Something went wrong. Try again.
Reactos
Something went wrong. Try again.
12345678910111213141516171819202122232425262728293031323334353637383940414243444546474849505152535455565758596061626364656667686970717273747576777879808182838485868788899091929394959697989910010110210310410510610710810911011111211311411511611711811912012112212312412512612712812913013113213313413513613713813914014114214314414514614714814915015115215315415515615715815916016116216316416516616716816917017117217317417517617717817918018118218318418518618718818919019119219319419519619719819920020120220320420520620720820921021121221321421521621721821922022122222322422522622722822923023123223323423523623723823924024124224324424524624724824925025125225325425525625725825926026126226326426526626726826927027127227327427527627727827928028128228328428528628728828929029129229329429529629729829930030130230330430530630730830931031131231331431531631731831932032132232332432532632732832933033133233333433533633733833934034134234334434534634734834935035135235335435535635735835936036136236336436536636736836937037137237337437537637737837938038138238338438538638738838939039139239339439539639739839940040140240340440540640740840941041141241341441541641741841942042142242342442542642742842943043143243343443543643743843944044144244344444544644744844945045145245345445545645745845946046146246346446546646746846947047147247347447547647747847948048148248348448548648748848949049149249349449549649749849950050150250350450550650750850951051151251351451551651751851952052152252352452552652752852953053153253353453553653753853954054154254354454554654754854955055155255355455555655755855956056156256356456556656756856957057157257357457557657757857958058158258358458558658758858959059159259359459559659759859960060160260360460560660760860961061161261361461561661761861962062162262362462562662762862963063163263363463563663763863964064164264364464564664764864965065165265365465565665765865966066166266366466566666766866967067167267367467567667767867968068168268368468568668768868969069169269369469569669769869970070170270370470570670770870971071171271371471571671771871972072172272372472572672772872973073173273373473573673773873974074174274374474574674774874975075175275375475575675775875976076176276376476576676776876977077177277377477577677777877978078178278378478578678778878979079179279379479579679779879980080180280380480580680780880981081181281381481581681781881982082182282382482582682782882983083183283383483583683783883984084184284384484584684784884985085185285385485585685785885986086186286386486586686786886987087187287387487587687787887988088188288388488588688788888989089189289389489589689789889990090190290390490590690790890991091191291391491591691791891992092192292392492592692792892993093193293393493593693793893994094194294394494594694794894995095195295395495595695795895996096196296396496596696796896997097197297397497597697797897998098198298398498598698798898999099199299399499599699799899910001001100210031004100510061007100810091010101110121013101410151016101710181019102010211022102310241025102610271028102910301031103210331034103510361037103810391040104110421043104410451046104710481049105010511052105310541055105610571058105910601061106210631064106510661067106810691070107110721073107410751076107710781079108010811082108310841085108610871088108910901091109210931094109510961097109810991100110111021103110411051106110711081109111011111112111311141115111611171118111911201121112211231124112511261127112811291130113111321133113411351136113711381139114011411142114311441145114611471148114911501151115211531154115511561157115811591160116111621163116411651166116711681169117011711172117311741175117611771178117911801181118211831184118511861187118811891190119111921193119411951196119711981199120012011202120312041205120612071208120912101211121212131214121512161217121812191220122112221223122412251226122712281229123012311232123312341235123612371238123912401241124212431244124512461247124812491250125112521253125412551256125712581259126012611262126312641265126612671268126912701271127212731274127512761277127812791280128112821283128412851286128712881289129012911292129312941295129612971298129913001301130213031304130513061307130813091310131113121313131413151316131713181319132013211322132313241325132613271328132913301331133213331334133513361337133813391340134113421343134413451346134713481349135013511352135313541355135613571358135913601361136213631364136513661367136813691370137113721373137413751376137713781379138013811382138313841385138613871388138913901391139213931394139513961397139813991400140114021403140414051406140714081409141014111412141314141415141614171418141914201421142214231424142514261427142814291430143114321433143414351436143714381439144014411442144314441445144614471448144914501451145214531454145514561457145814591460146114621463146414651466146714681469147014711472147314741475147614771478147914801481148214831484148514861487148814891490149114921493149414951496149714981499150015011502150315041505150615071508150915101511151215131514151515161517151815191520152115221523152415251526152715281529153015311532153315341535153615371538153915401541154215431544154515461547154815491550155115521553155415551556155715581559156015611562156315641565156615671568156915701571157215731574157515761577157815791580158115821583158415851586158715881589159015911592159315941595159615971598159916001601160216031604160516061607160816091610161116121613161416151616161716181619162016211622162316241625162616271628162916301631163216331634163516361637163816391640164116421643164416451646164716481649165016511652165316541655165616571658165916601661166216631664166516661667166816691670167116721673167416751676167716781679168016811682168316841685168616871688168916901691169216931694169516961697169816991700170117021703170417051706170717081709171017111712171317141715171617171718171917201721172217231724172517261727172817291730173117321733173417351736173717381739174017411742174317441745174617471748174917501751175217531754175517561757175817591760176117621763176417651766176717681769177017711772177317741775177617771778177917801781178217831784178517861787178817891790179117921793179417951796179717981799180018011802180318041805180618071808180918101811181218131814181518161817181818191820182118221823182418251826182718281829183018311832183318341835183618371838183918401841184218431844184518461847184818491850185118521853185418551856185718581859186018611862186318641865186618671868186918701871187218731874187518761877187818791880188118821883188418851886188718881889189018911892189318941895189618971898189919001901190219031904190519061907190819091910191119121913191419151916191719181919192019211922192319241925192619271928192919301931193219331934193519361937193819391940194119421943194419451946194719481949195019511952195319541955195619571958195919601961196219631964196519661967196819691970197119721973197419751976197719781979198019811982198319841985198619871988198919901991199219931994199519961997199819992000200120022003200420052006200720082009201020112012201320142015201620172018201920202021202220232024202520262027202820292030203120322033203420352036203720382039204020412042204320442045204620472048204920502051205220532054205520562057205820592060206120622063206420652066206720682069207020712072207320742075207620772078207920802081208220832084208520862087208820892090209120922093209420952096209720982099210021012102210321042105210621072108210921102111211221132114211521162117211821192120212121222123212421252126212721282129213021312132213321342135213621372138213921402141214221432144214521462147214821492150215121522153215421552156215721582159216021612162216321642165216621672168216921702171217221732174217521762177217821792180218121822183218421852186218721882189219021912192219321942195219621972198219922002201220222032204220522062207220822092210221122122213221422152216221722182219222022212222222322242225222622272228222922302231223222332234223522362237223822392240224122422243224422452246224722482249225022512252225322542255225622572258225922602261226222632264226522662267226822692270227122722273227422752276227722782279228022812282228322842285228622872288228922902291229222932294229522962297229822992300230123022303230423052306230723082309231023112312231323142315231623172318231923202321232223232324232523262327232823292330233123322333233423352336233723382339234023412342234323442345234623472348234923502351235223532354235523562357235823592360236123622363236423652366236723682369237023712372237323742375237623772378237923802381238223832384238523862387238823892390239123922393239423952396239723982399240024012402240324042405240624072408240924102411241224132414241524162417241824192420242124222423242424252426242724282429243024312432243324342435243624372438243924402441244224432444244524462447244824492450245124522453245424552456245724582459246024612462246324642465246624672468246924702471247224732474247524762477247824792480248124822483248424852486248724882489249024912492249324942495249624972498249925002501250225032504250525062507250825092510251125122513251425152516251725182519252025212522252325242525252625272528252925302531253225332534253525362537253825392540254125422543254425452546254725482549255025512552255325542555255625572558255925602561256225632564256525662567256825692570257125722573257425752576257725782579258025812582258325842585258625872588258925902591259225932594259525962597259825992600260126022603260426052606260726082609261026112612261326142615261626172618261926202621262226232624262526262627262826292630263126322633263426352636263726382639264026412642264326442645264626472648264926502651265226532654265526562657265826592660266126622663266426652666266726682669267026712672267326742675267626772678267926802681268226832684268526862687268826892690269126922693269426952696269726982699270027012702270327042705270627072708270927102711271227132714271527162717271827192720272127222723272427252726272727282729273027312732273327342735273627372738273927402741274227432744274527462747274827492750275127522753275427552756275727582759276027612762276327642765276627672768276927702771277227732774277527762777277827792780278127822783278427852786278727882789279027912792279327942795279627972798279928002801280228032804280528062807280828092810281128122813281428152816281728182819282028212822282328242825282628272828282928302831283228332834283528362837283828392840284128422843284428452846284728482849285028512852285328542855285628572858285928602861286228632864286528662867286828692870287128722873287428752876287728782879288028812882288328842885288628872888288928902891289228932894289528962897289828992900290129022903290429052906290729082909291029112912291329142915291629172918291929202921292229232924292529262927292829292930293129322933293429352936293729382939294029412942294329442945294629472948294929502951295229532954295529562957295829592960296129622963296429652966296729682969297029712972297329742975297629772978297929802981298229832984298529862987298829892990299129922993299429952996299729982999300030013002300330043005300630073008300930103011301230133014301530163017301830193020302130223023302430253026302730283029303030313032303330343035303630373038303930403041304230433044304530463047304830493050305130523053305430553056305730583059306030613062306330643065306630673068306930703071307230733074307530763077307830793080308130823083308430853086308730883089309030913092309330943095309630973098309931003101310231033104310531063107310831093110311131123113311431153116311731183119312031213122312331243125312631273128312931303131313231333134313531363137313831393140314131423143314431453146314731483149315031513152315331543155315631573158315931603161316231633164316531663167316831693170317131723173317431753176317731783179318031813182318331843185318631873188318931903191319231933194319531963197319831993200320132023203320432053206320732083209321032113212321332143215321632173218321932203221322232233224322532263227322832293230323132323233323432353236323732383239324032413242324332443245324632473248324932503251325232533254325532563257325832593260326132623263326432653266326732683269327032713272327332743275327632773278327932803281328232833284328532863287328832893290329132923293329432953296329732983299330033013302330333043305330633073308330933103311331233133314331533163317331833193320332133223323332433253326332733283329333033313332333333343335333633373338333933403341334233433344334533463347334833493350335133523353335433553356335733583359336033613362336333643365336633673368336933703371337233733374337533763377337833793380338133823383338433853386338733883389339033913392339333943395339633973398339934003401340234033404340534063407340834093410341134123413341434153416341734183419342034213422342334243425342634273428342934303431343234333434343534363437343834393440344134423443344434453446344734483449345034513452345334543455345634573458345934603461346234633464346534663467346834693470347134723473347434753476347734783479348034813482348334843485348634873488348934903491349234933494349534963497349834993500350135023503350435053506350735083509351035113512351335143515351635173518351935203521352235233524352535263527352835293530353135323533353435353536353735383539354035413542354335443545354635473548354935503551355235533554355535563557355835593560356135623563356435653566356735683569357035713572357335743575357635773578357935803581358235833584358535863587358835893590359135923593359435953596359735983599360036013602360336043605360636073608360936103611361236133614361536163617361836193620362136223623362436253626362736283629363036313632363336343635363636373638363936403641364236433644364536463647364836493650365136523653365436553656365736583659366036613662366336643665366636673668366936703671367236733674367536763677367836793680368136823683368436853686368736883689369036913692369336943695369636973698369937003701370237033704370537063707370837093710371137123713371437153716371737183719372037213722372337243725372637273728372937303731373237333734373537363737373837393740374137423743374437453746374737483749375037513752375337543755375637573758375937603761376237633764376537663767376837693770377137723773377437753776377737783779378037813782378337843785378637873788378937903791379237933794379537963797379837993800380138023803380438053806380738083809381038113812381338143815381638173818381938203821382238233824382538263827382838293830383138323833383438353836383738383839384038413842384338443845384638473848384938503851385238533854385538563857385838593860386138623863386438653866386738683869387038713872387338743875387638773878387938803881388238833884388538863887388838893890389138923893389438953896389738983899390039013902390339043905390639073908390939103911391239133914391539163917391839193920392139223923392439253926392739283929393039313932393339343935393639373938393939403941394239433944394539463947394839493950395139523953395439553956395739583959396039613962396339643965396639673968396939703971397239733974397539763977397839793980398139823983398439853986398739883989399039913992399339943995399639973998399940004001400240034004400540064007400840094010401140124013401440154016401740184019402040214022402340244025402640274028402940304031403240334034403540364037403840394040404140424043404440454046404740484049405040514052405340544055405640574058405940604061406240634064406540664067406840694070407140724073407440754076407740784079408040814082408340844085408640874088408940904091409240934094409540964097409840994100410141024103410441054106410741084109411041114112411341144115411641174118411941204121412241234124412541264127412841294130413141324133413441354136413741384139414041414142414341444145414641474148414941504151415241534154415541564157415841594160416141624163416441654166416741684169417041714172417341744175417641774178417941804181418241834184418541864187418841894190419141924193419441954196419741984199420042014202420342044205420642074208420942104211421242134214421542164217421842194220422142224223422442254226422742284229423042314232423342344235423642374238423942404241424242434244424542464247424842494250425142524253425442554256425742584259426042614262426342644265426642674268426942704271427242734274427542764277427842794280428142824283428442854286428742884289429042914292429342944295429642974298429943004301430243034304430543064307430843094310431143124313431443154316431743184319432043214322432343244325432643274328432943304331433243334334433543364337433843394340434143424343434443454346434743484349435043514352435343544355435643574358435943604361436243634364436543664367436843694370437143724373437443754376437743784379438043814382438343844385438643874388438943904391439243934394439543964397439843994400440144024403440444054406440744084409441044114412441344144415441644174418441944204421442244234424442544264427442844294430443144324433443444354436443744384439444044414442444344444445444644474448444944504451445244534454445544564457445844594460446144624463446444654466446744684469447044714472447344744475447644774478447944804481448244834484448544864487448844894490449144924493449444954496449744984499450045014502450345044505450645074508450945104511451245134514451545164517451845194520452145224523452445254526452745284529453045314532453345344535453645374538453945404541454245434544454545464547454845494550455145524553455445554556455745584559456045614562456345644565456645674568456945704571457245734574457545764577457845794580458145824583458445854586458745884589459045914592459345944595459645974598459946004601460246034604460546064607460846094610461146124613461446154616461746184619462046214622462346244625462646274628462946304631463246334634463546364637463846394640464146424643464446454646464746484649465046514652465346544655465646574658465946604661466246634664466546664667466846694670467146724673467446754676467746784679468046814682468346844685468646874688468946904691469246934694469546964697469846994700470147024703470447054706470747084709471047114712471347144715471647174718471947204721472247234724472547264727472847294730473147324733473447354736473747384739474047414742474347444745474647474748474947504751475247534754475547564757475847594760476147624763476447654766476747684769477047714772477347744775477647774778477947804781478247834784478547864787478847894790479147924793479447954796479747984799480048014802480348044805480648074808480948104811481248134814481548164817481848194820482148224823482448254826482748284829483048314832483348344835483648374838483948404841484248434844484548464847484848494850485148524853485448554856485748584859486048614862486348644865486648674868486948704871487248734874487548764877487848794880488148824883488448854886488748884889489048914892489348944895489648974898489949004901490249034904490549064907490849094910491149124913491449154916491749184919492049214922492349244925492649274928492949304931493249334934493549364937493849394940494149424943494449454946494749484949495049514952495349544955495649574958495949604961496249634964496549664967496849694970497149724973497449754976497749784979498049814982498349844985498649874988498949904991499249934994499549964997499849995000500150025003500450055006500750085009501050115012501350145015501650175018501950205021502250235024502550265027502850295030503150325033503450355036503750385039504050415042504350445045504650475048504950505051505250535054505550565057505850595060506150625063506450655066506750685069507050715072507350745075507650775078507950805081508250835084508550865087508850895090509150925093509450955096509750985099510051015102510351045105510651075108510951105111511251135114511551165117511851195120512151225123512451255126512751285129513051315132513351345135513651375138513951405141514251435144514551465147514851495150515151525153515451555156515751585159516051615162516351645165516651675168516951705171517251735174517551765177517851795180518151825183518451855186518751885189519051915192519351945195519651975198519952005201520252035204520552065207520852095210/*++ NDK Version: 0098
Copyright (c) Alex Ionescu. All rights reserved.
