[Help] Unhooking

i want to make some application that automatic unhook ..

can someone tell me how to unhooking...i searching around the internet i cant found it.

thx 4 help :)

What's the driver?

...i'am new in hooking and kernel system @_@..

hmm...i unhook that for make searching address normal..if that address not unhook address memory will jump every second i dunno why....i try unhook one by one using antirootkit...

and now i create a trainer that i need to make automaticly unhook that...

if you can explain it...thx..

---------- Post added 2012-03-25 at 04:01 AM ---------- Previous post was 2012-03-20 at 05:04 AM ----------

sorry for double posting but...
anyone can teach me how to do this...

i already confused..

need to unhook and hooking another driver @_@..
anyone..

Code:

---

DWORD EjectDll(DWORD processId, DWORD dll)
{
    DWORD retcode;
    HMODULE kernel32Handle;


    // Get access to the process
    EnsureCloseHandle processHandle(OpenProcess(PROCESS_ALL_ACCESS, FALSE, processId));
    if (!processHandle)
    {
        throw runtime_error("Could not get process handle.");
    }

    // Get the address of the FreeLibrary function in kernel32.dll
    kernel32Handle = GetModuleHandle("kernel32.dll");

    if (!kernel32Handle)
    {
        throw runtime_error("Could not get Kernel32.dll handle.");
    }


    FARPROC pfreeLibrary = GetProcAddress(kernel32Handle, "FreeLibrary");
    PTHREAD_START_ROUTINE freeLibrary = reinterpret_cast<PTHREAD_START_ROUTINE>(pfreeLibrary);
    if (freeLibrary != NULL)
    {
        HANDLE remoteThreadHandle = CreateRemoteThread(processHandle, NULL, 0, (LPTHREAD_START_ROUTINE)freeLibrary, (void*)dll, 0, NULL);
        if (!remoteThreadHandle)
        {
            WaitForSingleObject(remoteThreadHandle, INFINITE);
            GetExitCodeThread(remoteThreadHandle, &retcode);
        }
        CloseHandle(remoteThreadHandle);
    }

    CloseHandle(kernel32Handle);
    return retcode;
}

---

This helps?

I'l try it...
Thx alot USDL, what language programming that u used..

let me try to explain it so i understand how it work..

Quote:

---

Originally Posted by The_USDL [Only registered and activated users can see links. Click Here To Register...]

/ Get access to the process
EnsureCloseHandle processHandle(OpenProcess(PROCESS_ALL_ACCESS, FALSE, processId));
if (!processHandle)
{
throw runtime_error("Could not get process handle.");
}

---

That code for getting access to game process.

Quote:

---

Originally Posted by The_USDL [Only registered and activated users can see links. Click Here To Register...]

// Get the address of the FreeLibrary function in kernel32.dll
kernel32Handle = GetModuleHandle("kernel32.dll");

if (!kernel32Handle)
{
throw runtime_error("Could not get Kernel32.dll handle.");
}

---

and this to get address of freelibrary..

and can i ask something??..
what is recode value that will return??..
get address of freelibrary < this is that i need to change to myunhook file ??..


hmm... i hope you can teach us about how to make something like this...
your tutorial will be needed for junior programmer like me..
thx a lot USDL, its will help me...