DbgkpPostFakeProcessCreateMessages
INT64 __fastcall DbgkpPostFakeProcessCreateMessages(
ULONG_PTR BugCheckParameter1,
struct _KEVENT *a2,
struct _EX_RUNDOWN_REF **a3){
struct _EX_RUNDOWN_REF *v4;
INT64 result;
PVOID Object;
EX_RUNDOWN_REF *v9;
_KAPC_STATE ApcState;
v4 = 0i64;
Object = 0i64;
memset(&ApcState, 0, sizeof(ApcState));
v9 = 0i64;
result = DbgkpPostFakeThreadMessages(BugCheckParameter1, a2, 0i64, (EX_RUNDOWN_REF **)&Object, &v9);
if( (int)result >= 0 )
{
KiStackAttachProcess((_KPROCESS *)BugCheckParameter1, 0i64, &ApcState);
DbgkpPostModuleMessages(BugCheckParameter1, (CHAR *)Object, a2);
KiUnstackDetachProcess(&ApcState, 0i64);
ObfDereferenceObjectWithTag(Object, 0x4F676244ui64);
result = 0i64;
v4 = v9;
}
*a3 = v4;
return result;
}Referenced by:
NtDebugActiveProcess