skynet888 !BEWARE! Deletes post on answer
Reputation: 1
Joined: 12 Apr 2021 Posts: 78
|
Posted: Wed Jan 21, 2026 6:10 am Post subject: cannot use windows symbols for CREATE_SUSPENDED process |
|
|
| For a process created and suspended with the CREATE_SUSPENDED flag, although ntdll.dll has already been loaded, CE still cannot use Windows debug symbols for it, which also means that the addresse of any API in ntdll.dll cannot be resolved at this time.
|
|