Function InstallExitProcessHook

src/platform/win/cloud_intercept.cpp:6640–6674

}

static void InstallExitProcessHook() {
    HMODULE hKernel = GetModuleHandleA("kernel32.dll");
    if (!hKernel) {
        LOG("InstallExitProcessHook: kernel32.dll not loaded (impossible) -- skipping");
        return;
    }
    auto origAddr = reinterpret_cast<void*>(GetProcAddress(hKernel, "ExitProcess"));
    if (!origAddr) {
        LOG("InstallExitProcessHook: GetProcAddress(ExitProcess) returned NULL -- skipping");
        return;
    }
    g_originalExitProcess = reinterpret_cast<ExitProcessFn>(origAddr);
    void* hookAddr = reinterpret_cast<void*>(&ExitProcessHook);

    // Walk every loaded module and patch its ExitProcess IAT slot.
    HMODULE mods[1024];
    DWORD cbNeeded = 0;
    HANDLE hProc = GetCurrentProcess();
    if (!EnumProcessModules(hProc, mods, sizeof(mods), &cbNeeded)) {
        LOG("InstallExitProcessHook: EnumProcessModules failed (%u)", GetLastError());
        return;
    }
    DWORD modCount = cbNeeded / sizeof(HMODULE);
    if (modCount > 1024) modCount = 1024;
    int patchedModules = 0;
    for (DWORD i = 0; i < modCount; ++i) {
        // Skip kernel32 itself (its IAT entry, if any, would create a self-loop).
        if (mods[i] == hKernel) continue;
        if (PatchModuleExitProcessIat(mods[i], origAddr, hookAddr)) {
            ++patchedModules;
        }
    }
    LOG("InstallExitProcessHook: patched %d module IAT slot(s) for ExitProcess (orig=%p hook=%p)",
        patchedModules, origAddr, hookAddr);
}

void DrainPlaytimeUpdates() {
    DrainPlaytimeUpdateQueueOnNetThread();