DbgkpPostFakeProcessCreateMessages

NTSTATUS __stdcall DbgkpPostFakeProcessCreateMessages(
        PVOID Process,
        _KEVENT *DebugObject,
        _EX_RUNDOWN_REF **pLastThread){
  _EX_RUNDOWN_REF *v4; 
  NTSTATUS result; 
  VOID *Thread; 
  _EX_RUNDOWN_REF *v9; 
  _KAPC_STATE ApcState; 

  v4 = 0i64;
  Thread = 0i64;
  memset(&ApcState, 0, sizeof(ApcState));
  v9 = 0i64;
  result = DbgkpPostFakeThreadMessages((_EPROCESS *)Process, DebugObject, 0i64, (_EX_RUNDOWN_REF **)&Thread, &v9);
  if( result >= 0 )
  {
    KiStackAttachProcess(Process, 0i64, &ApcState);
    DbgkpPostModuleMessages(Process, Thread, DebugObject);
    KiUnstackDetachProcess(&ApcState, 0i64);
    ObfDereferenceObjectWithTag(Thread, 0x4F676244ui64);
    result = 0;
    v4 = v9;
  }
  *pLastThread = v4;
  return result;
}

Referenced by:

NtDebugActiveProcess