DbgkpPostFakeProcessCreateMessages

INT64 __fastcall DbgkpPostFakeProcessCreateMessages(
        ULONG_PTR BugCheckParameter1,
        struct _KEVENT *a2,
        struct _EX_RUNDOWN_REF **a3){
  struct _EX_RUNDOWN_REF *v4; 
  INT64 result; 
  PVOID Object; 
  EX_RUNDOWN_REF *v9; 
  _KAPC_STATE ApcState; 
  v4 = 0i64;
  Object = 0i64;
  memset(&ApcState, 0, sizeof(ApcState));
  v9 = 0i64;
  result = DbgkpPostFakeThreadMessages(BugCheckParameter1, a2, 0i64, (EX_RUNDOWN_REF **)&Object, &v9);
  if( (int)result >= 0 )
  {
    KiStackAttachProcess((_KPROCESS *)BugCheckParameter1, 0i64, &ApcState);
    DbgkpPostModuleMessages(BugCheckParameter1, (CHAR *)Object, a2);
    KiUnstackDetachProcess(&ApcState, 0i64);
    ObfDereferenceObjectWithTag(Object, 0x4F676244ui64);
    result = 0i64;
    v4 = v9;
  }
  *a3 = v4;
  return result;
}

Referenced by:

NtDebugActiveProcess