Undocumented functions of NTDLL

2OOO, 3 December

NTSYSAPI 
NTSTATUS
NTAPI


NtAllocateVirtualMemory(



  IN HANDLE               ProcessHandle,
  IN OUT PVOID            *BaseAddress,
  IN ULONG                ZeroBits,
  IN OUT PULONG           RegionSize,
  IN ULONG                AllocationType,
  IN ULONG                Protect );

ProcessHandle

Handle to Process Object opened with PROCESS_VM_OPERATION access.

*BaseAddress

If not zero, system tries to allocate virtual memory block on this virtual address. If BaseAddress is zero, system use first free virtual location.

AllocationType

Can be MEM_RESERVE or MEM_COMMIT.

Protect

One or combination of PAGE_*** attributes.

Documented by:

Reactos

Tomasz Nowak

Library: ntdll.lib

NtFreeVirtualMemory

NtMapViewOfSection