https://bugs.winehq.org/show_bug.cgi?id=22545
Anastasius Focht focht@gmx.net changed:
What |Removed |Added ---------------------------------------------------------------------------- Keywords| |patch
--- Comment #12 from Anastasius Focht focht@gmx.net --- Hello Austin,
the patch works.
Interesting that 'DbgUiRemoteBreakin' prototype from process hacker github project has different signature than Reactos, carrying additional context parameter.
Anyway, the function is never called by Wine and is not meant to be used as public API so it wouldn't really matter in the end. It just needs to be hookable (trampoline).
While searching for further 'DbgUiRemoteBreakin' examples I found some other interesting projects showcasing anti-attach techniques that might be useful for validating Wine (will look into that later):
https://github.com/waleedassar/antidebug/tree/master/Anti-Attaching
https://github.com/nihilus/ScyllaHide/blob/master/Test/TestMain.cpp
Regards