Process Hacker
ntrtl.h File Reference

Go to the source code of this file.

Data Structures

struct  _RTL_BALANCED_LINKS
 
struct  _RTL_AVL_TABLE
 
struct  _RTL_SPLAY_LINKS
 
struct  _RTL_GENERIC_TABLE
 
struct  _RTL_RB_TREE
 
struct  _RTL_DYNAMIC_HASH_TABLE_ENTRY
 
struct  _RTL_DYNAMIC_HASH_TABLE_CONTEXT
 
struct  _RTL_DYNAMIC_HASH_TABLE_ENUMERATOR
 
struct  _RTL_DYNAMIC_HASH_TABLE
 
struct  _RTL_RESOURCE
 
struct  _PREFIX_TABLE_ENTRY
 
struct  _PREFIX_TABLE
 
struct  _UNICODE_PREFIX_TABLE_ENTRY
 
struct  _UNICODE_PREFIX_TABLE
 
struct  _COMPRESSED_DATA_INFO
 
struct  _CURDIR
 
struct  _RTL_DRIVE_LETTER_CURDIR
 
struct  _RTL_USER_PROCESS_PARAMETERS
 
struct  _RTL_USER_PROCESS_INFORMATION
 
struct  _RTLP_PROCESS_REFLECTION_REFLECTION_INFORMATION
 
struct  _RTL_RELATIVE_NAME_U
 
struct  _RTL_HEAP_ENTRY
 
struct  _RTL_HEAP_TAG
 
struct  _RTL_HEAP_INFORMATION
 
struct  _RTL_PROCESS_HEAPS
 
struct  _RTL_HEAP_PARAMETERS
 
struct  _RTL_HEAP_TAG_INFO
 
struct  _RTL_HEAP_USAGE_ENTRY
 
struct  _RTL_HEAP_USAGE
 
struct  _RTL_HEAP_WALK_ENTRY
 
struct  _HEAP_DEBUGGING_INFORMATION
 
struct  _RTL_MEMORY_ZONE_SEGMENT
 
struct  _RTL_MEMORY_ZONE
 
struct  _RTL_PROCESS_VERIFIER_OPTIONS
 
struct  _RTL_DEBUG_INFORMATION
 
struct  _PARSE_MESSAGE_CONTEXT
 
struct  _TIME_FIELDS
 
struct  _RTL_TIME_ZONE_INFORMATION
 
struct  _RTL_BITMAP
 
struct  _RTL_BITMAP_RUN
 
struct  _RTL_HANDLE_TABLE_ENTRY
 
struct  _RTL_HANDLE_TABLE
 
struct  _RTL_QUERY_REGISTRY_TABLE
 
union  _RTL_ELEVATION_FLAGS
 
struct  _RTL_UNLOAD_EVENT_TRACE
 

Macros

#define RtlInitializeSplayLinks(Links)
 
#define RtlParent(Links)   ((PRTL_SPLAY_LINKS)(Links)->Parent)
 
#define RtlLeftChild(Links)   ((PRTL_SPLAY_LINKS)(Links)->LeftChild)
 
#define RtlRightChild(Links)   ((PRTL_SPLAY_LINKS)(Links)->RightChild)
 
#define RtlIsRoot(Links)   ((RtlParent(Links) == (PRTL_SPLAY_LINKS)(Links)))
 
#define RtlIsLeftChild(Links)   ((RtlLeftChild(RtlParent(Links)) == (PRTL_SPLAY_LINKS)(Links)))
 
#define RtlIsRightChild(Links)   ((RtlRightChild(RtlParent(Links)) == (PRTL_SPLAY_LINKS)(Links)))
 
#define RtlInsertAsLeftChild(ParentLinks, ChildLinks)
 
#define RtlInsertAsRightChild(ParentLinks, ChildLinks)
 
#define RTL_HASH_ALLOCATED_HEADER   0x00000001
 
#define RTL_HASH_RESERVED_SIGNATURE   0
 
#define HASH_ENTRY_KEY(x)   ((x)->Signature)
 
#define RTL_RESOURCE_FLAG_LONG_TERM   ((ULONG)0x00000001)
 
#define RTL_BARRIER_FLAGS_SPIN_ONLY   0x00000001
 
#define RTL_BARRIER_FLAGS_BLOCK_ONLY   0x00000002
 
#define RTL_BARRIER_FLAGS_NO_DELETE   0x00000004
 
#define RTL_DUPLICATE_UNICODE_STRING_NULL_TERMINATE   (0x00000001)
 
#define RTL_DUPLICATE_UNICODE_STRING_ALLOCATE_NULL_STRING   (0x00000002)
 
#define HASH_STRING_ALGORITHM_DEFAULT   0
 
#define HASH_STRING_ALGORITHM_X65599   1
 
#define HASH_STRING_ALGORITHM_INVALID   0xffffffff
 
#define RTL_FIND_CHAR_IN_UNICODE_STRING_START_AT_END   0x00000001
 
#define RTL_FIND_CHAR_IN_UNICODE_STRING_COMPLEMENT_CHAR_SET   0x00000002
 
#define RTL_FIND_CHAR_IN_UNICODE_STRING_CASE_INSENSITIVE   0x00000004
 
#define DOS_MAX_COMPONENT_LENGTH   255
 
#define DOS_MAX_PATH_LENGTH   (DOS_MAX_COMPONENT_LENGTH + 5)
 
#define RTL_USER_PROC_CURDIR_CLOSE   0x00000002
 
#define RTL_USER_PROC_CURDIR_INHERIT   0x00000003
 
#define RTL_MAX_DRIVE_LETTERS   32
 
#define RTL_DRIVE_LETTER_VALID   (USHORT)0x0001
 
#define RTL_USER_PROC_PARAMS_NORMALIZED   0x00000001
 
#define RTL_USER_PROC_PROFILE_USER   0x00000002
 
#define RTL_USER_PROC_PROFILE_KERNEL   0x00000004
 
#define RTL_USER_PROC_PROFILE_SERVER   0x00000008
 
#define RTL_USER_PROC_RESERVE_1MB   0x00000020
 
#define RTL_USER_PROC_RESERVE_16MB   0x00000040
 
#define RTL_USER_PROC_CASE_SENSITIVE   0x00000080
 
#define RTL_USER_PROC_DISABLE_HEAP_DECOMMIT   0x00000100
 
#define RTL_USER_PROC_DLL_REDIRECTION_LOCAL   0x00001000
 
#define RTL_USER_PROC_APP_MANIFEST_PRESENT   0x00002000
 
#define RTL_USER_PROC_IMAGE_KEY_MISSING   0x00004000
 
#define RTL_USER_PROC_OPTIN_PROCESS   0x00020000
 
#define RTL_CLONE_PROCESS_FLAGS_CREATE_SUSPENDED   0x00000001
 
#define RTL_CLONE_PROCESS_FLAGS_INHERIT_HANDLES   0x00000002
 
#define RTL_CLONE_PROCESS_FLAGS_NO_SYNCHRONIZE   0x00000004
 
#define RTL_IMAGE_NT_HEADER_EX_FLAG_NO_RANGE_CHECK   0x00000001
 
#define RTL_CREATE_ENVIRONMENT_TRANSLATE   0x1
 
#define RTL_CREATE_ENVIRONMENT_TRANSLATE_FROM_OEM   0x2
 
#define RTL_CREATE_ENVIRONMENT_EMPTY   0x4
 
#define RTL_DOS_SEARCH_PATH_FLAG_APPLY_ISOLATION_REDIRECTION   0x00000001
 
#define RTL_DOS_SEARCH_PATH_FLAG_DISALLOW_DOT_RELATIVE_PATH_SEARCH   0x00000002
 
#define RTL_DOS_SEARCH_PATH_FLAG_APPLY_DEFAULT_EXTENSION_WHEN_NOT_RELATIVE_PATH_EVEN_IF_FILE_HAS_EXTENSION   0x00000004)
 
#define RTL_HEAP_BUSY   (USHORT)0x0001
 
#define RTL_HEAP_SEGMENT   (USHORT)0x0002
 
#define RTL_HEAP_SETTABLE_VALUE   (USHORT)0x0010
 
#define RTL_HEAP_SETTABLE_FLAG1   (USHORT)0x0020
 
#define RTL_HEAP_SETTABLE_FLAG2   (USHORT)0x0040
 
#define RTL_HEAP_SETTABLE_FLAG3   (USHORT)0x0080
 
#define RTL_HEAP_SETTABLE_FLAGS   (USHORT)0x00e0
 
#define RTL_HEAP_UNCOMMITTED_RANGE   (USHORT)0x0100
 
#define RTL_HEAP_PROTECTED_ENTRY   (USHORT)0x0200
 
#define HEAP_SETTABLE_USER_VALUE   0x00000100
 
#define HEAP_SETTABLE_USER_FLAG1   0x00000200
 
#define HEAP_SETTABLE_USER_FLAG2   0x00000400
 
#define HEAP_SETTABLE_USER_FLAG3   0x00000800
 
#define HEAP_SETTABLE_USER_FLAGS   0x00000e00
 
#define HEAP_CLASS_0   0x00000000
 
#define HEAP_CLASS_1   0x00001000
 
#define HEAP_CLASS_2   0x00002000
 
#define HEAP_CLASS_3   0x00003000
 
#define HEAP_CLASS_4   0x00004000
 
#define HEAP_CLASS_5   0x00005000
 
#define HEAP_CLASS_6   0x00006000
 
#define HEAP_CLASS_7   0x00007000
 
#define HEAP_CLASS_8   0x00008000
 
#define HEAP_CLASS_MASK   0x0000f000
 
#define RtlProcessHeap()   (NtCurrentPeb()->ProcessHeap)
 
#define RTL_HEAP_MAKE_TAG   HEAP_MAKE_TAG_FLAGS
 
#define HEAP_USAGE_ALLOCATED_BLOCKS   HEAP_REALLOC_IN_PLACE_ONLY
 
#define HEAP_USAGE_FREE_BUFFER   HEAP_ZERO_MEMORY
 
#define HeapDebuggingInformation   0x80000002
 
#define RTL_QUERY_PROCESS_MODULES   0x00000001
 
#define RTL_QUERY_PROCESS_BACKTRACES   0x00000002
 
#define RTL_QUERY_PROCESS_HEAP_SUMMARY   0x00000004
 
#define RTL_QUERY_PROCESS_HEAP_TAGS   0x00000008
 
#define RTL_QUERY_PROCESS_HEAP_ENTRIES   0x00000010
 
#define RTL_QUERY_PROCESS_LOCKS   0x00000020
 
#define RTL_QUERY_PROCESS_MODULES32   0x00000040
 
#define RTL_QUERY_PROCESS_VERIFIER_OPTIONS   0x00000080
 
#define RTL_QUERY_PROCESS_MODULESEX   0x00000100
 
#define RTL_QUERY_PROCESS_HEAP_ENTRIES_EX   0x00000200
 
#define RTL_QUERY_PROCESS_CS_OWNER   0x00000400
 
#define RTL_QUERY_PROCESS_NONINVASIVE   0x80000000
 
#define INIT_PARSE_MESSAGE_CONTEXT(ctx)
 
#define TEST_PARSE_MESSAGE_CONTEXT_FLAG(ctx, flag)   ((ctx)->fFlags & (flag))
 
#define SET_PARSE_MESSAGE_CONTEXT_FLAG(ctx, flag)   ((ctx)->fFlags |= (flag))
 
#define CLEAR_PARSE_MESSAGE_CONTEXT_FLAG(ctx, flag)   ((ctx)->fFlags &= ~(flag))
 
#define RTL_ERRORMODE_NOGPFAULTERRORBOX   0x0020
 
#define RTL_ERRORMODE_NOOPENFILEERRORBOX   0x0040
 
#define RtlIntPtrToUnicodeString(Value, Base, String)   RtlIntegerToUnicodeString(Value, Base, String)
 
#define RtlIpv4AddressToString   RtlIpv4AddressToStringW
 
#define RtlIpv4AddressToStringEx   RtlIpv4AddressToStringExW
 
#define RtlIpv6AddressToString   RtlIpv6AddressToStringW
 
#define RtlIpv6AddressToStringEx   RtlIpv6AddressToStringExW
 
#define RtlIpv4StringToAddress   RtlIpv4StringToAddressW
 
#define RtlIpv4StringToAddressEx   RtlIpv4StringToAddressExW
 
#define RtlIpv6StringToAddress   RtlIpv6StringToAddressW
 
#define RtlIpv6StringToAddressEx   RtlIpv6StringToAddressExW
 
#define RTL_HANDLE_ALLOCATED   (USHORT)0x0001
 
#define RTL_ATOM_MAXIMUM_INTEGER_ATOM   (RTL_ATOM)0xc000
 
#define RTL_ATOM_INVALID_ATOM   (RTL_ATOM)0x0000
 
#define RTL_ATOM_TABLE_DEFAULT_NUMBER_OF_BUCKETS   37
 
#define RTL_ATOM_MAXIMUM_NAME_LENGTH   255
 
#define RTL_ATOM_PINNED   0x01
 
#define MAX_UNICODE_STACK_BUFFER_LENGTH   256
 
#define RTL_ACQUIRE_PRIVILEGE_REVERT   0x00000001
 
#define RTL_ACQUIRE_PRIVILEGE_PROCESS   0x00000002
 
#define RTL_REGISTRY_ABSOLUTE   0
 
#define RTL_REGISTRY_SERVICES   1
 
#define RTL_REGISTRY_CONTROL   2
 
#define RTL_REGISTRY_WINDOWS_NT   3
 
#define RTL_REGISTRY_DEVICEMAP   4
 
#define RTL_REGISTRY_USER   5
 
#define RTL_REGISTRY_MAXIMUM   6
 
#define RTL_REGISTRY_HANDLE   0x40000000
 
#define RTL_REGISTRY_OPTIONAL   0x80000000
 
#define RTL_QUERY_REGISTRY_SUBKEY   0x00000001
 
#define RTL_QUERY_REGISTRY_TOPKEY   0x00000002
 
#define RTL_QUERY_REGISTRY_REQUIRED   0x00000004
 
#define RTL_QUERY_REGISTRY_NOVALUE   0x00000008
 
#define RTL_QUERY_REGISTRY_NOEXPAND   0x00000010
 
#define RTL_QUERY_REGISTRY_DIRECT   0x00000020
 
#define RTL_QUERY_REGISTRY_DELETE   0x00000040
 
#define DBG_STATUS_CONTROL_C   1
 
#define DBG_STATUS_SYSRQ   2
 
#define DBG_STATUS_BUGCHECK_FIRST   3
 
#define DBG_STATUS_BUGCHECK_SECOND   4
 
#define DBG_STATUS_FATAL   5
 
#define DBG_STATUS_DEBUG_CONTROL   6
 
#define DBG_STATUS_WORKER   7
 
#define RTL_UNLOAD_EVENT_TRACE_NUMBER   64
 

Typedefs

typedef enum _TABLE_SEARCH_RESULT TABLE_SEARCH_RESULT
 
typedef enum
_RTL_GENERIC_COMPARE_RESULTS 
RTL_GENERIC_COMPARE_RESULTS
 
typedef
RTL_GENERIC_COMPARE_RESULTS(NTAPI * 
PRTL_AVL_COMPARE_ROUTINE )(_In_ struct _RTL_AVL_TABLE *Table, _In_ PVOID FirstStruct, _In_ PVOID SecondStruct)
 
typedef PVOID(NTAPI * PRTL_AVL_ALLOCATE_ROUTINE )(_In_ struct _RTL_AVL_TABLE *Table, _In_ CLONG ByteSize)
 
typedef VOID(NTAPI * PRTL_AVL_FREE_ROUTINE )(_In_ struct _RTL_AVL_TABLE *Table, _In_ _Post_invalid_ PVOID Buffer)
 
typedef NTSTATUS(NTAPI * PRTL_AVL_MATCH_FUNCTION )(_In_ struct _RTL_AVL_TABLE *Table, _In_ PVOID UserData, _In_ PVOID MatchData)
 
typedef struct _RTL_BALANCED_LINKS RTL_BALANCED_LINKS
 
typedef struct
_RTL_BALANCED_LINKS
PRTL_BALANCED_LINKS
 
typedef struct _RTL_AVL_TABLE RTL_AVL_TABLE
 
typedef struct _RTL_AVL_TABLEPRTL_AVL_TABLE
 
typedef struct _RTL_SPLAY_LINKS RTL_SPLAY_LINKS
 
typedef struct _RTL_SPLAY_LINKSPRTL_SPLAY_LINKS
 
typedef _In_ PVOID FirstStruct
 
typedef _In_ PVOID _In_ PVOID SecondStruct
 
typedef PVOID(NTAPI * PRTL_GENERIC_ALLOCATE_ROUTINE )(_In_ struct _RTL_GENERIC_TABLE *Table, _In_ CLONG ByteSize)
 
typedef VOID(NTAPI * PRTL_GENERIC_FREE_ROUTINE )(_In_ struct _RTL_GENERIC_TABLE *Table, _In_ _Post_invalid_ PVOID Buffer)
 
typedef struct _RTL_GENERIC_TABLE RTL_GENERIC_TABLE
 
typedef struct _RTL_GENERIC_TABLEPRTL_GENERIC_TABLE
 
typedef struct _RTL_RB_TREE RTL_RB_TREE
 
typedef struct _RTL_RB_TREEPRTL_RB_TREE
 
typedef struct
_RTL_DYNAMIC_HASH_TABLE_ENTRY 
RTL_DYNAMIC_HASH_TABLE_ENTRY
 
typedef struct
_RTL_DYNAMIC_HASH_TABLE_ENTRY
PRTL_DYNAMIC_HASH_TABLE_ENTRY
 
typedef struct
_RTL_DYNAMIC_HASH_TABLE_CONTEXT 
RTL_DYNAMIC_HASH_TABLE_CONTEXT
 
typedef struct
_RTL_DYNAMIC_HASH_TABLE_CONTEXT
PRTL_DYNAMIC_HASH_TABLE_CONTEXT
 
typedef struct
_RTL_DYNAMIC_HASH_TABLE_ENUMERATOR 
RTL_DYNAMIC_HASH_TABLE_ENUMERATOR
 
typedef struct
_RTL_DYNAMIC_HASH_TABLE_ENUMERATOR
PRTL_DYNAMIC_HASH_TABLE_ENUMERATOR
 
typedef struct
_RTL_DYNAMIC_HASH_TABLE 
RTL_DYNAMIC_HASH_TABLE
 
typedef struct
_RTL_DYNAMIC_HASH_TABLE
PRTL_DYNAMIC_HASH_TABLE
 
typedef struct _RTL_RESOURCE RTL_RESOURCE
 
typedef struct _RTL_RESOURCEPRTL_RESOURCE
 
typedef enum _RTL_NORM_FORM RTL_NORM_FORM
 
typedef struct _PREFIX_TABLE_ENTRY PREFIX_TABLE_ENTRY
 
typedef struct
_PREFIX_TABLE_ENTRY
PPREFIX_TABLE_ENTRY
 
typedef struct _PREFIX_TABLE PREFIX_TABLE
 
typedef struct _PREFIX_TABLEPPREFIX_TABLE
 
typedef struct
_UNICODE_PREFIX_TABLE_ENTRY 
UNICODE_PREFIX_TABLE_ENTRY
 
typedef struct
_UNICODE_PREFIX_TABLE_ENTRY
PUNICODE_PREFIX_TABLE_ENTRY
 
typedef struct
_UNICODE_PREFIX_TABLE 
UNICODE_PREFIX_TABLE
 
typedef struct
_UNICODE_PREFIX_TABLE
PUNICODE_PREFIX_TABLE
 
typedef struct
_COMPRESSED_DATA_INFO 
COMPRESSED_DATA_INFO
 
typedef struct
_COMPRESSED_DATA_INFO
PCOMPRESSED_DATA_INFO
 
typedef struct _CURDIR CURDIR
 
typedef struct _CURDIRPCURDIR
 
typedef struct
_RTL_DRIVE_LETTER_CURDIR 
RTL_DRIVE_LETTER_CURDIR
 
typedef struct
_RTL_DRIVE_LETTER_CURDIR
PRTL_DRIVE_LETTER_CURDIR
 
typedef struct
_RTL_USER_PROCESS_PARAMETERS 
RTL_USER_PROCESS_PARAMETERS
 
typedef struct
_RTL_USER_PROCESS_PARAMETERS
PRTL_USER_PROCESS_PARAMETERS
 
typedef struct
_RTL_USER_PROCESS_INFORMATION 
RTL_USER_PROCESS_INFORMATION
 
typedef struct
_RTL_USER_PROCESS_INFORMATION
PRTL_USER_PROCESS_INFORMATION
 
typedef struct
_RTLP_PROCESS_REFLECTION_REFLECTION_INFORMATION 
RTLP_PROCESS_REFLECTION_REFLECTION_INFORMATION
 
typedef struct
_RTLP_PROCESS_REFLECTION_REFLECTION_INFORMATION
PRTLP_PROCESS_REFLECTION_REFLECTION_INFORMATION
 
typedef NTSTATUS(NTAPI * PUSER_THREAD_START_ROUTINE )(_In_ PVOID ThreadParameter)
 
