525
edits
Changes
Jump to navigation
Jump to search
Line 886:
Line 886: − + − + − + − + − + − + Line 907:
Line 907: − + + + + +
→struct DebugEventInfo
| 4
| 4
|-
|-
| DLL LOAD
| DLL LOAD *
| 5
| 5
|-
|-
| DLL UNLOAD
| DLL UNLOAD *
| 6
| 6
|-
|-
| SCHEDULE IN
| SCHEDULE IN **
| 7
| 7
|-
|-
| SCHEDULE OUT
| SCHEDULE OUT *
| 8
| 8
|-
|-
| SYSCALL IN
| SYSCALL IN *
| 9
| 9
|-
|-
| SYSCALL OUT
| SYSCALL OUT *
| 10
| 10
|-
|-
| 11
| 11
|-
|-
| MAP
| MAP *
| 12
| 12
|}
|}
<nowiki>*</nowiki> Unused
<nowiki>**</nowiki> Referenced but never used in practise
When calling svcDebugActiveProcess, an ATTACH PROCESS debug event is signaled, then ATTACH THREAD for each of its opened threads, then finally ATTACH BREAK.
When calling svcDebugActiveProcess, an ATTACH PROCESS debug event is signaled, then ATTACH THREAD for each of its opened threads, then finally ATTACH BREAK.