unhook.h

/*
Cuckoo Sandbox - Automated Malware Analysis
Copyright (C) 2010-2014 Cuckoo Sandbox Developers

This program is free software: you can redistribute it and/or modify
it under the terms of the GNU General Public License as published by
the Free Software Foundation, either version 3 of the License, or
(at your option) any later version.

This program is distributed in the hope that it will be useful,
but WITHOUT ANY WARRANTY; without even the implied warranty of
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
GNU General Public License for more details.

You should have received a copy of the GNU General Public License
along with this program.  If not, see <http://www.gnu.org/licenses/>.
*/

void unhook_detect_add_region(const hook_t *hook, const uint8_t *addr,
    const uint8_t *orig, const uint8_t *our, uint32_t length);
int address_already_hooked(uint8_t *addr);

int unhook_init_detection();
int terminate_event_init();
int procname_watch_init();
int init_watchdog();
void restore_hooks_on_range(ULONG_PTR start, ULONG_PTR end);

extern DWORD g_unhook_detect_thread_id;
extern DWORD g_unhook_watcher_thread_id;
extern DWORD g_watchdog_thread_id;
extern DWORD g_procname_watcher_thread_id;
extern DWORD g_terminate_event_thread_id;