typedef struct _RTLP_CURDIR_REF * PRTLP_CURDIR_REF
 
typedef struct _RTL_RELATIVE_NAME_U RTL_RELATIVE_NAME_U
 
typedef struct
_RTL_RELATIVE_NAME_U
PRTL_RELATIVE_NAME_U
 
typedef enum _RTL_PATH_TYPE RTL_PATH_TYPE
 
typedef struct _RTL_HEAP_ENTRY RTL_HEAP_ENTRY
 
typedef struct _RTL_HEAP_ENTRYPRTL_HEAP_ENTRY
 
typedef struct _RTL_HEAP_TAG RTL_HEAP_TAG
 
typedef struct _RTL_HEAP_TAGPRTL_HEAP_TAG
 
typedef struct
_RTL_HEAP_INFORMATION 
RTL_HEAP_INFORMATION
 
typedef struct
_RTL_HEAP_INFORMATION
PRTL_HEAP_INFORMATION
 
typedef struct _RTL_PROCESS_HEAPS RTL_PROCESS_HEAPS
 
typedef struct _RTL_PROCESS_HEAPSPRTL_PROCESS_HEAPS
 
typedef NTSTATUS(NTAPI * PRTL_HEAP_COMMIT_ROUTINE )(_In_ PVOID Base, _Inout_ PVOID *CommitAddress, _Inout_ PSIZE_T CommitSize)
 
typedef struct _RTL_HEAP_PARAMETERS RTL_HEAP_PARAMETERS
 
typedef struct
_RTL_HEAP_PARAMETERS
PRTL_HEAP_PARAMETERS
 
typedef struct _RTL_HEAP_TAG_INFO RTL_HEAP_TAG_INFO
 
typedef struct _RTL_HEAP_TAG_INFOPRTL_HEAP_TAG_INFO
 
typedef NTSTATUS(NTAPI * PRTL_ENUM_HEAPS_ROUTINE )(_In_ PVOID HeapHandle, _In_ PVOID Parameter)
 
typedef struct
_RTL_HEAP_USAGE_ENTRY 
RTL_HEAP_USAGE_ENTRY
 
typedef struct
_RTL_HEAP_USAGE_ENTRY
PRTL_HEAP_USAGE_ENTRY
 
typedef struct _RTL_HEAP_USAGE RTL_HEAP_USAGE
 
typedef struct _RTL_HEAP_USAGEPRTL_HEAP_USAGE
 
typedef struct _RTL_HEAP_WALK_ENTRY RTL_HEAP_WALK_ENTRY
 
typedef struct
_RTL_HEAP_WALK_ENTRY
PRTL_HEAP_WALK_ENTRY
 
typedef NTSTATUS(NTAPI * PRTL_HEAP_LEAK_ENUMERATION_ROUTINE )(_In_ LONG Reserved, _In_ PVOID HeapHandle, _In_ PVOID BaseAddress, _In_ SIZE_T BlockSize, _In_ ULONG StackTraceDepth, _In_ PVOID *StackTrace)
 
typedef struct
_HEAP_DEBUGGING_INFORMATION 
HEAP_DEBUGGING_INFORMATION
 
typedef struct
_HEAP_DEBUGGING_INFORMATION
PHEAP_DEBUGGING_INFORMATION
 
typedef struct
_RTL_MEMORY_ZONE_SEGMENT 
RTL_MEMORY_ZONE_SEGMENT
 
typedef struct
_RTL_MEMORY_ZONE_SEGMENT
PRTL_MEMORY_ZONE_SEGMENT
 
typedef struct _RTL_MEMORY_ZONE RTL_MEMORY_ZONE
 
typedef struct _RTL_MEMORY_ZONEPRTL_MEMORY_ZONE
 
typedef struct
_RTL_PROCESS_VERIFIER_OPTIONS 
RTL_PROCESS_VERIFIER_OPTIONS
 
typedef struct
_RTL_PROCESS_VERIFIER_OPTIONS
PRTL_PROCESS_VERIFIER_OPTIONS
 
typedef struct
_RTL_DEBUG_INFORMATION 
RTL_DEBUG_INFORMATION
 
typedef struct
_RTL_DEBUG_INFORMATION
PRTL_DEBUG_INFORMATION
 
typedef struct
_PARSE_MESSAGE_CONTEXT 
PARSE_MESSAGE_CONTEXT
 
typedef struct
_PARSE_MESSAGE_CONTEXT
PPARSE_MESSAGE_CONTEXT
 
typedef struct _TIME_FIELDS TIME_FIELDS
 
typedef struct _TIME_FIELDSPTIME_FIELDS
 
typedef struct
_RTL_TIME_ZONE_INFORMATION 
RTL_TIME_ZONE_INFORMATION
 
typedef struct
_RTL_TIME_ZONE_INFORMATION
PRTL_TIME_ZONE_INFORMATION
 
typedef struct _RTL_BITMAP RTL_BITMAP
 
typedef struct _RTL_BITMAPPRTL_BITMAP
 
typedef struct _RTL_BITMAP_RUN RTL_BITMAP_RUN
 
typedef struct _RTL_BITMAP_RUNPRTL_BITMAP_RUN
 
typedef struct
_RTL_HANDLE_TABLE_ENTRY 
RTL_HANDLE_TABLE_ENTRY
 
typedef struct
_RTL_HANDLE_TABLE_ENTRY
PRTL_HANDLE_TABLE_ENTRY
 
typedef struct _RTL_HANDLE_TABLE RTL_HANDLE_TABLE
 
typedef struct _RTL_HANDLE_TABLEPRTL_HANDLE_TABLE
 
typedef enum
_OS_DEPLOYEMENT_STATE_VALUES 
OS_DEPLOYEMENT_STATE_VALUES
 
typedef NTSTATUS(NTAPI * PRTL_QUERY_REGISTRY_ROUTINE )(_In_ PWSTR ValueName, _In_ ULONG ValueType, _In_ PVOID ValueData, _In_ ULONG ValueLength, _In_ PVOID Context, _In_ PVOID EntryContext)
 
typedef struct
_RTL_QUERY_REGISTRY_TABLE 
RTL_QUERY_REGISTRY_TABLE
 
typedef struct
_RTL_QUERY_REGISTRY_TABLE
PRTL_QUERY_REGISTRY_TABLE
 
typedef union _RTL_ELEVATION_FLAGS RTL_ELEVATION_FLAGS
 
typedef union
_RTL_ELEVATION_FLAGS
PRTL_ELEVATION_FLAGS
 
typedef struct
_RTL_UNLOAD_EVENT_TRACE 
RTL_UNLOAD_EVENT_TRACE
 
typedef struct
_RTL_UNLOAD_EVENT_TRACE
PRTL_UNLOAD_EVENT_TRACE
 

Enumerations

enum  _TABLE_SEARCH_RESULT { TableEmptyTree, TableFoundNode, TableInsertAsLeft, TableInsertAsRight }
 
enum  _RTL_GENERIC_COMPARE_RESULTS { GenericLessThan, GenericGreaterThan, GenericEqual }
 
enum  _RTL_NORM_FORM {
  NormOther = 0x0, NormC = 0x1, NormD = 0x2, NormKC = 0x5,
  NormKD = 0x6, NormIdna = 0xd, DisallowUnassigned = 0x100, NormCDisallowUnassigned = 0x101,
  NormDDisallowUnassigned = 0x102, NormKCDisallowUnassigned = 0x105, NormKDDisallowUnassigned = 0x106, NormIdnaDisallowUnassigned = 0x10d
}
 
enum  _RTL_PATH_TYPE {
  RtlPathTypeUnknown, RtlPathTypeUncAbsolute, RtlPathTypeDriveAbsolute, RtlPathTypeDriveRelative,
  RtlPathTypeRooted, RtlPathTypeRelative, RtlPathTypeLocalDevice, RtlPathTypeRootLocalDevice
}
 
enum  _OS_DEPLOYEMENT_STATE_VALUES { OS_DEPLOYMENT_STANDARD = 1, OS_DEPLOYMENT_COMPACT }
 

Functions

FORCEINLINE VOID InitializeListHead (_Out_ PLIST_ENTRY ListHead)
 
_Check_return_ FORCEINLINE BOOLEAN IsListEmpty (_In_ PLIST_ENTRY ListHead)
 
FORCEINLINE BOOLEAN RemoveEntryList (_In_ PLIST_ENTRY Entry)
 
FORCEINLINE PLIST_ENTRY RemoveHeadList (_Inout_ PLIST_ENTRY ListHead)
 
FORCEINLINE PLIST_ENTRY RemoveTailList (_Inout_ PLIST_ENTRY ListHead)
 
FORCEINLINE VOID InsertTailList (_Inout_ PLIST_ENTRY ListHead, _Inout_ PLIST_ENTRY Entry)
 
FORCEINLINE VOID InsertHeadList (_Inout_ PLIST_ENTRY ListHead, _Inout_ PLIST_ENTRY Entry)
 
FORCEINLINE VOID AppendTailList (_Inout_ PLIST_ENTRY ListHead, _Inout_ PLIST_ENTRY ListToAppend)
 
FORCEINLINE PSINGLE_LIST_ENTRY PopEntryList (_Inout_ PSINGLE_LIST_ENTRY ListHead)
 
FORCEINLINE VOID PushEntryList (_Inout_ PSINGLE_LIST_ENTRY ListHead, _Inout_ PSINGLE_LIST_ENTRY Entry)
 
NTSYSAPI VOID NTAPI RtlInitializeGenericTableAvl (_Out_ PRTL_AVL_TABLE Table, _In_ PRTL_AVL_COMPARE_ROUTINE CompareRoutine, _In_ PRTL_AVL_ALLOCATE_ROUTINE AllocateRoutine, _In_ PRTL_AVL_FREE_ROUTINE FreeRoutine, _In_opt_ PVOID TableContext)
 
NTSYSAPI PVOID NTAPI RtlInsertElementGenericTableAvl (_In_ PRTL_AVL_TABLE Table, _In_reads_bytes_(BufferSize) PVOID Buffer, _In_ CLONG BufferSize, _Out_opt_ PBOOLEAN NewElement)
 
NTSYSAPI PVOID NTAPI RtlInsertElementGenericTableFullAvl (_In_ PRTL_AVL_TABLE Table, _In_reads_bytes_(BufferSize) PVOID Buffer, _In_ CLONG BufferSize, _Out_opt_ PBOOLEAN NewElement, _In_ PVOID NodeOrParent, _In_ TABLE_SEARCH_RESULT SearchResult)
 
NTSYSAPI BOOLEAN NTAPI RtlDeleteElementGenericTableAvl (_In_ PRTL_AVL_TABLE Table, _In_ PVOID Buffer)
 
_Check_return_ NTSYSAPI PVOID NTAPI RtlLookupElementGenericTableAvl (_In_ PRTL_AVL_TABLE Table, _In_ PVOID Buffer)
 
NTSYSAPI PVOID NTAPI RtlLookupElementGenericTableFullAvl (_In_ PRTL_AVL_TABLE Table, _In_ PVOID Buffer, _Out_ PVOID *NodeOrParent, _Out_ TABLE_SEARCH_RESULT *SearchResult)
 
_Check_return_ NTSYSAPI PVOID NTAPI RtlEnumerateGenericTableAvl (_In_ PRTL_AVL_TABLE Table, _In_ BOOLEAN Restart)
 
_Check_return_ NTSYSAPI PVOID NTAPI RtlEnumerateGenericTableWithoutSplayingAvl (_In_ PRTL_AVL_TABLE Table, _Inout_ PVOID *RestartKey)
 
_Check_return_ NTSYSAPI PVOID NTAPI RtlLookupFirstMatchingElementGenericTableAvl (_In_ PRTL_AVL_TABLE Table, _In_ PVOID Buffer, _Out_ PVOID *RestartKey)
 
_Check_return_ NTSYSAPI PVOID NTAPI RtlEnumerateGenericTableLikeADirectory (_In_ PRTL_AVL_TABLE Table, _In_opt_ PRTL_AVL_MATCH_FUNCTION MatchFunction, _In_opt_ PVOID MatchData, _In_ ULONG NextFlag, _Inout_ PVOID *RestartKey, _Inout_ PULONG DeleteCount, _In_ PVOID Buffer)
 
_Check_return_ NTSYSAPI PVOID NTAPI RtlGetElementGenericTableAvl (_In_ PRTL_AVL_TABLE Table, _In_ ULONG I)
 
NTSYSAPI ULONG NTAPI RtlNumberGenericTableElementsAvl (_In_ PRTL_AVL_TABLE Table)
 
_Check_return_ NTSYSAPI
BOOLEAN NTAPI 
RtlIsGenericTableEmptyAvl (_In_ PRTL_AVL_TABLE Table)
 
NTSYSAPI PRTL_SPLAY_LINKS NTAPI RtlSplay (_Inout_ PRTL_SPLAY_LINKS Links)
 
NTSYSAPI PRTL_SPLAY_LINKS NTAPI RtlDelete (_In_ PRTL_SPLAY_LINKS Links)
 
NTSYSAPI VOID NTAPI RtlDeleteNoSplay (_In_ PRTL_SPLAY_LINKS Links, _Inout_ PRTL_SPLAY_LINKS *Root)
 
_Check_return_ NTSYSAPI
PRTL_SPLAY_LINKS NTAPI 
RtlSubtreeSuccessor (_In_ PRTL_SPLAY_LINKS Links)
 
_Check_return_ NTSYSAPI
PRTL_SPLAY_LINKS NTAPI 
RtlSubtreePredecessor (_In_ PRTL_SPLAY_LINKS Links)
 
_Check_return_ NTSYSAPI
PRTL_SPLAY_LINKS NTAPI 
RtlRealSuccessor (_In_ PRTL_SPLAY_LINKS Links)
 
_Check_return_ NTSYSAPI
PRTL_SPLAY_LINKS NTAPI 
RtlRealPredecessor (_In_ PRTL_SPLAY_LINKS Links)
 
typedef RTL_GENERIC_COMPARE_RESULTS (NTAPI *PRTL_GENERIC_COMPARE_ROUTINE)(_In_ struct _RTL_GENERIC_TABLE *Table
 
NTSYSAPI VOID NTAPI RtlInitializeGenericTable (_Out_ PRTL_GENERIC_TABLE Table, _In_ PRTL_GENERIC_COMPARE_ROUTINE CompareRoutine, _In_ PRTL_GENERIC_ALLOCATE_ROUTINE AllocateRoutine, _In_ PRTL_GENERIC_FREE_ROUTINE FreeRoutine, _In_opt_ PVOID TableContext)
 
NTSYSAPI PVOID NTAPI RtlInsertElementGenericTable (_In_ PRTL_GENERIC_TABLE Table, _In_reads_bytes_(BufferSize) PVOID Buffer, _In_ CLONG BufferSize, _Out_opt_ PBOOLEAN NewElement)
 
NTSYSAPI PVOID NTAPI RtlInsertElementGenericTableFull (_In_ PRTL_GENERIC_TABLE Table, _In_reads_bytes_(BufferSize) PVOID Buffer, _In_ CLONG BufferSize, _Out_opt_ PBOOLEAN NewElement, _In_ PVOID NodeOrParent, _In_ TABLE_SEARCH_RESULT SearchResult)
 
NTSYSAPI BOOLEAN NTAPI RtlDeleteElementGenericTable (_In_ PRTL_GENERIC_TABLE Table, _In_ PVOID Buffer)
 
_Check_return_ NTSYSAPI PVOID NTAPI RtlLookupElementGenericTable (_In_ PRTL_GENERIC_TABLE Table, _In_ PVOID Buffer)
 
NTSYSAPI PVOID NTAPI RtlLookupElementGenericTableFull (_In_ PRTL_GENERIC_TABLE Table, _In_ PVOID Buffer, _Out_ PVOID *NodeOrParent, _Out_ TABLE_SEARCH_RESULT *SearchResult)
 
_Check_return_ NTSYSAPI PVOID NTAPI RtlEnumerateGenericTable (_In_ PRTL_GENERIC_TABLE Table, _In_ BOOLEAN Restart)
 
_Check_return_ NTSYSAPI PVOID NTAPI RtlEnumerateGenericTableWithoutSplaying (_In_ PRTL_GENERIC_TABLE Table, _Inout_ PVOID *RestartKey)
 
_Check_return_ NTSYSAPI PVOID NTAPI RtlGetElementGenericTable (_In_ PRTL_GENERIC_TABLE Table, _In_ ULONG I)
 
NTSYSAPI ULONG NTAPI RtlNumberGenericTableElements (_In_ PRTL_GENERIC_TABLE Table)
 
_Check_return_ NTSYSAPI
BOOLEAN NTAPI 
RtlIsGenericTableEmpty (_In_ PRTL_GENERIC_TABLE Table)
 
NTSYSAPI VOID NTAPI RtlRbInsertNodeEx (_In_ PRTL_RB_TREE Tree, _In_opt_ PRTL_BALANCED_NODE Parent, _In_ BOOLEAN Right, _Out_ PRTL_BALANCED_NODE Node)
 
NTSYSAPI VOID NTAPI RtlRbRemoveNode (_In_ PRTL_RB_TREE Tree, _In_ PRTL_BALANCED_NODE Node)
 
FORCEINLINE VOID RtlInitHashTableContext (_Inout_ PRTL_DYNAMIC_HASH_TABLE_CONTEXT Context)
 
FORCEINLINE VOID RtlInitHashTableContextFromEnumerator (_Inout_ PRTL_DYNAMIC_HASH_TABLE_CONTEXT Context, _In_ PRTL_DYNAMIC_HASH_TABLE_ENUMERATOR Enumerator)
 
FORCEINLINE VOID RtlReleaseHashTableContext (_Inout_ PRTL_DYNAMIC_HASH_TABLE_CONTEXT Context)
 
FORCEINLINE ULONG RtlTotalBucketsHashTable (_In_ PRTL_DYNAMIC_HASH_TABLE HashTable)
 