Header Name:
rtlfuncs.h
Abstract:
Function definitions for the Run-Time Library
Author:
Alex Ionescu (alexi@tinykrnl.org) - Updated - 27-Feb-2006
--*/
#ifndef _RTLFUNCS_H#define _RTLFUNCS_H
//// Dependencies//#include <umtypes.h>#include <ntnls.h>#include <rtltypes.h>#include <pstypes.h>#include <extypes.h>#include "in6addr.h"#include "inaddr.h"
#ifdef __cplusplusextern "C" {#endif
#ifdef NTOS_MODE_USER
//// List Functions//
DECLSPEC_NORETURNFORCEINLINEVOIDRtlFailFast( _In_ ULONG Code){ __fastfail(Code);}
#define RTL_STATIC_LIST_HEAD(x) LIST_ENTRY x = { &x, &x }
FORCEINLINEVOIDInitializeListHead( _Out_ PLIST_ENTRY ListHead){ ListHead->Flink = ListHead->Blink = ListHead;}
FORCEINLINEVOIDInsertHeadList( _Inout_ PLIST_ENTRY ListHead, _Inout_ PLIST_ENTRY Entry){ PLIST_ENTRY OldFlink; OldFlink = ListHead->Flink; Entry->Flink = OldFlink; Entry->Blink = ListHead; OldFlink->Blink = Entry; ListHead->Flink = Entry;}
FORCEINLINEVOIDInsertTailList( _Inout_ PLIST_ENTRY ListHead, _Inout_ PLIST_ENTRY Entry){ PLIST_ENTRY OldBlink; OldBlink = ListHead->Blink; Entry->Flink = ListHead; Entry->Blink = OldBlink; OldBlink->Flink = Entry; ListHead->Blink = Entry;}
_Must_inspect_result_FORCEINLINEBOOLEANIsListEmpty( _In_ const LIST_ENTRY * ListHead){ return (BOOLEAN)(ListHead->Flink == ListHead);}
FORCEINLINEPSINGLE_LIST_ENTRYPopEntryList( _Inout_ PSINGLE_LIST_ENTRY ListHead){ PSINGLE_LIST_ENTRY FirstEntry; FirstEntry = ListHead->Next; if (FirstEntry != NULL) { ListHead->Next = FirstEntry->Next; }
return FirstEntry;}
FORCEINLINEVOIDPushEntryList( _Inout_ PSINGLE_LIST_ENTRY ListHead, _Inout_ PSINGLE_LIST_ENTRY Entry){ Entry->Next = ListHead->Next; ListHead->Next = Entry;}
FORCEINLINEBOOLEANRemoveEntryList( _In_ PLIST_ENTRY Entry){ PLIST_ENTRY OldFlink; PLIST_ENTRY OldBlink;
OldFlink = Entry->Flink; OldBlink = Entry->Blink; OldFlink->Blink = OldBlink; OldBlink->Flink = OldFlink; return (BOOLEAN)(OldFlink == OldBlink);}
FORCEINLINEPLIST_ENTRYRemoveHeadList( _Inout_ PLIST_ENTRY ListHead){ PLIST_ENTRY Flink; PLIST_ENTRY Entry;
Entry = ListHead->Flink; Flink = Entry->Flink; ListHead->Flink = Flink; Flink->Blink = ListHead; return Entry;}
FORCEINLINEPLIST_ENTRYRemoveTailList( _Inout_ PLIST_ENTRY ListHead){ PLIST_ENTRY Blink; PLIST_ENTRY Entry;
Entry = ListHead->Blink; Blink = Entry->Blink; ListHead->Blink = Blink; Blink->Flink = ListHead; return Entry;}
//// Unicode string macros//_At_(UnicodeString->Buffer, _Post_equal_to_(Buffer))_At_(UnicodeString->Length, _Post_equal_to_(0))_At_(UnicodeString->MaximumLength, _Post_equal_to_(BufferSize))FORCEINLINEVOIDRtlInitEmptyUnicodeString( _Out_ PUNICODE_STRING UnicodeString, _When_(BufferSize != 0, _Notnull_) _Writable_bytes_(BufferSize) __drv_aliasesMem PWCHAR Buffer, _In_ USHORT BufferSize){ UnicodeString->Length = 0; UnicodeString->MaximumLength = BufferSize; UnicodeString->Buffer = Buffer;}
_At_(AnsiString->Buffer, _Post_equal_to_(Buffer))_At_(AnsiString->Length, _Post_equal_to_(0))_At_(AnsiString->MaximumLength, _Post_equal_to_(BufferSize))FORCEINLINEVOIDRtlInitEmptyAnsiString( _Out_ PANSI_STRING AnsiString, _When_(BufferSize != 0, _Notnull_) _Writable_bytes_(BufferSize) __drv_aliasesMem PCHAR Buffer, _In_ USHORT BufferSize){ AnsiString->Length = 0; AnsiString->MaximumLength = BufferSize; AnsiString->Buffer = Buffer;}
//// LUID Macros//#define RtlEqualLuid(L1, L2) (((L1)->HighPart == (L2)->HighPart) && \ ((L1)->LowPart == (L2)->LowPart))FORCEINLINELUIDNTAPI_INLINERtlConvertUlongToLuid( _In_ ULONG Ulong){ LUID TempLuid;
TempLuid.LowPart = Ulong; TempLuid.HighPart = 0; return TempLuid;}
_Must_inspect_result_NTSYSAPINTSTATUSNTAPIRtlUTF8ToUnicodeN( _Out_writes_bytes_to_(UnicodeStringMaxByteCount, *UnicodeStringActualByteCount) PWSTR UnicodeStringDestination, _In_ ULONG UnicodeStringMaxByteCount, _Out_ PULONG UnicodeStringActualByteCount, _In_reads_bytes_(UTF8StringByteCount) PCCH UTF8StringSource, _In_ ULONG UTF8StringByteCount);
//// ASSERT Macros//#ifndef ASSERT#if DBG
#define ASSERT( exp ) \ ((void)((!(exp)) ? \ (RtlAssert( (PVOID)#exp, (PVOID)__FILE__, __LINE__, NULL ),FALSE) : \ TRUE))
#define ASSERTMSG( msg, exp ) \ ((void)((!(exp)) ? \ (RtlAssert( (PVOID)#exp, (PVOID)__FILE__, __LINE__, (PCHAR)msg ),FALSE) : \ TRUE))
#else
#define ASSERT( exp ) ((void) 0)#define ASSERTMSG( msg, exp ) ((void) 0)
#endif#endif
#ifdef NTOS_KERNEL_RUNTIME
//// Executing RTL functions at DISPATCH_LEVEL or higher will result in a// bugcheck.//#define RTL_PAGED_CODE PAGED_CODE
#else
//// This macro does nothing in user mode//#define RTL_PAGED_CODE()
#endif
//// RTL Splay Tree Functions//#ifndef RTL_USE_AVL_TABLES
NTSYSAPIVOIDNTAPIRtlInitializeGenericTable( _Out_ PRTL_GENERIC_TABLE Table, _In_ PRTL_GENERIC_COMPARE_ROUTINE CompareRoutine, _In_opt_ PRTL_GENERIC_ALLOCATE_ROUTINE AllocateRoutine, _In_opt_ PRTL_GENERIC_FREE_ROUTINE FreeRoutine, _In_opt_ PVOID TableContext);
NTSYSAPIPVOIDNTAPIRtlInsertElementGenericTable( _In_ PRTL_GENERIC_TABLE Table, _In_reads_bytes_(BufferSize) PVOID Buffer, _In_ CLONG BufferSize, _Out_opt_ PBOOLEAN NewElement);
NTSYSAPIPVOIDNTAPIRtlInsertElementGenericTableFull( _In_ PRTL_GENERIC_TABLE Table, _In_reads_bytes_(BufferSize) PVOID Buffer, _In_ CLONG BufferSize, _Out_opt_ PBOOLEAN NewElement, _In_ PVOID NodeOrParent, _In_ TABLE_SEARCH_RESULT SearchResult);
NTSYSAPIBOOLEANNTAPIRtlDeleteElementGenericTable( _In_ PRTL_GENERIC_TABLE Table, _In_ PVOID Buffer);
_Must_inspect_result_NTSYSAPIPVOIDNTAPIRtlLookupElementGenericTable( _In_ PRTL_GENERIC_TABLE Table, _In_ PVOID Buffer);
NTSYSAPIPVOIDNTAPIRtlLookupElementGenericTableFull( _In_ PRTL_GENERIC_TABLE Table, _In_ PVOID Buffer, _Out_ PVOID *NodeOrParent, _Out_ TABLE_SEARCH_RESULT *SearchResult);
_Must_inspect_result_NTSYSAPIPVOIDNTAPIRtlEnumerateGenericTable( _In_ PRTL_GENERIC_TABLE Table, _In_ BOOLEAN Restart);
_Must_inspect_result_NTSYSAPIPVOIDNTAPIRtlEnumerateGenericTableWithoutSplaying( _In_ PRTL_GENERIC_TABLE Table, _Inout_ PVOID *RestartKey);
_Must_inspect_result_NTSYSAPIPVOIDNTAPIRtlGetElementGenericTable( _In_ PRTL_GENERIC_TABLE Table, _In_ ULONG I);
NTSYSAPIULONGNTAPIRtlNumberGenericTableElements( _In_ PRTL_GENERIC_TABLE Table);
_Must_inspect_result_NTSYSAPIBOOLEANNTAPIRtlIsGenericTableEmpty( _In_ PRTL_GENERIC_TABLE Table);
#endif /* !RTL_USE_AVL_TABLES */
NTSYSAPIPRTL_SPLAY_LINKSNTAPIRtlSplay( _Inout_ PRTL_SPLAY_LINKS Links);
NTSYSAPIPRTL_SPLAY_LINKSNTAPIRtlDelete( _In_ PRTL_SPLAY_LINKS Links);
NTSYSAPIVOIDNTAPIRtlDeleteNoSplay( _In_ PRTL_SPLAY_LINKS Links, _Inout_ PRTL_SPLAY_LINKS *Root);
_Must_inspect_result_NTSYSAPIPRTL_SPLAY_LINKSNTAPIRtlSubtreeSuccessor( _In_ PRTL_SPLAY_LINKS Links);
_Must_inspect_result_NTSYSAPIPRTL_SPLAY_LINKSNTAPIRtlSubtreePredecessor( _In_ PRTL_SPLAY_LINKS Links);
_Must_inspect_result_NTSYSAPIPRTL_SPLAY_LINKSNTAPIRtlRealSuccessor( _In_ PRTL_SPLAY_LINKS Links);
_Must_inspect_result_NTSYSAPIPRTL_SPLAY_LINKSNTAPIRtlRealPredecessor( _In_ PRTL_SPLAY_LINKS Links);
#define RtlIsLeftChild(Links) \ (RtlLeftChild(RtlParent(Links)) == (PRTL_SPLAY_LINKS)(Links))
#define RtlIsRightChild(Links) \ (RtlRightChild(RtlParent(Links)) == (PRTL_SPLAY_LINKS)(Links))
#define RtlRightChild(Links) \ ((PRTL_SPLAY_LINKS)(Links))->RightChild
#define RtlIsRoot(Links) \ (RtlParent(Links) == (PRTL_SPLAY_LINKS)(Links))
#define RtlLeftChild(Links) \ ((PRTL_SPLAY_LINKS)(Links))->LeftChild
#define RtlParent(Links) \ ((PRTL_SPLAY_LINKS)(Links))->Parent
// FIXME: use inline function
#define RtlInitializeSplayLinks(Links) \ { \ PRTL_SPLAY_LINKS _SplayLinks; \ _SplayLinks = (PRTL_SPLAY_LINKS)(Links); \ _SplayLinks->Parent = _SplayLinks; \ _SplayLinks->LeftChild = NULL; \ _SplayLinks->RightChild = NULL; \ }
#define RtlInsertAsLeftChild(ParentLinks,ChildLinks) \ { \ PRTL_SPLAY_LINKS _SplayParent; \ PRTL_SPLAY_LINKS _SplayChild; \ _SplayParent = (PRTL_SPLAY_LINKS)(ParentLinks); \ _SplayChild = (PRTL_SPLAY_LINKS)(ChildLinks); \ _SplayParent->LeftChild = _SplayChild; \ _SplayChild->Parent = _SplayParent; \ }
#define RtlInsertAsRightChild(ParentLinks,ChildLinks) \ { \ PRTL_SPLAY_LINKS _SplayParent; \ PRTL_SPLAY_LINKS _SplayChild; \ _SplayParent = (PRTL_SPLAY_LINKS)(ParentLinks); \ _SplayChild = (PRTL_SPLAY_LINKS)(ChildLinks); \ _SplayParent->RightChild = _SplayChild; \ _SplayChild->Parent = _SplayParent; \ }
//// RTL AVL Tree Functions//NTSYSAPIVOIDNTAPIRtlInitializeGenericTableAvl( _Out_ PRTL_AVL_TABLE Table, _In_ PRTL_AVL_COMPARE_ROUTINE CompareRoutine, _In_opt_ PRTL_AVL_ALLOCATE_ROUTINE AllocateRoutine, _In_opt_ PRTL_AVL_FREE_ROUTINE FreeRoutine, _In_opt_ PVOID TableContext);
NTSYSAPIPVOIDNTAPIRtlInsertElementGenericTableAvl( _In_ PRTL_AVL_TABLE Table, _In_reads_bytes_(BufferSize) PVOID Buffer, _In_ CLONG BufferSize, _Out_opt_ PBOOLEAN NewElement);
NTSYSAPIPVOIDNTAPIRtlInsertElementGenericTableFullAvl( _In_ PRTL_AVL_TABLE Table, _In_reads_bytes_(BufferSize) PVOID Buffer, _In_ CLONG BufferSize, _Out_opt_ PBOOLEAN NewElement, _In_ PVOID NodeOrParent, _In_ TABLE_SEARCH_RESULT SearchResult);
NTSYSAPIBOOLEANNTAPIRtlDeleteElementGenericTableAvl( _In_ PRTL_AVL_TABLE Table, _In_ PVOID Buffer);
_Must_inspect_result_NTSYSAPIPVOIDNTAPIRtlLookupElementGenericTableAvl( _In_ PRTL_AVL_TABLE Table, _In_ PVOID Buffer);
NTSYSAPIPVOIDNTAPIRtlLookupElementGenericTableFullAvl( _In_ PRTL_AVL_TABLE Table, _In_ PVOID Buffer, _Out_ PVOID *NodeOrParent, _Out_ TABLE_SEARCH_RESULT *SearchResult);
_Must_inspect_result_NTSYSAPIPVOIDNTAPIRtlEnumerateGenericTableAvl( _In_ PRTL_AVL_TABLE Table, _In_ BOOLEAN Restart);
_Must_inspect_result_NTSYSAPIPVOIDNTAPIRtlEnumerateGenericTableWithoutSplayingAvl( _In_ PRTL_AVL_TABLE Table, _Inout_ PVOID *RestartKey);
_Must_inspect_result_NTSYSAPIPVOIDNTAPIRtlLookupFirstMatchingElementGenericTableAvl( _In_ PRTL_AVL_TABLE Table, _In_ PVOID Buffer, _Out_ PVOID *RestartKey);
_Must_inspect_result_NTSYSAPIPVOIDNTAPIRtlEnumerateGenericTableLikeADirectory( _In_ PRTL_AVL_TABLE Table, _In_opt_ PRTL_AVL_MATCH_FUNCTION MatchFunction, _In_opt_ PVOID MatchData, _In_ ULONG NextFlag, _Inout_ PVOID *RestartKey, _Inout_ PULONG DeleteCount, _In_ PVOID Buffer);
_Must_inspect_result_NTSYSAPIPVOIDNTAPIRtlGetElementGenericTableAvl( _In_ PRTL_AVL_TABLE Table, _In_ ULONG I);
NTSYSAPIULONGNTAPIRtlNumberGenericTableElementsAvl( _In_ PRTL_AVL_TABLE Table);
_Must_inspect_result_NTSYSAPIBOOLEANNTAPIRtlIsGenericTableEmptyAvl( _In_ PRTL_AVL_TABLE Table);
#ifdef RTL_USE_AVL_TABLES
#define RtlInitializeGenericTable RtlInitializeGenericTableAvl#define RtlInsertElementGenericTable RtlInsertElementGenericTableAvl#define RtlInsertElementGenericTableFull RtlInsertElementGenericTableFullAvl#define RtlDeleteElementGenericTable RtlDeleteElementGenericTableAvl#define RtlLookupElementGenericTable RtlLookupElementGenericTableAvl#define RtlLookupElementGenericTableFull RtlLookupElementGenericTableFullAvl#define RtlEnumerateGenericTable RtlEnumerateGenericTableAvl#define RtlEnumerateGenericTableWithoutSplaying RtlEnumerateGenericTableWithoutSplayingAvl#define RtlGetElementGenericTable RtlGetElementGenericTableAvl#define RtlNumberGenericTableElements RtlNumberGenericTableElementsAvl#define RtlIsGenericTableEmpty RtlIsGenericTableEmptyAvl
#endif /* RTL_USE_AVL_TABLES */
//// Exception and Error Functions//NTSYSAPIPVOIDNTAPIRtlAddVectoredExceptionHandler( _In_ ULONG FirstHandler, _In_ PVECTORED_EXCEPTION_HANDLER VectoredHandler);
NTSYSAPIULONGNTAPIRtlRemoveVectoredExceptionHandler( _In_ PVOID VectoredHandlerHandle);
NTSYSAPIPVOIDNTAPIRtlAddVectoredContinueHandler( _In_ ULONG FirstHandler, _In_ PVECTORED_EXCEPTION_HANDLER VectoredHandler);
NTSYSAPIULONGNTAPIRtlRemoveVectoredContinueHandler( _In_ PVOID VectoredHandlerHandle);
NTSYSAPIVOIDNTAPIRtlSetUnhandledExceptionFilter( _In_ PRTLP_UNHANDLED_EXCEPTION_FILTER TopLevelExceptionFilter);
NTSYSAPILONGNTAPIRtlUnhandledExceptionFilter( _In_ PEXCEPTION_POINTERS ExceptionInfo);
NTSYSAPILONGNTAPIRtlUnhandledExceptionFilter2( _In_ PEXCEPTION_POINTERS ExceptionInfo, _In_ PCSTR Function);
