ADVAPI32.dll<\/a>\napi-ms-win-appmodel-runtime-l1-1-0.dll<\/a>\napi-ms-win-appmodel-runtime-l1-1-1.dll<\/a>\napi-ms-win-core-apiquery-l1-1-0.dll<\/a>\napi-ms-win-core-com-l1-1-0.dll<\/a>\napi-ms-win-core-com-l1-1-1.dll<\/a>\napi-ms-win-core-com-midlproxystub-l1-1-0.dll<\/a>\napi-ms-win-core-debug-l1-1-0.dll<\/a>\napi-ms-win-core-delayload-l1-1-0.dll<\/a>\napi-ms-win-core-delayload-l1-1-1.dll<\/a>\napi-ms-win-core-errorhandling-l1-1-0.dll<\/a>\napi-ms-win-core-errorhandling-l1-1-2.dll<\/a>\napi-ms-win-core-file-l1-1-0.dll<\/a>\napi-ms-win-core-file-l1-2-0.dll<\/a>\napi-ms-win-core-file-l2-1-0.dll<\/a>\napi-ms-win-core-handle-l1-1-0.dll<\/a>\napi-ms-win-core-heap-l1-1-0.dll<\/a>\napi-ms-win-core-heap-l2-1-0.dll<\/a>\napi-ms-win-core-heap-obsolete-l1-1-0.dll<\/a>\napi-ms-win-core-interlocked-l1-1-0.dll<\/a>\napi-ms-win-core-io-l1-1-0.dll<\/a>\napi-ms-win-core-kernel32-legacy-l1-1-0.dll<\/a>\napi-ms-win-core-libraryloader-l1-2-0.dll<\/a>\napi-ms-win-core-libraryloader-l1-2-1.dll<\/a>\napi-ms-win-core-localization-l1-2-0.dll<\/a>\napi-ms-win-core-memory-l1-1-0.dll<\/a>\napi-ms-win-core-path-l1-1-0.dll<\/a>\napi-ms-win-core-processenvironment-l1-1-0.dll<\/a>\napi-ms-win-core-processthreads-l1-1-0.dll<\/a>\napi-ms-win-core-processthreads-l1-1-1.dll<\/a>\napi-ms-win-core-profile-l1-1-0.dll<\/a>\napi-ms-win-core-psapi-l1-1-0.dll<\/a>\napi-ms-win-core-registry-l1-1-0.dll<\/a>\napi-ms-win-core-registry-l1-1-1.dll<\/a>\napi-ms-win-core-registry-l2-1-0.dll<\/a>\napi-ms-win-core-rtlsupport-l1-1-0.dll<\/a>\napi-ms-win-core-shlwapi-legacy-l1-1-0.dll<\/a>\napi-ms-win-core-shlwapi-obsolete-l1-1-0.dll<\/a>\napi-ms-win-core-string-l1-1-0.dll<\/a>\napi-ms-win-core-string-l2-1-0.dll<\/a>\napi-ms-win-core-string-obsolete-l1-1-0.dll<\/a>\napi-ms-win-core-synch-l1-1-0.dll<\/a>\napi-ms-win-core-synch-l1-2-0.dll<\/a>\napi-ms-win-core-synch-l1-2-1.dll<\/a>\napi-ms-win-core-sysinfo-l1-1-0.dll<\/a>\napi-ms-win-core-sysinfo-l1-2-0.dll<\/a>\napi-ms-win-core-threadpool-l1-2-0.dll<\/a>\napi-ms-win-core-threadpool-legacy-l1-1-0.dll<\/a>\napi-ms-win-core-timezone-l1-1-0.dll<\/a>\napi-ms-win-core-util-l1-1-0.dll<\/a>\napi-ms-win-core-version-l1-1-0.dll<\/a>\napi-ms-win-core-winrt-error-l1-1-0.dll<\/a>\napi-ms-win-core-winrt-error-l1-1-1.dll<\/a>\napi-ms-win-core-winrt-l1-1-0.dll<\/a>\napi-ms-win-core-winrt-string-l1-1-0.dll<\/a>\napi-ms-win-crt-math-l1-1-0.dll<\/a>\napi-ms-win-crt-private-l1-1-0.dll<\/a>\napi-ms-win-crt-runtime-l1-1-0.dll<\/a>\napi-ms-win-crt-string-l1-1-0.dll<\/a>\napi-ms-win-devices-config-l1-1-1.dll<\/a>\napi-ms-win-devices-query-l1-1-0.dll<\/a>\napi-ms-win-eventing-classicprovider-l1-1-0.dll<\/a>\napi-ms-win-eventing-provider-l1-1-0.dll<\/a>\napi-ms-win-rtcore-ntuser-window-l1-1-0.dll<\/a>\napi-ms-win-security-base-l1-1-0.dll<\/a>\napi-ms-win-security-capability-l1-1-0.dll<\/a>\napi-ms-win-security-lsalookup-l2-1-0.dll<\/a>\napi-ms-win-security-provider-l1-1-0.dll<\/a>\napi-ms-win-security-sddl-l1-1-0.dll<\/a>\napi-ms-win-service-core-l1-1-0.dll<\/a>\napi-ms-win-service-management-l1-1-0.dll<\/a>\napi-ms-win-service-management-l2-1-0.dll<\/a>\napi-ms-win-service-winsvc-l1-1-0.dll<\/a>\napi-ms-win-shcore-stream-l1-1-0.dll<\/a>\napi-ms-win-shcore-taskpool-l1-1-0.dll<\/a>\napi-ms-win-stateseparation-helpers-l1-1-0.dll<\/a>\nbcrypt.dll<\/a>\ncombase.dll<\/a>\nCRYPT32.dll<\/a>\next-ms-win-session-usermgr-l1-1-0.dll<\/a>\nGDI32.dll<\/a>\nIPHLPAPI.DLL<\/a>\nKERNEL32.dll<\/a>\nmsvcp_win.dll<\/a>\nmsvcrt.dll<\/a>\nnetutils.dll<\/a>\nntdll.dll<\/a>\nole32.dll<\/a>\nOLEAUT32.dll<\/a>\nPROPSYS.dll<\/a>\nRPCRT4.dll<\/a>\nsetupapi.dll<\/a>\nSHELL32.dll<\/a>\nSHLWAPI.dll<\/a>\nSspiCli.dll<\/a>\nUSER32.dll<\/a>\nUSERENV.dll<\/a>\nWINHTTP.dll<\/a>\nWS2_32.dll<\/a>\nXmlLite.dll<\/a><\/p>\n\n\n