Re: Gracefully shutting down a thread in a DLL


"Bruce." <noone@xxxxxxxxxxx> wrote in message
news:%23eSG29PiIHA.484@xxxxxxxxxxxxxxxxxxxxxxx
It's working now, other than for the exit cleanup problem.

Bad idea. You did a lot of work on 99% that will never be able to work
because of the rest of 1% ;-|

Seriously: there's no way. The cleanup thread must be terminated
before PROCESS_DETACH is called by the loader. Perhaps if you hook the
"ExitProcess()" API so that you're noted when the application wants to
quit?

Christian




.

Relevant Pages

  • Re: Gracefully shutting down a thread in a DLL
    ... before PROCESS_DETACH is called by the loader. ... Perhaps if you hook the ... "ExitProcess" API so that you're noted when the application wants to ...
    (microsoft.public.win32.programmer.kernel)
  • Re: Process creation interception
    ... The best method for preventing process-creation is to hook ... either the ZwCreateProcess API in kernel, ... You really need to be doing this type of "system-wide" stuff in the kernel.. ... > I am developing some kind of a watch dog, this watch dog should intercept ...
    (microsoft.public.win32.programmer.kernel)
  • Re: starting and ending location in memory?
    ... Chad Cartwright wrote: ... > hooking the program's API. ... It's a basic game when it comes to chatting and all that. ... hook monitored APIs ...
    (comp.programming)
  • Re: RtlAllocateHeap hooking?
    ... and API Hooking? ... Detours is more powerfull than IAT hooking, ... I want to hook HeapAlloc/Create/Free/ReAlloc for some experiments. ...
    (microsoft.public.win32.programmer.kernel)
  • Re: How to prevent some specified files copied
    ... after those api to hook. ... > hooking in user space is fairly benign, but hooking in the kernel is a ... >> Vladimir Scherbina. ...
    (microsoft.public.win32.programmer.kernel)
Quantcast