ZwAllocateVirtualMemory

NTSTATUS __fastcall ZwAllocateVirtualMemory(
        VOID *ProcessHandle,
        VOID **BaseAddress,
        UINT64 ZeroBits,
        UINT64 *RegionSize,
        UINT64 AllocationType,
        UINT64 Protect){
  NTSTATUS result; 

  _disable();
  __readeflags();
  KiServiceInternal();
  return result;
}

Referenced by:

DbgkUserReportWorkRoutine
EtwpFindUserBufferSpace
ExRaiseHardError
MiCheckForUserStackOverflow
MiCheckShadowStackOverflow
PspReserveAndCommitUserShadowStack
PspSetupReservedUserMappings
PspSetupUserProcessAddressSpace
PspWow64ThunkProcessParameters
RtlCreateHeap
RtlCreateUserStack
RtlpExtendHeap
RtlpFindAndCommitPages
RtlpHpAllocVirtBlockCommitFirst
RtlpHpFixedHeapCommitRoutine
RtlpInitializeHeapSegment
RtlpStdExtendLowerWatermark
RtlpStdExtendUpperWatermark
RtlpWow64CreateUserStack
SepAdtCopyToLsaSharedMemory
VmCreateMemoryProcess