Thank you. Works nice. At reeboottrace.exe and reboot.dll what i have seen is reboottrace.exe waits at background if the shutdown command given or not. When i use procmon i can see reboottrace.exe activity. As i see there is no exe file here. Will only use a dll stop this unwanted activity seen at procmon? Is this dll works same as reboottrace.exe and reboot.dll? (i did not look source code of them). Reboottrace.exe and reboot.dll works nice until now but can you code x86 version of this as an option?
Alternative to reboottrace and reboot.dll for x64 PE.suggestions and feedback welcome
I am interested in how you are doing the x64 hooking if you are willing to share the information.
I found that post of DarkDragon from PureBasic forumintercept APIAnd just change the hook form MessageBoxA to ExitWindowsEx.
Thank you. It was the most need and and last problem for my x64. It is very surprising that when i need something in short a while you make a working patch to that situation without any communicate each others. Like you read my mind. When i post something in my topics i always take care to original link to the authors posts (mostly yours) i think there is no problem by your side?
ShutdownPE will be able to handle x64 shell integration!
looks very good But please avoid using Mpress specially for dll's.With earlier version of mpress all worked nice with vista x64, but then all app were crashing with windows 7 x64.Now same story with Windows 8 prerelease
The problem with window7 was fixed with mpress 2.1? . But there no solution for Windows 8 build 7989 x64, every x64 app will crash.Well compile Autoit product can always be recovered by cut&paste the a3x to a clean AU3 interpreter, but the dll would much more difficult.Would stick with mpress for x64 Autoit files, as there no good alternative.Sure that mpress has better compression?for autoit files: upx --lzma --best --filter=0x49 %1