MmInitializeHandBuiltProcess2

NTSTATUS __stdcall MmInitializeHandBuiltProcess2(_EPROCESS *ProcessToInitialize){
  _QWORD *v2; 
  NTSTATUS inserted; 
  _QWORD *v5; 
  _KAPC_STATE ApcState; 
  memset(&ApcState, 0, sizeof(ApcState));
  MiGetWsAndMakePageTablesNx(ProcessToInitialize);
  *((_QWORD *)ProcessToInitialize + 210) = *(_QWORD *)(*((_QWORD *)KeGetCurrentThread() + 23) + 1680i64);
  KiStackAttachProcess((_KPROCESS *)ProcessToInitialize, 0i64, &ApcState);
  MiAllocateProcessVads();
  v5 = v2;
  if( v2 )
    inserted = MiInsertProcessVads((ULONG_PTR)ProcessToInitialize, &v5);
  else
    inserted = -1073741801;
  KiUnstackDetachProcess(&ApcState, 0i64);
  if( inserted >= 0 && (MmTrackLockedPages & 1) != 0 && (MmTrackLockedPages & 0x10000000) == 0 )
    MiInitializeLockedPagesTracking(ProcessToInitialize);
  return inserted;
}

Referenced by: