Beispiel #1
0
        public int CreateProcess(ulong ImageFileHandle, ulong Handle, ulong BaseOffset, uint ModuleSize, string ModuleName, string ImageName,
                                 uint CheckSum, uint TimeDateStamp, ulong InitialThreadHandle, ulong ThreadDataOffset, ulong StartOffset)
        {
            CreateProcessEvent?.Invoke(this, new CreateProcessArgs(ImageFileHandle, Handle, BaseOffset, ModuleSize, ModuleName, ImageName, CheckSum, TimeDateStamp, InitialThreadHandle, ThreadDataOffset, StartOffset));

            return(0);
        }
Beispiel #2
0
        protected override void OnCreateProcess(CreateProcessEvent e)
        {
            if (Context.Thread(e.ThreadId) != null)
            {
                Warning("Thread {0} is already attached to debugger", e.ThreadId);
            }

            Context.AddThread(e.Thread, e.ThreadId, e.StartAddress);
            Context.MainThread = e.ThreadId;
            Context.Process = e.Process;

            Continue(e, ContinueStatus.Continue);
        }