全局变量重定位

对于寄生程序，全局变量重定位不可避免。下面代码实现了全局变量的重定位。

inline DWORD GetOffset()
{
DWORD dwGlobalOffset=0;
__asm
{
  call OffsetLabel
  OffsetLabel:
  pop dwGlobalOffset
  sub dwGlobalOffset,offset OffsetLabel
}
return dwGlobalOffset;
}
#define REDIRECT_GLOBALDATA(Type,globalData) /
(*((Type *)((char *)&globalData + GetOffset())))
#define REDIRECT_GLOBALDATA_KNOWN(Type,globalData,globalOffset) /
(*((Type *)((char *)&globalData + globalOffset)))

具体访问方式如下：

DWORD dataTest1=10;
DWORD dataTest2=20;
void funcTest1()
{
DWORD data1=REDIRECT_GLOBALDATA(DWORD,dataTest1);
}
void funcTest2()
{
DWORD dwOffset=GetOffset();
DWORD data1=REDIRECT_GLOBALDATA_KNOWN(DWORD,dataTest1,dwOffset);
DWORD data2=REDIRECT_GLOBALDATA_KNOWN(DWORD,dataTest2,dwOffset);
}