__analysis_noreturnNTSYSAPIVOIDNTAPIRtlAssert( _In_ PVOID FailedAssertion, _In_ PVOID FileName, _In_ ULONG LineNumber, _In_opt_z_ PCHAR Message);
NTSYSAPIPVOIDNTAPIRtlEncodePointer( _In_ PVOID Pointer);
NTSYSAPIPVOIDNTAPIRtlDecodePointer( _In_ PVOID Pointer);
NTSYSAPIPVOIDNTAPIRtlEncodeSystemPointer( _In_ PVOID Pointer);
NTSYSAPIPVOIDNTAPIRtlDecodeSystemPointer( _In_ PVOID Pointer);
NTSYSAPINTSTATUSNTAPIRtlGetLastNtStatus( VOID);
NTSYSAPIULONGNTAPIRtlGetLastWin32Error( VOID);
NTSYSAPIVOIDNTAPIRtlSetLastWin32Error( _In_ ULONG LastError);
NTSYSAPIVOIDNTAPIRtlSetLastWin32ErrorAndNtStatusFromNtStatus( _In_ NTSTATUS Status);
NTSYSAPINTSTATUSNTAPIRtlSetThreadErrorMode( _In_ ULONG NewMode, _Out_opt_ PULONG OldMode);
NTSYSAPIULONGNTAPIRtlGetThreadErrorMode( VOID);
#endif /* NTOS_MODE_USER */
NTSYSAPIVOIDNTAPIRtlCaptureContext( _Out_ PCONTEXT ContextRecord);
NTSYSAPIBOOLEANNTAPIRtlDispatchException( _In_ PEXCEPTION_RECORD ExceptionRecord, _In_ PCONTEXT Context);
_IRQL_requires_max_(APC_LEVEL)_When_(Status < 0, _Out_range_(>, 0))_When_(Status >= 0, _Out_range_(==, 0))NTSYSAPIULONGNTAPIRtlNtStatusToDosError( _In_ NTSTATUS Status);
_When_(Status < 0, _Out_range_(>, 0))_When_(Status >= 0, _Out_range_(==, 0))NTSYSAPIULONGNTAPIRtlNtStatusToDosErrorNoTeb( _In_ NTSTATUS Status);
NTSYSAPINTSTATUSNTAPIRtlMapSecurityErrorToNtStatus( _In_ ULONG SecurityError);
NTSYSAPIVOIDNTAPIRtlRaiseException( _In_ PEXCEPTION_RECORD ExceptionRecord);
DECLSPEC_NORETURNNTSYSAPIVOIDNTAPIRtlRaiseStatus( _In_ NTSTATUS Status);
NTSYSAPIVOIDNTAPIRtlUnwind( _In_opt_ PVOID TargetFrame, _In_opt_ PVOID TargetIp, _In_opt_ PEXCEPTION_RECORD ExceptionRecord, _In_ PVOID ReturnValue);
#define RTL_STACK_WALKING_MODE_FRAMES_TO_SKIP_SHIFT 8
#ifdef _M_AMD64
NTSYSAPIPRUNTIME_FUNCTIONNTAPIRtlLookupFunctionEntry( _In_ DWORD64 ControlPc, _Out_ PDWORD64 ImageBase, _Inout_opt_ PUNWIND_HISTORY_TABLE HistoryTable);
NTSYSAPIPEXCEPTION_ROUTINENTAPIRtlVirtualUnwind( _In_ ULONG HandlerType, _In_ ULONG64 ImageBase, _In_ ULONG64 ControlPc, _In_ PRUNTIME_FUNCTION FunctionEntry, _Inout_ PCONTEXT Context, _Out_ PVOID* HandlerData, _Out_ PULONG64 EstablisherFrame, _Inout_opt_ PKNONVOLATILE_CONTEXT_POINTERS ContextPointers);
#endif // _M_AMD64
//// Tracing Functions//NTSYSAPIULONGNTAPIRtlWalkFrameChain( _Out_writes_(Count - (Flags >> RTL_STACK_WALKING_MODE_FRAMES_TO_SKIP_SHIFT)) PVOID *Callers, _In_ ULONG Count, _In_ ULONG Flags);
NTSYSAPIUSHORTNTAPIRtlLogStackBackTrace( VOID);
#ifdef NTOS_MODE_USER//// Heap Functions//_Must_inspect_result__Ret_maybenull__Post_writable_byte_size_(Size)NTSYSAPIPVOIDNTAPIRtlAllocateHeap( _In_ PVOID HeapHandle, _In_opt_ ULONG Flags, _In_ SIZE_T Size);
_Must_inspect_result_NTSYSAPIPVOIDNTAPIRtlCreateHeap( _In_ ULONG Flags, _In_opt_ PVOID BaseAddress, _In_opt_ SIZE_T SizeToReserve, _In_opt_ SIZE_T SizeToCommit, _In_opt_ PVOID Lock, _In_opt_ PRTL_HEAP_PARAMETERS Parameters);
NTSYSAPIULONGNTAPIRtlCreateTagHeap( _In_ HANDLE HeapHandle, _In_ ULONG Flags, _In_opt_ PWSTR TagName, _In_ PWSTR TagSubName);
ULONGNTAPIRtlCompactHeap( _In_ HANDLE Heap, _In_ ULONG Flags);
_Must_inspect_result_NTSYSAPIPVOIDNTAPIRtlDebugCreateHeap( _In_ ULONG Flags, _In_opt_ PVOID BaseAddress, _In_opt_ SIZE_T SizeToReserve, _In_opt_ SIZE_T SizeToCommit, _In_opt_ PVOID Lock, _In_opt_ PRTL_HEAP_PARAMETERS Parameters);
NTSYSAPIHANDLENTAPIRtlDestroyHeap( _In_ _Post_invalid_ HANDLE Heap);
NTSYSAPIULONGNTAPIRtlExtendHeap( _In_ HANDLE Heap, _In_ ULONG Flags, _In_ PVOID P, _In_ SIZE_T Size);
_Success_(return != 0)NTSYSAPIBOOLEANNTAPIRtlFreeHeap( _In_ HANDLE HeapHandle, _In_opt_ ULONG Flags, _In_ _Post_invalid_ PVOID P);
ULONGNTAPIRtlGetProcessHeaps( _In_ ULONG HeapCount, _Out_cap_(HeapCount) HANDLE *HeapArray);
_Success_(return != 0)BOOLEANNTAPIRtlGetUserInfoHeap( _In_ PVOID HeapHandle, _In_ ULONG Flags, _In_ PVOID BaseAddress, _Inout_opt_ PVOID *UserValue, _Out_opt_ PULONG UserFlags);
NTSYSAPIPVOIDNTAPIRtlProtectHeap( _In_ PVOID HeapHandle, _In_ BOOLEAN Protect);
NTSYSAPINTSTATUSNTAPIRtlQueryHeapInformation( _In_ PVOID HeapHandle, _In_ HEAP_INFORMATION_CLASS HeapInformationClass, _Out_ PVOID HeapInformation, _In_ SIZE_T HeapInformationLength, _When_(HeapInformationClass==HeapCompatibilityInformation, _On_failure_(_Out_opt_)) _Out_opt_ PSIZE_T ReturnLength);
_Ret_opt_z_NTSYSAPIPWSTRNTAPIRtlQueryTagHeap( _In_ PVOID HeapHandle, _In_ ULONG Flags, _In_ USHORT TagIndex, _In_ BOOLEAN ResetCounters, _Out_ PRTL_HEAP_TAG_INFO HeapTagInfo);
_Must_inspect_result__Ret_maybenull__Post_writable_byte_size_(Size)NTSYSAPIPVOIDNTAPIRtlReAllocateHeap( _In_ HANDLE Heap, _In_opt_ ULONG Flags, _In_ _Post_invalid_ PVOID Ptr, _In_ SIZE_T Size);
NTSYSAPINTSTATUSNTAPIRtlSetHeapInformation( _In_ PVOID HeapHandle, _In_ HEAP_INFORMATION_CLASS HeapInformationClass, _When_(HeapInformationClass==HeapCompatibilityInformation,_In_) PVOID HeapInformation, _In_ SIZE_T HeapInformationLength);
NTSYSAPIBOOLEANNTAPIRtlLockHeap( _In_ HANDLE Heap);
NTSYSAPIULONGNTAPIRtlMultipleAllocateHeap( _In_ HANDLE HeapHandle, _In_ ULONG Flags, _In_ SIZE_T Size, _In_ ULONG Count, _Out_cap_(Count) _Deref_post_bytecap_(Size) PVOID * Array);
NTSYSAPIULONGNTAPIRtlMultipleFreeHeap( _In_ HANDLE HeapHandle, _In_ ULONG Flags, _In_ ULONG Count, _In_count_(Count) /* _Deref_ _Post_invalid_ */ PVOID * Array);
NTSYSAPINTSTATUSNTAPIRtlUsageHeap( _In_ HANDLE Heap, _In_ ULONG Flags, _Out_ PRTL_HEAP_USAGE Usage);
NTSYSAPIBOOLEANNTAPIRtlUnlockHeap( _In_ HANDLE Heap);
BOOLEANNTAPIRtlSetUserValueHeap( _In_ PVOID HeapHandle, _In_ ULONG Flags, _In_ PVOID BaseAddress, _In_ PVOID UserValue);
BOOLEANNTAPIRtlSetUserFlagsHeap( _In_ PVOID HeapHandle, _In_ ULONG Flags, _In_ PVOID BaseAddress, _In_ ULONG UserFlagsReset, _In_ ULONG UserFlagsSet);
NTSYSAPIBOOLEANNTAPIRtlValidateHeap( _In_ HANDLE Heap, _In_ ULONG Flags, _In_opt_ PVOID P);
NTSYSAPINTSTATUSNTAPIRtlWalkHeap( _In_ HANDLE HeapHandle, _In_ PVOID HeapEntry);
#define RtlGetProcessHeap() (NtCurrentPeb()->ProcessHeap)
#endif // NTOS_MODE_USER
#define NtCurrentPeb() (NtCurrentTeb()->ProcessEnvironmentBlock)
NTSYSAPISIZE_TNTAPIRtlSizeHeap( _In_ PVOID HeapHandle, _In_ ULONG Flags, _In_ PVOID MemoryPointer);
//// Security Functions//_IRQL_requires_max_(APC_LEVEL)NTSYSAPINTSTATUSNTAPIRtlAbsoluteToSelfRelativeSD( _In_ PSECURITY_DESCRIPTOR AbsoluteSecurityDescriptor, _Out_writes_bytes_to_opt_(*BufferLength, *BufferLength) PSECURITY_DESCRIPTOR SelfRelativeSecurityDescriptor, _Inout_ PULONG BufferLength);
_IRQL_requires_max_(APC_LEVEL)NTSYSAPINTSTATUSNTAPIRtlAddAccessAllowedAce( _Inout_ PACL Acl, _In_ ULONG Revision, _In_ ACCESS_MASK AccessMask, _In_ PSID Sid);
_IRQL_requires_max_(APC_LEVEL)NTSYSAPINTSTATUSNTAPIRtlAddAccessAllowedAceEx( _Inout_ PACL pAcl, _In_ ULONG dwAceRevision, _In_ ULONG AceFlags, _In_ ACCESS_MASK AccessMask, _In_ PSID pSid);
NTSYSAPINTSTATUSNTAPIRtlAddAccessAllowedObjectAce( _Inout_ PACL pAcl, _In_ ULONG dwAceRevision, _In_ ULONG AceFlags, _In_ ACCESS_MASK AccessMask, _In_opt_ GUID *ObjectTypeGuid, _In_opt_ GUID *InheritedObjectTypeGuid, _In_ PSID pSid);
NTSYSAPINTSTATUSNTAPIRtlAddAccessDeniedAce( _Inout_ PACL Acl, _In_ ULONG Revision, _In_ ACCESS_MASK AccessMask, _In_ PSID Sid);
NTSYSAPINTSTATUSNTAPIRtlAddAccessDeniedAceEx( _Inout_ PACL Acl, _In_ ULONG Revision, _In_ ULONG Flags, _In_ ACCESS_MASK AccessMask, _In_ PSID Sid);
NTSYSAPINTSTATUSNTAPIRtlAddAccessDeniedObjectAce( _Inout_ PACL pAcl, _In_ ULONG dwAceRevision, _In_ ULONG AceFlags, _In_ ACCESS_MASK AccessMask, _In_opt_ GUID *ObjectTypeGuid, _In_opt_ GUID *InheritedObjectTypeGuid, _In_ PSID pSid);
NTSYSAPINTSTATUSNTAPIRtlAddAce( _Inout_ PACL Acl, _In_ ULONG AceRevision, _In_ ULONG StartingAceIndex, _In_reads_bytes_(AceListLength) PVOID AceList, _In_ ULONG AceListLength);
NTSYSAPINTSTATUSNTAPIRtlAddAuditAccessAce( _Inout_ PACL Acl, _In_ ULONG Revision, _In_ ACCESS_MASK AccessMask, _In_ PSID Sid, _In_ BOOLEAN Success, _In_ BOOLEAN Failure);
NTSYSAPINTSTATUSNTAPIRtlAcquirePrivilege( _In_ PULONG Privilege, _In_ ULONG NumPriv, _In_ ULONG Flags, _Out_ PVOID *ReturnedState);
NTSYSAPINTSTATUSNTAPIRtlAddAuditAccessAceEx( _Inout_ PACL Acl, _In_ ULONG Revision, _In_ ULONG Flags, _In_ ACCESS_MASK AccessMask, _In_ PSID Sid, _In_ BOOLEAN Success, _In_ BOOLEAN Failure);
NTSYSAPINTSTATUSNTAPIRtlAddAuditAccessObjectAce( _Inout_ PACL Acl, _In_ ULONG Revision, _In_ ULONG Flags, _In_ ACCESS_MASK AccessMask, _In_opt_ GUID *ObjectTypeGuid, _In_opt_ GUID *InheritedObjectTypeGuid, _In_ PSID Sid, _In_ BOOLEAN Success, _In_ BOOLEAN Failure);
NTSYSAPINTSTATUSNTAPIRtlAddMandatoryAce( _Inout_ PACL Acl, _In_ ULONG Revision, _In_ ULONG Flags, _In_ ULONG MandatoryFlags, _In_ UCHAR AceType, _In_ PSID LabelSid);
NTSYSAPINTSTATUSNTAPIRtlAdjustPrivilege( _In_ ULONG Privilege, _In_ BOOLEAN NewValue, _In_ BOOLEAN ForThread, _Out_ PBOOLEAN OldValue);
_Must_inspect_result_NTSYSAPINTSTATUSNTAPIRtlAllocateAndInitializeSid( _In_ PSID_IDENTIFIER_AUTHORITY IdentifierAuthority, _In_ UCHAR SubAuthorityCount, _In_ ULONG SubAuthority0, _In_ ULONG SubAuthority1, _In_ ULONG SubAuthority2, _In_ ULONG SubAuthority3, _In_ ULONG SubAuthority4, _In_ ULONG SubAuthority5, _In_ ULONG SubAuthority6, _In_ ULONG SubAuthority7, _Outptr_ PSID *Sid);
NTSYSAPIBOOLEANNTAPIRtlAreAllAccessesGranted( ACCESS_MASK GrantedAccess, ACCESS_MASK DesiredAccess);
NTSYSAPIBOOLEANNTAPIRtlAreAnyAccessesGranted( ACCESS_MASK GrantedAccess, ACCESS_MASK DesiredAccess);
_IRQL_requires_max_(APC_LEVEL)NTSYSAPIVOIDNTAPIRtlCopyLuid ( _Out_ PLUID DestinationLuid, _In_ PLUID SourceLuid );
NTSYSAPIVOIDNTAPIRtlCopyLuidAndAttributesArray( ULONG Count, PLUID_AND_ATTRIBUTES Src, PLUID_AND_ATTRIBUTES Dest);
NTSYSAPINTSTATUSNTAPIRtlCopySidAndAttributesArray( _In_ ULONG Count, _In_ PSID_AND_ATTRIBUTES Src, _In_ ULONG SidAreaSize, _In_ PSID_AND_ATTRIBUTES Dest, _In_ PSID SidArea, _Out_ PSID* RemainingSidArea, _Out_ PULONG RemainingSidAreaSize);
_IRQL_requires_max_(APC_LEVEL)NTSYSAPINTSTATUSNTAPIRtlConvertSidToUnicodeString( _Inout_ PUNICODE_STRING UnicodeString, _In_ PSID Sid, _In_ BOOLEAN AllocateDestinationString);
_IRQL_requires_max_(APC_LEVEL)NTSYSAPINTSTATUSNTAPIRtlCopySid( _In_ ULONG DestinationSidLength, _Out_writes_bytes_(DestinationSidLength) PSID DestinationSid, _In_ PSID SourceSid);
NTSYSAPINTSTATUSNTAPIRtlCreateAcl( PACL Acl, ULONG AclSize, ULONG AclRevision);
NTSYSAPINTSTATUSNTAPIRtlCreateSecurityDescriptor( _Out_ PSECURITY_DESCRIPTOR SecurityDescriptor, _In_ ULONG Revision);
NTSYSAPINTSTATUSNTAPIRtlCreateSecurityDescriptorRelative( _Out_ PISECURITY_DESCRIPTOR_RELATIVE SecurityDescriptor, _In_ ULONG Revision);
NTSYSAPINTSTATUSNTAPIRtlCopySecurityDescriptor( _In_ PSECURITY_DESCRIPTOR pSourceSecurityDescriptor, _Out_ PSECURITY_DESCRIPTOR *pDestinationSecurityDescriptor);
NTSYSAPINTSTATUSNTAPIRtlDeleteAce( PACL Acl, ULONG AceIndex);
NTSYSAPIBOOLEANNTAPIRtlEqualPrefixSid( PSID Sid1, PSID Sid2);
NTSYSAPIBOOLEANNTAPIRtlEqualSid ( _In_ PSID Sid1, _In_ PSID Sid2);
NTSYSAPIBOOLEANNTAPIRtlFirstFreeAce( PACL Acl, PACE* Ace);
NTSYSAPIPVOIDNTAPIRtlFreeSid( _In_ _Post_invalid_ PSID Sid);
NTSYSAPINTSTATUSNTAPIRtlGetAce( PACL Acl, ULONG AceIndex, PVOID *Ace);
NTSYSAPINTSTATUSNTAPIRtlGetControlSecurityDescriptor( _In_ PSECURITY_DESCRIPTOR SecurityDescriptor, _Out_ PSECURITY_DESCRIPTOR_CONTROL Control, _Out_ PULONG Revision);
NTSYSAPINTSTATUSNTAPIRtlGetDaclSecurityDescriptor( _In_ PSECURITY_DESCRIPTOR SecurityDescriptor, _Out_ PBOOLEAN DaclPresent, _Out_ PACL *Dacl, _Out_ PBOOLEAN DaclDefaulted);
NTSYSAPINTSTATUSNTAPIRtlGetSaclSecurityDescriptor( _In_ PSECURITY_DESCRIPTOR SecurityDescriptor, _Out_ PBOOLEAN SaclPresent, _Out_ PACL* Sacl, _Out_ PBOOLEAN SaclDefaulted);
NTSYSAPINTSTATUSNTAPIRtlGetGroupSecurityDescriptor( _In_ PSECURITY_DESCRIPTOR SecurityDescriptor, _Out_ PSID *Group, _Out_ PBOOLEAN GroupDefaulted);
NTSYSAPINTSTATUSNTAPIRtlGetOwnerSecurityDescriptor( _In_ PSECURITY_DESCRIPTOR SecurityDescriptor, _Out_ PSID *Owner, _Out_ PBOOLEAN OwnerDefaulted);