FORCEINLINE ULONG RtlNonEmptyBucketsHashTable (_In_ PRTL_DYNAMIC_HASH_TABLE HashTable)
 
FORCEINLINE ULONG RtlEmptyBucketsHashTable (_In_ PRTL_DYNAMIC_HASH_TABLE HashTable)
 
FORCEINLINE ULONG RtlTotalEntriesHashTable (_In_ PRTL_DYNAMIC_HASH_TABLE HashTable)
 
FORCEINLINE ULONG RtlActiveEnumeratorsHashTable (_In_ PRTL_DYNAMIC_HASH_TABLE HashTable)
 
_Must_inspect_result_ NTSYSAPI
BOOLEAN NTAPI 
RtlCreateHashTable (_Inout_ _When_(*HashTable==NULL, __drv_allocatesMem(Mem)) PRTL_DYNAMIC_HASH_TABLE *HashTable, _In_ ULONG Shift, _In_ _Reserved_ ULONG Flags)
 
NTSYSAPI VOID NTAPI RtlDeleteHashTable (_In_ PRTL_DYNAMIC_HASH_TABLE HashTable)
 
NTSYSAPI BOOLEAN NTAPI RtlInsertEntryHashTable (_In_ PRTL_DYNAMIC_HASH_TABLE HashTable, _In_ PRTL_DYNAMIC_HASH_TABLE_ENTRY Entry, _In_ ULONG_PTR Signature, _Inout_opt_ PRTL_DYNAMIC_HASH_TABLE_CONTEXT Context)
 
NTSYSAPI BOOLEAN NTAPI RtlRemoveEntryHashTable (_In_ PRTL_DYNAMIC_HASH_TABLE HashTable, _In_ PRTL_DYNAMIC_HASH_TABLE_ENTRY Entry, _Inout_opt_ PRTL_DYNAMIC_HASH_TABLE_CONTEXT Context)
 
_Must_inspect_result_ NTSYSAPI
PRTL_DYNAMIC_HASH_TABLE_ENTRY
NTAPI 
RtlLookupEntryHashTable (_In_ PRTL_DYNAMIC_HASH_TABLE HashTable, _In_ ULONG_PTR Signature, _Out_opt_ PRTL_DYNAMIC_HASH_TABLE_CONTEXT Context)
 
_Must_inspect_result_ NTSYSAPI
PRTL_DYNAMIC_HASH_TABLE_ENTRY
NTAPI 
RtlGetNextEntryHashTable (_In_ PRTL_DYNAMIC_HASH_TABLE HashTable, _In_ PRTL_DYNAMIC_HASH_TABLE_CONTEXT Context)
 
NTSYSAPI BOOLEAN NTAPI RtlInitEnumerationHashTable (_In_ PRTL_DYNAMIC_HASH_TABLE HashTable, _Out_ PRTL_DYNAMIC_HASH_TABLE_ENUMERATOR Enumerator)
 
_Must_inspect_result_ NTSYSAPI
PRTL_DYNAMIC_HASH_TABLE_ENTRY
NTAPI 
RtlEnumerateEntryHashTable (_In_ PRTL_DYNAMIC_HASH_TABLE HashTable, _Inout_ PRTL_DYNAMIC_HASH_TABLE_ENUMERATOR Enumerator)
 
NTSYSAPI VOID NTAPI RtlEndEnumerationHashTable (_In_ PRTL_DYNAMIC_HASH_TABLE HashTable, _Inout_ PRTL_DYNAMIC_HASH_TABLE_ENUMERATOR Enumerator)
 
NTSYSAPI BOOLEAN NTAPI RtlInitWeakEnumerationHashTable (_In_ PRTL_DYNAMIC_HASH_TABLE HashTable, _Out_ PRTL_DYNAMIC_HASH_TABLE_ENUMERATOR Enumerator)
 
_Must_inspect_result_ NTSYSAPI
PRTL_DYNAMIC_HASH_TABLE_ENTRY
NTAPI 
RtlWeaklyEnumerateEntryHashTable (_In_ PRTL_DYNAMIC_HASH_TABLE HashTable, _Inout_ PRTL_DYNAMIC_HASH_TABLE_ENUMERATOR Enumerator)
 
NTSYSAPI VOID NTAPI RtlEndWeakEnumerationHashTable (_In_ PRTL_DYNAMIC_HASH_TABLE HashTable, _Inout_ PRTL_DYNAMIC_HASH_TABLE_ENUMERATOR Enumerator)
 
NTSYSAPI BOOLEAN NTAPI RtlExpandHashTable (_In_ PRTL_DYNAMIC_HASH_TABLE HashTable)
 
NTSYSAPI BOOLEAN NTAPI RtlContractHashTable (_In_ PRTL_DYNAMIC_HASH_TABLE HashTable)
 
NTSYSAPI BOOLEAN NTAPI RtlInitStrongEnumerationHashTable (_In_ PRTL_DYNAMIC_HASH_TABLE HashTable, _Out_ PRTL_DYNAMIC_HASH_TABLE_ENUMERATOR Enumerator)
 
_Must_inspect_result_ NTSYSAPI
PRTL_DYNAMIC_HASH_TABLE_ENTRY
NTAPI 
RtlStronglyEnumerateEntryHashTable (_In_ PRTL_DYNAMIC_HASH_TABLE HashTable, _Inout_ PRTL_DYNAMIC_HASH_TABLE_ENUMERATOR Enumerator)
 
NTSYSAPI VOID NTAPI RtlEndStrongEnumerationHashTable (_In_ PRTL_DYNAMIC_HASH_TABLE HashTable, _Inout_ PRTL_DYNAMIC_HASH_TABLE_ENUMERATOR Enumerator)
 
NTSYSAPI NTSTATUS NTAPI RtlInitializeCriticalSection (_Out_ PRTL_CRITICAL_SECTION CriticalSection)
 
NTSYSAPI NTSTATUS NTAPI RtlInitializeCriticalSectionAndSpinCount (_Inout_ PRTL_CRITICAL_SECTION CriticalSection, _In_ ULONG SpinCount)
 
NTSYSAPI NTSTATUS NTAPI RtlDeleteCriticalSection (_Inout_ PRTL_CRITICAL_SECTION CriticalSection)
 
NTSYSAPI NTSTATUS NTAPI RtlEnterCriticalSection (_Inout_ PRTL_CRITICAL_SECTION CriticalSection)
 
NTSYSAPI NTSTATUS NTAPI RtlLeaveCriticalSection (_Inout_ PRTL_CRITICAL_SECTION CriticalSection)
 
NTSYSAPI LOGICAL NTAPI RtlTryEnterCriticalSection (_Inout_ PRTL_CRITICAL_SECTION CriticalSection)
 
NTSYSAPI LOGICAL NTAPI RtlIsCriticalSectionLocked (_In_ PRTL_CRITICAL_SECTION CriticalSection)
 
NTSYSAPI LOGICAL NTAPI RtlIsCriticalSectionLockedByThread (_In_ PRTL_CRITICAL_SECTION CriticalSection)
 
NTSYSAPI ULONG NTAPI RtlGetCriticalSectionRecursionCount (_In_ PRTL_CRITICAL_SECTION CriticalSection)
 
NTSYSAPI ULONG NTAPI RtlSetCriticalSectionSpinCount (_Inout_ PRTL_CRITICAL_SECTION CriticalSection, _In_ ULONG SpinCount)
 
NTSYSAPI HANDLE NTAPI RtlQueryCriticalSectionOwner (_In_ HANDLE EventHandle)
 
NTSYSAPI VOID NTAPI RtlCheckForOrphanedCriticalSections (_In_ HANDLE hThread)
 
NTSYSAPI VOID NTAPI RtlInitializeResource (_Out_ PRTL_RESOURCE Resource)
 
NTSYSAPI VOID NTAPI RtlDeleteResource (_Inout_ PRTL_RESOURCE Resource)
 
NTSYSAPI BOOLEAN NTAPI RtlAcquireResourceShared (_Inout_ PRTL_RESOURCE Resource, _In_ BOOLEAN Wait)
 
NTSYSAPI BOOLEAN NTAPI RtlAcquireResourceExclusive (_Inout_ PRTL_RESOURCE Resource, _In_ BOOLEAN Wait)
 
NTSYSAPI VOID NTAPI RtlReleaseResource (_Inout_ PRTL_RESOURCE Resource)
 
NTSYSAPI VOID NTAPI RtlConvertSharedToExclusive (_Inout_ PRTL_RESOURCE Resource)
 
NTSYSAPI VOID NTAPI RtlConvertExclusiveToShared (_Inout_ PRTL_RESOURCE Resource)
 
NTSYSAPI VOID NTAPI RtlInitializeSRWLock (_Out_ PRTL_SRWLOCK SRWLock)
 
NTSYSAPI VOID NTAPI RtlAcquireSRWLockExclusive (_Inout_ PRTL_SRWLOCK SRWLock)
 
NTSYSAPI VOID NTAPI RtlAcquireSRWLockShared (_Inout_ PRTL_SRWLOCK SRWLock)
 
NTSYSAPI VOID NTAPI RtlReleaseSRWLockExclusive (_Inout_ PRTL_SRWLOCK SRWLock)
 
NTSYSAPI VOID NTAPI RtlReleaseSRWLockShared (_Inout_ PRTL_SRWLOCK SRWLock)
 
NTSYSAPI BOOLEAN NTAPI RtlTryAcquireSRWLockExclusive (_Inout_ PRTL_SRWLOCK SRWLock)
 
NTSYSAPI BOOLEAN NTAPI RtlTryAcquireSRWLockShared (_Inout_ PRTL_SRWLOCK SRWLock)
 
NTSYSAPI VOID NTAPI RtlAcquireReleaseSRWLockExclusive (_Inout_ PRTL_SRWLOCK SRWLock)
 
NTSYSAPI VOID NTAPI RtlInitializeConditionVariable (_Out_ PRTL_CONDITION_VARIABLE ConditionVariable)
 
NTSYSAPI NTSTATUS NTAPI RtlSleepConditionVariableCS (_Inout_ PRTL_CONDITION_VARIABLE ConditionVariable, _Inout_ PRTL_CRITICAL_SECTION CriticalSection, _In_opt_ PLARGE_INTEGER Timeout)
 
NTSYSAPI NTSTATUS NTAPI RtlSleepConditionVariableSRW (_Inout_ PRTL_CONDITION_VARIABLE ConditionVariable, _Inout_ PRTL_SRWLOCK SRWLock, _In_opt_ PLARGE_INTEGER Timeout, _In_ ULONG Flags)
 
NTSYSAPI VOID NTAPI RtlWakeConditionVariable (_Inout_ PRTL_CONDITION_VARIABLE ConditionVariable)
 
NTSYSAPI VOID NTAPI RtlWakeAllConditionVariable (_Inout_ PRTL_CONDITION_VARIABLE ConditionVariable)
 
NTSYSAPI NTSTATUS NTAPI RtlInitBarrier (_Out_ PRTL_BARRIER Barrier, _In_ ULONG TotalThreads, _In_ ULONG SpinCount)
 
NTSYSAPI NTSTATUS NTAPI RtlDeleteBarrier (_In_ PRTL_BARRIER Barrier)
 
NTSYSAPI BOOLEAN NTAPI RtlBarrier (_Inout_ PRTL_BARRIER Barrier, _In_ ULONG Flags)
 
NTSYSAPI BOOLEAN NTAPI RtlBarrierForDelete (_Inout_ PRTL_BARRIER Barrier, _In_ ULONG Flags)
 
FORCEINLINE VOID RtlInitString (_Out_ PSTRING DestinationString, _In_opt_ PSTR SourceString)
 
NTSYSAPI NTSTATUS NTAPI RtlInitStringEx (_Out_ PSTRING DestinationString, _In_opt_z_ PCSZ SourceString)
 
FORCEINLINE VOID RtlInitAnsiString (_Out_ PANSI_STRING DestinationString, _In_opt_ PSTR SourceString)
 
NTSYSAPI NTSTATUS NTAPI RtlInitAnsiStringEx (_Out_ PANSI_STRING DestinationString, _In_opt_z_ PCSZ SourceString)
 
NTSYSAPI VOID NTAPI RtlFreeAnsiString (_In_ PANSI_STRING AnsiString)
 
NTSYSAPI VOID NTAPI RtlFreeOemString (_In_ POEM_STRING OemString)
 
NTSYSAPI VOID NTAPI RtlCopyString (_In_ PSTRING DestinationString, _In_opt_ PSTRING SourceString)
 
NTSYSAPI CHAR NTAPI RtlUpperChar (_In_ CHAR Character)
 
_Must_inspect_result_ NTSYSAPI
LONG NTAPI 
RtlCompareString (_In_ PSTRING String1, _In_ PSTRING String2, _In_ BOOLEAN CaseInSensitive)
 
_Must_inspect_result_ NTSYSAPI
BOOLEAN NTAPI 
RtlEqualString (_In_ PSTRING String1, _In_ PSTRING String2, _In_ BOOLEAN CaseInSensitive)
 
_Must_inspect_result_ NTSYSAPI
BOOLEAN NTAPI 
RtlPrefixString (_In_ PSTRING String1, _In_ PSTRING String2, _In_ BOOLEAN CaseInSensitive)
 
NTSYSAPI NTSTATUS NTAPI RtlAppendStringToString (_In_ PSTRING Destination, _In_ PSTRING Source)
 
NTSYSAPI NTSTATUS NTAPI RtlAppendAsciizToString (_In_ PSTRING Destination, _In_opt_ PSTR Source)
 
NTSYSAPI VOID NTAPI RtlUpperString (_In_ PSTRING DestinationString, _In_ PSTRING SourceString)
 
FORCEINLINE VOID RtlInitUnicodeString (_Out_ PUNICODE_STRING DestinationString, _In_opt_ PWSTR SourceString)
 
NTSYSAPI NTSTATUS NTAPI RtlInitUnicodeStringEx (_Out_ PUNICODE_STRING DestinationString, _In_opt_ PWSTR SourceString)
 
NTSYSAPI BOOLEAN NTAPI RtlCreateUnicodeString (_Out_ PUNICODE_STRING DestinationString, _In_ PWSTR SourceString)
 
NTSYSAPI BOOLEAN NTAPI RtlCreateUnicodeStringFromAsciiz (_Out_ PUNICODE_STRING DestinationString, _In_ PSTR SourceString)
 
NTSYSAPI VOID NTAPI RtlFreeUnicodeString (_In_ PUNICODE_STRING UnicodeString)
 
NTSYSAPI NTSTATUS NTAPI RtlDuplicateUnicodeString (_In_ ULONG Flags, _In_ PUNICODE_STRING StringIn, _Out_ PUNICODE_STRING StringOut)
 
NTSYSAPI VOID NTAPI RtlCopyUnicodeString (_In_ PUNICODE_STRING DestinationString, _In_ PUNICODE_STRING SourceString)
 
NTSYSAPI WCHAR NTAPI RtlUpcaseUnicodeChar (_In_ WCHAR SourceCharacter)
 
NTSYSAPI WCHAR NTAPI RtlDowncaseUnicodeChar (_In_ WCHAR SourceCharacter)
 
_Must_inspect_result_ NTSYSAPI
LONG NTAPI 
RtlCompareUnicodeString (_In_ PUNICODE_STRING String1, _In_ PUNICODE_STRING String2, _In_ BOOLEAN CaseInSensitive)
 
_Must_inspect_result_ NTSYSAPI
LONG NTAPI 
RtlCompareUnicodeStrings (_In_reads_(String1Length) PWCH String1, _In_ SIZE_T String1Length, _In_reads_(String2Length) PWCH String2, _In_ SIZE_T String2Length, _In_ BOOLEAN CaseInSensitive)
 
_Must_inspect_result_ NTSYSAPI
BOOLEAN NTAPI 
RtlEqualUnicodeString (_In_ PUNICODE_STRING String1, _In_ PUNICODE_STRING String2, _In_ BOOLEAN CaseInSensitive)
 
NTSYSAPI NTSTATUS NTAPI RtlHashUnicodeString (_In_ PUNICODE_STRING String, _In_ BOOLEAN CaseInSensitive, _In_ ULONG HashAlgorithm, _Out_ PULONG HashValue)
 
NTSYSAPI NTSTATUS NTAPI RtlValidateUnicodeString (_In_ ULONG Flags, _In_ PUNICODE_STRING String)
 
_Must_inspect_result_ NTSYSAPI
BOOLEAN NTAPI 
RtlPrefixUnicodeString (_In_ PCUNICODE_STRING String1, _In_ PCUNICODE_STRING String2, _In_ BOOLEAN CaseInSensitive)
 
_Must_inspect_result_ NTSYSAPI
BOOLEAN NTAPI 
RtlSuffixUnicodeString (_In_ PCUNICODE_STRING String1, _In_ PCUNICODE_STRING String2, _In_ BOOLEAN CaseInSensitive)
 
NTSYSAPI NTSTATUS NTAPI RtlFindCharInUnicodeString (_In_ ULONG Flags, _In_ PUNICODE_STRING StringToSearch, _In_ PUNICODE_STRING CharSet, _Out_ PUSHORT NonInclusivePrefixLength)
 
NTSYSAPI NTSTATUS NTAPI RtlAppendUnicodeStringToString (_In_ PUNICODE_STRING Destination, _In_ PUNICODE_STRING Source)
 
NTSYSAPI NTSTATUS NTAPI RtlAppendUnicodeToString (_In_ PUNICODE_STRING Destination, _In_opt_ PWSTR Source)
 
NTSYSAPI NTSTATUS NTAPI RtlUpcaseUnicodeString (_Inout_ PUNICODE_STRING DestinationString, _In_ PUNICODE_STRING SourceString, _In_ BOOLEAN AllocateDestinationString)
 
NTSYSAPI NTSTATUS NTAPI RtlDowncaseUnicodeString (_Inout_ PUNICODE_STRING DestinationString, _In_ PUNICODE_STRING SourceString, _In_ BOOLEAN AllocateDestinationString)
 
NTSYSAPI VOID NTAPI RtlEraseUnicodeString (_Inout_ PUNICODE_STRING String)
 
NTSYSAPI NTSTATUS NTAPI RtlAnsiStringToUnicodeString (_Inout_ PUNICODE_STRING DestinationString, _In_ PANSI_STRING SourceString, _In_ BOOLEAN AllocateDestinationString)
 
NTSYSAPI NTSTATUS NTAPI RtlUnicodeStringToAnsiString (_Inout_ PANSI_STRING DestinationString, _In_ PUNICODE_STRING SourceString, _In_ BOOLEAN AllocateDestinationString)
 
NTSYSAPI WCHAR NTAPI RtlAnsiCharToUnicodeChar (_Inout_ PUCHAR *SourceCharacter)
 
NTSYSAPI NTSTATUS NTAPI RtlUpcaseUnicodeStringToAnsiString (_Inout_ PANSI_STRING DestinationString, _In_ PUNICODE_STRING SourceString, _In_ BOOLEAN AllocateDestinationString)
 
NTSYSAPI NTSTATUS NTAPI RtlOemStringToUnicodeString (_Inout_ PUNICODE_STRING DestinationString, _In_ POEM_STRING SourceString, _In_ BOOLEAN AllocateDestinationString)
 
NTSYSAPI NTSTATUS NTAPI RtlUnicodeStringToOemString (_Inout_ POEM_STRING DestinationString, _In_ PUNICODE_STRING SourceString, _In_ BOOLEAN AllocateDestinationString)
 
NTSYSAPI NTSTATUS NTAPI RtlUpcaseUnicodeStringToOemString (_Inout_ POEM_STRING DestinationString, _In_ PUNICODE_STRING SourceString, _In_ BOOLEAN AllocateDestinationString)
 
