Skip to content

fix: reinstall breakpoint after hook hit - #14

Merged
Bor-Code merged 1 commit into
mainfrom
fix/reinstall-breakpoint-after-hit
Jun 10, 2026
Merged

fix: reinstall breakpoint after hook hit#14
Bor-Code merged 1 commit into
mainfrom
fix/reinstall-breakpoint-after-hit

Conversation

@Bor-Code

Copy link
Copy Markdown
Owner

Summary

  • restore the original instruction byte after an NtCreateFile breakpoint hit
  • enable single-step execution for the affected thread
  • reinstall the breakpoint after the original instruction completes
  • allow repeated NtCreateFile events to be captured during one analysis run

Test

  • cmake -B build
  • cmake --build build --config Release
  • .\build\Release\pe_analyzer.exe -dynamic "$env:WINDIR\System32\notepad.exe"
  • confirmed repeated breakpoint hits and successful reinstallation

@Bor-Code
Bor-Code merged commit 6bc7661 into main Jun 10, 2026
1 check passed
@Bor-Code
Bor-Code deleted the fix/reinstall-breakpoint-after-hit branch June 10, 2026 22:22
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant