From dce12f452b5d452f460427efd40f254a5c441eb3 Mon Sep 17 00:00:00 2001 From: midipix Date: Tue, 28 May 2019 02:46:06 +0000 Subject: __ntapi_tt_debug_execution_flow(): impl. NT_DBG_FLOW_MASK_DETACH_AND_CLOSE. --- src/debug/ntapi_tt_debug_execution_flow.c | 9 +++++++++ 1 file changed, 9 insertions(+) (limited to 'src') diff --git a/src/debug/ntapi_tt_debug_execution_flow.c b/src/debug/ntapi_tt_debug_execution_flow.c index f4e9f1c..aee3b22 100644 --- a/src/debug/ntapi_tt_debug_execution_flow.c +++ b/src/debug/ntapi_tt_debug_execution_flow.c @@ -43,6 +43,7 @@ static int32_t __log_exception_to_server( int32_t __stdcall __ntapi_tt_debug_execution_flow( __in void * hdbgobj, + __in void * hprocess, __in void * hserver, __in void * hlogfile, __in uint32_t evtmask, @@ -91,5 +92,13 @@ int32_t __stdcall __ntapi_tt_debug_execution_flow( response); } + if (evtmask & NT_DBG_FLOW_MASK_DETACH_AND_CLOSE) { + __ntapi->zw_remove_process_debug( + hprocess,hdbgobj); + + __ntapi->zw_close( + hdbgobj); + } + return NT_STATUS_SUCCESS; } -- cgit v1.2.3