NTSYSAPIBOOLEANNTAPIRtlGetSecurityDescriptorRMControl( _In_ PSECURITY_DESCRIPTOR SecurityDescriptor, _Out_ PUCHAR RMControl);
NTSYSAPIPSID_IDENTIFIER_AUTHORITYNTAPIRtlIdentifierAuthoritySid(PSID Sid);
NTSYSAPINTSTATUSNTAPIRtlImpersonateSelf(IN SECURITY_IMPERSONATION_LEVEL ImpersonationLevel);
_IRQL_requires_max_(APC_LEVEL)NTSYSAPINTSTATUSNTAPIRtlInitializeSid( _Out_ PSID Sid, _In_ PSID_IDENTIFIER_AUTHORITY IdentifierAuthority, _In_ UCHAR SubAuthorityCount);
NTSYSAPIULONGNTAPIRtlLengthRequiredSid(IN ULONG SubAuthorityCount);
_IRQL_requires_max_(APC_LEVEL)NTSYSAPIULONGNTAPIRtlLengthSecurityDescriptor( _In_ PSECURITY_DESCRIPTOR SecurityDescriptor);
NTSYSAPIULONGNTAPIRtlLengthSid(IN PSID Sid);
NTSYSAPINTSTATUSNTAPIRtlMakeSelfRelativeSD( _In_ PSECURITY_DESCRIPTOR AbsoluteSD, _Out_ PSECURITY_DESCRIPTOR SelfRelativeSD, _Inout_ PULONG BufferLength);
NTSYSAPIVOIDNTAPIRtlMapGenericMask( PACCESS_MASK AccessMask, PGENERIC_MAPPING GenericMapping);
#ifdef NTOS_MODE_USER
NTSYSAPINTSTATUSNTAPIRtlQueryInformationAcl( PACL Acl, PVOID Information, ULONG InformationLength, ACL_INFORMATION_CLASS InformationClass);
#endif
NTSYSAPIVOIDNTAPIRtlReleasePrivilege( _In_ PVOID ReturnedState);
#if (NTDDI_VERSION >= NTDDI_VISTA)
NTSYSAPINTSTATUSNTAPIRtlRemovePrivileges( _In_ HANDLE TokenHandle, _In_reads_opt_(PrivilegeCount) _When_(PrivilegeCount != 0, _Notnull_) PULONG PrivilegesToKeep, _In_ ULONG PrivilegeCount);
#endif /* (NTDDI_VERSION >= NTDDI_VISTA) */
_IRQL_requires_max_(APC_LEVEL)NTSYSAPINTSTATUSNTAPIRtlSelfRelativeToAbsoluteSD( _In_ PSECURITY_DESCRIPTOR SelfRelativeSecurityDescriptor, _Out_writes_bytes_to_opt_(*AbsoluteSecurityDescriptorSize, *AbsoluteSecurityDescriptorSize) PSECURITY_DESCRIPTOR AbsoluteSecurityDescriptor, _Inout_ PULONG AbsoluteSecurityDescriptorSize, _Out_writes_bytes_to_opt_(*DaclSize, *DaclSize) PACL Dacl, _Inout_ PULONG DaclSize, _Out_writes_bytes_to_opt_(*SaclSize, *SaclSize) PACL Sacl, _Inout_ PULONG SaclSize, _Out_writes_bytes_to_opt_(*OwnerSize, *OwnerSize) PSID Owner, _Inout_ PULONG OwnerSize, _Out_writes_bytes_to_opt_(*PrimaryGroupSize, *PrimaryGroupSize) PSID PrimaryGroup, _Inout_ PULONG PrimaryGroupSize);
NTSYSAPINTSTATUSNTAPIRtlSelfRelativeToAbsoluteSD2( _Inout_ PSECURITY_DESCRIPTOR SelfRelativeSD, _Out_ PULONG BufferSize);
NTSYSAPINTSTATUSNTAPIRtlSetAttributesSecurityDescriptor( _Inout_ PSECURITY_DESCRIPTOR SecurityDescriptor, _In_ SECURITY_DESCRIPTOR_CONTROL Control, _Out_ PULONG Revision);
NTSYSAPINTSTATUSNTAPIRtlSetControlSecurityDescriptor( _In_ PSECURITY_DESCRIPTOR SecurityDescriptor, _In_ SECURITY_DESCRIPTOR_CONTROL ControlBitsOfInterest, _In_ SECURITY_DESCRIPTOR_CONTROL ControlBitsToSet);
_IRQL_requires_max_(APC_LEVEL)NTSYSAPINTSTATUSNTAPIRtlSetDaclSecurityDescriptor( _Inout_ PSECURITY_DESCRIPTOR SecurityDescriptor, _In_ BOOLEAN DaclPresent, _In_opt_ PACL Dacl, _In_opt_ BOOLEAN DaclDefaulted);
_IRQL_requires_max_(APC_LEVEL)NTSYSAPINTSTATUSNTAPIRtlSetGroupSecurityDescriptor( _Inout_ PSECURITY_DESCRIPTOR SecurityDescriptor, _In_opt_ PSID Group, _In_opt_ BOOLEAN GroupDefaulted);
#ifdef NTOS_MODE_USER
NTSYSAPINTSTATUSNTAPIRtlSetInformationAcl( PACL Acl, PVOID Information, ULONG InformationLength, ACL_INFORMATION_CLASS InformationClass);
#endif
_IRQL_requires_max_(APC_LEVEL)NTSYSAPINTSTATUSNTAPIRtlSetOwnerSecurityDescriptor( _Inout_ PSECURITY_DESCRIPTOR SecurityDescriptor, _In_opt_ PSID Owner, _In_opt_ BOOLEAN OwnerDefaulted);
NTSYSAPINTSTATUSNTAPIRtlSetSaclSecurityDescriptor( _Inout_ PSECURITY_DESCRIPTOR SecurityDescriptor, _In_ BOOLEAN SaclPresent, _In_ PACL Sacl, _In_ BOOLEAN SaclDefaulted);
NTSYSAPIVOIDNTAPIRtlSetSecurityDescriptorRMControl( _Inout_ PSECURITY_DESCRIPTOR SecurityDescriptor, _In_ PUCHAR RMControl);
NTSYSAPIPUCHARNTAPIRtlSubAuthorityCountSid( _In_ PSID Sid);
NTSYSAPIPULONGNTAPIRtlSubAuthoritySid( _In_ PSID Sid, _In_ ULONG SubAuthority);
_IRQL_requires_max_(APC_LEVEL)_Must_inspect_result_NTSYSAPIBOOLEANNTAPIRtlValidRelativeSecurityDescriptor( _In_reads_bytes_(SecurityDescriptorLength) PSECURITY_DESCRIPTOR SecurityDescriptorInput, _In_ ULONG SecurityDescriptorLength, _In_ SECURITY_INFORMATION RequiredInformation);
NTSYSAPIBOOLEANNTAPIRtlValidSecurityDescriptor(IN PSECURITY_DESCRIPTOR SecurityDescriptor);
NTSYSAPIBOOLEANNTAPIRtlValidSid(IN PSID Sid);
NTSYSAPIBOOLEANNTAPIRtlValidAcl(PACL Acl);
NTSYSAPINTSTATUSNTAPIRtlDeleteSecurityObject( _In_ PSECURITY_DESCRIPTOR *ObjectDescriptor);
NTSYSAPINTSTATUSNTAPIRtlNewSecurityObject( _In_ PSECURITY_DESCRIPTOR ParentDescriptor, _In_ PSECURITY_DESCRIPTOR CreatorDescriptor, _Out_ PSECURITY_DESCRIPTOR *NewDescriptor, _In_ BOOLEAN IsDirectoryObject, _In_ HANDLE Token, _In_ PGENERIC_MAPPING GenericMapping);
NTSYSAPINTSTATUSNTAPIRtlQuerySecurityObject( _In_ PSECURITY_DESCRIPTOR ObjectDescriptor, _In_ SECURITY_INFORMATION SecurityInformation, _Out_ PSECURITY_DESCRIPTOR ResultantDescriptor, _In_ ULONG DescriptorLength, _Out_ PULONG ReturnLength);
NTSYSAPINTSTATUSNTAPIRtlSetSecurityObject( _In_ SECURITY_INFORMATION SecurityInformation, _In_ PSECURITY_DESCRIPTOR ModificationDescriptor, _Out_ PSECURITY_DESCRIPTOR *ObjectsSecurityDescriptor, _In_ PGENERIC_MAPPING GenericMapping, _In_ HANDLE Token);
//// Single-Character Functions//NTSYSAPINTSTATUSNTAPIRtlLargeIntegerToChar( _In_ PLARGE_INTEGER Value, _In_ ULONG Base, _In_ ULONG Length, _Out_ PCHAR String);
NTSYSAPICHARNTAPIRtlUpperChar(CHAR Source);
NTSYSAPIWCHARNTAPIRtlUpcaseUnicodeChar(WCHAR Source);
NTSYSAPIWCHARNTAPIRtlDowncaseUnicodeChar(IN WCHAR Source);
NTSYSAPINTSTATUSNTAPIRtlIntegerToChar( _In_ ULONG Value, _In_ ULONG Base, _In_ ULONG Length, _Out_ PCHAR String);
NTSYSAPINTSTATUSNTAPIRtlIntegerToUnicode( _In_ ULONG Value, _In_opt_ ULONG Base, _In_opt_ ULONG Length, _Inout_ LPWSTR String);
_IRQL_requires_max_(PASSIVE_LEVEL)_At_(String->MaximumLength, _Const_)NTSYSAPINTSTATUSNTAPIRtlIntegerToUnicodeString( _In_ ULONG Value, _In_opt_ ULONG Base, _Inout_ PUNICODE_STRING String);
NTSYSAPINTSTATUSNTAPIRtlCharToInteger( PCSZ String, ULONG Base, PULONG Value);
//// Byte Swap Functions//#ifdef NTOS_MODE_USER
_Check_return_unsigned short__cdecl_byteswap_ushort( _In_ unsigned short _Short);
_Check_return_unsigned long__cdecl_byteswap_ulong( _In_ unsigned long _Long);
_Check_return_unsigned __int64__cdecl_byteswap_uint64( _In_ unsigned __int64 _Int64);
#ifdef _MSC_VER#pragma intrinsic(_byteswap_ushort)#pragma intrinsic(_byteswap_ulong)#pragma intrinsic(_byteswap_uint64)#endif // _MSC_VER#define RtlUshortByteSwap(_x) _byteswap_ushort((USHORT)(_x))#define RtlUlongByteSwap(_x) _byteswap_ulong((_x))#define RtlUlonglongByteSwap(_x) _byteswap_uint64((_x))
#endif // NTOS_MODE_USER
//// Unicode->Ansi String Functions//NTSYSAPIULONGNTAPIRtlxUnicodeStringToAnsiSize(IN PCUNICODE_STRING UnicodeString);
#ifdef NTOS_MODE_USER
#define RtlUnicodeStringToAnsiSize(STRING) ( \ NLS_MB_CODE_PAGE_TAG ? \ RtlxUnicodeStringToAnsiSize(STRING) : \ ((STRING)->Length + sizeof(UNICODE_NULL)) / sizeof(WCHAR) \)
#endif
NTSYSAPINTSTATUSNTAPIRtlUnicodeStringToAnsiString( PANSI_STRING DestinationString, PCUNICODE_STRING SourceString, BOOLEAN AllocateDestinationString);
//// Unicode->OEM String Functions//NTSYSAPINTSTATUSNTAPIRtlUpcaseUnicodeStringToOemString( POEM_STRING DestinationString, PCUNICODE_STRING SourceString, BOOLEAN AllocateDestinationString);
_IRQL_requires_max_(PASSIVE_LEVEL)_Must_inspect_result_//_At_(DestinationString->Buffer, _Post_bytecount_(DestinationString->Length))NTSYSAPINTSTATUSNTAPIRtlUpcaseUnicodeStringToCountedOemString( _When_(AllocateDestinationString, _Out_ _At_(DestinationString->Buffer, __drv_allocatesMem(Mem))) _When_(!AllocateDestinationString, _Inout_) POEM_STRING DestinationString, _In_ PCUNICODE_STRING SourceString, _In_ BOOLEAN AllocateDestinationString);
NTSYSAPINTSTATUSNTAPIRtlUnicodeStringToOemString( POEM_STRING DestinationString, PCUNICODE_STRING SourceString, BOOLEAN AllocateDestinationString);
_IRQL_requires_max_(PASSIVE_LEVEL)_Must_inspect_result_NTSYSAPINTSTATUSNTAPIRtlUnicodeStringToCountedOemString( _When_(AllocateDestinationString, _Out_ _At_(DestinationString->Buffer, __drv_allocatesMem(Mem))) _When_(!AllocateDestinationString, _Inout_) POEM_STRING DestinationString, _In_ PCUNICODE_STRING SourceString, _In_ BOOLEAN AllocateDestinationString);
NTSYSAPINTSTATUSNTAPIRtlUpcaseUnicodeToOemN( PCHAR OemString, ULONG OemSize, PULONG ResultSize, PCWCH UnicodeString, ULONG UnicodeSize);
NTSYSAPIULONGNTAPIRtlxUnicodeStringToOemSize(IN PCUNICODE_STRING UnicodeString);
#ifdef NTOS_MODE_USER
#define RtlUnicodeStringToOemSize(STRING) ( \ NLS_MB_OEM_CODE_PAGE_TAG ? \ RtlxUnicodeStringToOemSize(STRING) : \ ((STRING)->Length + sizeof(UNICODE_NULL)) / sizeof(WCHAR) \)
#define RtlUnicodeStringToCountedOemSize(STRING) ( \ (ULONG)(RtlUnicodeStringToOemSize(STRING) - sizeof(ANSI_NULL)) \)
#endif
NTSYSAPINTSTATUSNTAPIRtlUnicodeToOemN( PCHAR OemString, ULONG OemSize, PULONG ResultSize, PCWCH UnicodeString, ULONG UnicodeSize);
//// Unicode->MultiByte String Functions//NTSYSAPINTSTATUSNTAPIRtlUnicodeToMultiByteN( PCHAR MbString, ULONG MbSize, PULONG ResultSize, PCWCH UnicodeString, ULONG UnicodeSize);
NTSYSAPINTSTATUSNTAPIRtlUpcaseUnicodeToMultiByteN( PCHAR MbString, ULONG MbSize, PULONG ResultSize, PCWCH UnicodeString, ULONG UnicodeSize);
NTSYSAPINTSTATUSNTAPIRtlUnicodeToMultiByteSize( PULONG MbSize, PCWCH UnicodeString, ULONG UnicodeSize);
NTSYSAPIULONGNTAPIRtlxOemStringToUnicodeSize(IN PCOEM_STRING OemString);
//// OEM to Unicode Functions//NTSYSAPINTSTATUSNTAPIRtlOemStringToUnicodeString( PUNICODE_STRING DestinationString, PCOEM_STRING SourceString, BOOLEAN AllocateDestinationString);
_IRQL_requires_max_(PASSIVE_LEVEL)NTSYSAPINTSTATUSNTAPIRtlOemToUnicodeN( _Out_writes_bytes_to_(MaxBytesInUnicodeString, *BytesInUnicodeString) PWCH UnicodeString, _In_ ULONG MaxBytesInUnicodeString, _Out_opt_ PULONG BytesInUnicodeString, _In_reads_bytes_(BytesInOemString) PCCH OemString, _In_ ULONG BytesInOemString);
#ifdef NTOS_MODE_USER
#define RtlOemStringToUnicodeSize(STRING) ( \ NLS_MB_OEM_CODE_PAGE_TAG ? \ RtlxOemStringToUnicodeSize(STRING) : \ ((STRING)->Length + sizeof(ANSI_NULL)) * sizeof(WCHAR) \)
#define RtlOemStringToCountedUnicodeSize(STRING) ( \ (ULONG)(RtlOemStringToUnicodeSize(STRING) - sizeof(UNICODE_NULL)) \)
#endif
//// Ansi->Unicode String Functions//_IRQL_requires_max_(APC_LEVEL)NTSYSAPIWCHARNTAPIRtlAnsiCharToUnicodeChar( _Inout_ PUCHAR *SourceCharacter);
NTSYSAPINTSTATUSNTAPIRtlAnsiStringToUnicodeString( PUNICODE_STRING DestinationString, PCANSI_STRING SourceString, BOOLEAN AllocateDestinationString);
NTSYSAPIULONGNTAPIRtlxAnsiStringToUnicodeSize( PCANSI_STRING AnsiString);
#ifdef NTOS_MODE_USER
#define RtlAnsiStringToUnicodeSize(STRING) ( \ NLS_MB_CODE_PAGE_TAG ? \ RtlxAnsiStringToUnicodeSize(STRING) : \ ((STRING)->Length + sizeof(ANSI_NULL)) * sizeof(WCHAR) \)
#endif
NTSYSAPIBOOLEANNTAPIRtlCreateUnicodeStringFromAsciiz( _Out_ PUNICODE_STRING Destination, _In_ PCSZ Source);
//// Unicode String Functions//NTSYSAPINTSTATUSNTAPIRtlAppendUnicodeToString( PUNICODE_STRING Destination, PCWSTR Source);
NTSYSAPINTSTATUSNTAPIRtlAppendUnicodeStringToString( PUNICODE_STRING Destination, PCUNICODE_STRING Source);
NTSYSAPILONGNTAPIRtlCompareUnicodeString( PCUNICODE_STRING String1, PCUNICODE_STRING String2, BOOLEAN CaseInsensitive);
_Must_inspect_result_NTSYSAPILONGNTAPIRtlCompareUnicodeStrings( _In_reads_(String1Length) PCWCH String1, _In_ SIZE_T String1Length, _In_reads_(String2Length) PCWCH String2, _In_ SIZE_T String2Length, _In_ BOOLEAN CaseInSensitive);
NTSYSAPIVOIDNTAPIRtlCopyUnicodeString( PUNICODE_STRING DestinationString, PCUNICODE_STRING SourceString);
NTSYSAPIBOOLEANNTAPIRtlCreateUnicodeString( PUNICODE_STRING DestinationString, PCWSTR SourceString);
#ifdef NTOS_MODE_USER
NTSYSAPINTSTATUSNTAPIRtlDowncaseUnicodeString( _Inout_ PUNICODE_STRING UniDest, _In_ PCUNICODE_STRING UniSource, _In_ BOOLEAN AllocateDestinationString);
