0

I have attached to a running process with DebugActiveProcess and I need to intercept CREATE_PROCESS_DEBUG_EVENT events. It appears that usual WaitForDebugEvent doesn't catch creating of child processes. I was advised to set a bp to CreateProcessW function.

Could you please tell how to do it?

Community
  • 1
  • 1
Nelly
  • 131
  • 2
  • 12
  • 1
    possible duplicate of [Debug Break on Win32 Api functions](http://stackoverflow.com/questions/3080624/debug-break-on-win32-api-functions) – Jonathan Potter Oct 01 '13 at 11:17
  • Unlikely a duplicate. That answer suggests using of command line debugger NTSD, but I asked how to do it from C++ program. – Nelly Oct 01 '13 at 13:10

0 Answers0