/*修改记录
2008-5-11 8:07 曲滨
>> 基本实现预期功能
! 明天进行优化
2008-5-12 15:54 曲滨
E 优化完成
N 加入 NativeCodeHelper 类便于使用
2010-6-17 周振兴
修改兼容性，可在开启DEP及Vista/Win7中运行。
*/
namespace NShellNativeCode
{
using System;
using System.Runtime.InteropServices;
delegate int AddProc(int p1, int p2);
class Program
{
static void Main(string\[\] args)
{
byte\[\] codeBytes = {
0x8B, 0x44, 0x24, 0x08 // mov eax,esp+08h
, 0x8B, 0x4C, 0x24, 0x04 // mov ecx,esp+04h
, 0x03, 0xC1 // add eax,ecx
, 0xC3 // ret
};
/*
上面的字节数组，就是下面函数的本机代码；
int add(int x,int y) {
return x+y;
}
*/
IntPtr handle = IntPtr.Zero;
handle = VirtualAlloc (
IntPtr.Zero,
codeBytes.Length,
MEM_COMMIT | MEM_RESERVE,
PAGE_EXECUTE_READWRITE);
try
{
Marshal.Copy(codeBytes, 0, handle, codeBytes.Length);
AddProc add
= Marshal.GetDelegateForFunctionPointer(handle, typeof(AddProc)) as AddProc;
int r = add(1976, 1);
Console.WriteLine("本机代码返回:{0}", r);
}
finally
{
VirtualFree (handle, 0, MEM_RELEASE);
}
Console.ReadLine();
}
//Windows API
DllImport("Kernel32.dll", EntryPoint = "VirtualAlloc")
public static extern IntPtr VirtualAlloc(IntPtr address, int size, uint allocType, uint protect);
DllImport("Kernel32.dll", EntryPoint = "VirtualFree")
public static extern bool VirtualFree(IntPtr address, int size, uint freeType);
//flags
const uint MEM_COMMIT = 0x1000;
const uint MEM_RESERVE = 0x2000;
const uint PAGE_EXECUTE_READWRITE = 0x40;
const uint MEM_RELEASE = 0x8000;
}
}