lamehide.dpr

CreateFile Hook with Delphi with AdvHooKLib

library LameHide;

uses
  Windows,
  SysUtils,
  Classes,
  StrUtil in 'Util\StrUtil.pas',
  advAPIHook in 'Lib\advAPIHook\advAPIHook.pas',
  NativeAPI in 'Lib\advAPIHook\NativeAPI.pas',
  
  Hooks in 'LameHide\Hooks.pas',
  Crypt in 'LameHide\Crypt.pas',
  FileList in 'LameHide\FileList.pas';

{$SETPEFLAGS IMAGE_FILE_DEBUG_STRIPPED or
             IMAGE_FILE_LINE_NUMS_STRIPPED or
             IMAGE_FILE_LOCAL_SYMS_STRIPPED or
             IMAGE_FILE_BYTES_REVERSED_LO or
             IMAGE_FILE_BYTES_REVERSED_HI }

{$R *.res}

function GetModuleName: string;
var
  szFileName: array[0..MAX_PATH] of Char;
begin
  FillChar(szFileName, SizeOf(szFileName), #0);
  GetModuleFileName(hInstance, szFileName, MAX_PATH);
  Result := szFileName;
end;


procedure EntryPoint(Reason: integer);
var
  p: pointer;
begin
  case Reason of
    DLL_PROCESS_ATTACH:
      begin

      InitHooks;

      end;
    DLL_PROCESS_DETACH:
      begin


      end;
    DLL_THREAD_ATTACH:
      begin
      end;
    DLL_THREAD_DETACH:
      begin
        if @TlsLast = nil then
          Exit;
        if TlsIndex <> -1 then
        begin
          p := TlsGetValue(TlsIndex);
          if p <> nil then
            TlsSetValue(TlsIndex, nil); // RTL does not nil the value
        end;
      end;
  end;
end;

function Init(ptr: DWORD): DWORD; stdcall; export;
begin
  Result := 0;
end;

exports Init name '^_^';

begin
    DllProc := @EntryPoint;

    DisableThreadLibraryCalls(hInstance);

    EntryPoint(DLL_PROCESS_ATTACH);
end.