NTSYSAPI NTSTATUS NTAPI RtlUnicodeStringToCountedOemString (_Inout_ POEM_STRING DestinationString, _In_ PUNICODE_STRING SourceString, _In_ BOOLEAN AllocateDestinationString)
 
NTSYSAPI NTSTATUS NTAPI RtlUpcaseUnicodeStringToCountedOemString (_Inout_ POEM_STRING DestinationString, _In_ PUNICODE_STRING SourceString, _In_ BOOLEAN AllocateDestinationString)
 
NTSYSAPI NTSTATUS NTAPI RtlMultiByteToUnicodeN (_Out_writes_bytes_to_(MaxBytesInUnicodeString,*BytesInUnicodeString) PWCH UnicodeString, _In_ ULONG MaxBytesInUnicodeString, _Out_opt_ PULONG BytesInUnicodeString, _In_reads_bytes_(BytesInMultiByteString) PSTR MultiByteString, _In_ ULONG BytesInMultiByteString)
 
NTSYSAPI NTSTATUS NTAPI RtlMultiByteToUnicodeSize (_Out_ PULONG BytesInUnicodeString, _In_reads_bytes_(BytesInMultiByteString) PSTR MultiByteString, _In_ ULONG BytesInMultiByteString)
 
NTSYSAPI NTSTATUS NTAPI RtlUnicodeToMultiByteN (_Out_writes_bytes_to_(MaxBytesInMultiByteString,*BytesInMultiByteString) PCHAR MultiByteString, _In_ ULONG MaxBytesInMultiByteString, _Out_opt_ PULONG BytesInMultiByteString, _In_reads_bytes_(BytesInUnicodeString) PWCH UnicodeString, _In_ ULONG BytesInUnicodeString)
 
NTSYSAPI NTSTATUS NTAPI RtlUnicodeToMultiByteSize (_Out_ PULONG BytesInMultiByteString, _In_reads_bytes_(BytesInUnicodeString) PWCH UnicodeString, _In_ ULONG BytesInUnicodeString)
 
NTSYSAPI NTSTATUS NTAPI RtlUpcaseUnicodeToMultiByteN (_Out_writes_bytes_to_(MaxBytesInMultiByteString,*BytesInMultiByteString) PCHAR MultiByteString, _In_ ULONG MaxBytesInMultiByteString, _Out_opt_ PULONG BytesInMultiByteString, _In_reads_bytes_(BytesInUnicodeString) PWCH UnicodeString, _In_ ULONG BytesInUnicodeString)
 
NTSYSAPI NTSTATUS NTAPI RtlOemToUnicodeN (_Out_writes_bytes_to_(MaxBytesInUnicodeString,*BytesInUnicodeString) PWSTR UnicodeString, _In_ ULONG MaxBytesInUnicodeString, _Out_opt_ PULONG BytesInUnicodeString, _In_reads_bytes_(BytesInOemString) PCH OemString, _In_ ULONG BytesInOemString)
 
NTSYSAPI NTSTATUS NTAPI RtlUnicodeToOemN (_Out_writes_bytes_to_(MaxBytesInOemString,*BytesInOemString) PCHAR OemString, _In_ ULONG MaxBytesInOemString, _Out_opt_ PULONG BytesInOemString, _In_reads_bytes_(BytesInUnicodeString) PWCH UnicodeString, _In_ ULONG BytesInUnicodeString)
 
NTSYSAPI NTSTATUS NTAPI RtlUpcaseUnicodeToOemN (_Out_writes_bytes_to_(MaxBytesInOemString,*BytesInOemString) PCHAR OemString, _In_ ULONG MaxBytesInOemString, _Out_opt_ PULONG BytesInOemString, _In_reads_bytes_(BytesInUnicodeString) PWCH UnicodeString, _In_ ULONG BytesInUnicodeString)
 
NTSYSAPI NTSTATUS NTAPI RtlConsoleMultiByteToUnicodeN (_Out_writes_bytes_to_(MaxBytesInUnicodeString,*BytesInUnicodeString) PWCH UnicodeString, _In_ ULONG MaxBytesInUnicodeString, _Out_opt_ PULONG BytesInUnicodeString, _In_reads_bytes_(BytesInMultiByteString) PCH MultiByteString, _In_ ULONG BytesInMultiByteString, _Out_ PULONG pdwSpecialChar)
 
NTSYSAPI NTSTATUS NTAPI RtlUTF8ToUnicodeN (_Out_writes_bytes_to_(UnicodeStringMaxByteCount,*UnicodeStringActualByteCount) PWSTR UnicodeStringDestination, _In_ ULONG UnicodeStringMaxByteCount, _Out_ PULONG UnicodeStringActualByteCount, _In_reads_bytes_(UTF8StringByteCount) PCH UTF8StringSource, _In_ ULONG UTF8StringByteCount)
 
NTSYSAPI NTSTATUS NTAPI RtlUnicodeToUTF8N (_Out_writes_bytes_to_(UTF8StringMaxByteCount,*UTF8StringActualByteCount) PCHAR UTF8StringDestination, _In_ ULONG UTF8StringMaxByteCount, _Out_ PULONG UTF8StringActualByteCount, _In_reads_bytes_(UnicodeStringByteCount) PWCH UnicodeStringSource, _In_ ULONG UnicodeStringByteCount)
 
NTSYSAPI NTSTATUS NTAPI RtlCustomCPToUnicodeN (_In_ PCPTABLEINFO CustomCP, _Out_writes_bytes_to_(MaxBytesInUnicodeString,*BytesInUnicodeString) PWCH UnicodeString, _In_ ULONG MaxBytesInUnicodeString, _Out_opt_ PULONG BytesInUnicodeString, _In_reads_bytes_(BytesInCustomCPString) PCH CustomCPString, _In_ ULONG BytesInCustomCPString)
 
NTSYSAPI NTSTATUS NTAPI RtlUnicodeToCustomCPN (_In_ PCPTABLEINFO CustomCP, _Out_writes_bytes_to_(MaxBytesInCustomCPString,*BytesInCustomCPString) PCH CustomCPString, _In_ ULONG MaxBytesInCustomCPString, _Out_opt_ PULONG BytesInCustomCPString, _In_reads_bytes_(BytesInUnicodeString) PWCH UnicodeString, _In_ ULONG BytesInUnicodeString)
 
NTSYSAPI NTSTATUS NTAPI RtlUpcaseUnicodeToCustomCPN (_In_ PCPTABLEINFO CustomCP, _Out_writes_bytes_to_(MaxBytesInCustomCPString,*BytesInCustomCPString) PCH CustomCPString, _In_ ULONG MaxBytesInCustomCPString, _Out_opt_ PULONG BytesInCustomCPString, _In_reads_bytes_(BytesInUnicodeString) PWCH UnicodeString, _In_ ULONG BytesInUnicodeString)
 
NTSYSAPI VOID NTAPI RtlInitCodePageTable (_In_ PUSHORT TableBase, _Out_ PCPTABLEINFO CodePageTable)
 
NTSYSAPI VOID NTAPI RtlInitNlsTables (_In_ PUSHORT AnsiNlsBase, _In_ PUSHORT OemNlsBase, _In_ PUSHORT LanguageNlsBase, _Out_ PNLSTABLEINFO TableInfo)
 
NTSYSAPI VOID NTAPI RtlResetRtlTranslations (_In_ PNLSTABLEINFO TableInfo)
 
NTSYSAPI BOOLEAN NTAPI RtlIsTextUnicode (_In_ PVOID Buffer, _In_ ULONG Size, _Inout_opt_ PULONG Result)
 
NTSYSAPI NTSTATUS NTAPI RtlNormalizeString (_In_ ULONG NormForm, _In_ PCWSTR SourceString, _In_ LONG SourceStringLength, _Out_writes_to_(*DestinationStringLength,*DestinationStringLength) PWSTR DestinationString, _Inout_ PLONG DestinationStringLength)
 
NTSYSAPI NTSTATUS NTAPI RtlIsNormalizedString (_In_ ULONG NormForm, _In_ PCWSTR SourceString, _In_ LONG SourceStringLength, _Out_ PBOOLEAN Normalized)
 
NTSYSAPI BOOLEAN NTAPI RtlIsNameInExpression (_In_ PUNICODE_STRING Expression, _In_ PUNICODE_STRING Name, _In_ BOOLEAN IgnoreCase, _In_opt_ PWCH UpcaseTable)
 
NTSYSAPI BOOLEAN NTAPI RtlEqualDomainName (_In_ PUNICODE_STRING String1, _In_ PUNICODE_STRING String2)
 
NTSYSAPI BOOLEAN NTAPI RtlEqualComputerName (_In_ PUNICODE_STRING String1, _In_ PUNICODE_STRING String2)
 
NTSYSAPI NTSTATUS NTAPI RtlDnsHostNameToComputerName (_Out_ PUNICODE_STRING ComputerNameString, _In_ PCUNICODE_STRING DnsHostNameString, _In_ BOOLEAN AllocateComputerNameString)
 
NTSYSAPI NTSTATUS NTAPI RtlStringFromGUID (_In_ PGUID Guid, _Out_ PUNICODE_STRING GuidString)
 
NTSYSAPI NTSTATUS NTAPI RtlGUIDFromString (_In_ PUNICODE_STRING GuidString, _Out_ PGUID Guid)
 
NTSYSAPI LONG NTAPI RtlCompareAltitudes (_In_ PUNICODE_STRING Altitude1, _In_ PUNICODE_STRING Altitude2)
 
NTSYSAPI VOID NTAPI PfxInitialize (_Out_ PPREFIX_TABLE PrefixTable)
 
NTSYSAPI BOOLEAN NTAPI PfxInsertPrefix (_In_ PPREFIX_TABLE PrefixTable, _In_ PSTRING Prefix, _Out_ PPREFIX_TABLE_ENTRY PrefixTableEntry)
 
NTSYSAPI VOID NTAPI PfxRemovePrefix (_In_ PPREFIX_TABLE PrefixTable, _In_ PPREFIX_TABLE_ENTRY PrefixTableEntry)
 
NTSYSAPI PPREFIX_TABLE_ENTRY NTAPI PfxFindPrefix (_In_ PPREFIX_TABLE PrefixTable, _In_ PSTRING FullName)
 
NTSYSAPI VOID NTAPI RtlInitializeUnicodePrefix (_Out_ PUNICODE_PREFIX_TABLE PrefixTable)
 
NTSYSAPI BOOLEAN NTAPI RtlInsertUnicodePrefix (_In_ PUNICODE_PREFIX_TABLE PrefixTable, _In_ PUNICODE_STRING Prefix, _Out_ PUNICODE_PREFIX_TABLE_ENTRY PrefixTableEntry)
 
NTSYSAPI VOID NTAPI RtlRemoveUnicodePrefix (_In_ PUNICODE_PREFIX_TABLE PrefixTable, _In_ PUNICODE_PREFIX_TABLE_ENTRY PrefixTableEntry)
 
NTSYSAPI
PUNICODE_PREFIX_TABLE_ENTRY
NTAPI 
RtlFindUnicodePrefix (_In_ PUNICODE_PREFIX_TABLE PrefixTable, _In_ PUNICODE_STRING FullName, _In_ ULONG CaseInsensitiveIndex)
 
NTSYSAPI
PUNICODE_PREFIX_TABLE_ENTRY
NTAPI 
RtlNextUnicodePrefix (_In_ PUNICODE_PREFIX_TABLE PrefixTable, _In_ BOOLEAN Restart)
 
NTSYSAPI NTSTATUS NTAPI RtlGetCompressionWorkSpaceSize (_In_ USHORT CompressionFormatAndEngine, _Out_ PULONG CompressBufferWorkSpaceSize, _Out_ PULONG CompressFragmentWorkSpaceSize)
 
NTSYSAPI NTSTATUS NTAPI RtlCompressBuffer (_In_ USHORT CompressionFormatAndEngine, _In_reads_bytes_(UncompressedBufferSize) PUCHAR UncompressedBuffer, _In_ ULONG UncompressedBufferSize, _Out_writes_bytes_to_(CompressedBufferSize,*FinalCompressedSize) PUCHAR CompressedBuffer, _In_ ULONG CompressedBufferSize, _In_ ULONG UncompressedChunkSize, _Out_ PULONG FinalCompressedSize, _In_ PVOID WorkSpace)
 
NTSYSAPI NTSTATUS NTAPI RtlDecompressBuffer (_In_ USHORT CompressionFormat, _Out_writes_bytes_to_(UncompressedBufferSize,*FinalUncompressedSize) PUCHAR UncompressedBuffer, _In_ ULONG UncompressedBufferSize, _In_reads_bytes_(CompressedBufferSize) PUCHAR CompressedBuffer, _In_ ULONG CompressedBufferSize, _Out_ PULONG FinalUncompressedSize)
 
NTSYSAPI NTSTATUS NTAPI RtlDecompressBufferEx (_In_ USHORT CompressionFormat, _Out_writes_bytes_to_(UncompressedBufferSize,*FinalUncompressedSize) PUCHAR UncompressedBuffer, _In_ ULONG UncompressedBufferSize, _In_reads_bytes_(CompressedBufferSize) PUCHAR CompressedBuffer, _In_ ULONG CompressedBufferSize, _Out_ PULONG FinalUncompressedSize, _In_ PVOID WorkSpace)
 
NTSYSAPI NTSTATUS NTAPI RtlDecompressFragment (_In_ USHORT CompressionFormat, _Out_writes_bytes_to_(UncompressedFragmentSize,*FinalUncompressedSize) PUCHAR UncompressedFragment, _In_ ULONG UncompressedFragmentSize, _In_reads_bytes_(CompressedBufferSize) PUCHAR CompressedBuffer, _In_ ULONG CompressedBufferSize, _In_range_(<, CompressedBufferSize) ULONG FragmentOffset, _Out_ PULONG FinalUncompressedSize, _In_ PVOID WorkSpace)
 
NTSYSAPI NTSTATUS NTAPI RtlDescribeChunk (_In_ USHORT CompressionFormat, _Inout_ PUCHAR *CompressedBuffer, _In_ PUCHAR EndOfCompressedBufferPlus1, _Out_ PUCHAR *ChunkBuffer, _Out_ PULONG ChunkSize)
 
NTSYSAPI NTSTATUS NTAPI RtlReserveChunk (_In_ USHORT CompressionFormat, _Inout_ PUCHAR *CompressedBuffer, _In_ PUCHAR EndOfCompressedBufferPlus1, _Out_ PUCHAR *ChunkBuffer, _In_ ULONG ChunkSize)
 
NTSYSAPI NTSTATUS NTAPI RtlDecompressChunks (_Out_writes_bytes_(UncompressedBufferSize) PUCHAR UncompressedBuffer, _In_ ULONG UncompressedBufferSize, _In_reads_bytes_(CompressedBufferSize) PUCHAR CompressedBuffer, _In_ ULONG CompressedBufferSize, _In_reads_bytes_(CompressedTailSize) PUCHAR CompressedTail, _In_ ULONG CompressedTailSize, _In_ PCOMPRESSED_DATA_INFO CompressedDataInfo)
 
NTSYSAPI NTSTATUS NTAPI RtlCompressChunks (_In_reads_bytes_(UncompressedBufferSize) PUCHAR UncompressedBuffer, _In_ ULONG UncompressedBufferSize, _Out_writes_bytes_(CompressedBufferSize) PUCHAR CompressedBuffer, _In_range_(>=,(UncompressedBufferSize-(UncompressedBufferSize/16))) ULONG CompressedBufferSize, _Inout_updates_bytes_(CompressedDataInfoLength) PCOMPRESSED_DATA_INFO CompressedDataInfo, _In_range_(>, sizeof(COMPRESSED_DATA_INFO)) ULONG CompressedDataInfoLength, _In_ PVOID WorkSpace)
 
NTSYSAPI NTSTATUS NTAPI RtlConvertLCIDToString (_In_ LCID LcidValue, _In_ ULONG Base, _In_ ULONG Padding, _Out_writes_(Size) PWSTR pResultBuf, _In_ ULONG Size)
 
NTSYSAPI BOOLEAN NTAPI RtlIsValidLocaleName (_In_ PWSTR LocaleName, _In_ ULONG Flags)
 
NTSYSAPI NTSTATUS NTAPI RtlGetParentLocaleName (_In_ PWSTR LocaleName, _Inout_ PUNICODE_STRING ParentLocaleName, _In_ ULONG Flags, _In_ BOOLEAN AllocateDestinationString)
 
NTSYSAPI NTSTATUS NTAPI RtlLcidToLocaleName (_In_ LCID lcid, _Inout_ PUNICODE_STRING LocaleName, _In_ ULONG Flags, _In_ BOOLEAN AllocateDestinationString)
 
NTSYSAPI NTSTATUS NTAPI RtlLocaleNameToLcid (_In_ PWSTR LocaleName, _Out_ PLCID lcid, _In_ ULONG Flags)
 
NTSYSAPI BOOLEAN NTAPI RtlLCIDToCultureName (_In_ LCID Lcid, _Inout_ PUNICODE_STRING String)
 
NTSYSAPI BOOLEAN NTAPI RtlCultureNameToLCID (_In_ PUNICODE_STRING String, _Out_ PLCID Lcid)
 
NTSYSAPI VOID NTAPI RtlCleanUpTEBLangLists (VOID)
 
NTSYSAPI NTSTATUS NTAPI RtlGetLocaleFileMappingAddress (_Out_ PVOID *BaseAddress, _Out_ PLCID DefaultLocaleId, _Out_ PLARGE_INTEGER DefaultCasingTableSize)
 
NTSYSAPI VOID NTAPI RtlAcquirePebLock (VOID)
 
NTSYSAPI VOID NTAPI RtlReleasePebLock (VOID)
 
NTSYSAPI LOGICAL NTAPI RtlTryAcquirePebLock (VOID)
 
NTSYSAPI NTSTATUS NTAPI RtlAllocateFromPeb (_In_ ULONG Size, _Out_ PVOID *Block)
 
NTSYSAPI NTSTATUS NTAPI RtlFreeToPeb (_In_ PVOID Block, _In_ ULONG Size)
 
NTSYSAPI NTSTATUS NTAPI RtlCreateProcessParameters (_Out_ PRTL_USER_PROCESS_PARAMETERS *pProcessParameters, _In_ PUNICODE_STRING ImagePathName, _In_opt_ PUNICODE_STRING DllPath, _In_opt_ PUNICODE_STRING CurrentDirectory, _In_opt_ PUNICODE_STRING CommandLine, _In_opt_ PVOID Environment, _In_opt_ PUNICODE_STRING WindowTitle, _In_opt_ PUNICODE_STRING DesktopInfo, _In_opt_ PUNICODE_STRING ShellInfo, _In_opt_ PUNICODE_STRING RuntimeData)
 
NTSYSAPI NTSTATUS NTAPI RtlCreateProcessParametersEx (_Out_ PRTL_USER_PROCESS_PARAMETERS *pProcessParameters, _In_ PUNICODE_STRING ImagePathName, _In_opt_ PUNICODE_STRING DllPath, _In_opt_ PUNICODE_STRING CurrentDirectory, _In_opt_ PUNICODE_STRING CommandLine, _In_opt_ PVOID Environment, _In_opt_ PUNICODE_STRING WindowTitle, _In_opt_ PUNICODE_STRING DesktopInfo, _In_opt_ PUNICODE_STRING ShellInfo, _In_opt_ PUNICODE_STRING RuntimeData, _In_ ULONG Flags)
 