A menudo se utilizan funciones en scripts de PowerShell como por ejemplo (Hacer clic en una posici\u00f3n de la pantalla con PowerShell):<\/p>\n\n\n Vemos que se usa una dll en concreto user32.dll y luego se hace referencia a la funci\u00f3n mouse_event que sirve para tratar con el mouse.<\/p>\n\n\n\n Pongamos otro ejemplo (Escribir texto en el proceso Notepad):<\/p>\n\n\n En este caso, se usa la dll user32.dll y luego se hace referencia a las funciones FindWindowEx y SendMessage para escribir un texto en el proceso Notepad.<\/p>\n\n\n\n La informaci\u00f3n sobre el uso de las funciones se puede obtener analizando las dll con aplicaciones como por ejemplo:<\/p>\n\n\n\n Informaci\u00f3n sobre DLL Explicaci\u00f3n sobre el uso de funciones que est\u00e1n en DLL del sistema operativo A menudo se utilizan […]<\/p>\n","protected":false},"author":1,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"footnotes":""},"class_list":["post-22049","page","type-page","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/www.jesusninoc.com\/dll\/wp-json\/wp\/v2\/pages\/22049","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.jesusninoc.com\/dll\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/www.jesusninoc.com\/dll\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/www.jesusninoc.com\/dll\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.jesusninoc.com\/dll\/wp-json\/wp\/v2\/comments?post=22049"}],"version-history":[{"count":0,"href":"https:\/\/www.jesusninoc.com\/dll\/wp-json\/wp\/v2\/pages\/22049\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.jesusninoc.com\/dll\/wp-json\/wp\/v2\/media?parent=22049"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}Explicaci\u00f3n sobre el uso de funciones que est\u00e1n en DLL del sistema operativo<\/h1>\n\n\n\n
$MouseEventSig=@'\n[DllImport(\"user32.dll\",CharSet=CharSet.Auto, CallingConvention=CallingConvention.StdCall)]\npublic static extern void mouse_event(long dwFlags, long dx, long dy, long cButtons, long dwExtraInfo);\n'@\n \n$MouseEvent = Add-Type -memberDefinition $MouseEventSig -name \"MouseEventWinApi\" -passThru\n\n[System.Windows.Forms.Cursor]::Position = New-Object System.Drawing.Point(10,10)\n$MouseEvent::mouse_event(0x00000002, 0, 0, 0, 0)\n$MouseEvent::mouse_event(0x00000004, 0, 0, 0, 0)<\/pre>\n\n\n
$codigo='\n[DllImport(\"user32.dll\", EntryPoint = \"FindWindowEx\")]public static extern IntPtr FindWindowEx(IntPtr hwndParent, IntPtr hwndChildAfter, string lpszClass, string lpszWindow);\n[DllImport(\"User32.dll\")]public static extern int SendMessage(IntPtr hWnd, int uMsg, int wParam, string lParam);\n'\n$notepad=Start-Process notepad -PassThru\n$notepad.WaitForInputIdle()\n\n$acciones=Add-Type -MemberDefinition $codigo -Name TextoNotepad -PassThru\n#FindWindowEx(IntPtr hwndParent, IntPtr hwndChildAfter, string lpszClass, string lpszWindow)\n#SendMessage(IntPtr hWnd, int uMsg, int wParam, string lParam)\n$acciones::SendMessage([IntPtr]$acciones::FindWindowEx($notepad.MainWindowHandle, [IntPtr]::Zero, \"Edit\", $null), 0x000C, 0, \"Texto\")<\/pre>\n\n\n
Aplicaciones<\/h2>\n\n\n\n
\n
Informaci\u00f3n sobre archivos DLL<\/h2>\n\n\n\n
\n
M\u00e1s ejemplos que ayudan a comprenderlo mejor:<\/h2>\n\n\n\n
\n