主题
卸载远程Hook API - UnhookRemoteApi
函数简介
卸载此前通过 HookRemoteApi 在目标进程指定地址安装的远程 Hook,恢复原始指令与执行流程。(高级版功能,普通版无法使用)
接口名称
UnhookRemoteApiDLL调用
int UnhookRemoteApi(long instance, long hwnd, long targetAddr);参数说明
| 参数名 | 类型 | 说明 |
|---|---|---|
| instance | 长整数型 | OLAPlug对象的指针,由 CreateCOLAPlugInterFace 接口生成。 |
| hwnd | 长整数型 | 窗口句柄或进程ID(需与安装 Hook 时一致) |
| targetAddr | 长整数型 | 目标进程中已 Hook 的地址(需与安装 Hook 时一致) |
示例
SDK 调用
cpp
#include "OLAPlugServer.h"
OLAPlugServer ola;
int ret = ola.UnhookRemoteApi(hwnd, 0);csharp
using OLAPlug;
var ola = new OLAPlugServer();
int ret = ola.UnhookRemoteApi(hwnd, 0);python
from OLAPlugServer import OLAPlugServer
ola = OLAPlugServer()
ret = ola.UnhookRemoteApi(hwnd, 0)java
import com.olaplug.OLAPlugServer;
OLAPlugServer ola = new OLAPlugServer();
int ret = ola.UnhookRemoteApi(hwnd, 0);cpp
var ola = com("OlaPlug.OlaSoft")
var ret = ola.UnhookRemoteApi(hwnd, 0)vbscript
Set ola = CreateObject("OlaPlug.OlaSoft")
ret = ola.UnhookRemoteApi(hwnd, 0)text
.局部变量 ola, OLAPlug
ola.创建 ()
ret = ola.UnhookRemoteApi(hwnd, 0)aardio
import OLAPlugServer;
var ola = OLAPlugServer();
var ret = ola.UnhookRemoteApi(hwnd, 0);text
变量 ola <类型 = OLAPlugServer>
ola = 新建 OLAPlugServer
整数 ret = ola.UnhookRemoteApi(hwnd, 0)cpp
#include "OLAPlugServer.h"
OLAPlugServer ola;
int32_t ret = ola.UnhookRemoteApi(hwnd, 0);原生 DLL 调用
cpp
long instance = CreateCOLAPlugInterFace();
UnhookRemoteApi(instance, hwnd, 0);csharp
using System.Runtime.InteropServices;
using System.Text;
[DllImport("OLAPlug_x64.dll", CallingConvention = CallingConvention.StdCall)]
static extern long CreateCOLAPlugInterFace();
[DllImport("OLAPlug_x64.dll", CallingConvention = CallingConvention.StdCall)]
static extern int UnhookRemoteApi(long ola, long hwnd, long targetAddr);
long instance = CreateCOLAPlugInterFace();
UnhookRemoteApi(instance, hwnd, 0);python
from ctypes import CDLL, c_int, c_int64, create_string_buffer
ola = CDLL("OLAPlug_x64.dll")
ola.CreateCOLAPlugInterFace.restype = c_int64
instance = ola.CreateCOLAPlugInterFace()
ola.UnhookRemoteApi(instance, hwnd, 0)返回值
1 成功,0 失败。