NTSYSAPI NTSTATUS NTAPI RtlDestroyProcessParameters (_In_ _Post_invalid_ PRTL_USER_PROCESS_PARAMETERS ProcessParameters)
 
NTSYSAPI
PRTL_USER_PROCESS_PARAMETERS
NTAPI 
RtlNormalizeProcessParams (_Inout_ PRTL_USER_PROCESS_PARAMETERS ProcessParameters)
 
NTSYSAPI
PRTL_USER_PROCESS_PARAMETERS
NTAPI 
RtlDeNormalizeProcessParams (_Inout_ PRTL_USER_PROCESS_PARAMETERS ProcessParameters)
 
NTSYSAPI NTSTATUS NTAPI RtlCreateUserProcess (_In_ PUNICODE_STRING NtImagePathName, _In_ ULONG AttributesDeprecated, _In_ PRTL_USER_PROCESS_PARAMETERS ProcessParameters, _In_opt_ PSECURITY_DESCRIPTOR ProcessSecurityDescriptor, _In_opt_ PSECURITY_DESCRIPTOR ThreadSecurityDescriptor, _In_opt_ HANDLE ParentProcess, _In_ BOOLEAN InheritHandles, _In_opt_ HANDLE DebugPort, _In_opt_ HANDLE TokenHandle, _Out_ PRTL_USER_PROCESS_INFORMATION ProcessInformation)
 
DECLSPEC_NORETURN NTSYSAPI
VOID NTAPI 
RtlExitUserProcess (_In_ NTSTATUS ExitStatus)
 
NTSYSAPI NTSTATUS NTAPI RtlCloneUserProcess (_In_ ULONG ProcessFlags, _In_opt_ PSECURITY_DESCRIPTOR ProcessSecurityDescriptor, _In_opt_ PSECURITY_DESCRIPTOR ThreadSecurityDescriptor, _In_opt_ HANDLE DebugPort, _Out_ PRTL_USER_PROCESS_INFORMATION ProcessInformation)
 
NTSYSAPI VOID NTAPI RtlUpdateClonedCriticalSection (_Inout_ PRTL_CRITICAL_SECTION CriticalSection)
 
NTSYSAPI VOID NTAPI RtlUpdateClonedSRWLock (_Inout_ PRTL_SRWLOCK SRWLock, _In_ LOGICAL Shared)
 
NTSYSAPI NTSTATUS NTAPI RtlCreateProcessReflection (_In_ HANDLE ProcessHandle, _In_ ULONG Flags, _In_opt_ PVOID StartRoutine, _In_opt_ PVOID StartContext, _In_opt_ HANDLE EventHandle, _Out_opt_ PRTLP_PROCESS_REFLECTION_REFLECTION_INFORMATION ReflectionInformation)
 
NTSYSAPI NTSTATUS STDAPIVCALLTYPE RtlSetProcessIsCritical (_In_ BOOLEAN NewValue, _Out_opt_ PBOOLEAN OldValue, _In_ BOOLEAN CheckFlag)
 
NTSYSAPI NTSTATUS STDAPIVCALLTYPE RtlSetThreadIsCritical (_In_ BOOLEAN NewValue, _Out_opt_ PBOOLEAN OldValue, _In_ BOOLEAN CheckFlag)
 
NTSYSAPI NTSTATUS NTAPI RtlCreateUserThread (_In_ HANDLE Process, _In_opt_ PSECURITY_DESCRIPTOR ThreadSecurityDescriptor, _In_ BOOLEAN CreateSuspended, _In_opt_ ULONG ZeroBits, _In_opt_ SIZE_T MaximumStackSize, _In_opt_ SIZE_T CommittedStackSize, _In_ PUSER_THREAD_START_ROUTINE StartAddress, _In_opt_ PVOID Parameter, _Out_opt_ PHANDLE Thread, _Out_opt_ PCLIENT_ID ClientId)
 
DECLSPEC_NORETURN NTSYSAPI
VOID NTAPI 
RtlExitUserThread (_In_ NTSTATUS ExitStatus)
 
NTSYSAPI NTSTATUS NTAPI RtlCreateUserStack (_In_opt_ SIZE_T CommittedStackSize, _In_opt_ SIZE_T MaximumStackSize, _In_opt_ ULONG_PTR ZeroBits, _In_ SIZE_T PageSize, _In_ ULONG_PTR ReserveAlignment, _Out_ PINITIAL_TEB InitialTeb)
 
NTSYSAPI NTSTATUS NTAPI RtlFreeUserStack (_In_ PVOID AllocationBase)
 
NTSYSAPI VOID NTAPI RtlInitializeContext (_In_ HANDLE Process, _Out_ PCONTEXT Context, _In_opt_ PVOID Parameter, _In_opt_ PVOID InitialPc, _In_opt_ PVOID InitialSp)
 
NTSYSAPI NTSTATUS NTAPI RtlRemoteCall (_In_ HANDLE Process, _In_ HANDLE Thread, _In_ PVOID CallSite, _In_ ULONG ArgumentCount, _In_opt_ PULONG_PTR Arguments, _In_ BOOLEAN PassContext, _In_ BOOLEAN AlreadySuspended)
 
NTSYSAPI PVOID NTAPI RtlPcToFileHeader (_In_ PVOID PcValue, _Out_ PVOID *BaseOfImage)
 
NTSYSAPI PIMAGE_NT_HEADERS NTAPI RtlImageNtHeader (_In_ PVOID Base)
 
NTSYSAPI NTSTATUS NTAPI RtlImageNtHeaderEx (_In_ ULONG Flags, _In_ PVOID Base, _In_ ULONG64 Size, _Out_ PIMAGE_NT_HEADERS *OutHeaders)
 
NTSYSAPI PVOID NTAPI RtlAddressInSectionTable (_In_ PIMAGE_NT_HEADERS NtHeaders, _In_ PVOID BaseOfImage, _In_ ULONG VirtualAddress)
 
NTSYSAPI PIMAGE_SECTION_HEADER
NTAPI 
RtlSectionTableFromVirtualAddress (_In_ PIMAGE_NT_HEADERS NtHeaders, _In_ PVOID BaseOfImage, _In_ ULONG VirtualAddress)
 
NTSYSAPI PVOID NTAPI RtlImageDirectoryEntryToData (_In_ PVOID BaseOfImage, _In_ BOOLEAN MappedAsImage, _In_ USHORT DirectoryEntry, _Out_ PULONG Size)
 
NTSYSAPI PIMAGE_SECTION_HEADER
NTAPI 
RtlImageRvaToSection (_In_ PIMAGE_NT_HEADERS NtHeaders, _In_ PVOID Base, _In_ ULONG Rva)
 
NTSYSAPI PVOID NTAPI RtlImageRvaToVa (_In_ PIMAGE_NT_HEADERS NtHeaders, _In_ PVOID Base, _In_ ULONG Rva, _Inout_opt_ PIMAGE_SECTION_HEADER *LastRvaSection)
 
NTSYSAPI SIZE_T NTAPI RtlCompareMemoryUlong (_In_ PVOID Source, _In_ SIZE_T Length, _In_ ULONG Pattern)
 
NTSYSAPI VOID NTAPI RtlFillMemoryUlong (_Out_ PVOID Destination, _In_ SIZE_T Length, _In_ ULONG Pattern)
 
NTSYSAPI VOID NTAPI RtlFillMemoryUlonglong (_Out_ PVOID Destination, _In_ SIZE_T Length, _In_ ULONGLONG Pattern)
 
NTSYSAPI NTSTATUS NTAPI RtlCreateEnvironment (_In_ BOOLEAN CloneCurrentEnvironment, _Out_ PVOID *Environment)
 
NTSYSAPI NTSTATUS NTAPI RtlCreateEnvironmentEx (_In_ PVOID SourceEnv, _Out_ PVOID *Environment, _In_ ULONG Flags)
 
NTSYSAPI NTSTATUS NTAPI RtlDestroyEnvironment (_In_ PVOID Environment)
 
NTSYSAPI NTSTATUS NTAPI RtlSetCurrentEnvironment (_In_ PVOID Environment, _Out_opt_ PVOID *PreviousEnvironment)
 
NTSYSAPI NTSTATUS NTAPI RtlSetEnvironmentVar (_In_opt_ PWSTR *Environment, _In_reads_(NameLength) PWSTR Name, _In_ SIZE_T NameLength, _In_reads_(ValueLength) PWSTR Value, _In_ SIZE_T ValueLength)
 
NTSYSAPI NTSTATUS NTAPI RtlSetEnvironmentVariable (_In_opt_ PVOID *Environment, _In_ PUNICODE_STRING Name, _In_ PUNICODE_STRING Value)
 
NTSYSAPI NTSTATUS NTAPI RtlQueryEnvironmentVariable (_In_opt_ PVOID Environment, _In_reads_(NameLength) PWSTR Name, _In_ SIZE_T NameLength, _Out_writes_(ValueLength) PWSTR Value, _In_ SIZE_T ValueLength, _Out_ PSIZE_T ReturnLength)
 
NTSYSAPI NTSTATUS NTAPI RtlQueryEnvironmentVariable_U (_In_opt_ PVOID Environment, _In_ PUNICODE_STRING Name, _Out_ PUNICODE_STRING Value)
 
NTSYSAPI NTSTATUS NTAPI RtlExpandEnvironmentStrings (_In_opt_ PVOID Environment, _In_reads_(SrcLength) PWSTR Src, _In_ SIZE_T SrcLength, _Out_writes_(DstLength) PWSTR Dst, _In_ SIZE_T DstLength, _Out_opt_ PSIZE_T ReturnLength)
 
NTSYSAPI NTSTATUS NTAPI RtlExpandEnvironmentStrings_U (_In_opt_ PVOID Environment, _In_ PUNICODE_STRING Source, _Out_ PUNICODE_STRING Destination, _Out_opt_ PULONG ReturnedLength)
 
NTSYSAPI NTSTATUS NTAPI RtlSetEnvironmentStrings (_In_ PWCHAR NewEnvironment, _In_ SIZE_T NewEnvironmentSize)
 
NTSYSAPI RTL_PATH_TYPE NTAPI RtlDetermineDosPathNameType_U (_In_ PWSTR DosFileName)
 
NTSYSAPI ULONG NTAPI RtlIsDosDeviceName_U (_In_ PWSTR DosFileName)
 
NTSYSAPI ULONG NTAPI RtlGetFullPathName_U (_In_ PWSTR FileName, _In_ ULONG BufferLength, _Out_writes_bytes_(BufferLength) PWSTR Buffer, _Out_opt_ PWSTR *FilePart)
 
NTSYSAPI NTSTATUS NTAPI RtlGetFullPathName_UEx (_In_ PWSTR FileName, _In_ ULONG BufferLength, _Out_writes_bytes_(BufferLength) PWSTR Buffer, _Out_opt_ PWSTR *FilePart, _Out_opt_ RTL_PATH_TYPE *InputPathType)
 
NTSYSAPI NTSTATUS NTAPI RtlGetFullPathName_UstrEx (_In_ PUNICODE_STRING FileName, _Inout_ PUNICODE_STRING StaticString, _Out_opt_ PUNICODE_STRING DynamicString, _Out_opt_ PUNICODE_STRING *StringUsed, _Out_opt_ SIZE_T *FilePartPrefixCch, _Out_opt_ PBOOLEAN NameInvalid, _Out_ RTL_PATH_TYPE *InputPathType, _Out_opt_ SIZE_T *BytesRequired)
 
NTSYSAPI ULONG NTAPI RtlGetCurrentDirectory_U (_In_ ULONG BufferLength, _Out_writes_bytes_(BufferLength) PWSTR Buffer)
 
NTSYSAPI NTSTATUS NTAPI RtlSetCurrentDirectory_U (_In_ PUNICODE_STRING PathName)
 
NTSYSAPI ULONG NTAPI RtlGetLongestNtPathLength (VOID)
 
NTSYSAPI BOOLEAN NTAPI RtlDosPathNameToNtPathName_U (_In_ PWSTR DosFileName, _Out_ PUNICODE_STRING NtFileName, _Out_opt_ PWSTR *FilePart, _Out_opt_ PRTL_RELATIVE_NAME_U RelativeName)
 
NTSYSAPI NTSTATUS NTAPI RtlDosPathNameToNtPathName_U_WithStatus (_In_ PWSTR DosFileName, _Out_ PUNICODE_STRING NtFileName, _Out_opt_ PWSTR *FilePart, _Out_opt_ PRTL_RELATIVE_NAME_U RelativeName)
 
NTSYSAPI BOOLEAN NTAPI RtlDosPathNameToRelativeNtPathName_U (_In_ PWSTR DosFileName, _Out_ PUNICODE_STRING NtFileName, _Out_opt_ PWSTR *FilePart, _Out_opt_ PRTL_RELATIVE_NAME_U RelativeName)
 
NTSYSAPI NTSTATUS NTAPI RtlDosPathNameToRelativeNtPathName_U_WithStatus (_In_ PWSTR DosFileName, _Out_ PUNICODE_STRING NtFileName, _Out_opt_ PWSTR *FilePart, _Out_opt_ PRTL_RELATIVE_NAME_U RelativeName)
 
NTSYSAPI VOID NTAPI RtlReleaseRelativeName (_Inout_ PRTL_RELATIVE_NAME_U RelativeName)
 
NTSYSAPI ULONG NTAPI RtlDosSearchPath_U (_In_ PWSTR Path, _In_ PWSTR FileName, _In_opt_ PWSTR Extension, _In_ ULONG BufferLength, _Out_writes_bytes_(BufferLength) PWSTR Buffer, _Out_opt_ PWSTR *FilePart)
 
NTSYSAPI NTSTATUS NTAPI RtlDosSearchPath_Ustr (_In_ ULONG Flags, _In_ PUNICODE_STRING Path, _In_ PUNICODE_STRING FileName, _In_opt_ PUNICODE_STRING DefaultExtension, _Out_opt_ PUNICODE_STRING StaticString, _Out_opt_ PUNICODE_STRING DynamicString, _Out_opt_ PCUNICODE_STRING *FullFileNameOut, _Out_opt_ SIZE_T *FilePartPrefixCch, _Out_opt_ SIZE_T *BytesRequired)
 
NTSYSAPI BOOLEAN NTAPI RtlDoesFileExists_U (_In_ PWSTR FileName)
 
NTSYSAPI PVOID NTAPI RtlCreateHeap (_In_ ULONG Flags, _In_opt_ PVOID HeapBase, _In_opt_ SIZE_T ReserveSize, _In_opt_ SIZE_T CommitSize, _In_opt_ PVOID Lock, _In_opt_ PRTL_HEAP_PARAMETERS Parameters)
 
NTSYSAPI PVOID NTAPI RtlDestroyHeap (_In_ _Post_invalid_ PVOID HeapHandle)
 
NTSYSAPI PVOID NTAPI RtlAllocateHeap (_In_ PVOID HeapHandle, _In_opt_ ULONG Flags, _In_ SIZE_T Size)
 
NTSYSAPI BOOLEAN NTAPI RtlFreeHeap (_In_ PVOID HeapHandle, _In_opt_ ULONG Flags, _In_ _Post_invalid_ PVOID BaseAddress)
 
NTSYSAPI SIZE_T NTAPI RtlSizeHeap (_In_ PVOID HeapHandle, _In_ ULONG Flags, _In_ PVOID BaseAddress)
 
NTSYSAPI NTSTATUS NTAPI RtlZeroHeap (_In_ PVOID HeapHandle, _In_ ULONG Flags)
 
NTSYSAPI VOID NTAPI RtlProtectHeap (_In_ PVOID HeapHandle, _In_ BOOLEAN MakeReadOnly)
 
NTSYSAPI BOOLEAN NTAPI RtlLockHeap (_In_ PVOID HeapHandle)
 
NTSYSAPI BOOLEAN NTAPI RtlUnlockHeap (_In_ PVOID HeapHandle)
 
NTSYSAPI PVOID NTAPI RtlReAllocateHeap (_In_ PVOID HeapHandle, _In_ ULONG Flags, _In_ PVOID BaseAddress, _In_ SIZE_T Size)
 
NTSYSAPI BOOLEAN NTAPI RtlGetUserInfoHeap (_In_ PVOID HeapHandle, _In_ ULONG Flags, _In_ PVOID BaseAddress, _Out_opt_ PVOID *UserValue, _Out_opt_ PULONG UserFlags)
 
NTSYSAPI BOOLEAN NTAPI RtlSetUserValueHeap (_In_ PVOID HeapHandle, _In_ ULONG Flags, _In_ PVOID BaseAddress, _In_ PVOID UserValue)
 
NTSYSAPI BOOLEAN NTAPI RtlSetUserFlagsHeap (_In_ PVOID HeapHandle, _In_ ULONG Flags, _In_ PVOID BaseAddress, _In_ ULONG UserFlagsReset, _In_ ULONG UserFlagsSet)
 
NTSYSAPI ULONG NTAPI RtlCreateTagHeap (_In_ PVOID HeapHandle, _In_ ULONG Flags, _In_opt_ PWSTR TagPrefix, _In_ PWSTR TagNames)
 
NTSYSAPI PWSTR NTAPI RtlQueryTagHeap (_In_ PVOID HeapHandle, _In_ ULONG Flags, _In_ USHORT TagIndex, _In_ BOOLEAN ResetCounters, _Out_opt_ PRTL_HEAP_TAG_INFO TagInfo)
 
NTSYSAPI NTSTATUS NTAPI RtlExtendHeap (_In_ PVOID HeapHandle, _In_ ULONG Flags, _In_ PVOID Base, _In_ SIZE_T Size)
 
NTSYSAPI SIZE_T NTAPI RtlCompactHeap (_In_ PVOID HeapHandle, _In_ ULONG Flags)
 
NTSYSAPI BOOLEAN NTAPI RtlValidateHeap (_In_ PVOID HeapHandle, _In_ ULONG Flags, _In_ PVOID BaseAddress)
 
NTSYSAPI BOOLEAN NTAPI RtlValidateProcessHeaps (VOID)
 
NTSYSAPI ULONG NTAPI RtlGetProcessHeaps (_In_ ULONG NumberOfHeaps, _Out_ PVOID *ProcessHeaps)
 
NTSYSAPI NTSTATUS NTAPI RtlEnumProcessHeaps (_In_ PRTL_ENUM_HEAPS_ROUTINE EnumRoutine, _In_ PVOID Parameter)
 
NTSYSAPI NTSTATUS NTAPI RtlUsageHeap (_In_ PVOID HeapHandle, _In_ ULONG Flags, _Inout_ PRTL_HEAP_USAGE Usage)
 
NTSYSAPI NTSTATUS NTAPI RtlWalkHeap (_In_ PVOID HeapHandle, _Inout_ PRTL_HEAP_WALK_ENTRY Entry)
 
NTSYSAPI NTSTATUS NTAPI RtlQueryHeapInformation (_In_ PVOID HeapHandle, _In_ HEAP_INFORMATION_CLASS HeapInformationClass, _Out_opt_ PVOID HeapInformation, _In_opt_ SIZE_T HeapInformationLength, _Out_opt_ PSIZE_T ReturnLength)
 
NTSYSAPI NTSTATUS NTAPI RtlSetHeapInformation (_In_ PVOID HeapHandle, _In_ HEAP_INFORMATION_CLASS HeapInformationClass, _In_opt_ PVOID HeapInformation, _In_opt_ SIZE_T HeapInformationLength)
 
NTSYSAPI ULONG NTAPI RtlMultipleAllocateHeap (_In_ PVOID HeapHandle, _In_ ULONG Flags, _In_ SIZE_T Size, _In_ ULONG Count, _Out_ PVOID *Array)
 
