Called before detaching from the process:
struct PLUG_CB_DETACH { PROCESS_INFORMATION* fdProcessInfo; };