NTSYSAPINTSTATUSNTAPIRtlDuplicateUnicodeString( _In_ ULONG Flags, _In_ PCUNICODE_STRING SourceString, _Out_ PUNICODE_STRING DestinationString);
NTSYSAPINTSTATUSNTAPIRtlFindCharInUnicodeString( _In_ ULONG Flags, _In_ PCUNICODE_STRING SearchString, _In_ PCUNICODE_STRING MatchString, _Out_ PUSHORT Position);
//// Memory Functions//#if defined(_M_AMD64)
FORCEINLINEVOIDRtlFillMemoryUlong( _Out_writes_bytes_all_(Length) PVOID Destination, _In_ SIZE_T Length, _In_ ULONG Pattern){ PULONG Address = (PULONG)Destination; if ((Length /= 4) != 0) { if (((ULONG64)Address & 4) != 0) { *Address = Pattern; if ((Length -= 1) == 0) { return; } Address += 1; } __stosq((PULONG64)(Address), Pattern | ((ULONG64)Pattern << 32), Length / 2); if ((Length & 1) != 0) Address[Length - 1] = Pattern; } return;}
#define RtlFillMemoryUlonglong(Destination, Length, Pattern) \ __stosq((PULONG64)(Destination), Pattern, (Length) / 8)
#else
NTSYSAPIVOIDNTAPIRtlFillMemoryUlong( _Out_writes_bytes_all_(Length) PVOID Destination, _In_ SIZE_T Length, _In_ ULONG Pattern);
NTSYSAPIVOIDNTAPIRtlFillMemoryUlonglong( _Out_ PVOID Destination, _In_ SIZE_T Length, _In_ ULONGLONG Pattern);
#endif
NTSYSAPINTSTATUSNTAPIRtlCopyMappedMemory( _Out_writes_bytes_all_(Size) PVOID Destination, _In_reads_bytes_(Size) const VOID *Source, _In_ SIZE_T Size);
NTSYSAPISIZE_TNTAPIRtlCompareMemoryUlong( _In_ PVOID Source, _In_ SIZE_T Length, _In_ ULONG Pattern);
#ifndef RtlEqualMemory#define RtlEqualMemory(Destination, Source, Length) \ (!memcmp(Destination, Source, Length))#endif
#define RtlCopyBytes RtlCopyMemory#define RtlFillBytes RtlFillMemory#define RtlZeroBytes RtlZeroMemory
#endif
NTSYSAPIBOOLEANNTAPIRtlEqualUnicodeString( PCUNICODE_STRING String1, PCUNICODE_STRING String2, BOOLEAN CaseInsensitive);
_IRQL_requires_max_(PASSIVE_LEVEL)NTSYSAPIVOIDNTAPIRtlFreeUnicodeString( _Inout_ _At_(UnicodeString->Buffer, __drv_freesMem(Mem)) PUNICODE_STRING UnicodeString);
NTSYSAPIVOIDNTAPIRtlEraseUnicodeString( _Inout_ PUNICODE_STRING String);
NTSYSAPINTSTATUSNTAPIRtlHashUnicodeString( _In_ CONST UNICODE_STRING *String, _In_ BOOLEAN CaseInSensitive, _In_ ULONG HashAlgorithm, _Out_ PULONG HashValue);
_IRQL_requires_max_(DISPATCH_LEVEL)_At_(DestinationString->Buffer, _Post_equal_to_(SourceString))_When_(SourceString != NULL,_At_(DestinationString->Length, _Post_equal_to_(_String_length_(SourceString)))_At_(DestinationString->MaximumLength, _Post_equal_to_(DestinationString->Length + sizeof(CHAR))))_When_(SourceString == NULL,_At_(DestinationString->Length, _Post_equal_to_(0))_At_(DestinationString->MaximumLength, _Post_equal_to_(0)))NTSYSAPIVOIDNTAPIRtlInitString( _Out_ PSTRING DestinationString, _In_opt_z_ __drv_aliasesMem PCSTR SourceString);
_IRQL_requires_max_(DISPATCH_LEVEL)_At_(DestinationString->Buffer, _Post_equal_to_(SourceString))_When_(SourceString != NULL,_At_(DestinationString->Length, _Post_equal_to_(_String_length_(SourceString) * sizeof(WCHAR)))_At_(DestinationString->MaximumLength, _Post_equal_to_(DestinationString->Length + sizeof(WCHAR))))_When_(SourceString == NULL,_At_(DestinationString->Length, _Post_equal_to_(0))_At_(DestinationString->MaximumLength, _Post_equal_to_(0)))NTSYSAPIVOIDNTAPIRtlInitUnicodeString( _Out_ PUNICODE_STRING DestinationString, _In_opt_z_ __drv_aliasesMem PCWSTR SourceString);
_IRQL_requires_max_(DISPATCH_LEVEL)NTSYSAPINTSTATUSNTAPIRtlInitUnicodeStringEx( _Out_ PUNICODE_STRING DestinationString, _In_opt_z_ __drv_aliasesMem PCWSTR SourceString);
NTSYSAPIBOOLEANNTAPIRtlIsTextUnicode( _In_ CONST VOID* Buffer, _In_ INT Size, _Inout_opt_ INT* Flags);
_IRQL_requires_max_(PASSIVE_LEVEL)_Must_inspect_result_NTSYSAPIBOOLEANNTAPIRtlPrefixString( _In_ const STRING *String1, _In_ const STRING *String2, _In_ BOOLEAN CaseInsensitive);
_IRQL_requires_max_(PASSIVE_LEVEL)_Must_inspect_result_NTSYSAPIBOOLEANNTAPIRtlPrefixUnicodeString( _In_ PCUNICODE_STRING String1, _In_ PCUNICODE_STRING String2, _In_ BOOLEAN CaseInsensitive);
_IRQL_requires_max_(PASSIVE_LEVEL)NTSYSAPIVOIDNTAPIRtlUpperString( _Inout_ PSTRING DestinationString, _In_ const STRING *SourceString);
_IRQL_requires_max_(PASSIVE_LEVEL)_Must_inspect_result_NTSYSAPILONGNTAPIRtlCompareString( _In_ const STRING *String1, _In_ const STRING *String2, _In_ BOOLEAN CaseInSensitive);
NTSYSAPIVOIDNTAPIRtlCopyString( _Out_ PSTRING DestinationString, _In_opt_ const STRING *SourceString);
_IRQL_requires_max_(PASSIVE_LEVEL)_Must_inspect_result_NTSYSAPIBOOLEANNTAPIRtlEqualString( _In_ const STRING *String1, _In_ const STRING *String2, _In_ BOOLEAN CaseInSensitive);
_IRQL_requires_max_(APC_LEVEL)NTSYSAPINTSTATUSNTAPIRtlAppendStringToString( _Inout_ PSTRING Destination, _In_ const STRING *Source);
_IRQL_requires_max_(PASSIVE_LEVEL)_When_(AllocateDestinationString, _Must_inspect_result_)NTSYSAPINTSTATUSNTAPIRtlUpcaseUnicodeString( _When_(AllocateDestinationString, _Out_ _At_(DestinationString->Buffer, __drv_allocatesMem(Mem))) _When_(!AllocateDestinationString, _Inout_) PUNICODE_STRING DestinationString, _In_ PCUNICODE_STRING SourceString, _In_ BOOLEAN AllocateDestinationString);
_IRQL_requires_max_(PASSIVE_LEVEL)NTSYSAPINTSTATUSNTAPIRtlUnicodeStringToInteger( _In_ PCUNICODE_STRING String, _In_opt_ ULONG Base, _Out_ PULONG Value);
NTSYSAPINTSTATUSNTAPIRtlValidateUnicodeString( _In_ ULONG Flags, _In_ PCUNICODE_STRING String);
#define RTL_SKIP_BUFFER_COPY 0x00000001
NTSYSAPINTSTATUSNTAPIRtlpEnsureBufferSize( _In_ ULONG Flags, _Inout_ PRTL_BUFFER Buffer, _In_ SIZE_T RequiredSize);
#ifdef NTOS_MODE_USER
FORCEINLINEVOIDRtlInitBuffer( _Inout_ PRTL_BUFFER Buffer, _In_ PUCHAR Data, _In_ ULONG DataSize){ Buffer->Buffer = Buffer->StaticBuffer = Data; Buffer->Size = Buffer->StaticSize = DataSize; Buffer->ReservedForAllocatedSize = 0; Buffer->ReservedForIMalloc = NULL;}
FORCEINLINENTSTATUSRtlEnsureBufferSize( _In_ ULONG Flags, _Inout_ PRTL_BUFFER Buffer, _In_ ULONG RequiredSize){ if (Buffer && RequiredSize <= Buffer->Size) return STATUS_SUCCESS; return RtlpEnsureBufferSize(Flags, Buffer, RequiredSize);}
FORCEINLINEVOIDRtlFreeBuffer( _Inout_ PRTL_BUFFER Buffer){ if (Buffer->Buffer != Buffer->StaticBuffer && Buffer->Buffer) RtlFreeHeap(RtlGetProcessHeap(), 0, Buffer->Buffer); Buffer->Buffer = Buffer->StaticBuffer; Buffer->Size = Buffer->StaticSize;}
NTSYSAPIVOIDNTAPIRtlRunEncodeUnicodeString( _Inout_ PUCHAR Hash, _Inout_ PUNICODE_STRING String);
NTSYSAPIVOIDNTAPIRtlRunDecodeUnicodeString( _In_ UCHAR Hash, _Inout_ PUNICODE_STRING String);
#endif /* NTOS_MODE_USER */
//// Ansi String Functions//_IRQL_requires_max_(PASSIVE_LEVEL)NTSYSAPIVOIDNTAPIRtlFreeAnsiString( _Inout_ _At_(AnsiString->Buffer, __drv_freesMem(Mem)) PANSI_STRING AnsiString);
_IRQL_requires_max_(DISPATCH_LEVEL)NTSYSAPIVOIDNTAPIRtlInitAnsiString( _Out_ PANSI_STRING DestinationString, _In_opt_z_ __drv_aliasesMem PCSZ SourceString);
_IRQL_requires_max_(DISPATCH_LEVEL)NTSYSAPINTSTATUSNTAPIRtlInitAnsiStringEx( _Out_ PANSI_STRING DestinationString, _In_opt_z_ __drv_aliasesMem PCSZ SourceString);
//// OEM String Functions//_IRQL_requires_max_(PASSIVE_LEVEL)NTSYSAPIVOIDNTAPIRtlFreeOemString( _Inout_ _At_(OemString->Buffer, __drv_freesMem(Mem)) POEM_STRING OemString);
//// MultiByte->Unicode String Functions//_IRQL_requires_max_(PASSIVE_LEVEL)NTSYSAPINTSTATUSNTAPIRtlMultiByteToUnicodeN( _Out_writes_bytes_to_(MaxBytesInUnicodeString, *BytesInUnicodeString) PWCH UnicodeString, _In_ ULONG MaxBytesInUnicodeString, _Out_opt_ PULONG BytesInUnicodeString, _In_reads_bytes_(BytesInMultiByteString) const CHAR *MultiByteString, _In_ ULONG BytesInMultiByteString);
_IRQL_requires_max_(PASSIVE_LEVEL)NTSYSAPINTSTATUSNTAPIRtlMultiByteToUnicodeSize( _Out_ PULONG BytesInUnicodeString, _In_reads_bytes_(BytesInMultiByteString) const CHAR *MultiByteString, _In_ ULONG BytesInMultiByteString);
//// Atom Functions//NTSYSAPINTSTATUSNTAPIRtlAddAtomToAtomTable( _In_ PRTL_ATOM_TABLE AtomTable, _In_ PWSTR AtomName, _Out_ PRTL_ATOM Atom);
NTSYSAPINTSTATUSNTAPIRtlCreateAtomTable( _In_ ULONG TableSize, _Inout_ PRTL_ATOM_TABLE *AtomTable);
NTSYSAPINTSTATUSNTAPIRtlDeleteAtomFromAtomTable( _In_ PRTL_ATOM_TABLE AtomTable, _In_ RTL_ATOM Atom);
NTSYSAPINTSTATUSNTAPIRtlDestroyAtomTable(IN PRTL_ATOM_TABLE AtomTable);
NTSYSAPINTSTATUSNTAPIRtlQueryAtomInAtomTable( _In_ PRTL_ATOM_TABLE AtomTable, _In_ RTL_ATOM Atom, _Out_opt_ PULONG RefCount, _Out_opt_ PULONG PinCount, _Out_opt_z_bytecap_(*NameLength) PWSTR AtomName, _Inout_opt_ PULONG NameLength);
NTSYSAPINTSTATUSNTAPIRtlPinAtomInAtomTable( _In_ PRTL_ATOM_TABLE AtomTable, _In_ RTL_ATOM Atom);
NTSYSAPINTSTATUSNTAPIRtlLookupAtomInAtomTable( _In_ PRTL_ATOM_TABLE AtomTable, _In_ PWSTR AtomName, _Out_ PRTL_ATOM Atom);
//// Process Management Functions//NTSYSAPIPPEBNTAPIRtlGetCurrentPeb( VOID);
NTSYSAPIVOIDNTAPIRtlAcquirePebLock(VOID);
NTSYSAPINTSTATUSNTAPIRtlCreateProcessParameters ( _Out_ PRTL_USER_PROCESS_PARAMETERS *ProcessParameters, _In_ PUNICODE_STRING ImagePathName, _In_opt_ PUNICODE_STRING DllPath, _In_opt_ PUNICODE_STRING CurrentDirectory, _In_opt_ PUNICODE_STRING CommandLine, _In_opt_ PWSTR Environment, _In_opt_ PUNICODE_STRING WindowTitle, _In_opt_ PUNICODE_STRING DesktopInfo, _In_opt_ PUNICODE_STRING ShellInfo, _In_opt_ PUNICODE_STRING RuntimeInfo);
NTSYSAPINTSTATUSNTAPIRtlCreateUserProcess( _In_ PUNICODE_STRING ImageFileName, _In_ ULONG Attributes, _In_ PRTL_USER_PROCESS_PARAMETERS ProcessParameters, _In_opt_ PSECURITY_DESCRIPTOR ProcessSecutityDescriptor, _In_opt_ PSECURITY_DESCRIPTOR ThreadSecurityDescriptor, _In_opt_ HANDLE ParentProcess, _In_ BOOLEAN CurrentDirectory, _In_opt_ HANDLE DebugPort, _In_opt_ HANDLE ExceptionPort, _Out_ PRTL_USER_PROCESS_INFORMATION ProcessInfo);
#if (NTDDI_VERSION >= NTDDI_WIN7)NTSYSAPINTSTATUSNTAPIRtlCreateUserThread( _In_ PVOID ThreadContext, _Out_ HANDLE *OutThreadHandle, _Reserved_ PVOID Reserved1, _Reserved_ PVOID Reserved2, _Reserved_ PVOID Reserved3, _Reserved_ PVOID Reserved4, _Reserved_ PVOID Reserved5, _Reserved_ PVOID Reserved6, _Reserved_ PVOID Reserved7, _Reserved_ PVOID Reserved8);#elseNTSYSAPINTSTATUSNTAPIRtlCreateUserThread( _In_ HANDLE ProcessHandle, _In_opt_ PSECURITY_DESCRIPTOR SecurityDescriptor, _In_ BOOLEAN CreateSuspended, _In_ ULONG StackZeroBits, _In_ SIZE_T StackReserve, _In_ SIZE_T StackCommit, _In_ PTHREAD_START_ROUTINE StartAddress, _In_ PVOID Parameter, _Out_opt_ PHANDLE ThreadHandle, _Out_opt_ PCLIENT_ID ClientId);#endif
NTSYSAPIPRTL_USER_PROCESS_PARAMETERSNTAPIRtlDeNormalizeProcessParams( _In_ PRTL_USER_PROCESS_PARAMETERS ProcessParameters);
NTSYSAPINTSTATUSNTAPIRtlDestroyProcessParameters( _In_ PRTL_USER_PROCESS_PARAMETERS ProcessParameters);
NTSYSAPIVOIDNTAPIRtlExitUserThread( _In_ NTSTATUS Status);
NTSYSAPIVOIDNTAPIRtlInitializeContext( _In_ HANDLE ProcessHandle, _Out_ PCONTEXT ThreadContext, _In_opt_ PVOID ThreadStartParam, _In_ PTHREAD_START_ROUTINE ThreadStartAddress, _In_ PINITIAL_TEB InitialTeb);
#ifdef _M_AMD64typedef struct _WOW64_CONTEXT *PWOW64_CONTEXT;
NTSYSAPINTSTATUSNTAPIRtlWow64GetThreadContext( _In_ HANDLE ThreadHandle, _Inout_ PWOW64_CONTEXT ThreadContext);
NTSYSAPINTSTATUSNTAPIRtlWow64SetThreadContext( _In_ HANDLE ThreadHandle, _In_ PWOW64_CONTEXT ThreadContext);#endif
NTSYSAPIBOOLEANNTAPIRtlIsThreadWithinLoaderCallout(VOID);
NTSYSAPIPRTL_USER_PROCESS_PARAMETERSNTAPIRtlNormalizeProcessParams( _In_ PRTL_USER_PROCESS_PARAMETERS ProcessParameters);
NTSYSAPIVOIDNTAPIRtlReleasePebLock(VOID);
NTSYSAPINTSTATUSNTAPIRtlRemoteCall( _In_ HANDLE Process, _In_ HANDLE Thread, _In_ PVOID CallSite, _In_ ULONG ArgumentCount, _In_ PULONG Arguments, _In_ BOOLEAN PassContext, _In_ BOOLEAN AlreadySuspended);
NTSYSAPINTSTATUS__cdeclRtlSetProcessIsCritical( _In_ BOOLEAN NewValue, _Out_opt_ PBOOLEAN OldValue, _In_ BOOLEAN NeedBreaks);
NTSYSAPINTSTATUS__cdeclRtlSetThreadIsCritical( _In_ BOOLEAN NewValue, _Out_opt_ PBOOLEAN OldValue, _In_ BOOLEAN NeedBreaks);
NTSYSAPIULONGNTAPIRtlGetCurrentProcessorNumber( VOID);
