ZwAllocateVirtualMemory
NTSTATUS __fastcall ZwAllocateVirtualMemory(
VOID *ProcessHandle,
VOID **BaseAddress,
UINT64 ZeroBits,
UINT64 *RegionSize,
UINT64 AllocationType,
UINT64 Protect){
NTSTATUS result;
_disable();
__readeflags();
KiServiceInternal();
return result;
}Referenced by:
DbgkUserReportWorkRoutine
EtwpFindUserBufferSpace
ExRaiseHardError
MiCheckForUserStackOverflow
MiCheckShadowStackOverflow
PspReserveAndCommitUserShadowStack
PspSetupReservedUserMappings
PspSetupUserProcessAddressSpace
PspWow64ThunkProcessParameters
RtlCreateHeap
RtlCreateUserStack
RtlpExtendHeap
RtlpFindAndCommitPages
RtlpHpAllocVirtBlockCommitFirst
RtlpHpFixedHeapCommitRoutine
RtlpInitializeHeapSegment
RtlpStdExtendLowerWatermark
RtlpStdExtendUpperWatermark
RtlpWow64CreateUserStack
SepAdtCopyToLsaSharedMemory
VmCreateMemoryProcess