14 #define PAGED_CODE_RTL() CHECK_PAGED_CODE_RTL(__FILE__, __LINE__) 16 #define PAGED_CODE_RTL() 20 #define SWAPD(x) ((((x)&0xff)<<24)|(((x)&0xff00)<<8)|(((x)>>8)&0xff00)|(((x)>>24)&0xff)) 21 #define SWAPW(x) ((((x)&0xff)<<8)|(((x)>>8)&0xff)) 22 #define SWAPQ(x) ((SWAPD((x)&0xffffffff) << 32) | (SWAPD((x)>>32))) 29 #define ROUND_DOWN(n, align) \ 30 (((ULONG_PTR)(n)) & ~((align) - 1l)) 32 #define ROUND_UP(n, align) \ 33 ROUND_DOWN(((ULONG_PTR)(n)) + (align) - 1, (align)) 35 #define RVA(m, b) ((PVOID)((ULONG_PTR)(b) + (ULONG_PTR)(m))) 57 RtlpGetExceptionList(
VOID);
155 #define RtlpAllocateStringMemory RtlpAllocateMemory 156 #define RtlpFreeStringMemory RtlpFreeMemory 163 #define NtGetTickCount RtlGetTickCount 251 #define TAG_USTR 'RTSU' 252 #define TAG_ASTR 'RTSA' 253 #define TAG_OSTR 'RTSO'
NTSTATUS NTAPI RtlEnterHeapLock(IN OUT PHEAP_LOCK Lock, IN BOOLEAN Exclusive)
VOID NTAPI RtlpSetHeapParameters(IN PRTL_HEAP_PARAMETERS Parameters)
_Out_ PULONG_PTR HighLimit
struct _RTL_BITMAP_RUN64 RTL_BITMAP_RUN64
_In_ ULONG _In_ ULONG _In_ ULONG Length
NTSTATUS NTAPI RtlpSafeCopyMemory(_Out_writes_bytes_all_(Length) VOID UNALIGNED *Destination, _In_reads_bytes_(Length) CONST VOID UNALIGNED *Source, _In_ SIZE_T Length)
VOID NTAPI RtlpGetStackLimits(PULONG_PTR LowLimit, PULONG_PTR HighLimit)
_IRQL_requires_same_ _In_opt_ PVOID Argument1
_Must_inspect_result_ _In_ WDFQUEUE _In_opt_ WDFREQUEST _In_opt_ WDFFILEOBJECT _Inout_opt_ PWDF_REQUEST_PARAMETERS Parameters
struct _RTL_BITMAP64 * PRTL_BITMAP64
ULONG NTAPI DebugService(IN ULONG Service, IN PVOID Argument1, IN PVOID Argument2, IN PVOID Argument3, IN PVOID Argument4)
NTSTATUS RtlpInitializeTimerThread(VOID)
BOOLEAN NTAPI RtlpSetInDbgPrint(VOID)
PVOID NTAPI RtlpDebugBufferCommit(_Inout_ PRTL_DEBUG_INFORMATION Buffer, _In_ SIZE_T Size)
VOID NTAPI RtlpCheckLogException(IN PEXCEPTION_RECORD ExceptionRecord, IN PCONTEXT ContextRecord, IN PVOID ContextData, IN ULONG Size)
IN PVOID IN PVOID IN USHORT IN USHORT Size
PVOID MmHighestUserAddress
NTSTATUS NTAPI RtlDeleteHeapLock(IN OUT PHEAP_LOCK Lock)
NTSTATUS NTAPI RtlLeaveHeapLock(IN OUT PHEAP_LOCK Lock)
VOID NTAPI DebugService2(IN PVOID Argument1, IN PVOID Argument2, IN ULONG Service)
VOID NTAPI RtlpClearInDbgPrint(VOID)
EXCEPTION_DISPOSITION NTAPI RtlpExecuteHandlerForUnwind(PEXCEPTION_RECORD ExceptionRecord, PEXCEPTION_REGISTRATION_RECORD RegistrationFrame, PCONTEXT Context, PVOID DispatcherContext, PEXCEPTION_ROUTINE ExceptionHandler)
WCHAR NTAPI RtlpUpcaseUnicodeChar(IN WCHAR Source)
NTSTATUS(* NTAPI)(IN PFILE_FULL_EA_INFORMATION EaBuffer, IN ULONG EaLength, OUT PULONG ErrorOffset)
BOOLEAN NTAPI RtlpCheckForActiveDebugger(VOID)
_IRQL_requires_same_ _In_ PVOID _Inout_ struct _CONTEXT _In_ PVOID DispatcherContext
NTSTATUS NTAPI RtlInitializeHeapLock(IN OUT PHEAP_LOCK *Lock)
WCHAR NTAPI RtlpDowncaseUnicodeChar(IN WCHAR Source)
#define _Out_writes_bytes_all_(size)
struct _DISPATCHER_CONTEXT * PDISPATCHER_CONTEXT
EXCEPTION_ROUTINE * PEXCEPTION_ROUTINE
BOOLEAN NTAPI RtlpCaptureStackLimits(IN ULONG_PTR Ebp, IN ULONG_PTR *StackBegin, IN ULONG_PTR *StackEnd)
VOID NTAPI RtlCallVectoredContinueHandlers(IN PEXCEPTION_RECORD ExceptionRecord, IN PCONTEXT Context)
InternalIoctlParams Argument4
VOID NTAPI RtlpCaptureContext(OUT PCONTEXT ContextRecord)
struct _RTL_BITMAP64 RTL_BITMAP64
__in PWDFDEVICE_INIT __in BOOLEAN Exclusive
_In_ PUNICODE_STRING _Inout_ PUNICODE_STRING Destination
PVOID NTAPI RtlpAllocateMemory(SIZE_T Bytes, ULONG Tag)
VOID NTAPI RtlpFreeMemory(PVOID Mem, ULONG Tag)
BOOLEAN NTAPI RtlCallVectoredExceptionHandlers(IN PEXCEPTION_RECORD ExceptionRecord, IN PCONTEXT Context)
_IRQL_requires_same_ _In_ PVOID _Inout_ struct _CONTEXT * ContextRecord
VOID NTAPI LdrpInitializeProcessCompat(PVOID pProcessActctx, PVOID *pOldShimData)
struct _DISPATCHER_CONTEXT DISPATCHER_CONTEXT
_Must_inspect_result_ _In_ WDFDEVICE _In_ BOOLEAN _In_opt_ PVOID Tag
ULONG NTAPI RtlGetTickCount(VOID)
_Must_inspect_result_ _In_opt_ PWDF_OBJECT_ATTRIBUTES _Out_ WDFWAITLOCK * Lock
struct _RTL_BITMAP_RUN64 * PRTL_BITMAP_RUN64
BOOLEAN NTAPI RtlTryEnterHeapLock(IN OUT PHEAP_LOCK Lock, IN BOOLEAN Exclusive)
enum _EXCEPTION_DISPOSITION EXCEPTION_DISPOSITION
KPROCESSOR_MODE NTAPI RtlpGetMode(VOID)
unsigned __int64 * PULONG64
_In_ UINT _In_ UINT _In_ PNDIS_PACKET Source
BOOLEAN NTAPI RtlpHandleDpcStackException(IN PEXCEPTION_REGISTRATION_RECORD RegistrationFrame, IN ULONG_PTR RegistrationFrameEnd, IN OUT PULONG_PTR StackLow, IN OUT PULONG_PTR StackHigh)
#define _In_reads_bytes_(size)