//// Thread Pool Functions////NTSTATUSNTAPIRtlSetThreadPoolStartFunc( _In_ PRTL_START_POOL_THREAD StartPoolThread, _In_ PRTL_EXIT_POOL_THREAD ExitPoolThread);
NTSYSAPINTSTATUSNTAPIRtlDeregisterWaitEx( _In_ HANDLE hWaitHandle, _In_opt_ HANDLE hCompletionEvent);
NTSYSAPINTSTATUSNTAPIRtlDeregisterWait( _In_ HANDLE hWaitHandle);
NTSYSAPINTSTATUSNTAPIRtlQueueWorkItem( _In_ WORKERCALLBACKFUNC Function, _In_opt_ PVOID Context, _In_ ULONG Flags);
NTSYSAPINTSTATUSNTAPIRtlSetIoCompletionCallback( _In_ HANDLE FileHandle, _In_ PIO_APC_ROUTINE Callback, _In_ ULONG Flags);
NTSYSAPINTSTATUSNTAPIRtlRegisterWait( _In_ PHANDLE phNewWaitObject, _In_ HANDLE hObject, _In_ WAITORTIMERCALLBACKFUNC Callback, _In_ PVOID pvContext, _In_ ULONG ulMilliseconds, _In_ ULONG ulFlags);
//// Environment/Path Functions//NTSYSAPINTSTATUSNTAPIRtlCreateEnvironment( _In_ BOOLEAN Inherit, _Out_ PWSTR *Environment);
NTSYSAPINTSTATUSNTAPIRtlComputePrivatizedDllName_U( _In_ PUNICODE_STRING DllName, _Inout_ PUNICODE_STRING RealName, _Inout_ PUNICODE_STRING LocalName);
NTSYSAPIVOIDNTAPIRtlDestroyEnvironment( _In_ PWSTR Environment);
NTSYSAPIBOOLEANNTAPIRtlDoesFileExists_U( _In_ PCWSTR FileName);
NTSYSAPIRTL_PATH_TYPENTAPIRtlDetermineDosPathNameType_U( _In_ PCWSTR Path);
NTSYSAPIULONGNTAPIRtlDosSearchPath_U( _In_ PCWSTR Path, _In_ PCWSTR FileName, _In_ PCWSTR Extension, _In_ ULONG BufferSize, _Out_ PWSTR Buffer, _Out_ PWSTR *PartName);
NTSYSAPINTSTATUSNTAPIRtlDosSearchPath_Ustr( _In_ ULONG Flags, _In_ PUNICODE_STRING PathString, _In_ PUNICODE_STRING FileNameString, _In_ PUNICODE_STRING ExtensionString, _In_ PUNICODE_STRING CallerBuffer, _Inout_opt_ PUNICODE_STRING DynamicString, _Out_opt_ PUNICODE_STRING* FullNameOut, _Out_opt_ PSIZE_T FilePartSize, _Out_opt_ PSIZE_T LengthNeeded);
NTSYSAPIBOOLEANNTAPIRtlDosPathNameToNtPathName_U( _In_opt_z_ PCWSTR DosPathName, _Out_ PUNICODE_STRING NtPathName, _Out_opt_ PCWSTR *NtFileNamePart, _Out_opt_ PRTL_RELATIVE_NAME_U DirectoryInfo);
#define RTL_UNCHANGED_UNK_PATH 1#define RTL_CONVERTED_UNC_PATH 2#define RTL_CONVERTED_NT_PATH 3#define RTL_UNCHANGED_DOS_PATH 4
NTSYSAPINTSTATUSNTAPIRtlNtPathNameToDosPathName( _In_ ULONG Flags, _Inout_ PRTL_UNICODE_STRING_BUFFER Path, _Out_opt_ PULONG PathType, _Out_opt_ PULONG Unknown);
NTSYSAPIBOOLEANNTAPIRtlDosPathNameToRelativeNtPathName_U( _In_ PCWSTR DosName, _Out_ PUNICODE_STRING NtName, _Out_ PCWSTR *PartName, _Out_ PRTL_RELATIVE_NAME_U RelativeName);
_At_(Destination->Buffer, _Out_bytecap_(Destination->MaximumLength))NTSYSAPINTSTATUSNTAPIRtlExpandEnvironmentStrings_U( _In_z_ PWSTR Environment, _In_ PUNICODE_STRING Source, _Inout_ PUNICODE_STRING Destination, _Out_ PULONG Length);
NTSYSAPIULONGNTAPIRtlGetCurrentDirectory_U( _In_ ULONG MaximumLength, _Out_bytecap_(MaximumLength) PWSTR Buffer);
NTSYSAPIULONGNTAPIRtlGetFullPathName_U( _In_ PCWSTR FileName, _In_ ULONG Size, _Out_z_bytecap_(Size) PWSTR Buffer, _Out_opt_ PWSTR *ShortName);
#if (NTDDI_VERSION >= NTDDI_WIN7)NTSYSAPINTSTATUSNTAPIRtlGetFullPathName_UEx( _In_ PWSTR FileName, _In_ ULONG BufferLength, _Out_ PWSTR Buffer, _Out_opt_ PWSTR *FilePart, _Out_opt_ RTL_PATH_TYPE *InputPathType );#endif
NTSTATUSNTAPIRtlGetFullPathName_UstrEx( _In_ PUNICODE_STRING FileName, _In_opt_ PUNICODE_STRING StaticString, _In_opt_ PUNICODE_STRING DynamicString, _Out_opt_ PUNICODE_STRING *StringUsed, _Out_opt_ PSIZE_T FilePartSize, _Out_opt_ PBOOLEAN NameInvalid, _Out_ RTL_PATH_TYPE* PathType, _Out_opt_ PSIZE_T LengthNeeded);
NTSYSAPINTSTATUSNTAPIRtlGetLengthWithoutTrailingPathSeperators( _Reserved_ ULONG Flags, _In_ PCUNICODE_STRING PathString, _Out_ PULONG Length);
NTSYSAPIULONGNTAPIRtlGetLongestNtPathLength( VOID);
NTSYSAPIULONGNTAPIRtlIsDosDeviceName_U( _In_ PCWSTR Name);
NTSYSAPIULONGNTAPIRtlIsDosDeviceName_Ustr( _In_ PCUNICODE_STRING Name);
_IRQL_requires_max_(PASSIVE_LEVEL)_Must_inspect_result_NTSYSAPIBOOLEANNTAPIRtlIsNameLegalDOS8Dot3( _In_ PCUNICODE_STRING Name, _Inout_opt_ POEM_STRING OemName, _Out_opt_ PBOOLEAN NameContainsSpaces);
NTSYSAPINTSTATUSNTAPIRtlQueryEnvironmentVariable_U( _In_opt_ PWSTR Environment, _In_ PCUNICODE_STRING Name, _Out_ PUNICODE_STRING Value);
VOIDNTAPIRtlReleaseRelativeName( _In_ PRTL_RELATIVE_NAME_U RelativeName);
NTSYSAPINTSTATUSNTAPIRtlSetCurrentDirectory_U( _In_ PUNICODE_STRING name);
NTSYSAPINTSTATUSNTAPIRtlSetEnvironmentVariable( _In_z_ PWSTR *Environment, _In_ PUNICODE_STRING Name, _In_ PUNICODE_STRING Value);
//// Critical Section/Resource Functions//NTSYSAPINTSTATUSNTAPIRtlDeleteCriticalSection ( _In_ PRTL_CRITICAL_SECTION CriticalSection);
NTSYSAPINTSTATUSNTAPIRtlEnterCriticalSection( _In_ PRTL_CRITICAL_SECTION CriticalSection);
NTSYSAPINTSTATUSNTAPIRtlInitializeCriticalSection( _In_ PRTL_CRITICAL_SECTION CriticalSection);
NTSYSAPINTSTATUSNTAPIRtlInitializeCriticalSectionAndSpinCount( _In_ PRTL_CRITICAL_SECTION CriticalSection, _In_ ULONG SpinCount);
NTSYSAPILOGICALNTAPIRtlIsCriticalSectionLocked( _In_ PRTL_CRITICAL_SECTION CriticalSection);
NTSYSAPILOGICALNTAPIRtlIsCriticalSectionLockedByThread( _In_ PRTL_CRITICAL_SECTION CriticalSection);
NTSYSAPINTSTATUSNTAPIRtlLeaveCriticalSection( _In_ PRTL_CRITICAL_SECTION CriticalSection);
NTSYSAPILOGICALNTAPIRtlTryEnterCriticalSection( _In_ PRTL_CRITICAL_SECTION CriticalSection);
NTSYSAPIVOIDNTAPIRtlpUnWaitCriticalSection( _In_ PRTL_CRITICAL_SECTION CriticalSection);
NTSYSAPINTSTATUSNTAPIRtlpWaitForCriticalSection( _In_ PRTL_CRITICAL_SECTION CriticalSection);
NTSYSAPIBOOLEANNTAPIRtlAcquireResourceExclusive( _In_ PRTL_RESOURCE Resource, _In_ BOOLEAN Wait);
NTSYSAPIBOOLEANNTAPIRtlAcquireResourceShared( _In_ PRTL_RESOURCE Resource, _In_ BOOLEAN Wait);
NTSYSAPIVOIDNTAPIRtlConvertExclusiveToShared( _In_ PRTL_RESOURCE Resource);
NTSYSAPIVOIDNTAPIRtlConvertSharedToExclusive( _In_ PRTL_RESOURCE Resource);
NTSYSAPIVOIDNTAPIRtlDeleteResource( _In_ PRTL_RESOURCE Resource);
NTSYSAPIVOIDNTAPIRtlDumpResource( _In_ PRTL_RESOURCE Resource);
NTSYSAPIVOIDNTAPIRtlInitializeResource( _In_ PRTL_RESOURCE Resource);
NTSYSAPIVOIDNTAPIRtlReleaseResource( _In_ PRTL_RESOURCE Resource);
//// Compression Functions//NTSYSAPI //NT_RTL_COMPRESS_APINTSTATUSNTAPIRtlCompressBuffer( _In_ USHORT CompressionFormatAndEngine, _In_reads_bytes_(UncompressedBufferSize) PUCHAR UncompressedBuffer, _In_ ULONG UncompressedBufferSize, _Out_writes_bytes_to_(CompressedBufferSize, *FinalCompressedSize) PUCHAR CompressedBuffer, _In_ ULONG CompressedBufferSize, _In_ ULONG UncompressedChunkSize, _Out_ PULONG FinalCompressedSize, _In_ PVOID WorkSpace);
_IRQL_requires_max_(APC_LEVEL)NTSYSAPI //NT_RTL_COMPRESS_APINTSTATUSNTAPIRtlDecompressBuffer( _In_ USHORT CompressionFormat, _Out_writes_bytes_to_(UncompressedBufferSize, *FinalUncompressedSize) PUCHAR UncompressedBuffer, _In_ ULONG UncompressedBufferSize, _In_reads_bytes_(CompressedBufferSize) PUCHAR CompressedBuffer, _In_ ULONG CompressedBufferSize, _Out_ PULONG FinalUncompressedSize);
NTSYSAPINTSTATUSNTAPIRtlGetCompressionWorkSpaceSize( _In_ USHORT CompressionFormatAndEngine, _Out_ PULONG CompressBufferWorkSpaceSize, _Out_ PULONG CompressFragmentWorkSpaceSize);
//// Frame Functions//NTSYSAPIVOIDNTAPIRtlPopFrame( _In_ PTEB_ACTIVE_FRAME Frame);
NTSYSAPIVOIDNTAPIRtlPushFrame( _In_ PTEB_ACTIVE_FRAME Frame);
NTSYSAPIPTEB_ACTIVE_FRAMENTAPIRtlGetFrame( VOID);
//// Debug Info Functions//NTSYSAPIPRTL_DEBUG_INFORMATIONNTAPIRtlCreateQueryDebugBuffer( _In_ ULONG Size, _In_ BOOLEAN EventPair);
NTSYSAPINTSTATUSNTAPIRtlDestroyQueryDebugBuffer(IN PRTL_DEBUG_INFORMATION DebugBuffer);
NTSYSAPINTSTATUSNTAPIRtlQueryProcessDebugInformation( _In_ ULONG ProcessId, _In_ ULONG DebugInfoClassMask, _Inout_ PRTL_DEBUG_INFORMATION DebugBuffer);
//// Bitmap Functions//#ifdef NTOS_MODE_USER
NTSYSAPIBOOLEANNTAPIRtlAreBitsClear( _In_ PRTL_BITMAP BitMapHeader, _In_ ULONG StartingIndex, _In_ ULONG Length);
NTSYSAPIBOOLEANNTAPIRtlAreBitsSet( _In_ PRTL_BITMAP BitMapHeader, _In_ ULONG StartingIndex, _In_ ULONG Length);
NTSYSAPIVOIDNTAPIRtlClearAllBits( _In_ PRTL_BITMAP BitMapHeader);
NTSYSAPIVOIDNTAPIRtlClearBit( _In_ PRTL_BITMAP BitMapHeader, _In_range_(<, BitMapHeader->SizeOfBitMap) ULONG BitNumber);
NTSYSAPIVOIDNTAPIRtlClearBits( _In_ PRTL_BITMAP BitMapHeader, _In_range_(0, BitMapHeader->SizeOfBitMap - NumberToClear) ULONG StartingIndex, _In_range_(0, BitMapHeader->SizeOfBitMap - StartingIndex) ULONG NumberToClear);
NTSYSAPIULONGNTAPIRtlFindClearBits( _In_ PRTL_BITMAP BitMapHeader, _In_ ULONG NumberToFind, _In_ ULONG HintIndex);
NTSYSAPIULONGNTAPIRtlFindClearBitsAndSet( _In_ PRTL_BITMAP BitMapHeader, _In_ ULONG NumberToFind, _In_ ULONG HintIndex);
NTSYSAPIULONGNTAPIRtlFindFirstRunClear( _In_ PRTL_BITMAP BitMapHeader, _Out_ PULONG StartingIndex);
NTSYSAPIULONGNTAPIRtlFindClearRuns( _In_ PRTL_BITMAP BitMapHeader, _Out_writes_to_(SizeOfRunArray, return) PRTL_BITMAP_RUN RunArray, _In_range_(>, 0) ULONG SizeOfRunArray, _In_ BOOLEAN LocateLongestRuns);
NTSYSAPIULONGNTAPIRtlFindLastBackwardRunClear( _In_ PRTL_BITMAP BitMapHeader, _In_ ULONG FromIndex, _Out_ PULONG StartingRunIndex);
NTSYSAPICCHARNTAPIRtlFindLeastSignificantBit( _In_ ULONGLONG Value);
NTSYSAPIULONGNTAPIRtlFindLongestRunClear( _In_ PRTL_BITMAP BitMapHeader, _Out_ PULONG StartingIndex);
NTSYSAPICCHARNTAPIRtlFindMostSignificantBit( _In_ ULONGLONG Value);
NTSYSAPIULONGNTAPIRtlFindNextForwardRunClear( _In_ PRTL_BITMAP BitMapHeader, _In_ ULONG FromIndex, _Out_ PULONG StartingRunIndex);
NTSYSAPIULONGNTAPIRtlFindNextForwardRunSet( _In_ PRTL_BITMAP BitMapHeader, _In_ ULONG FromIndex, _Out_ PULONG StartingRunIndex);
NTSYSAPIULONGNTAPIRtlFindSetBits( _In_ PRTL_BITMAP BitMapHeader, _In_ ULONG NumberToFind, _In_ ULONG HintIndex);
NTSYSAPIULONGNTAPIRtlFindSetBitsAndClear( _In_ PRTL_BITMAP BitMapHeader, _In_ ULONG NumberToFind, _In_ ULONG HintIndex);
#ifdef __REACTOS__ // ReactOS improvement_At_(BitMapHeader->SizeOfBitMap, _Post_equal_to_(SizeOfBitMap))_At_(BitMapHeader->Buffer, _Post_equal_to_(BitMapBuffer))#endifNTSYSAPIVOIDNTAPIRtlInitializeBitMap( _Out_ PRTL_BITMAP BitMapHeader, _In_opt_ __drv_aliasesMem PULONG BitMapBuffer, _In_opt_ ULONG SizeOfBitMap);
NTSYSAPIULONGNTAPIRtlNumberOfClearBits( _In_ PRTL_BITMAP BitMapHeader);
NTSYSAPIULONGNTAPIRtlNumberOfSetBits( _In_ PRTL_BITMAP BitMapHeader);
NTSYSAPIVOIDNTAPIRtlSetBit( _In_ PRTL_BITMAP BitMapHeader, _In_range_(<, BitMapHeader->SizeOfBitMap) ULONG BitNumber);
NTSYSAPIVOIDNTAPIRtlSetBits( _In_ PRTL_BITMAP BitMapHeader, _In_range_(0, BitMapHeader->SizeOfBitMap - NumberToSet) ULONG StartingIndex, _In_range_(0, BitMapHeader->SizeOfBitMap - StartingIndex) ULONG NumberToSet);
NTSYSAPIVOIDNTAPIRtlSetAllBits( _In_ PRTL_BITMAP BitMapHeader);
_Must_inspect_result_NTSYSAPIBOOLEANNTAPIRtlTestBit( _In_ PRTL_BITMAP BitMapHeader, _In_range_(<, BitMapHeader->SizeOfBitMap) ULONG BitNumber);
#if defined(_M_AMD64)_Must_inspect_result_FORCEINLINEBOOLEANRtlCheckBit( _In_ PRTL_BITMAP BitMapHeader, _In_range_(<, BitMapHeader->SizeOfBitMap) ULONG BitPosition){ return BitTest64((LONG64 CONST*)BitMapHeader->Buffer, (LONG64)BitPosition);}#else#define RtlCheckBit(BMH,BP) (((((PLONG)(BMH)->Buffer)[(BP)/32]) >> ((BP)%32)) & 0x1)#endif /* defined(_M_AMD64) */
#endif // NTOS_MODE_USER
//// Timer Functions//NTSYSAPINTSTATUSNTAPIRtlCreateTimer( _In_ HANDLE TimerQueue, _In_ PHANDLE phNewTimer, _In_ WAITORTIMERCALLBACKFUNC Callback, _In_ PVOID Parameter, _In_ ULONG DueTime, _In_ ULONG Period, _In_ ULONG Flags);
NTSYSAPINTSTATUSNTAPIRtlCreateTimerQueue(PHANDLE TimerQueue);
NTSYSAPINTSTATUSNTAPIRtlDeleteTimer( _In_ HANDLE TimerQueue, _In_ HANDLE Timer, _In_ HANDLE CompletionEvent);
NTSYSAPINTSTATUSNTAPIRtlUpdateTimer( _In_ HANDLE TimerQueue, _In_ HANDLE Timer, _In_ ULONG DueTime, _In_ ULONG Period);
NTSYSAPINTSTATUSNTAPIRtlDeleteTimerQueueEx( _In_ HANDLE TimerQueue, _In_opt_ HANDLE CompletionEvent);
NTSYSAPINTSTATUSNTAPIRtlDeleteTimerQueue(HANDLE TimerQueue);
