Changes

101 bytes added ,  13:52, 20 December 2016
Line 886: Line 886:  
| 4
 
| 4
 
|-
 
|-
| DLL LOAD
+
| DLL LOAD *
 
| 5
 
| 5
 
|-
 
|-
| DLL UNLOAD
+
| DLL UNLOAD *
 
| 6
 
| 6
 
|-
 
|-
| SCHEDULE IN
+
| SCHEDULE IN **
 
| 7
 
| 7
 
|-
 
|-
| SCHEDULE OUT
+
| SCHEDULE OUT *
 
| 8
 
| 8
 
|-
 
|-
| SYSCALL IN
+
| SYSCALL IN *
 
| 9
 
| 9
 
|-
 
|-
| SYSCALL OUT
+
| SYSCALL OUT *
 
| 10
 
| 10
 
|-
 
|-
Line 907: Line 907:  
| 11
 
| 11
 
|-
 
|-
| MAP
+
| MAP *
 
| 12
 
| 12
 
|}
 
|}
 +
 +
<nowiki>*</nowiki> Unused
 +
 +
<nowiki>**</nowiki> Referenced but never used in practise
    
When calling svcDebugActiveProcess, an ATTACH PROCESS debug event is signaled, then ATTACH THREAD for each of its opened threads, then finally ATTACH BREAK.
 
When calling svcDebugActiveProcess, an ATTACH PROCESS debug event is signaled, then ATTACH THREAD for each of its opened threads, then finally ATTACH BREAK.
516

edits