WoZX
September 9th, 2001, 20:07
as above
thx.
Kayaker
September 10th, 2001, 01:14
Hi WoZX,
The usual final API is ExitProcess. It's usually called directly after the main window procedure, in MASM something like
invoke WinMain
invoke ExitProcess, eax
in Softice something like
Call xxxxxxxx ; start of main code
push eax ; zero
Call ExitProcess
There's usually common shutdown API's just before the return as well such as CloseHandle, FreeLibrary, EndDialog. A protection routine might use its own call to ExitProcess with its own particular shutdown routine such as writing to the registry.
TerminateProcess is used in unconditional process killers of other programs like Procdump and PEDump have as a feature.
Hope this helps,
Kayaker
Powered by vBulletin® Version 4.2.2 Copyright © 2018 vBulletin Solutions, Inc. All rights reserved.