//// SList functions//PSLIST_ENTRYFASTCALLInterlockedPushListSList( _Inout_ PSLIST_HEADER ListHead, _Inout_ __drv_aliasesMem PSLIST_ENTRY List, _Inout_ PSLIST_ENTRY ListEnd, _In_ ULONG Count);
//// Range List functions//NTSYSAPIVOIDNTAPIRtlInitializeRangeList( _Out_ PRTL_RANGE_LIST RangeList);
NTSYSAPIVOIDNTAPIRtlFreeRangeList( _In_ PRTL_RANGE_LIST RangeList);
NTSYSAPINTSTATUSNTAPIRtlCopyRangeList( _Out_ PRTL_RANGE_LIST CopyRangeList, _In_ PRTL_RANGE_LIST RangeList);
NTSYSAPINTSTATUSNTAPIRtlMergeRangeLists( _Out_ PRTL_RANGE_LIST MergedRangeList, _In_ PRTL_RANGE_LIST RangeList1, _In_ PRTL_RANGE_LIST RangeList2, _In_ ULONG Flags);
NTSYSAPINTSTATUSNTAPIRtlInvertRangeList( _Out_ PRTL_RANGE_LIST InvertedRangeList, _In_ PRTL_RANGE_LIST RangeList);
NTSYSAPINTSTATUSNTAPIRtlAddRange( _Inout_ PRTL_RANGE_LIST RangeList, _In_ ULONGLONG Start, _In_ ULONGLONG End, _In_ UCHAR Attributes, _In_ ULONG Flags, _In_opt_ PVOID UserData, _In_opt_ PVOID Owner);
NTSYSAPINTSTATUSNTAPIRtlDeleteRange( _Inout_ PRTL_RANGE_LIST RangeList, _In_ ULONGLONG Start, _In_ ULONGLONG End, _In_ PVOID Owner);
NTSYSAPINTSTATUSNTAPIRtlDeleteOwnersRanges( _Inout_ PRTL_RANGE_LIST RangeList, _In_ _Maybenull_ PVOID Owner);
NTSYSAPINTSTATUSNTAPIRtlFindRange( _In_ PRTL_RANGE_LIST RangeList, _In_ ULONGLONG Minimum, _In_ ULONGLONG Maximum, _In_ ULONG Length, _In_ ULONG Alignment, _In_ ULONG Flags, _In_ UCHAR AttributeAvailableMask, _In_opt_ PVOID Context, _In_opt_ PRTL_CONFLICT_RANGE_CALLBACK Callback, _Out_ PULONGLONG Start);
NTSYSAPINTSTATUSNTAPIRtlIsRangeAvailable( _In_ PRTL_RANGE_LIST RangeList, _In_ ULONGLONG Start, _In_ ULONGLONG End, _In_ ULONG Flags, _In_ UCHAR AttributeAvailableMask, _In_opt_ PVOID Context, _In_opt_ PRTL_CONFLICT_RANGE_CALLBACK Callback, _Out_ PBOOLEAN Available);
NTSYSAPINTSTATUSNTAPIRtlGetFirstRange( _In_ PRTL_RANGE_LIST RangeList, _Out_ PRTL_RANGE_LIST_ITERATOR Iterator, _Outptr_ PRTL_RANGE *Range);
NTSYSAPINTSTATUSNTAPIRtlGetNextRange( _Inout_ PRTL_RANGE_LIST_ITERATOR Iterator, _Outptr_ PRTL_RANGE *Range, _In_ BOOLEAN MoveForwards);
//// Debug Functions//ULONG__cdeclDbgPrint( _In_z_ _Printf_format_string_ PCSTR Format, ...);
NTSYSAPIULONG__cdeclDbgPrintEx( _In_ ULONG ComponentId, _In_ ULONG Level, _In_z_ _Printf_format_string_ PCSTR Format, ...);
NTSYSAPIULONGNTAPIDbgPrompt( _In_z_ PCCH Prompt, _Out_writes_bytes_(MaximumResponseLength) PCH Response, _In_ ULONG MaximumResponseLength);
#undef DbgBreakPointVOIDNTAPIDbgBreakPoint( VOID);
VOIDNTAPIDbgLoadImageSymbols( _In_ PSTRING Name, _In_ PVOID Base, _In_ ULONG_PTR ProcessId);
VOIDNTAPIDbgUnLoadImageSymbols( _In_ PSTRING Name, _In_ PVOID Base, _In_ ULONG_PTR ProcessId);
VOIDNTAPIDbgCommandString( _In_ PCCH Name, _In_ PCCH Command);
//// Handle Table Functions//NTSYSAPIPRTL_HANDLE_TABLE_ENTRYNTAPIRtlAllocateHandle( _In_ PRTL_HANDLE_TABLE HandleTable, _Inout_ PULONG Index);
NTSYSAPIVOIDNTAPIRtlDestroyHandleTable( _Inout_ PRTL_HANDLE_TABLE HandleTable);
NTSYSAPIBOOLEANNTAPIRtlFreeHandle( _In_ PRTL_HANDLE_TABLE HandleTable, _In_ PRTL_HANDLE_TABLE_ENTRY Handle);
NTSYSAPIVOIDNTAPIRtlInitializeHandleTable( _In_ ULONG TableSize, _In_ ULONG HandleSize, _In_ PRTL_HANDLE_TABLE HandleTable);
NTSYSAPIBOOLEANNTAPIRtlIsValidHandle( _In_ PRTL_HANDLE_TABLE HandleTable, _In_ PRTL_HANDLE_TABLE_ENTRY Handle);
_Success_(return!=FALSE)NTSYSAPIBOOLEANNTAPIRtlIsValidIndexHandle( _In_ PRTL_HANDLE_TABLE HandleTable, _In_ ULONG Index, _Out_ PRTL_HANDLE_TABLE_ENTRY *Handle);
//// PE Functions//NTSYSAPINTSTATUSNTAPIRtlFindMessage( _In_ PVOID BaseAddress, _In_ ULONG Type, _In_ ULONG Language, _In_ ULONG MessageId, _Out_ PMESSAGE_RESOURCE_ENTRY *MessageResourceEntry);
NTSYSAPIULONGNTAPIRtlGetNtGlobalFlags(VOID);
_Success_(return!=NULL)NTSYSAPIPVOIDNTAPIRtlImageDirectoryEntryToData( _In_ PVOID BaseAddress, _In_ BOOLEAN MappedAsImage, _In_ USHORT Directory, _Out_ PULONG Size);
NTSYSAPIPVOIDNTAPIRtlImageRvaToVa( _In_ PIMAGE_NT_HEADERS NtHeader, _In_ PVOID BaseAddress, _In_ ULONG Rva, _Inout_opt_ PIMAGE_SECTION_HEADER *SectionHeader);
NTSYSAPIPIMAGE_NT_HEADERSNTAPIRtlImageNtHeader( _In_ PVOID BaseAddress);
NTSYSAPINTSTATUSNTAPIRtlImageNtHeaderEx( _In_ ULONG Flags, _In_ PVOID BaseAddress, _In_ ULONGLONG Size, _Out_ PIMAGE_NT_HEADERS *NtHeader);
NTSYSAPIPIMAGE_SECTION_HEADERNTAPIRtlImageRvaToSection( _In_ PIMAGE_NT_HEADERS NtHeader, _In_ PVOID BaseAddress, _In_ ULONG Rva);
ULONGNTAPILdrRelocateImageWithBias( _In_ PVOID BaseAddress, _In_ LONGLONG AdditionalBias, _In_opt_ PCSTR LoaderName, _In_ ULONG Success, _In_ ULONG Conflict, _In_ ULONG Invalid);
//// Activation Context Functions//#ifdef NTOS_MODE_USERNTSYSAPINTSTATUSNTAPIRtlActivateActivationContextEx( _In_ ULONG Flags, _In_ PTEB Teb, _In_ PVOID Context, _Out_ PULONG_PTR Cookie);
NTSYSAPINTSTATUSNTAPIRtlActivateActivationContext( _In_ ULONG Flags, _In_ HANDLE Handle, _Out_ PULONG_PTR Cookie);
NTSYSAPIVOIDNTAPIRtlAddRefActivationContext( _In_ PVOID Context);
NTSYSAPIPRTL_ACTIVATION_CONTEXT_STACK_FRAMEFASTCALLRtlActivateActivationContextUnsafeFast( _In_ PRTL_CALLER_ALLOCATED_ACTIVATION_CONTEXT_STACK_FRAME_EXTENDED Frame, _In_ PVOID Context);
NTSYSAPINTSTATUSNTAPIRtlAllocateActivationContextStack( _In_ PACTIVATION_CONTEXT_STACK *Stack);
NTSYSAPINTSTATUSNTAPIRtlCreateActivationContext( _In_ ULONG Flags, _In_ PACTIVATION_CONTEXT_DATA ActivationContextData, _In_ ULONG ExtraBytes, _In_ PVOID NotificationRoutine, _In_ PVOID NotificationContext, _Out_ PACTIVATION_CONTEXT *ActCtx);
NTSYSAPINTSTATUSNTAPIRtlGetActiveActivationContext( _In_ PVOID *Context);
NTSYSAPIVOIDNTAPIRtlReleaseActivationContext( _In_ HANDLE handle);
NTSYSAPINTSTATUSNTAPIRtlDeactivateActivationContext( _In_ ULONG dwFlags, _In_ ULONG_PTR ulCookie);
NTSYSAPIVOIDNTAPIRtlFreeActivationContextStack( _In_ PACTIVATION_CONTEXT_STACK Stack);
NTSYSAPIVOIDNTAPIRtlFreeThreadActivationContextStack(VOID);
NTSYSAPIPRTL_ACTIVATION_CONTEXT_STACK_FRAMEFASTCALLRtlDeactivateActivationContextUnsafeFast( _In_ PRTL_CALLER_ALLOCATED_ACTIVATION_CONTEXT_STACK_FRAME_EXTENDED Frame);
NTSYSAPINTSTATUSNTAPIRtlDosApplyFileIsolationRedirection_Ustr( _In_ ULONG Flags, _In_ PUNICODE_STRING OriginalName, _In_ PUNICODE_STRING Extension, _Inout_ PUNICODE_STRING StaticString, _Inout_ PUNICODE_STRING DynamicString, _Inout_ PUNICODE_STRING *NewName, _In_ PULONG NewFlags, _In_ PSIZE_T FileNameSize, _In_ PSIZE_T RequiredLength);
NTSYSAPINTSTATUSNTAPIRtlFindActivationContextSectionString( _In_ ULONG dwFlags, _In_ const GUID *ExtensionGuid, _In_ ULONG SectionType, _In_ const UNICODE_STRING *SectionName, _Inout_ PVOID ReturnedData);
NTSYSAPINTSTATUSNTAPIRtlQueryInformationActivationContext( _In_ DWORD dwFlags, _In_opt_ PVOID Context, _In_opt_ PVOID pvSubInstance, _In_ ULONG ulInfoClass, _Out_bytecap_(cbBuffer) PVOID pvBuffer, _In_opt_ SIZE_T cbBuffer, _Out_opt_ SIZE_T *pcbWrittenOrRequired);
NTSYSAPINTSTATUSNTAPIRtlQueryInformationActiveActivationContext( _In_ ULONG ulInfoClass, _Out_bytecap_(cbBuffer) PVOID pvBuffer, _In_opt_ SIZE_T cbBuffer, _Out_opt_ SIZE_T *pcbWrittenOrRequired);
NTSYSAPINTSTATUSNTAPIRtlZombifyActivationContext( PVOID Context);
//// WOW64 Functions//NTSYSAPINTSTATUSNTAPIRtlWow64EnableFsRedirection( _In_ BOOLEAN Wow64FsEnableRedirection);
NTSYSAPINTSTATUSNTAPIRtlWow64EnableFsRedirectionEx( _In_ PVOID Wow64FsEnableRedirection, _Out_ PVOID *OldFsRedirectionLevel);
#endif
//// Registry Functions//_IRQL_requires_max_(PASSIVE_LEVEL)_Must_inspect_result_NTSYSAPINTSTATUSNTAPIRtlCheckRegistryKey( _In_ ULONG RelativeTo, _In_ PWSTR Path);
NTSYSAPINTSTATUSNTAPIRtlCreateRegistryKey( _In_ ULONG RelativeTo, _In_ PWSTR Path);
NTSYSAPINTSTATUSNTAPIRtlFormatCurrentUserKeyPath( _Out_ _At_(KeyPath->Buffer, __drv_allocatesMem(Mem) _Post_bytecap_(KeyPath->MaximumLength) _Post_bytecount_(KeyPath->Length)) PUNICODE_STRING KeyPath);
NTSYSAPINTSTATUSNTAPIRtlOpenCurrentUser( _In_ ACCESS_MASK DesiredAccess, _Out_ PHANDLE KeyHandle);
_IRQL_requires_max_(PASSIVE_LEVEL)NTSYSAPINTSTATUSNTAPIRtlQueryRegistryValues( _In_ ULONG RelativeTo, _In_ PCWSTR Path, _Inout_ _At_(*(*QueryTable).EntryContext, _Pre_unknown_) PRTL_QUERY_REGISTRY_TABLE QueryTable, _In_opt_ PVOID Context, _In_opt_ PVOID Environment);
_IRQL_requires_max_(PASSIVE_LEVEL)NTSYSAPINTSTATUSNTAPIRtlWriteRegistryValue( _In_ ULONG RelativeTo, _In_ PCWSTR Path, _In_z_ PCWSTR ValueName, _In_ ULONG ValueType, _In_reads_bytes_opt_(ValueLength) PVOID ValueData, _In_ ULONG ValueLength);
#ifdef NTOS_MODE_USERNTSYSAPINTSTATUSNTAPIRtlpNtCreateKey( _Out_ HANDLE KeyHandle, _In_ ACCESS_MASK DesiredAccess, _In_ POBJECT_ATTRIBUTES ObjectAttributes, _In_ ULONG TitleIndex, _In_ PUNICODE_STRING Class, _Out_ PULONG Disposition);
NTSYSAPINTSTATUSNTAPIRtlpNtEnumerateSubKey( _In_ HANDLE KeyHandle, _Inout_ PUNICODE_STRING SubKeyName, _In_ ULONG Index, _In_ ULONG Unused);
NTSYSAPINTSTATUSNTAPIRtlpNtMakeTemporaryKey( _In_ HANDLE KeyHandle);
NTSYSAPINTSTATUSNTAPIRtlpNtOpenKey( _Out_ HANDLE KeyHandle, _In_ ACCESS_MASK DesiredAccess, _In_ POBJECT_ATTRIBUTES ObjectAttributes, _In_ ULONG Unused);
NTSYSAPINTSTATUSNTAPIRtlpNtQueryValueKey( _In_ HANDLE KeyHandle, _Out_opt_ PULONG Type, _Out_opt_ PVOID Data, _Inout_opt_ PULONG DataLength, _In_ ULONG Unused);
NTSYSAPINTSTATUSNTAPIRtlpNtSetValueKey( _In_ HANDLE KeyHandle, _In_ ULONG Type, _In_ PVOID Data, _In_ ULONG DataLength);#endif
//// NLS Functions//NTSYSAPIVOIDNTAPIRtlGetDefaultCodePage( _Out_ PUSHORT AnsiCodePage, _Out_ PUSHORT OemCodePage);
NTSYSAPIVOIDNTAPIRtlInitNlsTables( _In_ PUSHORT AnsiTableBase, _In_ PUSHORT OemTableBase, _In_ PUSHORT CaseTableBase, _Out_ PNLSTABLEINFO NlsTable);
_IRQL_requires_max_(PASSIVE_LEVEL)NTSYSAPIVOIDNTAPIRtlInitCodePageTable( _In_ PUSHORT TableBase, _Out_ PCPTABLEINFO CodePageTable);
NTSYSAPIVOIDNTAPIRtlResetRtlTranslations( _In_ PNLSTABLEINFO NlsTable);
#if defined(NTOS_MODE_USER) && !defined(NO_RTL_INLINES)
//// Misc conversion functions//static __inlineLARGE_INTEGERNTAPI_INLINERtlConvertLongToLargeInteger( _In_ LONG SignedInteger){ LARGE_INTEGER Result;
Result.QuadPart = SignedInteger; return Result;}
static __inlineLARGE_INTEGERNTAPI_INLINERtlEnlargedIntegerMultiply( _In_ LONG Multiplicand, _In_ LONG Multiplier){ LARGE_INTEGER Product;
Product.QuadPart = (LONGLONG)Multiplicand * (ULONGLONG)Multiplier; return Product;}
static __inlineULONGNTAPI_INLINERtlEnlargedUnsignedDivide( _In_ ULARGE_INTEGER Dividend, _In_ ULONG Divisor, _In_opt_ PULONG Remainder){ ULONG Quotient;
Quotient = (ULONG)(Dividend.QuadPart / Divisor); if (Remainder) { *Remainder = (ULONG)(Dividend.QuadPart % Divisor); }
return Quotient;}
static __inlineLARGE_INTEGERNTAPI_INLINERtlEnlargedUnsignedMultiply( _In_ ULONG Multiplicand, _In_ ULONG Multiplier){ LARGE_INTEGER Product;
Product.QuadPart = (ULONGLONG)Multiplicand * (ULONGLONG)Multiplier; return Product;}
#if defined(_AMD64_) || defined(_IA64_)static __inlineLARGE_INTEGERNTAPI_INLINERtlExtendedLargeIntegerDivide( _In_ LARGE_INTEGER Dividend, _In_ ULONG Divisor, _Out_opt_ PULONG Remainder){ LARGE_INTEGER ret; ret.QuadPart = (ULONG64)Dividend.QuadPart / Divisor; if (Remainder) *Remainder = (ULONG)(Dividend.QuadPart % Divisor); return ret;}
#elseNTSYSAPILARGE_INTEGERNTAPIRtlExtendedLargeIntegerDivide( _In_ LARGE_INTEGER Dividend, _In_ ULONG Divisor, _Out_opt_ PULONG Remainder);
#endif /* defined(_AMD64_) || defined(_IA64_) */
#endif
NTSYSAPIULONGNTAPIRtlUniform( _In_ PULONG Seed);
NTSYSAPIULONGNTAPIRtlRandom( _Inout_ PULONG Seed);
NTSYSAPIULONGNTAPIRtlComputeCrc32( _In_ ULONG InitialCrc, _In_ const UCHAR *Buffer, _In_ ULONG Length);
//// Network Functions//NTSYSAPIPSTRNTAPIRtlIpv4AddressToStringA( _In_ const struct in_addr *Addr, _Out_writes_(16) PCHAR S);
NTSYSAPIPWSTRNTAPIRtlIpv4AddressToStringW( _In_ const struct in_addr *Addr, _Out_writes_(16) PWCHAR S);
NTSYSAPINTSTATUSNTAPIRtlIpv4AddressToStringExA( _In_ const struct in_addr *Address, _In_ USHORT Port, _Out_writes_to_(*AddressStringLength, *AddressStringLength) PCHAR AddressString, _Inout_ PULONG AddressStringLength);