NTSYSAPI ULONG NTAPI RtlMultipleFreeHeap (_In_ PVOID HeapHandle, _In_ ULONG Flags, _In_ ULONG Count, _In_ PVOID *Array)
 
NTSYSAPI VOID NTAPI RtlDetectHeapLeaks (VOID)
 
NTSYSAPI NTSTATUS NTAPI RtlCreateMemoryZone (_Out_ PVOID *MemoryZone, _In_ SIZE_T InitialSize, _Reserved_ ULONG Flags)
 
NTSYSAPI NTSTATUS NTAPI RtlDestroyMemoryZone (_In_ _Post_invalid_ PVOID MemoryZone)
 
NTSYSAPI NTSTATUS NTAPI RtlAllocateMemoryZone (_In_ PVOID MemoryZone, _In_ SIZE_T BlockSize, _Out_ PVOID *Block)
 
NTSYSAPI NTSTATUS NTAPI RtlResetMemoryZone (_In_ PVOID MemoryZone)
 
NTSYSAPI NTSTATUS NTAPI RtlLockMemoryZone (_In_ PVOID MemoryZone)
 
NTSYSAPI NTSTATUS NTAPI RtlUnlockMemoryZone (_In_ PVOID MemoryZone)
 
NTSYSAPI NTSTATUS NTAPI RtlCreateMemoryBlockLookaside (_Out_ PVOID *MemoryBlockLookaside, _Reserved_ ULONG Flags, _In_ ULONG InitialSize, _In_ ULONG MinimumBlockSize, _In_ ULONG MaximumBlockSize)
 
NTSYSAPI NTSTATUS NTAPI RtlDestroyMemoryBlockLookaside (_In_ PVOID MemoryBlockLookaside)
 
NTSYSAPI NTSTATUS NTAPI RtlAllocateMemoryBlockLookaside (_In_ PVOID MemoryBlockLookaside, _In_ ULONG BlockSize, _Out_ PVOID *Block)
 
NTSYSAPI NTSTATUS NTAPI RtlFreeMemoryBlockLookaside (_In_ PVOID MemoryBlockLookaside, _In_ PVOID Block)
 
NTSYSAPI NTSTATUS NTAPI RtlExtendMemoryBlockLookaside (_In_ PVOID MemoryBlockLookaside, _In_ ULONG Increment)
 
NTSYSAPI NTSTATUS NTAPI RtlResetMemoryBlockLookaside (_In_ PVOID MemoryBlockLookaside)
 
NTSYSAPI NTSTATUS NTAPI RtlLockMemoryBlockLookaside (_In_ PVOID MemoryBlockLookaside)
 
NTSYSAPI NTSTATUS NTAPI RtlUnlockMemoryBlockLookaside (_In_ PVOID MemoryBlockLookaside)
 
NTSYSAPI HANDLE NTAPI RtlGetCurrentTransaction (VOID)
 
NTSYSAPI LOGICAL NTAPI RtlSetCurrentTransaction (_In_ HANDLE TransactionHandle)
 
FORCEINLINE BOOLEAN RtlIsEqualLuid (_In_ PLUID L1, _In_ PLUID L2)
 
FORCEINLINE BOOLEAN RtlIsZeroLuid (_In_ PLUID L1)
 
FORCEINLINE LUID RtlConvertLongToLuid (_In_ LONG Long)
 
FORCEINLINE LUID RtlConvertUlongToLuid (_In_ ULONG Ulong)
 
NTSYSAPI VOID NTAPI RtlCopyLuid (_Out_ PLUID DestinationLuid, _In_ PLUID SourceLuid)
 
NTSYSAPI
PRTL_DEBUG_INFORMATION NTAPI 
RtlCreateQueryDebugBuffer (_In_opt_ ULONG MaximumCommit, _In_ BOOLEAN UseEventPair)
 
NTSYSAPI NTSTATUS NTAPI RtlDestroyQueryDebugBuffer (_In_ PRTL_DEBUG_INFORMATION Buffer)
 
NTSYSAPI PVOID NTAPI RtlCommitDebugInfo (_Inout_ PRTL_DEBUG_INFORMATION Buffer, _In_ SIZE_T Size)
 
NTSYSAPI VOID NTAPI RtlDeCommitDebugInfo (_Inout_ PRTL_DEBUG_INFORMATION Buffer, _In_ PVOID p, _In_ SIZE_T Size)
 
NTSYSAPI NTSTATUS NTAPI RtlQueryProcessDebugInformation (_In_ HANDLE UniqueProcessId, _In_ ULONG Flags, _Inout_ PRTL_DEBUG_INFORMATION Buffer)
 
NTSYSAPI NTSTATUS NTAPI RtlFindMessage (_In_ PVOID DllHandle, _In_ ULONG MessageTableId, _In_ ULONG MessageLanguageId, _In_ ULONG MessageId, _Out_ PMESSAGE_RESOURCE_ENTRY *MessageEntry)
 
NTSYSAPI NTSTATUS NTAPI RtlFormatMessage (_In_ PWSTR MessageFormat, _In_ ULONG MaximumWidth, _In_ BOOLEAN IgnoreInserts, _In_ BOOLEAN ArgumentsAreAnsi, _In_ BOOLEAN ArgumentsAreAnArray, _In_ va_list *Arguments, _Out_writes_bytes_to_(Length,*ReturnLength) PWSTR Buffer, _In_ ULONG Length, _Out_opt_ PULONG ReturnLength)
 
NTSYSAPI NTSTATUS NTAPI RtlFormatMessageEx (_In_ PWSTR MessageFormat, _In_ ULONG MaximumWidth, _In_ BOOLEAN IgnoreInserts, _In_ BOOLEAN ArgumentsAreAnsi, _In_ BOOLEAN ArgumentsAreAnArray, _In_ va_list *Arguments, _Out_writes_bytes_to_(Length,*ReturnLength) PWSTR Buffer, _In_ ULONG Length, _Out_opt_ PULONG ReturnLength, _Out_opt_ PPARSE_MESSAGE_CONTEXT ParseContext)
 
NTSYSAPI ULONG NTAPI RtlNtStatusToDosError (_In_ NTSTATUS Status)
 
NTSYSAPI ULONG NTAPI RtlNtStatusToDosErrorNoTeb (_In_ NTSTATUS Status)
 
NTSYSAPI NTSTATUS NTAPI RtlGetLastNtStatus (VOID)
 
NTSYSAPI LONG NTAPI RtlGetLastWin32Error (VOID)
 
NTSYSAPI VOID NTAPI RtlSetLastWin32ErrorAndNtStatusFromNtStatus (_In_ NTSTATUS Status)
 
NTSYSAPI VOID NTAPI RtlSetLastWin32Error (_In_ LONG Win32Error)
 
NTSYSAPI VOID NTAPI RtlRestoreLastWin32Error (_In_ LONG Win32Error)
 
NTSYSAPI ULONG NTAPI RtlGetThreadErrorMode (VOID)
 
NTSYSAPI NTSTATUS NTAPI RtlSetThreadErrorMode (_In_ ULONG NewMode, _Out_opt_ PULONG OldMode)
 
NTSYSAPI NTSTATUS NTAPI RtlReportException (_In_ PEXCEPTION_RECORD ExceptionRecord, _In_ PCONTEXT ContextRecord, _In_ ULONG Flags)
 
NTSYSAPI NTSTATUS NTAPI RtlWerpReportException (_In_ ULONG ProcessId, _In_ HANDLE CrashReportSharedMem, _In_ ULONG Flags, _Out_ PHANDLE CrashVerticalProcessHandle)
 
NTSYSAPI NTSTATUS NTAPI RtlReportSilentProcessExit (_In_ HANDLE ProcessHandle, _In_ NTSTATUS ExitStatus)
 
NTSYSAPI PVOID NTAPI RtlAddVectoredExceptionHandler (_In_ ULONG First, _In_ PVECTORED_EXCEPTION_HANDLER Handler)
 
NTSYSAPI ULONG NTAPI RtlRemoveVectoredExceptionHandler (_In_ PVOID Handle)
 
NTSYSAPI PVOID NTAPI RtlAddVectoredContinueHandler (_In_ ULONG First, _In_ PVECTORED_EXCEPTION_HANDLER Handler)
 
NTSYSAPI ULONG NTAPI RtlRemoveVectoredContinueHandler (_In_ PVOID Handle)
 
NTSYSAPI ULONG NTAPI RtlUniform (_Inout_ PULONG Seed)
 
NTSYSAPI ULONG NTAPI RtlRandom (_Inout_ PULONG Seed)
 
NTSYSAPI ULONG NTAPI RtlRandomEx (_Inout_ PULONG Seed)
 
NTSYSAPI NTSTATUS NTAPI RtlComputeImportTableHash (_In_ HANDLE hFile, _Out_writes_bytes_(16) PCHAR Hash, _In_ ULONG ImportTableHashRevision)
 
NTSYSAPI NTSTATUS NTAPI RtlIntegerToChar (_In_ ULONG Value, _In_opt_ ULONG Base, _In_ LONG OutputLength, _Out_ PSTR String)
 
NTSYSAPI NTSTATUS NTAPI RtlCharToInteger (_In_ PSTR String, _In_opt_ ULONG Base, _Out_ PULONG Value)
 
NTSYSAPI NTSTATUS NTAPI RtlLargeIntegerToChar (_In_ PLARGE_INTEGER Value, _In_opt_ ULONG Base, _In_ LONG OutputLength, _Out_ PSTR String)
 
NTSYSAPI NTSTATUS NTAPI RtlIntegerToUnicodeString (_In_ ULONG Value, _In_opt_ ULONG Base, _Inout_ PUNICODE_STRING String)
 
NTSYSAPI NTSTATUS NTAPI RtlInt64ToUnicodeString (_In_ ULONGLONG Value, _In_opt_ ULONG Base, _Inout_ PUNICODE_STRING String)
 
NTSYSAPI NTSTATUS NTAPI RtlUnicodeStringToInteger (_In_ PUNICODE_STRING String, _In_opt_ ULONG Base, _Out_ PULONG Value)
 
NTSYSAPI PWSTR NTAPI RtlIpv4AddressToStringW (_In_ struct in_addr *Addr, _Out_writes_(16) PWSTR S)
 
NTSYSAPI NTSTATUS NTAPI RtlIpv4AddressToStringExW (_In_ struct in_addr *Address, _In_ USHORT Port, _Out_writes_to_(*AddressStringLength,*AddressStringLength) PWSTR AddressString, _Inout_ PULONG AddressStringLength)
 
NTSYSAPI PWSTR NTAPI RtlIpv6AddressToStringW (_In_ struct in6_addr *Addr, _Out_writes_(65) PWSTR S)
 
NTSYSAPI NTSTATUS NTAPI RtlIpv6AddressToStringExW (_In_ struct in6_addr *Address, _In_ ULONG ScopeId, _In_ USHORT Port, _Out_writes_to_(*AddressStringLength,*AddressStringLength) PWSTR AddressString, _Inout_ PULONG AddressStringLength)
 
NTSYSAPI NTSTATUS NTAPI RtlIpv4StringToAddressW (_In_ PWSTR S, _In_ BOOLEAN Strict, _Out_ PWSTR *Terminator, _Out_ struct in_addr *Addr)
 
NTSYSAPI NTSTATUS NTAPI RtlIpv4StringToAddressExW (_In_ PWSTR AddressString, _In_ BOOLEAN Strict, _Out_ struct in_addr *Address, _Out_ PUSHORT Port)
 
NTSYSAPI NTSTATUS NTAPI RtlIpv6StringToAddressW (_In_ PWSTR S, _Out_ PWSTR *Terminator, _Out_ struct in6_addr *Addr)
 
NTSYSAPI NTSTATUS NTAPI RtlIpv6StringToAddressExW (_In_ PWSTR AddressString, _Out_ struct in6_addr *Address, _Out_ PULONG ScopeId, _Out_ PUSHORT Port)
 
NTSYSAPI BOOLEAN NTAPI RtlCutoverTimeToSystemTime (_In_ PTIME_FIELDS CutoverTime, _Out_ PLARGE_INTEGER SystemTime, _In_ PLARGE_INTEGER CurrentSystemTime, _In_ BOOLEAN ThisYear)
 
NTSYSAPI NTSTATUS NTAPI RtlSystemTimeToLocalTime (_In_ PLARGE_INTEGER SystemTime, _Out_ PLARGE_INTEGER LocalTime)
 
NTSYSAPI NTSTATUS NTAPI RtlLocalTimeToSystemTime (_In_ PLARGE_INTEGER LocalTime, _Out_ PLARGE_INTEGER SystemTime)
 
NTSYSAPI VOID NTAPI RtlTimeToElapsedTimeFields (_In_ PLARGE_INTEGER Time, _Out_ PTIME_FIELDS TimeFields)
 
NTSYSAPI VOID NTAPI RtlTimeToTimeFields (_In_ PLARGE_INTEGER Time, _Out_ PTIME_FIELDS TimeFields)
 
NTSYSAPI BOOLEAN NTAPI RtlTimeFieldsToTime (_In_ PTIME_FIELDS TimeFields, _Out_ PLARGE_INTEGER Time)
 
NTSYSAPI BOOLEAN NTAPI RtlTimeToSecondsSince1980 (_In_ PLARGE_INTEGER Time, _Out_ PULONG ElapsedSeconds)
 
NTSYSAPI VOID NTAPI RtlSecondsSince1980ToTime (_In_ ULONG ElapsedSeconds, _Out_ PLARGE_INTEGER Time)
 
NTSYSAPI BOOLEAN NTAPI RtlTimeToSecondsSince1970 (_In_ PLARGE_INTEGER Time, _Out_ PULONG ElapsedSeconds)
 
NTSYSAPI VOID NTAPI RtlSecondsSince1970ToTime (_In_ ULONG ElapsedSeconds, _Out_ PLARGE_INTEGER Time)
 
NTSYSAPI NTSTATUS NTAPI RtlQueryTimeZoneInformation (_Out_ PRTL_TIME_ZONE_INFORMATION TimeZoneInformation)
 
NTSYSAPI NTSTATUS NTAPI RtlSetTimeZoneInformation (_In_ PRTL_TIME_ZONE_INFORMATION TimeZoneInformation)
 
NTSYSAPI VOID NTAPI RtlInitializeBitMap (_Out_ PRTL_BITMAP BitMapHeader, _In_ PULONG BitMapBuffer, _In_ ULONG SizeOfBitMap)
 
NTSYSAPI VOID NTAPI RtlClearBit (_In_ PRTL_BITMAP BitMapHeader, _In_range_(<, BitMapHeader->SizeOfBitMap) ULONG BitNumber)
 
NTSYSAPI VOID NTAPI RtlSetBit (_In_ PRTL_BITMAP BitMapHeader, _In_range_(<, BitMapHeader->SizeOfBitMap) ULONG BitNumber)
 
_Check_return_ NTSYSAPI
BOOLEAN NTAPI 
RtlTestBit (_In_ PRTL_BITMAP BitMapHeader, _In_range_(<, BitMapHeader->SizeOfBitMap) ULONG BitNumber)
 
NTSYSAPI VOID NTAPI RtlClearAllBits (_In_ PRTL_BITMAP BitMapHeader)
 
NTSYSAPI VOID NTAPI RtlSetAllBits (_In_ PRTL_BITMAP BitMapHeader)
 
 _Success_ (return!=-1) _Check_return_ NTSYSAPI ULONG NTAPI RtlFindClearBits(_In_ PRTL_BITMAP BitMapHeader
 
NTSYSAPI VOID NTAPI RtlClearBits (_In_ PRTL_BITMAP BitMapHeader, _In_range_(0, BitMapHeader->SizeOfBitMap-NumberToClear) ULONG StartingIndex, _In_range_(0, BitMapHeader->SizeOfBitMap-StartingIndex) ULONG NumberToClear)
 
NTSYSAPI VOID NTAPI RtlSetBits (_In_ PRTL_BITMAP BitMapHeader, _In_range_(0, BitMapHeader->SizeOfBitMap-NumberToSet) ULONG StartingIndex, _In_range_(0, BitMapHeader->SizeOfBitMap-StartingIndex) ULONG NumberToSet)
 
NTSYSAPI ULONG NTAPI RtlFindClearRuns (_In_ PRTL_BITMAP BitMapHeader, _Out_writes_to_(SizeOfRunArray, return) PRTL_BITMAP_RUN RunArray, _In_range_(>, 0) ULONG SizeOfRunArray, _In_ BOOLEAN LocateLongestRuns)
 
NTSYSAPI ULONG NTAPI RtlFindLongestRunClear (_In_ PRTL_BITMAP BitMapHeader, _Out_ PULONG StartingIndex)
 
NTSYSAPI ULONG NTAPI RtlFindFirstRunClear (_In_ PRTL_BITMAP BitMapHeader, _Out_ PULONG StartingIndex)
 
_Check_return_ FORCEINLINE BOOLEAN RtlCheckBit (_In_ PRTL_BITMAP BitMapHeader, _In_range_(<, BitMapHeader->SizeOfBitMap) ULONG BitPosition)
 
NTSYSAPI ULONG NTAPI RtlNumberOfClearBits (_In_ PRTL_BITMAP BitMapHeader)
 
NTSYSAPI ULONG NTAPI RtlNumberOfSetBits (_In_ PRTL_BITMAP BitMapHeader)
 
_Check_return_ NTSYSAPI
BOOLEAN NTAPI 
RtlAreBitsClear (_In_ PRTL_BITMAP BitMapHeader, _In_ ULONG StartingIndex, _In_ ULONG Length)
 
_Check_return_ NTSYSAPI
BOOLEAN NTAPI 
RtlAreBitsSet (_In_ PRTL_BITMAP BitMapHeader, _In_ ULONG StartingIndex, _In_ ULONG Length)
 
NTSYSAPI ULONG NTAPI RtlFindNextForwardRunClear (_In_ PRTL_BITMAP BitMapHeader, _In_ ULONG FromIndex, _Out_ PULONG StartingRunIndex)
 
NTSYSAPI ULONG NTAPI RtlFindLastBackwardRunClear (_In_ PRTL_BITMAP BitMapHeader, _In_ ULONG FromIndex, _Out_ PULONG StartingRunIndex)
 
NTSYSAPI VOID NTAPI RtlInterlockedClearBitRun (_In_ PRTL_BITMAP BitMapHeader, _In_range_(0, BitMapHeader->SizeOfBitMap-NumberToClear) ULONG StartingIndex, _In_range_(0, BitMapHeader->SizeOfBitMap-StartingIndex) ULONG NumberToClear)
 
NTSYSAPI VOID NTAPI RtlInterlockedSetBitRun (_In_ PRTL_BITMAP BitMapHeader, _In_range_(0, BitMapHeader->SizeOfBitMap-NumberToSet) ULONG StartingIndex, _In_range_(0, BitMapHeader->SizeOfBitMap-StartingIndex) ULONG NumberToSet)
 
NTSYSAPI VOID NTAPI RtlInitializeHandleTable (_In_ ULONG MaximumNumberOfHandles, _In_ ULONG SizeOfHandleTableEntry, _Out_ PRTL_HANDLE_TABLE HandleTable)
 
NTSYSAPI NTSTATUS NTAPI RtlDestroyHandleTable (_Inout_ PRTL_HANDLE_TABLE HandleTable)
 
NTSYSAPI
PRTL_HANDLE_TABLE_ENTRY NTAPI 
RtlAllocateHandle (_In_ PRTL_HANDLE_TABLE HandleTable, _Out_opt_ PULONG HandleIndex)
 
