DbgkCreateMinimalProcess

VOID __stdcall DbgkCreateMinimalProcess(_EPROCESS *Process){
  INT64 result[5]; 
  int v3; 
  __int128 v4; 
  __int128 v5; 
  __int128 v6; 
  memset((INT64)result, 0i64);
  _InterlockedOr((volatile signed __int32 *)Process + 281, 0x400001u);
  if( *((_QWORD *)Process + 175) )
  {
    result[0] = 0x800600038i64;
    v3 = 2;
    v4 = 0i64;
    v5 = 0i64;
    v6 = 0i64;
    DbgkpSendApiMessage(Process, 0, (__int64)result);
  }
}

Referenced by:

PsCreateMinimalProcess