hooks.pas

CreateFile Hook with Delphi with AdvHooKLib

unit Hooks;

interface
uses Windows;

procedure InitHooks;

var
  CreateFileWNextHook: function(lpFileName: PWideChar; dwDesiredAccess, dwShareMode: DWORD;
    lpSecurityAttributes: PSecurityAttributes; dwCreationDisposition, dwFlagsAndAttributes: DWORD;
    hTemplateFile: THandle): THandle; stdcall;
  ReadFileNextHook: function(hFile: THandle; var Buffer; nNumberOfBytesToRead: DWORD;
    var lpNumberOfBytesRead: DWORD; lpOverlapped: POverlapped): BOOL; stdcall;

implementation
uses
  AdvApiHook, FileList, Crypt;

var
  Log: TextFile;

function CreateFileWHookProc(lpFileName: PWideChar; dwDesiredAccess, dwShareMode: DWORD;
  lpSecurityAttributes: PSecurityAttributes; dwCreationDisposition, dwFlagsAndAttributes: DWORD;
  hTemplateFile: THandle): THandle; stdcall;
begin
  WriteLn(Log, WideString(lpFilename));
  Flush(Log);

  Result := CreateFileWNextHook(lpFileName, dwDesiredAccess, dwShareMode, lpSecurityAttributes, dwCreationDisposition, dwFlagsAndAttributes, hTemplateFile);

  FileList.OnFileOpen(Result, WideString(lpFileName));
end;

function ReadFileHookProc(hFile: THandle; var Buffer; nNumberOfBytesToRead: DWORD;
  var lpNumberOfBytesRead: DWORD; lpOverlapped: POverlapped): BOOL; stdcall;
var
  Offset: DWORD;
  Total: DWORD;
begin

  Result := ReadFileNextHook(hFile, Buffer, nNumberOfBytesToRead, lpNumberOfBytesRead, lpOverlapped);

  if (Result = True) and FileList.IsFileEncrypted(hFile) then
  begin
    Offset := SetFilePointer(hFile, 0, nil, FILE_CURRENT);
    Total := GetFileSize(hFile, nil);

    Crypt.CryptData(Buffer, Offset, lpNumberOfBytesRead, Total);
  end;

end;

procedure InitHooks;
begin
  StopThreads();

  if HookProc(PChar('kernel32.dll'), PChar('CreateFileW'), @CreateFileWHookProc, @CreateFileWNextHook) and
    HookProc(PChar('kernel32.dll'), PChar('ReadFile'), @ReadFileHookProc, @ReadFileNextHook) then
  begin
    WriteLn(Log, 'Hooks installed.');
    Flush(Log);
  end
  else
  begin
    WriteLn(Log, 'Hooks not installed.');
    Flush(Log);
  end;

  RunThreads();
end;

begin
  Assign(Log, 'LameHide.log');
  Rewrite(Log);
end.