diff --git a/_techniques/process-memory.md b/_techniques/process-memory.md index df1670e..9a264e1 100644 --- a/_techniques/process-memory.md +++ b/_techniques/process-memory.md @@ -502,13 +502,13 @@ bool IsDebuggerPresent()

2.3. Patch ntdll!DbgBreakPoint()

-The function ntdll!DbgBreakPrint() has the following implementation: +The function ntdll!DbgBreakPoint() has the following implementation:
-
It is called when a debugger attaches to a running process. It allows the debugger to gain control because an exception is raised which it can intercept. If we erase the breakpoint inside ntdll!DbgBreakPrint(), the debugger won't break in and the thread will exit. +
It is called when a debugger attaches to a running process. It allows the debugger to gain control because an exception is raised which it can intercept. If we erase the breakpoint inside ntdll!DbgBreakPoint(), the debugger won't break in and the thread will exit.