public Main(
RemoteHooking.IContext InContext,
String InChannelName)
{
Interface = RemoteHooking.IpcConnectClient<HookInterface>(InChannelName);
Interface.Ping();
}
public Main(
RemoteHooking.IContext InContext,
String InChannelName)
{
Interface = RemoteHooking.IpcConnectClient <HookInterface>(InChannelName);
Interface.Ping();
}
public void Run(RemoteHooking.IContext InContext, String InChannelName)
{
// install hook...
try
{
WriteConsoleHook = LocalHook.Create(
LocalHook.GetProcAddress("kernel32.dll", "WriteFile"),
new DWriteFile(WriteFile_Hooked),
this);
WriteConsoleHook.ThreadACL.SetExclusiveACL(new Int32[] { 0 });
}
catch (Exception ExtInfo)
{
Interface.ReportException(ExtInfo);
return;
}
//Interface.IsInstalled(RemoteHooking.GetCurrentProcessId());
RemoteHooking.WakeUpProcess();
// wait for host process termination...
try
{
while (true)
{
Thread.Sleep(500);
// transmit newly monitored file accesses...
if (Queue.Count > 0)
{
String[] Package = null;
lock (Queue)
{
Package = Queue.ToArray();
Queue.Clear();
}
Interface.OnWriteConsole(RemoteHooking.GetCurrentProcessId(), Package);
}
else
{
Interface.Ping();
}
}
}
catch
{
// Ping() will raise an exception if host is unreachable
}
}
public Main(RemoteHooking.IContext inContext, string inChannelName)
{
m_hookInterface = RemoteHooking.IpcConnectClient<HookInterface>(inChannelName);
m_hookInterface.Ping();
}