记录使用注入的方式为Unity编辑器实现扩展能力

使用场景

当前项目编辑器中不方便存放或者提交扩展代码
相同的扩展功能需要在多个项目(编辑器)中使用
项目开发中，偶尔临时需要使用一个功能，想随时使用随时卸载

设计思路

使用进程注入，将一个c/c++ dll注入到当前运行的unity编辑器中
使用c/c++ dll调用mono的函数接口，比如mono_get_root_domain去获取unity的domain动态去加载想要加载的外部的扩展c# dll
在扩展c# dll中调用 EditorUtility.RequestScriptReload();来触发unity编辑器的重新编译，重载编辑器中的domain实现卸载外部c# dll的功能
在扩展c# dll中绑定EditorApplication.update事件，用来处理主线程的操作，比如AssetDatabase.Refresh();
使用jsonrpc协议，用来调用c# dll中的部分封装功能函数，可以实现在unity编辑器直接展示扩展窗口，或者将数据传至其他编辑器进行展示

初步实现

进程注入c/c++ dll

//远程进程插入dll bypid
bool DllInject::nsertDllToProcessByPid(DWORD Pid, const char* pDllName)
{// 提升权限//ImproveProcessPri();// 获取要插入的进程IDDWORD dwIDExplorer = Pid;if (dwIDExplorer == 0){MEMBOX("Get Pro ID Error!\n");return false;}// 打开进程HANDLE hProcess = OpenProcess(/*PROCESS_ALL_ACCESS*/0x1F0FFF, FALSE, dwIDExplorer);if (hProcess == NULL){MEMBOX("Open Process Error!\n");return false;}// 分配空间void* pDllPath = VirtualAllocEx(hProcess, 0, strlen(pDllName) + 1, MEM_COMMIT | MEM_RESERVE, PAGE_EXECUTE_READWRITE);if (!pDllPath){MEMBOX("pRemoteThread = NULL!\n");return false;}if (!WriteProcessMemory(hProcess, pDllPath, pDllName, strlen(pDllName) + 1, 0)){MEMBOX("WriteProcessMemory Fail!\n");return false;}//看有Game.exe 是否打开   .   打开了  GetProcAddress 是不准的  /*1. 检测静态 变量是否存储2.*///卸载保护HMODULE h = GetModuleHandle("MessageHis.dat");if (h != NULL)FreeLibrary(h);PROC AdrMyDllDir = GetProcAddress(GetModuleHandle("Kernel32"), "LoadLibraryA");//(PROC)::GetProcAddress(::GetModuleHandle(TEXT("kernel32.dll")),"LoadLibraryA");// 创建远程线程HANDLE hThread = CreateRemoteThread(hProcess, 0, 0, (LPTHREAD_START_ROUTINE)AdrMyDllDir, pDllPath, 0, 0);if (!hThread){MEMBOX("Remote thread faile.");//AfxMessageBox("远程线程创建失败");return false;}WaitForSingleObject(hThread, INFINITE); //等待运行完成CloseHandle(hThread);//这个CloseHandle是不会关掉远程线程的，TerminateThread能关掉VirtualFreeEx(hProcess, pDllPath, strlen(pDllName) + 1, MEM_RELEASE);CloseHandle(hProcess);MEMBOX("Remote Inject Dll Success");//AfxMessageBox("注入成功");return true;
}

调用mono接口加载c# dll

bool MonoInjecter::InjectMonoAssembly()
{//GetProcAddress/* grab the root domain */// domain = fnGetRootDomain();// fnThreadAttach(domain);log_trace("Hello %s %s", "fnGeDomainFriendlyName", fnGeDomainFriendlyName(domain));log_trace("Hello %s %s", "fnGetRootDir", fnGetRootDir());//----------------------------domain = fnGetDomainById(1);log_trace("Hello %s %ld", "fnGetRootDomain", domain);fnThreadAttach(domain);log_trace("Hello %s %s", "fnGeDomainFriendlyName", fnGeDomainFriendlyName(domain));log_trace("Hello %s %s", "fnGetRootDir", fnGetRootDir());//----------------------------/* open payload assembly */std::string assemblyDir;/* Grab our root directory*/assemblyDir.append(fnGetRootDir());assemblyDir.append(ASSEMBLY_PATH);assembly = fnAssemblyOpen(assemblyDir.c_str(), NULL);if (assembly == NULL) return false;log_trace("Hello %s %ld", "fnAssemblyOpen", assembly);image = fnAssemblyGetImage(assembly);if (image == NULL) return false;log_trace("Hello %s %ld", "fnAssemblyGetImage", image);klass = fnClassFromName(image, PAYLOAD_NAMESPACE, PAYLOAD_CLASS);if (klass == NULL) return false;log_trace("Hello %s %ld", "fnClassFromName", klass);/* grab the hack entrypoint */method = fnMethodFromName(klass, PAYLOAD_MAIN, 0);if (method == NULL) return false;log_trace("Hello %s %ld", "fnMethodFromName", method);/* call our entrypoint */fnRuntimeInvoke(method, NULL, NULL, NULL);log_trace("\nHello %s", "run mono dll!\n\n");return true;
}