NTSYSAPI BOOLEAN NTAPI RtlFreeHandle (_In_ PRTL_HANDLE_TABLE HandleTable, _In_ PRTL_HANDLE_TABLE_ENTRY Handle)
 
NTSYSAPI BOOLEAN NTAPI RtlIsValidHandle (_In_ PRTL_HANDLE_TABLE HandleTable, _In_ PRTL_HANDLE_TABLE_ENTRY Handle)
 
NTSYSAPI BOOLEAN NTAPI RtlIsValidIndexHandle (_In_ PRTL_HANDLE_TABLE HandleTable, _In_ ULONG HandleIndex, _Out_ PRTL_HANDLE_TABLE_ENTRY *Handle)
 
NTSYSAPI NTSTATUS NTAPI RtlCreateAtomTable (_In_ ULONG NumberOfBuckets, _Out_ PVOID *AtomTableHandle)
 
NTSYSAPI NTSTATUS NTAPI RtlDestroyAtomTable (_In_ _Post_invalid_ PVOID AtomTableHandle)
 
NTSYSAPI NTSTATUS NTAPI RtlEmptyAtomTable (_In_ PVOID AtomTableHandle, _In_ BOOLEAN IncludePinnedAtoms)
 
NTSYSAPI NTSTATUS NTAPI RtlAddAtomToAtomTable (_In_ PVOID AtomTableHandle, _In_ PWSTR AtomName, _Inout_opt_ PRTL_ATOM Atom)
 
NTSYSAPI NTSTATUS NTAPI RtlLookupAtomInAtomTable (_In_ PVOID AtomTableHandle, _In_ PWSTR AtomName, _Out_opt_ PRTL_ATOM Atom)
 
NTSYSAPI NTSTATUS NTAPI RtlDeleteAtomFromAtomTable (_In_ PVOID AtomTableHandle, _In_ RTL_ATOM Atom)
 
NTSYSAPI NTSTATUS NTAPI RtlPinAtomInAtomTable (_In_ PVOID AtomTableHandle, _In_ RTL_ATOM Atom)
 
NTSYSAPI NTSTATUS NTAPI RtlQueryAtomInAtomTable (_In_ PVOID AtomTableHandle, _In_ RTL_ATOM Atom, _Out_opt_ PULONG AtomUsage, _Out_opt_ PULONG AtomFlags, _Inout_updates_bytes_to_opt_(*AtomNameLength,*AtomNameLength) PWSTR AtomName, _Inout_opt_ PULONG AtomNameLength)
 
NTSYSAPI BOOLEAN NTAPI RtlGetIntegerAtom (_In_ PWSTR AtomName, _Out_opt_ PUSHORT IntegerAtom)
 
_Check_return_ NTSYSAPI
BOOLEAN NTAPI 
RtlValidSid (_In_ PSID Sid)
 
_Check_return_ NTSYSAPI
BOOLEAN NTAPI 
RtlEqualSid (_In_ PSID Sid1, _In_ PSID Sid2)
 
NTSYSAPI ULONG NTAPI RtlLengthRequiredSid (_In_ ULONG SubAuthorityCount)
 
NTSYSAPI PVOID NTAPI RtlFreeSid (_In_ _Post_invalid_ PSID Sid)
 
_Check_return_ NTSYSAPI
NTSTATUS NTAPI 
RtlAllocateAndInitializeSid (_In_ PSID_IDENTIFIER_AUTHORITY IdentifierAuthority, _In_ UCHAR SubAuthorityCount, _In_ ULONG SubAuthority0, _In_ ULONG SubAuthority1, _In_ ULONG SubAuthority2, _In_ ULONG SubAuthority3, _In_ ULONG SubAuthority4, _In_ ULONG SubAuthority5, _In_ ULONG SubAuthority6, _In_ ULONG SubAuthority7, _Outptr_ PSID *Sid)
 
NTSYSAPI NTSTATUS NTAPI RtlInitializeSid (_Out_ PSID Sid, _In_ PSID_IDENTIFIER_AUTHORITY IdentifierAuthority, _In_ UCHAR SubAuthorityCount)
 
NTSYSAPI NTSTATUS NTAPI RtlInitializeSidEx (_Out_writes_bytes_(SECURITY_SID_SIZE(SubAuthorityCount)) PSID Sid, _In_ PSID_IDENTIFIER_AUTHORITY IdentifierAuthority, _In_ UCHAR SubAuthorityCount,...)
 
NTSYSAPI
PSID_IDENTIFIER_AUTHORITY
NTAPI 
RtlIdentifierAuthoritySid (_In_ PSID Sid)
 
NTSYSAPI PULONG NTAPI RtlSubAuthoritySid (_In_ PSID Sid, _In_ ULONG SubAuthority)
 
NTSYSAPI PUCHAR NTAPI RtlSubAuthorityCountSid (_In_ PSID Sid)
 
NTSYSAPI ULONG NTAPI RtlLengthSid (_In_ PSID Sid)
 
NTSYSAPI NTSTATUS NTAPI RtlCopySid (_In_ ULONG DestinationSidLength, _In_reads_bytes_(DestinationSidLength) PSID DestinationSid, _In_ PSID SourceSid)
 
NTSYSAPI NTSTATUS NTAPI RtlCreateServiceSid (_In_ PUNICODE_STRING ServiceName, _Out_writes_bytes_opt_(*ServiceSidLength) PSID ServiceSid, _Inout_ PULONG ServiceSidLength)
 
NTSYSAPI NTSTATUS NTAPI RtlSidDominates (_In_ PSID Sid1, _In_ PSID Sid2, _Out_ PBOOLEAN pbDominate)
 
NTSYSAPI NTSTATUS NTAPI RtlSidEqualLevel (_In_ PSID Sid1, _In_ PSID Sid2, _Out_ PBOOLEAN pbEqual)
 
NTSYSAPI NTSTATUS NTAPI RtlSidIsHigherLevel (_In_ PSID Sid1, _In_ PSID Sid2, _Out_ PBOOLEAN pbHigher)
 
NTSYSAPI NTSTATUS NTAPI RtlCreateVirtualAccountSid (_In_ PUNICODE_STRING Name, _In_ ULONG BaseSubAuthority, _Out_writes_bytes_(*SidLength) PSID Sid, _Inout_ PULONG SidLength)
 
NTSYSAPI NTSTATUS NTAPI RtlReplaceSidInSd (_Inout_ PSECURITY_DESCRIPTOR SecurityDescriptor, _In_ PSID OldSid, _In_ PSID NewSid, _Out_ ULONG *NumChanges)
 
NTSYSAPI NTSTATUS NTAPI RtlConvertSidToUnicodeString (_Inout_ PUNICODE_STRING UnicodeString, _In_ PSID Sid, _In_ BOOLEAN AllocateDestinationString)
 
NTSYSAPI NTSTATUS NTAPI RtlSidHashInitialize (_In_reads_(SidCount) PSID_AND_ATTRIBUTES SidAttr, _In_ ULONG SidCount, _Out_ PSID_AND_ATTRIBUTES_HASH SidAttrHash)
 
NTSYSAPI PSID_AND_ATTRIBUTES NTAPI RtlSidHashLookup (_In_ PSID_AND_ATTRIBUTES_HASH SidAttrHash, _In_ PSID Sid)
 
NTSYSAPI NTSTATUS NTAPI RtlCreateSecurityDescriptor (_Out_ PSECURITY_DESCRIPTOR SecurityDescriptor, _In_ ULONG Revision)
 
_Check_return_ NTSYSAPI
BOOLEAN NTAPI 
RtlValidSecurityDescriptor (_In_ PSECURITY_DESCRIPTOR SecurityDescriptor)
 
NTSYSAPI ULONG NTAPI RtlLengthSecurityDescriptor (_In_ PSECURITY_DESCRIPTOR SecurityDescriptor)
 
_Check_return_ NTSYSAPI
BOOLEAN NTAPI 
RtlValidRelativeSecurityDescriptor (_In_reads_bytes_(SecurityDescriptorLength) PSECURITY_DESCRIPTOR SecurityDescriptorInput, _In_ ULONG SecurityDescriptorLength, _In_ SECURITY_INFORMATION RequiredInformation)
 
NTSYSAPI NTSTATUS NTAPI RtlGetControlSecurityDescriptor (_In_ PSECURITY_DESCRIPTOR SecurityDescriptor, _Out_ PSECURITY_DESCRIPTOR_CONTROL Control, _Out_ PULONG Revision)
 
NTSYSAPI NTSTATUS NTAPI RtlSetControlSecurityDescriptor (_Inout_ PSECURITY_DESCRIPTOR SecurityDescriptor, _In_ SECURITY_DESCRIPTOR_CONTROL ControlBitsOfInterest, _In_ SECURITY_DESCRIPTOR_CONTROL ControlBitsToSet)
 
NTSYSAPI NTSTATUS NTAPI RtlSetAttributesSecurityDescriptor (_Inout_ PSECURITY_DESCRIPTOR SecurityDescriptor, _In_ SECURITY_DESCRIPTOR_CONTROL Control, _Out_ PULONG Revision)
 
NTSYSAPI BOOLEAN NTAPI RtlGetSecurityDescriptorRMControl (_In_ PSECURITY_DESCRIPTOR SecurityDescriptor, _Out_ PUCHAR RMControl)
 
NTSYSAPI VOID NTAPI RtlSetSecurityDescriptorRMControl (_Inout_ PSECURITY_DESCRIPTOR SecurityDescriptor, _In_opt_ PUCHAR RMControl)
 
NTSYSAPI NTSTATUS NTAPI RtlSetDaclSecurityDescriptor (_Inout_ PSECURITY_DESCRIPTOR SecurityDescriptor, _In_ BOOLEAN DaclPresent, _In_opt_ PACL Dacl, _In_opt_ BOOLEAN DaclDefaulted)
 
NTSYSAPI NTSTATUS NTAPI RtlGetDaclSecurityDescriptor (_In_ PSECURITY_DESCRIPTOR SecurityDescriptor, _Out_ PBOOLEAN DaclPresent, _Out_ PACL *Dacl, _Out_ PBOOLEAN DaclDefaulted)
 
NTSYSAPI NTSTATUS NTAPI RtlSetSaclSecurityDescriptor (_Inout_ PSECURITY_DESCRIPTOR SecurityDescriptor, _In_ BOOLEAN SaclPresent, _In_opt_ PACL Sacl, _In_opt_ BOOLEAN SaclDefaulted)
 
NTSYSAPI NTSTATUS NTAPI RtlGetSaclSecurityDescriptor (_In_ PSECURITY_DESCRIPTOR SecurityDescriptor, _Out_ PBOOLEAN SaclPresent, _Out_ PACL *Sacl, _Out_ PBOOLEAN SaclDefaulted)
 
NTSYSAPI NTSTATUS NTAPI RtlSetOwnerSecurityDescriptor (_Inout_ PSECURITY_DESCRIPTOR SecurityDescriptor, _In_opt_ PSID Owner, _In_opt_ BOOLEAN OwnerDefaulted)
 
NTSYSAPI NTSTATUS NTAPI RtlGetOwnerSecurityDescriptor (_In_ PSECURITY_DESCRIPTOR SecurityDescriptor, _Out_ PSID *Owner, _Out_ PBOOLEAN OwnerDefaulted)
 
NTSYSAPI NTSTATUS NTAPI RtlSetGroupSecurityDescriptor (_Inout_ PSECURITY_DESCRIPTOR SecurityDescriptor, _In_opt_ PSID Group, _In_opt_ BOOLEAN GroupDefaulted)
 
NTSYSAPI NTSTATUS NTAPI RtlGetGroupSecurityDescriptor (_In_ PSECURITY_DESCRIPTOR SecurityDescriptor, _Out_ PSID *Group, _Out_ PBOOLEAN GroupDefaulted)
 
NTSYSAPI NTSTATUS NTAPI RtlMakeSelfRelativeSD (_In_ PSECURITY_DESCRIPTOR AbsoluteSecurityDescriptor, _Out_writes_bytes_(*BufferLength) PSECURITY_DESCRIPTOR SelfRelativeSecurityDescriptor, _Inout_ PULONG BufferLength)
 
NTSYSAPI NTSTATUS NTAPI RtlAbsoluteToSelfRelativeSD (_In_ PSECURITY_DESCRIPTOR AbsoluteSecurityDescriptor, _Out_writes_bytes_to_opt_(*BufferLength,*BufferLength) PSECURITY_DESCRIPTOR SelfRelativeSecurityDescriptor, _Inout_ PULONG BufferLength)
 
NTSYSAPI NTSTATUS NTAPI RtlSelfRelativeToAbsoluteSD (_In_ PSECURITY_DESCRIPTOR SelfRelativeSecurityDescriptor, _Out_writes_bytes_to_opt_(*AbsoluteSecurityDescriptorSize,*AbsoluteSecurityDescriptorSize) PSECURITY_DESCRIPTOR AbsoluteSecurityDescriptor, _Inout_ PULONG AbsoluteSecurityDescriptorSize, _Out_writes_bytes_to_opt_(*DaclSize,*DaclSize) PACL Dacl, _Inout_ PULONG DaclSize, _Out_writes_bytes_to_opt_(*SaclSize,*SaclSize) PACL Sacl, _Inout_ PULONG SaclSize, _Out_writes_bytes_to_opt_(*OwnerSize,*OwnerSize) PSID Owner, _Inout_ PULONG OwnerSize, _Out_writes_bytes_to_opt_(*PrimaryGroupSize,*PrimaryGroupSize) PSID PrimaryGroup, _Inout_ PULONG PrimaryGroupSize)
 
NTSYSAPI NTSTATUS NTAPI RtlSelfRelativeToAbsoluteSD2 (_Inout_ PSECURITY_DESCRIPTOR pSelfRelativeSecurityDescriptor, _Inout_ PULONG pBufferSize)
 
NTSYSAPI BOOLEAN NTAPI RtlAreAllAccessesGranted (_In_ ACCESS_MASK GrantedAccess, _In_ ACCESS_MASK DesiredAccess)
 
NTSYSAPI BOOLEAN NTAPI RtlAreAnyAccessesGranted (_In_ ACCESS_MASK GrantedAccess, _In_ ACCESS_MASK DesiredAccess)
 
NTSYSAPI VOID NTAPI RtlMapGenericMask (_Inout_ PACCESS_MASK AccessMask, _In_ PGENERIC_MAPPING GenericMapping)
 
NTSYSAPI NTSTATUS NTAPI RtlCreateAcl (_Out_writes_bytes_(AclLength) PACL Acl, _In_ ULONG AclLength, _In_ ULONG AclRevision)
 
NTSYSAPI BOOLEAN NTAPI RtlValidAcl (_In_ PACL Acl)
 
NTSYSAPI NTSTATUS NTAPI RtlQueryInformationAcl (_In_ PACL Acl, _Out_writes_bytes_(AclInformationLength) PVOID AclInformation, _In_ ULONG AclInformationLength, _In_ ACL_INFORMATION_CLASS AclInformationClass)
 
NTSYSAPI NTSTATUS NTAPI RtlSetInformationAcl (_Inout_ PACL Acl, _In_reads_bytes_(AclInformationLength) PVOID AclInformation, _In_ ULONG AclInformationLength, _In_ ACL_INFORMATION_CLASS AclInformationClass)
 
NTSYSAPI NTSTATUS NTAPI RtlAddAce (_Inout_ PACL Acl, _In_ ULONG AceRevision, _In_ ULONG StartingAceIndex, _In_reads_bytes_(AceListLength) PVOID AceList, _In_ ULONG AceListLength)
 
NTSYSAPI NTSTATUS NTAPI RtlDeleteAce (_Inout_ PACL Acl, _In_ ULONG AceIndex)
 
NTSYSAPI NTSTATUS NTAPI RtlGetAce (_In_ PACL Acl, _In_ ULONG AceIndex, _Outptr_ PVOID *Ace)
 
NTSYSAPI BOOLEAN NTAPI RtlFirstFreeAce (_In_ PACL Acl, _Out_ PVOID *FirstFree)
 
NTSYSAPI PVOID NTAPI RtlFindAceByType (_In_ PACL pAcl, _In_ UCHAR AceType, _Out_opt_ PULONG pIndex)
 
NTSYSAPI BOOLEAN NTAPI RtlOwnerAcesPresent (_In_ PACL pAcl)
 
NTSYSAPI NTSTATUS NTAPI RtlAddAccessAllowedAce (_Inout_ PACL Acl, _In_ ULONG AceRevision, _In_ ACCESS_MASK AccessMask, _In_ PSID Sid)
 
NTSYSAPI NTSTATUS NTAPI RtlAddAccessAllowedAceEx (_Inout_ PACL Acl, _In_ ULONG AceRevision, _In_ ULONG AceFlags, _In_ ACCESS_MASK AccessMask, _In_ PSID Sid)
 
NTSYSAPI NTSTATUS NTAPI RtlAddAccessDeniedAce (_Inout_ PACL Acl, _In_ ULONG AceRevision, _In_ ACCESS_MASK AccessMask, _In_ PSID Sid)
 
NTSYSAPI NTSTATUS NTAPI RtlAddAccessDeniedAceEx (_Inout_ PACL Acl, _In_ ULONG AceRevision, _In_ ULONG AceFlags, _In_ ACCESS_MASK AccessMask, _In_ PSID Sid)
 
NTSYSAPI NTSTATUS NTAPI RtlAddAuditAccessAce (_Inout_ PACL Acl, _In_ ULONG AceRevision, _In_ ACCESS_MASK AccessMask, _In_ PSID Sid, _In_ BOOLEAN AuditSuccess, _In_ BOOLEAN AuditFailure)
 
NTSYSAPI NTSTATUS NTAPI RtlAddAuditAccessAceEx (_Inout_ PACL Acl, _In_ ULONG AceRevision, _In_ ULONG AceFlags, _In_ ACCESS_MASK AccessMask, _In_ PSID Sid, _In_ BOOLEAN AuditSuccess, _In_ BOOLEAN AuditFailure)
 
NTSYSAPI NTSTATUS NTAPI RtlAddAccessAllowedObjectAce (_Inout_ PACL Acl, _In_ ULONG AceRevision, _In_ ULONG AceFlags, _In_ ACCESS_MASK AccessMask, _In_opt_ PGUID ObjectTypeGuid, _In_opt_ PGUID InheritedObjectTypeGuid, _In_ PSID Sid)
 
NTSYSAPI NTSTATUS NTAPI RtlAddAccessDeniedObjectAce (_Inout_ PACL Acl, _In_ ULONG AceRevision, _In_ ULONG AceFlags, _In_ ACCESS_MASK AccessMask, _In_opt_ PGUID ObjectTypeGuid, _In_opt_ PGUID InheritedObjectTypeGuid, _In_ PSID Sid)
 
NTSYSAPI NTSTATUS NTAPI RtlAddAuditAccessObjectAce (_Inout_ PACL Acl, _In_ ULONG AceRevision, _In_ ULONG AceFlags, _In_ ACCESS_MASK AccessMask, _In_opt_ PGUID ObjectTypeGuid, _In_opt_ PGUID InheritedObjectTypeGuid, _In_ PSID Sid, _In_ BOOLEAN AuditSuccess, _In_ BOOLEAN AuditFailure)
 
NTSYSAPI NTSTATUS NTAPI RtlAddCompoundAce (_Inout_ PACL Acl, _In_ ULONG AceRevision, _In_ UCHAR AceType, _In_ ACCESS_MASK AccessMask, _In_ PSID ServerSid, _In_ PSID ClientSid)
 
