If you use the Image File Execution Options registry key to
force a program to run under the debugger,
all the kernel does is insert the debugger in front of the command line.
In other words, the CreateProcess function figure out
what program is about to be run and checks the Image File Execution
Options.
If it finds a debugger, then the ...