86. But now, once I call the function WoW crashes immediately:

0xC0000005 (ACCESS_VIOLATION) at 0023:1046FFDC

The instruction at "0x1046FFDC" referenced memory at "0x1046FFDC".
The memory could not be "written".