DbgkpPostFakeProcessCreateMessages
NTSTATUS __stdcall DbgkpPostFakeProcessCreateMessages(
PVOID Process,
_KEVENT *DebugObject,
_EX_RUNDOWN_REF **pLastThread){
_EX_RUNDOWN_REF *v4;
NTSTATUS result;
VOID *Thread;
_EX_RUNDOWN_REF *v9;
_KAPC_STATE ApcState;
v4 = 0i64;
Thread = 0i64;
memset(&ApcState, 0, sizeof(ApcState));
v9 = 0i64;
result = DbgkpPostFakeThreadMessages((_EPROCESS *)Process, DebugObject, 0i64, (_EX_RUNDOWN_REF **)&Thread, &v9);
if( result >= 0 )
{
KiStackAttachProcess(Process, 0i64, &ApcState);
DbgkpPostModuleMessages(Process, Thread, DebugObject);
KiUnstackDetachProcess(&ApcState, 0i64);
ObfDereferenceObjectWithTag(Thread, 0x4F676244ui64);
result = 0;
v4 = v9;
}
*pLastThread = v4;
return result;
}Referenced by:
NtDebugActiveProcess