SmProcessCreateNotification

NTSTATUS __stdcall SmProcessCreateNotification(_EPROCESS *TargetProcess, UINT64 PackagedProcess){
  if( (dword_140D23180 & 0xC) == 0 || TargetProcess->Vm.Instance.PartitionId )
    return -1073741637;
  if( (PackagedProcess & 3) != 0 )
    return SmpKeyedStoreCreate(&KeyedStoreCtx);
  return -1073700352;
}

Referenced by:

PspAllocateProcess