Undocumented functions of NTDLL

2OOO, 3 December

NTSYSAPI 
NTSTATUS
NTAPI
NtAllocateVirtualMemory(

  IN HANDLE               ProcessHandle,
  IN OUT PVOID            *BaseAddress,
  IN ULONG                ZeroBits,
  IN OUT PULONG           RegionSize,
  IN ULONG                AllocationType,
  IN ULONG                Protect );

ProcessHandle
Handle to Process Object opened with PROCESS_VM_OPERATION access.

*BaseAddress
If not zero, system tries to allocate virtual memory block on this virtual address. If BaseAddress is zero, system use first free virtual location.

AllocationType
Can be MEM_RESERVE or MEM_COMMIT.

Protect
One or combination of PAGE_*** attributes.