// stdafx.h
#include <objbase.h>
#include <MetaHost.h>
#include <cassert>

// ProxyDll.cpp

#define ASSEMBLY_NAME   L"Launcher.exe"
#define LOADER_TYPE     L"moe.jixun.Inject"
#define LOADER_FUNCTION L"Init"

__declspec(dllexport) void Bootstrap() {
    CoInitializeEx(0, COINIT_MULTITHREADED);

    ICLRMetaHost *pMetaHost = nullptr;
    HRESULT hr = CLRCreateInstance(CLSID_CLRMetaHost, IID_ICLRMetaHost, (LPVOID*)&pMetaHost);
    ICLRRuntimeInfo *pRuntimeInfo = nullptr;
    pMetaHost->GetRuntime(L"v4.0.30319", IID_ICLRRuntimeInfo, (LPVOID*)&pRuntimeInfo);

    ICLRRuntimeHost *pClrRuntimeHost = nullptr;
    pRuntimeInfo->GetInterface(CLSID_CLRRuntimeHost, IID_ICLRRuntimeHost, (LPVOID*)&pClrRuntimeHost);

    pClrRuntimeHost->Start();

    DWORD dReturnValue;
    hr = pClrRuntimeHost->ExecuteInDefaultAppDomain(ASSEMBLY_NAME, LOADER_TYPE, LOADER_FUNCTION, L"Test", &dReturnValue);
    assert(hr == S_OK);
}

// 加入目标函数的引用，可以快速定位
// 或者

namespace moe.jixun
{
    public class Inject
    {
        static HammerCheatInit () {
            // 此处初始化
        }

        public static int Init(String pwzArgument)
        {
            return 1;
        }

        // 测试用函数
        private int Empty()
        {
            return 1;
        }

        // 获取函数的机器码地址
        private static void Test()
        {
            Type typeCheatInit = typeof(HammerCheatInit);
            MethodInfo empty = typeCheatInit.GetMethod("Empty", BindingFlags.NonPublic | BindingFlags.Instance);

            RuntimeHelpers.PrepareMethod(empty.MethodHandle);
            
            var addr = empty.MethodHandle.GetFunctionPointer().ToInt32();

            MessageBox.Show(addr.ToString("x"));
        }
    }
}