NTSTATUSNTAPIRtlIpv4AddressToStringExW( _In_ const struct in_addr *Address, _In_ USHORT Port, _Out_writes_to_(*AddressStringLength, *AddressStringLength) PWCHAR AddressString, _Inout_ PULONG AddressStringLength);
NTSYSAPINTSTATUSNTAPIRtlIpv4StringToAddressA( _In_ PCSTR String, _In_ BOOLEAN Strict, _Out_ PCSTR *Terminator, _Out_ struct in_addr *Addr);
NTSYSAPINTSTATUSNTAPIRtlIpv4StringToAddressW( _In_ PCWSTR String, _In_ BOOLEAN Strict, _Out_ PCWSTR *Terminator, _Out_ struct in_addr *Addr);
NTSYSAPINTSTATUSNTAPIRtlIpv4StringToAddressExA( _In_ PCSTR AddressString, _In_ BOOLEAN Strict, _Out_ struct in_addr *Address, _Out_ PUSHORT Port);
NTSYSAPINTSTATUSNTAPIRtlIpv4StringToAddressExW( _In_ PCWSTR AddressString, _In_ BOOLEAN Strict, _Out_ struct in_addr *Address, _Out_ PUSHORT Port);
NTSYSAPIPSTRNTAPIRtlIpv6AddressToStringA( _In_ const struct in6_addr *Addr, _Out_writes_(46) PSTR S);
NTSYSAPIPWSTRNTAPIRtlIpv6AddressToStringW( _In_ const struct in6_addr *Addr, _Out_writes_(46) PWSTR S);
NTSYSAPINTSTATUSNTAPIRtlIpv6AddressToStringExA( _In_ const struct in6_addr *Address, _In_ ULONG ScopeId, _In_ USHORT Port, _Out_writes_to_(*AddressStringLength, *AddressStringLength) PSTR AddressString, _Inout_ PULONG AddressStringLength);
NTSYSAPINTSTATUSNTAPIRtlIpv6AddressToStringExW( _In_ const struct in6_addr *Address, _In_ ULONG ScopeId, _In_ USHORT Port, _Out_writes_to_(*AddressStringLength, *AddressStringLength) PWCHAR AddressString, _Inout_ PULONG AddressStringLength);
NTSYSAPINTSTATUSNTAPIRtlIpv6StringToAddressA( _In_ PCSTR String, _Out_ PCSTR *Terminator, _Out_ struct in6_addr *Addr);
NTSYSAPINTSTATUSNTAPIRtlIpv6StringToAddressW( _In_ PCWSTR String, _Out_ PCWSTR *Terminator, _Out_ struct in6_addr *Addr);
NTSYSAPINTSTATUSNTAPIRtlIpv6StringToAddressExA( _In_ PCSTR AddressString, _Out_ struct in6_addr *Address, _Out_ PULONG ScopeId, _Out_ PUSHORT Port);
NTSYSAPINTSTATUSNTAPIRtlIpv6StringToAddressExW( _In_ PCWSTR AddressString, _Out_ struct in6_addr *Address, _Out_ PULONG ScopeId, _Out_ PUSHORT Port);
//// Time Functions//NTSYSAPIBOOLEANNTAPIRtlCutoverTimeToSystemTime( _In_ PTIME_FIELDS CutoverTimeFields, _Out_ PLARGE_INTEGER SystemTime, _In_ PLARGE_INTEGER CurrentTime, _In_ BOOLEAN ThisYearsCutoverOnly);
NTSYSAPINTSTATUSNTAPIRtlQueryTimeZoneInformation( _Out_ PRTL_TIME_ZONE_INFORMATION TimeZoneInformation);
NTSYSAPIVOIDNTAPIRtlSecondsSince1970ToTime( _In_ ULONG SecondsSince1970, _Out_ PLARGE_INTEGER Time);
NTSYSAPINTSTATUSNTAPIRtlSetTimeZoneInformation( _In_ PRTL_TIME_ZONE_INFORMATION TimeZoneInformation);
_Success_(return != FALSE)NTSYSAPIBOOLEANNTAPIRtlTimeFieldsToTime( _In_ PTIME_FIELDS TimeFields, _Out_ PLARGE_INTEGER Time);
_Success_(return != FALSE)NTSYSAPIBOOLEANNTAPIRtlTimeToSecondsSince1970( _In_ PLARGE_INTEGER Time, _Out_ PULONG ElapsedSeconds);
NTSYSAPIVOIDNTAPIRtlTimeToTimeFields( PLARGE_INTEGER Time, PTIME_FIELDS TimeFields);
NTSYSAPINTSTATUSNTAPIRtlSystemTimeToLocalTime( _In_ PLARGE_INTEGER SystemTime, _Out_ PLARGE_INTEGER LocalTime);
//// Version Functions//_IRQL_requires_max_(PASSIVE_LEVEL)_Must_inspect_result_NTSYSAPINTSTATUSNTAPIRtlVerifyVersionInfo( _In_ PRTL_OSVERSIONINFOEXW VersionInfo, _In_ ULONG TypeMask, _In_ ULONGLONG ConditionMask);
_IRQL_requires_max_(PASSIVE_LEVEL)NTSYSAPINTSTATUSNTAPIRtlGetVersion( _Out_ _At_(lpVersionInformation->dwOSVersionInfoSize, _Pre_ _Valid_) _When_(lpVersionInformation->dwOSVersionInfoSize == sizeof(RTL_OSVERSIONINFOEXW), _At_((PRTL_OSVERSIONINFOEXW)lpVersionInformation, _Out_)) PRTL_OSVERSIONINFOW lpVersionInformation);
_IRQL_requires_max_(PASSIVE_LEVEL)NTSYSAPIBOOLEANNTAPIRtlGetNtProductType(_Out_ PNT_PRODUCT_TYPE ProductType);
#if (_WIN32_WINNT >= _WIN32_WINNT_VISTA)//// Synchronization functions//NTSYSAPIVOIDNTAPIRtlInitializeConditionVariable( _Out_ PRTL_CONDITION_VARIABLE ConditionVariable);
NTSYSAPIVOIDNTAPIRtlWakeConditionVariable( _Inout_ PRTL_CONDITION_VARIABLE ConditionVariable);
NTSYSAPIVOIDNTAPIRtlWakeAllConditionVariable( _Inout_ PRTL_CONDITION_VARIABLE ConditionVariable);
NTSYSAPINTSTATUSNTAPIRtlSleepConditionVariableCS( _Inout_ PRTL_CONDITION_VARIABLE ConditionVariable, _Inout_ PRTL_CRITICAL_SECTION CriticalSection, _In_opt_ PLARGE_INTEGER TimeOut);
NTSYSAPINTSTATUSNTAPIRtlSleepConditionVariableSRW( _Inout_ PRTL_CONDITION_VARIABLE ConditionVariable, _Inout_ PRTL_SRWLOCK SRWLock, _In_opt_ PLARGE_INTEGER TimeOut, _In_ ULONG Flags);#endif
//// Synchronization functions//NTSYSAPIVOIDNTAPIRtlInitializeConditionVariable(OUT PRTL_CONDITION_VARIABLE ConditionVariable);
NTSYSAPIVOIDNTAPIRtlWakeConditionVariable(IN OUT PRTL_CONDITION_VARIABLE ConditionVariable);
NTSYSAPIVOIDNTAPIRtlWakeAllConditionVariable(IN OUT PRTL_CONDITION_VARIABLE ConditionVariable);
NTSYSAPINTSTATUSNTAPIRtlSleepConditionVariableCS(IN OUT PRTL_CONDITION_VARIABLE ConditionVariable, IN OUT PRTL_CRITICAL_SECTION CriticalSection, IN const PLARGE_INTEGER TimeOut OPTIONAL);
NTSYSAPINTSTATUSNTAPIRtlSleepConditionVariableSRW(IN OUT PRTL_CONDITION_VARIABLE ConditionVariable, IN OUT PRTL_SRWLOCK SRWLock, IN PLARGE_INTEGER TimeOut OPTIONAL, IN ULONG Flags);
VOIDNTAPIRtlInitializeSRWLock(OUT PRTL_SRWLOCK SRWLock);
VOIDNTAPIRtlAcquireSRWLockShared(IN OUT PRTL_SRWLOCK SRWLock);
VOIDNTAPIRtlReleaseSRWLockShared(IN OUT PRTL_SRWLOCK SRWLock);
VOIDNTAPIRtlAcquireSRWLockExclusive(IN OUT PRTL_SRWLOCK SRWLock);
VOIDNTAPIRtlReleaseSRWLockExclusive(IN OUT PRTL_SRWLOCK SRWLock);
//// Secure Memory Functions//#ifdef NTOS_MODE_USERNTSYSAPINTSTATUSNTAPIRtlRegisterSecureMemoryCacheCallback( _In_ PRTL_SECURE_MEMORY_CACHE_CALLBACK Callback);
NTSYSAPIBOOLEANNTAPIRtlFlushSecureMemoryCache( _In_ PVOID MemoryCache, _In_opt_ SIZE_T MemoryLength);#endif
//// Boot Status Data Functions//#ifdef NTOS_MODE_USERNTSYSAPINTSTATUSNTAPIRtlCreateBootStatusDataFile( VOID);
NTSYSAPINTSTATUSNTAPIRtlGetSetBootStatusData( _In_ HANDLE FileHandle, _In_ BOOLEAN WriteMode, _In_ RTL_BSD_ITEM_TYPE DataClass, _In_ PVOID Buffer, _In_ ULONG BufferSize, _Out_opt_ PULONG ReturnLength);
NTSYSAPINTSTATUSNTAPIRtlLockBootStatusData( _Out_ PHANDLE FileHandle);
NTSYSAPINTSTATUSNTAPIRtlUnlockBootStatusData( _In_ HANDLE FileHandle);#endif
#ifdef NTOS_MODE_USER_Must_inspect_result_NTSYSAPINTSTATUSNTAPIRtlGUIDFromString( _In_ PUNICODE_STRING GuidString, _Out_ GUID *Guid);
_Must_inspect_result_NTSYSAPINTSTATUSNTAPIRtlStringFromGUID( _In_ REFGUID Guid, _Out_ _At_(GuidString->Buffer, __drv_allocatesMem(Mem)) PUNICODE_STRING GuidString);
NTSYSAPINTSTATUSNTAPIRtlComputeImportTableHash( _In_ HANDLE hFile, _Out_ PCHAR Hash, _In_ ULONG ImportTableHashRevision);#endif
//// MemoryStream functions//#ifdef NTOS_MODE_USER
NTSYSAPIVOIDNTAPIRtlInitMemoryStream( _Out_ PRTL_MEMORY_STREAM Stream);
NTSYSAPIVOIDNTAPIRtlInitOutOfProcessMemoryStream( _Out_ PRTL_MEMORY_STREAM Stream);
NTSYSAPIVOIDNTAPIRtlFinalReleaseOutOfProcessMemoryStream( _In_ PRTL_MEMORY_STREAM Stream);
NTSYSAPIHRESULTNTAPIRtlQueryInterfaceMemoryStream( _In_ struct IStream *This, _In_ REFIID RequestedIid, _Outptr_ PVOID *ResultObject);
NTSYSAPIULONGNTAPIRtlAddRefMemoryStream( _In_ struct IStream *This);
NTSYSAPIULONGNTAPIRtlReleaseMemoryStream( _In_ struct IStream *This);
NTSYSAPIHRESULTNTAPIRtlReadMemoryStream( _In_ struct IStream *This, _Out_writes_bytes_(Length) PVOID Buffer, _In_ ULONG Length, _Out_opt_ PULONG BytesRead);
NTSYSAPIHRESULTNTAPIRtlReadOutOfProcessMemoryStream( _In_ struct IStream *This, _Out_writes_bytes_(Length) PVOID Buffer, _In_ ULONG Length, _Out_opt_ PULONG BytesRead);
NTSYSAPIHRESULTNTAPIRtlSeekMemoryStream( _In_ struct IStream *This, _In_ LARGE_INTEGER RelativeOffset, _In_ ULONG Origin, _Out_opt_ PULARGE_INTEGER ResultOffset);
NTSYSAPIHRESULTNTAPIRtlCopyMemoryStreamTo( _In_ struct IStream *This, _In_ struct IStream *Target, _In_ ULARGE_INTEGER Length, _Out_opt_ PULARGE_INTEGER BytesRead, _Out_opt_ PULARGE_INTEGER BytesWritten);
NTSYSAPIHRESULTNTAPIRtlCopyOutOfProcessMemoryStreamTo( _In_ struct IStream *This, _In_ struct IStream *Target, _In_ ULARGE_INTEGER Length, _Out_opt_ PULARGE_INTEGER BytesRead, _Out_opt_ PULARGE_INTEGER BytesWritten);
NTSYSAPIHRESULTNTAPIRtlStatMemoryStream( _In_ struct IStream *This, _Out_ struct tagSTATSTG *Stats, _In_ ULONG Flags);
// Dummy functionsNTSYSAPIHRESULTNTAPIRtlWriteMemoryStream( _In_ struct IStream *This, _In_reads_bytes_(Length) CONST VOID *Buffer, _In_ ULONG Length, _Out_opt_ PULONG BytesWritten);
NTSYSAPIHRESULTNTAPIRtlSetMemoryStreamSize( _In_ struct IStream *This, _In_ ULARGE_INTEGER NewSize);
NTSYSAPIHRESULTNTAPIRtlCommitMemoryStream( _In_ struct IStream *This, _In_ ULONG CommitFlags);
NTSYSAPIHRESULTNTAPIRtlRevertMemoryStream( _In_ struct IStream *This);
NTSYSAPIHRESULTNTAPIRtlLockMemoryStreamRegion( _In_ struct IStream *This, _In_ ULARGE_INTEGER Offset, _In_ ULARGE_INTEGER Length, _In_ ULONG LockType);
NTSYSAPIHRESULTNTAPIRtlUnlockMemoryStreamRegion( _In_ struct IStream *This, _In_ ULARGE_INTEGER Offset, _In_ ULARGE_INTEGER Length, _In_ ULONG LockType);
NTSYSAPIHRESULTNTAPIRtlCloneMemoryStream( _In_ struct IStream *This, _Outptr_ struct IStream **ResultStream);
NTSYSAPINTSTATUSNTAPIRtlGetNativeSystemInformation( _In_ SYSTEM_INFORMATION_CLASS SystemInformationClass, _Out_writes_bytes_to_opt_(SystemInformationLength, *ReturnLength) PVOID SystemInformation, _In_ ULONG SystemInformationLength, _Out_opt_ PULONG ReturnLength);
#if (_WIN32_WINNT >= _WIN32_WINNT_VISTA) || (DLL_EXPORT_VERSION >= _WIN32_WINNT_VISTA)
NTSYSAPIVOIDNTAPIRtlRunOnceInitialize( _Out_ PRTL_RUN_ONCE RunOnce);
_Maybe_raises_SEH_exception_NTSYSAPINTSTATUSNTAPIRtlRunOnceExecuteOnce( _Inout_ PRTL_RUN_ONCE RunOnce, _In_ __inner_callback PRTL_RUN_ONCE_INIT_FN InitFn, _Inout_opt_ PVOID Parameter, _Outptr_opt_result_maybenull_ PVOID *Context);
_Must_inspect_result_NTSYSAPINTSTATUSNTAPIRtlRunOnceBeginInitialize( _Inout_ PRTL_RUN_ONCE RunOnce, _In_ ULONG Flags, _Outptr_opt_result_maybenull_ PVOID *Context);
NTSYSAPINTSTATUSNTAPIRtlRunOnceComplete( _Inout_ PRTL_RUN_ONCE RunOnce, _In_ ULONG Flags, _In_opt_ PVOID Context);
#endif
#if (_WIN32_WINNT >= _WIN32_WINNT_VISTA) || (defined(__REACTOS__) && defined(_NTDLLBUILD_))/* Put NTSYSAPI back when this will be really exported. Only statically linked for now */// NTSYSAPIVOIDNTAPIRtlInitializeSRWLock(OUT PRTL_SRWLOCK SRWLock);
// NTSYSAPIVOIDNTAPIRtlAcquireSRWLockShared(IN OUT PRTL_SRWLOCK SRWLock);
// NTSYSAPIVOIDNTAPIRtlAcquireSRWLockExclusive(IN OUT PRTL_SRWLOCK SRWLock);
// NTSYSAPIVOIDNTAPIRtlReleaseSRWLockShared(IN OUT PRTL_SRWLOCK SRWLock);
// NTSYSAPIVOIDNTAPIRtlReleaseSRWLockExclusive(IN OUT PRTL_SRWLOCK SRWLock);
NTSYSAPINTSTATUSNTAPIRtlConvertLCIDToString( _In_ LCID LcidValue, _In_ ULONG Base, _In_ ULONG Padding, _Out_writes_(Size) PWSTR pResultBuf, _In_ ULONG Size);
_Success_(return != FALSE)NTSYSAPIBOOLEANNTAPIRtlCultureNameToLCID( _In_ PCUNICODE_STRING String, _Out_ PLCID Lcid);
_Success_(return != FALSE)NTSYSAPIBOOLEANNTAPIRtlLCIDToCultureName( _In_ LCID Lcid, _Inout_ PUNICODE_STRING String);
NTSYSAPINTSTATUSNTAPIRtlLcidToLocaleName( _In_ LCID Lcid, _Inout_ PUNICODE_STRING LocaleName, _In_ ULONG Flags, _In_ BOOLEAN AllocateDestinationString);
NTSYSAPINTSTATUSNTAPIRtlLocaleNameToLcid( _In_ PCWSTR LocaleName, _Out_ PLCID Lcid, _In_ ULONG Flags);
NTSYSAPIBOOLEANNTAPIRtlIsValidLocaleName( _In_ LPCWSTR LocaleName, _In_ ULONG Flags);
// Flags for RtlLocaleNameToLcid / RtlLcidToLocaleName / RtlIsValidLocaleName#define RTL_LOCALE_ALLOW_NEUTRAL_NAMES 0x00000002 // Return locales like "en" or "de"
#endif /* Win Vista or ReactOS Ntdll build */
#if (_WIN32_WINNT >= _WIN32_WINNT_WIN7) || (defined(__REACTOS__) && defined(_NTDLLBUILD_))
// NTSYSAPIBOOLEANNTAPIRtlTryAcquireSRWLockShared(PRTL_SRWLOCK SRWLock);
// NTSYSAPIBOOLEANNTAPIRtlTryAcquireSRWLockExclusive(PRTL_SRWLOCK SRWLock);
#endif /* Win7 or ReactOS Ntdll build */
#endif // NTOS_MODE_USER
NTSYSAPINTSTATUSNTAPIRtlFindActivationContextSectionGuid( ULONG flags, const GUID *extguid, ULONG section_kind, const GUID *guid, void *ptr);
#ifdef __cplusplus}#endif
#endif