Click here to Skip to main content
Click here to Skip to main content
Add your own
alternative version

API hooking revealed

, 2 Dec 2002
The article demonstrates how to build a user mode Win32 API spying system
//---------------------------------------------------------------------------
//
// LogFile.h
//
// SUBSYSTEM:   Hook system
//				
// MODULE:      
//				
// DESCRIPTION: Common utilities. 
//              Provides an interface for logging facilities
// 
//             
// AUTHOR:		Ivo Ivanov (ivopi@hotmail.com)
// DATE:		2001 December v1.00
//
//---------------------------------------------------------------------------
#if !defined(_LOGFILE_H_)
#define _LOGFILE_H_

#if _MSC_VER > 1000
#pragma once
#endif // _MSC_VER > 1000

#include <share.h>
#include <stdio.h>
//---------------------------------------------------------------------------
//
// class CLogFile 
//
//---------------------------------------------------------------------------
class CLogFile
{
public:
	CLogFile(BOOL bTraceEnabled):
	  m_bTraceEnabled(bTraceEnabled)
	{
		m_hMutex = ::CreateMutex(
			NULL, 
			FALSE, 
			"{45428D53-A5DB-4168-BD3C-658419B60279}"
			); 
	}
	virtual ~CLogFile()
	{
		::CloseHandle(m_hMutex);
	}

	void InitializeFileName(char* pszFileName)
	{
		strcpy(m_szFileName, pszFileName);
	}

	void DoLogMessage(char* pszMessage)
	{
		::WaitForSingleObject(m_hMutex, INFINITE);
		__try
		{
			if (m_bTraceEnabled)
			{
				FILE* pOutFile;
				char  szFlags[2];
				strcpy(szFlags, "a");

				pOutFile = _fsopen(m_szFileName, szFlags, _SH_DENYNO);

				if (pOutFile != NULL)
				{
					char szPrintMessage[MAX_PATH];
					fseek(pOutFile, 0L, SEEK_END);
					sprintf(szPrintMessage, "%s\n", pszMessage);
					fputs(szPrintMessage, pOutFile);            
					fflush(pOutFile);

					fclose(pOutFile);
				} // if
			} // if
		}
		__finally
		{
			::ReleaseMutex(m_hMutex);
		}
	}
	
private:
	//
	// Determines whether to use a log file management
	//
	BOOL             m_bTraceEnabled;
	//
	// Name of the log file
	//
	char             m_szFileName[MAX_PATH];
	//
	// Handle to the mutex used as guard
	//
	HANDLE           m_hMutex;
};

#endif // !defined(_LOGFILE_H_)

//--------------------- End of the file -------------------------------------

By viewing downloads associated with this article you agree to the Terms of Service and the article's licence.

If a file you wish to view isn't highlighted, and is a text file (not binary), please let us know and we'll add colourisation support for it.

License

This article, along with any associated source code and files, is licensed under The Code Project Open License (CPOL)

Share

About the Author

Ivo Ivanov
Chief Technology Officer Vinsula
Australia Australia
I specialise in Malware Analysis, Application Security, Windows Kernel, x86/x64, and Reverse Engineering.
My blog: http://vinsula.com/security-blog
http://vinsula.com/
http://www.infoprocess.com.au
Follow on   Twitter   LinkedIn

| Advertise | Privacy | Mobile
Web02 | 2.8.140827.1 | Last Updated 3 Dec 2002
Article Copyright 2002 by Ivo Ivanov
Everything else Copyright © CodeProject, 1999-2014
Terms of Service
Layout: fixed | fluid