ZwAllocateVirtualMemory
NTSTATUS __stdcall ZwAllocateVirtualMemory(
PVOID ProcessHandle,
PVOID *BaseAddress,
UINT64 ZeroBits,
UINT64 *RegionSize,
UINT64 AllocationType,
UINT64 Protect){
NTSTATUS result;
_disable();
__readeflags();
KiServiceInternal();
return result;
}Referenced by:
DbgkUserReportWorkRoutine
EtwpFindUserBufferSpace
ExRaiseHardError
MiCheckForUserStackOverflow
MiCheckShadowStackOverflow
PspReserveAndCommitUserShadowStack
PspSetupReservedUserMappings
PspSetupUserProcessAddressSpace
PspWow64ThunkProcessParameters
RtlCreateHeap
RtlCreateUserStack
RtlpExtendHeap
RtlpFindAndCommitPages
RtlpHpAllocVirtBlockCommitFirst
RtlpHpFixedHeapCommitRoutine
RtlpInitializeHeapSegment
RtlpStdExtendLowerWatermark
RtlpStdExtendUpperWatermark
RtlpWow64CreateUserStack
SepAdtCopyToLsaSharedMemory
VmCreateMemoryProcess