Re: State of process at CREATE_PROCESS_DEBUG_EVENT

As you said that the afetr CREATE Process event the loader does the
loading of other dlls. This means that if some API, say CreateFile() in
kernel32.dll is called after this event, then it should give exception
or access violation fault? Am i rigth Oleg?

Oleg Starodumov wrote:
Thanks Oleg for the reply. There is one more doubt. If the loader runs
after "create process" in the context of APC then who loads the
ntdll.dll?

It is loaded by the kernel, while it is processing NtCreateProcess call
made by the process that starts the debuggee process.

Can i figure out the status of the process using any debugger like windbg?


Yes, you can - enable it to break on the interesting debug events
and check the state of the process. E.g. "sxe cpr" enables to break
on "create process" event.

Oleg

.

Relevant Pages

  • Link speed...
    ... I am designing an application that requires to know the result of the network link speed negociation. ... I have not found any api that enable to retrieve the real value. ... Is there any api that enables to retrieve link speed? ...
    (microsoft.public.win32.programmer.networks)
  • Re: Single driver supporting multiple CE versions
    ... driver supporting CE4 and CE5 using evc4? ... If there are only one or two API functions that you need to access in this manor, you can dynamically link to them by using the Win32 APIs LoadLibrary and GetProcAddress. ... If you run the code on an older device which doesn't have the API present the function pointer returned by GetProcAddress will be NULL which enables you to fallback to a codepath that works for older devices etc. ...
    (microsoft.public.windowsce.embedded)
  • Re: enable/disable NIC api
    ... Windows SDK MVP ... "Miriam IL" wrote in message ... i'm looking for a vc++ api which enables to control ... [do you know if there is an api who refresh NIC's status or i must diable ...
    (microsoft.public.win32.programmer.networks)
  • FTP for Windows CE.NET ?
    ... Do any of you know of any API or something like that in C#, that enables me ... to make a FTP application across a ... Prev by Date: ...
    (microsoft.public.dotnet.framework.compactframework)