From dce12f452b5d452f460427efd40f254a5c441eb3 Mon Sep 17 00:00:00 2001
From: midipix <writeonce@midipix.org>
Date: Tue, 28 May 2019 02:46:06 +0000
Subject: __ntapi_tt_debug_execution_flow(): impl.
 NT_DBG_FLOW_MASK_DETACH_AND_CLOSE.

---
 src/debug/ntapi_tt_debug_execution_flow.c | 9 +++++++++
 1 file changed, 9 insertions(+)

(limited to 'src/debug')

diff --git a/src/debug/ntapi_tt_debug_execution_flow.c b/src/debug/ntapi_tt_debug_execution_flow.c
index f4e9f1c..aee3b22 100644
--- a/src/debug/ntapi_tt_debug_execution_flow.c
+++ b/src/debug/ntapi_tt_debug_execution_flow.c
@@ -43,6 +43,7 @@ static int32_t __log_exception_to_server(
 
 int32_t __stdcall __ntapi_tt_debug_execution_flow(
 	__in	void *		hdbgobj,
+	__in	void *		hprocess,
 	__in	void *		hserver,
 	__in	void *		hlogfile,
 	__in	uint32_t	evtmask,
@@ -91,5 +92,13 @@ int32_t __stdcall __ntapi_tt_debug_execution_flow(
 			response);
 	}
 
+	if (evtmask & NT_DBG_FLOW_MASK_DETACH_AND_CLOSE) {
+		__ntapi->zw_remove_process_debug(
+			hprocess,hdbgobj);
+
+		__ntapi->zw_close(
+			hdbgobj);
+	}
+
 	return NT_STATUS_SUCCESS;
 }
-- 
cgit v1.2.3