NTSYSAPI NTSTATUS NTAPI RtlAddMandatoryAce (_Inout_ PACL Acl, _In_ ULONG AceRevision, _In_ ULONG AceFlags, _In_ PSID Sid, _In_ UCHAR AceType, _In_ ACCESS_MASK AccessMask)
 
NTSYSAPI NTSTATUS NTAPI RtlNewSecurityObject (_In_opt_ PSECURITY_DESCRIPTOR ParentDescriptor, _In_opt_ PSECURITY_DESCRIPTOR CreatorDescriptor, _Out_ PSECURITY_DESCRIPTOR *NewDescriptor, _In_ BOOLEAN IsDirectoryObject, _In_opt_ HANDLE Token, _In_ PGENERIC_MAPPING GenericMapping)
 
NTSYSAPI NTSTATUS NTAPI RtlNewSecurityObjectEx (_In_opt_ PSECURITY_DESCRIPTOR ParentDescriptor, _In_opt_ PSECURITY_DESCRIPTOR CreatorDescriptor, _Out_ PSECURITY_DESCRIPTOR *NewDescriptor, _In_opt_ GUID *ObjectType, _In_ BOOLEAN IsDirectoryObject, _In_ ULONG AutoInheritFlags, _In_opt_ HANDLE Token, _In_ PGENERIC_MAPPING GenericMapping)
 
NTSYSAPI NTSTATUS NTAPI RtlNewSecurityObjectWithMultipleInheritance (_In_opt_ PSECURITY_DESCRIPTOR ParentDescriptor, _In_opt_ PSECURITY_DESCRIPTOR CreatorDescriptor, _Out_ PSECURITY_DESCRIPTOR *NewDescriptor, _In_opt_ GUID **ObjectType, _In_ ULONG GuidCount, _In_ BOOLEAN IsDirectoryObject, _In_ ULONG AutoInheritFlags, _In_opt_ HANDLE Token, _In_ PGENERIC_MAPPING GenericMapping)
 
NTSYSAPI NTSTATUS NTAPI RtlDeleteSecurityObject (_Inout_ PSECURITY_DESCRIPTOR *ObjectDescriptor)
 
NTSYSAPI NTSTATUS NTAPI RtlQuerySecurityObject (_In_ PSECURITY_DESCRIPTOR ObjectDescriptor, _In_ SECURITY_INFORMATION SecurityInformation, _Out_opt_ PSECURITY_DESCRIPTOR ResultantDescriptor, _In_ ULONG DescriptorLength, _Out_ PULONG ReturnLength)
 
NTSYSAPI NTSTATUS NTAPI RtlSetSecurityObject (_In_ SECURITY_INFORMATION SecurityInformation, _In_ PSECURITY_DESCRIPTOR ModificationDescriptor, _Inout_ PSECURITY_DESCRIPTOR *ObjectsSecurityDescriptor, _In_ PGENERIC_MAPPING GenericMapping, _In_opt_ HANDLE Token)
 
NTSYSAPI NTSTATUS NTAPI RtlSetSecurityObjectEx (_In_ SECURITY_INFORMATION SecurityInformation, _In_ PSECURITY_DESCRIPTOR ModificationDescriptor, _Inout_ PSECURITY_DESCRIPTOR *ObjectsSecurityDescriptor, _In_ ULONG AutoInheritFlags, _In_ PGENERIC_MAPPING GenericMapping, _In_opt_ HANDLE Token)
 
NTSYSAPI NTSTATUS NTAPI RtlConvertToAutoInheritSecurityObject (_In_opt_ PSECURITY_DESCRIPTOR ParentDescriptor, _In_ PSECURITY_DESCRIPTOR CurrentSecurityDescriptor, _Out_ PSECURITY_DESCRIPTOR *NewSecurityDescriptor, _In_opt_ GUID *ObjectType, _In_ BOOLEAN IsDirectoryObject, _In_ PGENERIC_MAPPING GenericMapping)
 
NTSYSAPI NTSTATUS NTAPI RtlNewInstanceSecurityObject (_In_ BOOLEAN ParentDescriptorChanged, _In_ BOOLEAN CreatorDescriptorChanged, _In_ PLUID OldClientTokenModifiedId, _Out_ PLUID NewClientTokenModifiedId, _In_opt_ PSECURITY_DESCRIPTOR ParentDescriptor, _In_opt_ PSECURITY_DESCRIPTOR CreatorDescriptor, _Out_ PSECURITY_DESCRIPTOR *NewDescriptor, _In_ BOOLEAN IsDirectoryObject, _In_ HANDLE Token, _In_ PGENERIC_MAPPING GenericMapping)
 
NTSYSAPI NTSTATUS NTAPI RtlCopySecurityDescriptor (_In_ PSECURITY_DESCRIPTOR InputSecurityDescriptor, _Out_ PSECURITY_DESCRIPTOR *OutputSecurityDescriptor)
 
NTSYSAPI VOID NTAPI RtlRunEncodeUnicodeString (_Inout_ PUCHAR Seed, _In_ PUNICODE_STRING String)
 
NTSYSAPI VOID NTAPI RtlRunDecodeUnicodeString (_In_ UCHAR Seed, _In_ PUNICODE_STRING String)
 
NTSYSAPI NTSTATUS NTAPI RtlImpersonateSelf (_In_ SECURITY_IMPERSONATION_LEVEL ImpersonationLevel)
 
NTSYSAPI NTSTATUS NTAPI RtlImpersonateSelfEx (_In_ SECURITY_IMPERSONATION_LEVEL ImpersonationLevel, _In_opt_ ACCESS_MASK AdditionalAccess, _Out_opt_ PHANDLE ThreadToken)
 
NTSYSAPI NTSTATUS NTAPI RtlAdjustPrivilege (_In_ ULONG Privilege, _In_ BOOLEAN Enable, _In_ BOOLEAN Client, _Out_ PBOOLEAN WasEnabled)
 
NTSYSAPI NTSTATUS NTAPI RtlAcquirePrivilege (_In_ PULONG Privilege, _In_ ULONG NumPriv, _In_ ULONG Flags, _Out_ PVOID *ReturnedState)
 
NTSYSAPI VOID NTAPI RtlReleasePrivilege (_In_ PVOID StatePointer)
 
NTSYSAPI NTSTATUS NTAPI RtlRemovePrivileges (_In_ HANDLE hToken, _In_ PULONG PrivilegesToKeep, _In_ ULONG PrivilegeCount)
 
NTSYSAPI NTSTATUS NTAPI RtlIsUntrustedObject (_In_opt_ HANDLE Handle, _In_opt_ PVOID Object, _Out_ PBOOLEAN UntrustedObject)
 
NTSYSAPI ULONG NTAPI RtlQueryValidationRunlevel (_In_opt_ PCUNICODE_STRING ComponentName)
 
NTSYSAPI PVOID NTAPI RtlCreateBoundaryDescriptor (_In_ PUNICODE_STRING Name, _In_ ULONG Flags)
 
NTSYSAPI VOID NTAPI RtlDeleteBoundaryDescriptor (_In_ PVOID BoundaryDescriptor)
 
NTSYSAPI NTSTATUS NTAPI RtlAddSIDToBoundaryDescriptor (_Inout_ PVOID *BoundaryDescriptor, _In_ PSID RequiredSid)
 
NTSYSAPI NTSTATUS NTAPI RtlAddIntegrityLabelToBoundaryDescriptor (_Inout_ PVOID *BoundaryDescriptor, _In_ PSID IntegrityLabel)
 
NTSYSAPI NTSTATUS NTAPI RtlGetVersion (_Out_ PRTL_OSVERSIONINFOW lpVersionInformation)
 
NTSYSAPI NTSTATUS NTAPI RtlVerifyVersionInfo (_In_ PRTL_OSVERSIONINFOEXW VersionInfo, _In_ ULONG TypeMask, _In_ ULONGLONG ConditionMask)
 
NTSYSAPI ULONG NTAPI RtlGetNtGlobalFlags (VOID)
 
NTSYSAPI BOOLEAN NTAPI RtlGetNtProductType (_Out_ PNT_PRODUCT_TYPE NtProductType)
 
NTSYSAPI VOID NTAPI RtlGetNtVersionNumbers (_Out_opt_ PULONG pNtMajorVersion, _Out_opt_ PULONG pNtMinorVersion, _Out_opt_ PULONG pNtBuildNumber)
 
NTSYSAPI
OS_DEPLOYEMENT_STATE_VALUES
NTAPI 
RtlOsDeploymentState (_In_ ULONG Flags)
 
NTSYSAPI NTSTATUS NTAPI RtlRegisterWait (_Out_ PHANDLE WaitHandle, _In_ HANDLE Handle, _In_ WAITORTIMERCALLBACKFUNC Function, _In_ PVOID Context, _In_ ULONG Milliseconds, _In_ ULONG Flags)
 
NTSYSAPI NTSTATUS NTAPI RtlDeregisterWait (_In_ HANDLE WaitHandle)
 
NTSYSAPI NTSTATUS NTAPI RtlDeregisterWaitEx (_In_ HANDLE WaitHandle, _In_ HANDLE Event)
 
NTSYSAPI NTSTATUS NTAPI RtlQueueWorkItem (_In_ WORKERCALLBACKFUNC Function, _In_ PVOID Context, _In_ ULONG Flags)
 
NTSYSAPI NTSTATUS NTAPI RtlSetIoCompletionCallback (_In_ HANDLE FileHandle, _In_ APC_CALLBACK_FUNCTION CompletionProc, _In_ ULONG Flags)
 
NTSYSAPI NTSTATUS NTAPI RtlCreateTimerQueue (_Out_ PHANDLE TimerQueueHandle)
 
NTSYSAPI NTSTATUS NTAPI RtlCreateTimer (_In_ HANDLE TimerQueueHandle, _Out_ PHANDLE Handle, _In_ WAITORTIMERCALLBACKFUNC Function, _In_ PVOID Context, _In_ ULONG DueTime, _In_ ULONG Period, _In_ ULONG Flags)
 
NTSYSAPI NTSTATUS NTAPI RtlUpdateTimer (_In_ HANDLE TimerQueueHandle, _In_ HANDLE TimerHandle, _In_ ULONG DueTime, _In_ ULONG Period)
 
NTSYSAPI NTSTATUS NTAPI RtlDeleteTimer (_In_ HANDLE TimerQueueHandle, _In_ HANDLE TimerToCancel, _In_ HANDLE Event)
 
NTSYSAPI NTSTATUS NTAPI RtlDeleteTimerQueue (_In_ HANDLE TimerQueueHandle)
 
NTSYSAPI NTSTATUS NTAPI RtlDeleteTimerQueueEx (_In_ HANDLE TimerQueueHandle, _In_ HANDLE Event)
 
NTSYSAPI NTSTATUS NTAPI RtlFormatCurrentUserKeyPath (_Out_ PUNICODE_STRING CurrentUserKeyPath)
 
NTSYSAPI NTSTATUS NTAPI RtlOpenCurrentUser (_In_ ACCESS_MASK DesiredAccess, _Out_ PHANDLE CurrentUserKey)
 
NTSYSAPI NTSTATUS NTAPI RtlCreateRegistryKey (_In_ ULONG RelativeTo, _In_ PWSTR Path)
 
NTSYSAPI NTSTATUS NTAPI RtlCheckRegistryKey (_In_ ULONG RelativeTo, _In_ PWSTR Path)
 
NTSYSAPI NTSTATUS NTAPI RtlQueryRegistryValues (_In_ ULONG RelativeTo, _In_ PWSTR Path, _In_ PRTL_QUERY_REGISTRY_TABLE QueryTable, _In_ PVOID Context, _In_opt_ PVOID Environment)
 
NTSYSAPI NTSTATUS NTAPI RtlWriteRegistryValue (_In_ ULONG RelativeTo, _In_ PWSTR Path, _In_ PWSTR ValueName, _In_ ULONG ValueType, _In_ PVOID ValueData, _In_ ULONG ValueLength)
 
NTSYSAPI NTSTATUS NTAPI RtlDeleteRegistryValue (_In_ ULONG RelativeTo, _In_ PWSTR Path, _In_ PWSTR ValueName)
 
NTSYSAPI VOID NTAPI DbgUserBreakPoint (VOID)
 
NTSYSAPI VOID NTAPI DbgBreakPoint (VOID)
 
NTSYSAPI VOID NTAPI DbgBreakPointWithStatus (_In_ ULONG Status)
 
NTSYSAPI ULONG __cdecl DbgPrint (_In_z_ _Printf_format_string_ PSTR Format,...)
 
NTSYSAPI ULONG __cdecl DbgPrintEx (_In_ ULONG ComponentId, _In_ ULONG Level, _In_z_ _Printf_format_string_ PSTR Format,...)
 
NTSYSAPI ULONG NTAPI vDbgPrintEx (_In_ ULONG ComponentId, _In_ ULONG Level, _In_z_ PCH Format, _In_ va_list arglist)
 
NTSYSAPI ULONG NTAPI vDbgPrintExWithPrefix (_In_z_ PCH Prefix, _In_ ULONG ComponentId, _In_ ULONG Level, _In_z_ PCH Format, _In_ va_list arglist)
 
NTSYSAPI NTSTATUS NTAPI DbgQueryDebugFilterState (_In_ ULONG ComponentId, _In_ ULONG Level)
 
NTSYSAPI NTSTATUS NTAPI DbgSetDebugFilterState (_In_ ULONG ComponentId, _In_ ULONG Level, _In_ BOOLEAN State)
 
NTSYSAPI ULONG NTAPI DbgPrompt (_In_ PCH Prompt, _Out_writes_bytes_(Length) PCH Response, _In_ ULONG Length)
 
NTSYSAPI NTSTATUS NTAPI RtlEnableThreadProfiling (_In_ HANDLE ThreadHandle, _In_ ULONG Flags, _In_ ULONG64 HardwareCounters, _Out_ PVOID *PerformanceDataHandle)
 
NTSYSAPI NTSTATUS NTAPI RtlDisableThreadProfiling (_In_ PVOID PerformanceDataHandle)
 
NTSYSAPI NTSTATUS NTAPI RtlQueryThreadProfiling (_In_ HANDLE ThreadHandle, _Out_ PBOOLEAN Enabled)
 
NTSYSAPI NTSTATUS NTAPI RtlReadThreadProfilingData (_In_ HANDLE PerformanceDataHandle, _In_ ULONG Flags, _Out_ PPERFORMANCE_DATA PerformanceData)
 
NTSYSAPI ULONG NTAPI RtlGetCurrentProcessorNumber (VOID)
 
NTSYSAPI ULONG32 NTAPI RtlComputeCrc32 (_In_ ULONG32 PartialCrc, _In_ PVOID Buffer, _In_ ULONG Length)
 
NTSYSAPI PVOID NTAPI RtlEncodePointer (_In_ PVOID Ptr)
 
NTSYSAPI PVOID NTAPI RtlDecodePointer (_In_ PVOID Ptr)
 
NTSYSAPI PVOID NTAPI RtlEncodeSystemPointer (_In_ PVOID Ptr)
 
NTSYSAPI PVOID NTAPI RtlDecodeSystemPointer (_In_ PVOID Ptr)
 
NTSYSAPI BOOLEAN NTAPI RtlIsThreadWithinLoaderCallout (VOID)
 
NTSYSAPI NTSTATUS NTAPI RtlQueryElevationFlags (_Out_ PRTL_ELEVATION_FLAGS Flags)
 
NTSYSAPI NTSTATUS NTAPI RtlRegisterThreadWithCsrss (VOID)
 
NTSYSAPI NTSTATUS NTAPI RtlLockCurrentThread (VOID)
 
NTSYSAPI NTSTATUS NTAPI RtlUnlockCurrentThread (VOID)
 
NTSYSAPI NTSTATUS NTAPI RtlLockModuleSection (_In_ PVOID Address)
 
NTSYSAPI NTSTATUS NTAPI RtlUnlockModuleSection (_In_ PVOID Address)
 
NTSYSAPI
PRTL_UNLOAD_EVENT_TRACE NTAPI 
RtlGetUnloadEventTrace (VOID)
 
NTSYSAPI VOID NTAPI RtlGetUnloadEventTraceEx (_Out_ PULONG *ElementSize, _Out_ PULONG *ElementCount, _Out_ PVOID *EventTrace)
 
NTSYSAPI LOGICAL NTAPI RtlQueryPerformanceCounter (_Out_ PLARGE_INTEGER PerformanceCounter)
 
NTSYSAPI LOGICAL NTAPI RtlQueryPerformanceFrequency (_Out_ PLARGE_INTEGER PerformanceFrequency)
 
NTSYSAPI ULONG NTAPI RtlCrc32 (_In_reads_bytes_(Size) const void *Buffer, _In_ size_t Size, _In_ ULONG InitialCrc)
 
NTSYSAPI ULONGLONG NTAPI RtlCrc64 (_In_reads_bytes_(Size) const void *Buffer, _In_ size_t Size, _In_ ULONGLONG InitialCrc)
 

Variables

_In_ ULONG NumberToFind
 
_In_ ULONG _In_ ULONG HintIndex
 

Macro Definition Documentation

#define CLEAR_PARSE_MESSAGE_CONTEXT_FLAG (   ctx,
  flag 
)    ((ctx)->fFlags &= ~(flag))

Definition at line 3974 of file ntrtl.h.

#define DBG_STATUS_BUGCHECK_FIRST   3

Definition at line 6075 of file ntrtl.h.

#define DBG_STATUS_BUGCHECK_SECOND   4

Definition at line 6076 of file ntrtl.h.

#define DBG_STATUS_CONTROL_C   1

Definition at line 6073 of file ntrtl.h.

#define DBG_STATUS_DEBUG_CONTROL   6

Definition at line 6078 of file ntrtl.h.

#define DBG_STATUS_FATAL   5

Definition at line 6077 of file ntrtl.h.

#define DBG_STATUS_SYSRQ   2

Definition at line 6074 of file ntrtl.h.

#define DBG_STATUS_WORKER   7

Definition at line 6079 of file ntrtl.h.

#define DOS_MAX_COMPONENT_LENGTH   255

Definition at line 2317 of file ntrtl.h.

#define DOS_MAX_PATH_LENGTH   (DOS_MAX_COMPONENT_LENGTH + 5)

Definition at line 2318 of file ntrtl.h.

#define HASH_ENTRY_KEY (   x)    ((x)->Signature)

Definition at line 593 of file ntrtl.h.

#define HASH_STRING_ALGORITHM_DEFAULT   0

Definition at line 1462 of file ntrtl.h.

#define HASH_STRING_ALGORITHM_INVALID   0xffffffff

Definition at line 1464 of file ntrtl.h.

#define HASH_STRING_ALGORITHM_X65599   1

Definition at line 1463 of file ntrtl.h.

#define HEAP_CLASS_0   0x00000000

Definition at line 3247 of file ntrtl.h.

#define HEAP_CLASS_1   0x00001000

Definition at line 3248 of file ntrtl.h.

#define HEAP_CLASS_2   0x00002000

Definition at line 3249 of file ntrtl.h.

#define HEAP_CLASS_3   0x00003000

Definition at line 3250 of file ntrtl.h.

#define HEAP_CLASS_4   0x00004000

Definition at line 3251 of file ntrtl.h.

#define HEAP_CLASS_5   0x00005000

Definition at line 3252 of file ntrtl.h.

#define HEAP_CLASS_6   0x00006000

Definition at line 3253 of file ntrtl.h.

#define HEAP_CLASS_7   0x00007000

Definition at line 3254 of file ntrtl.h.

#define HEAP_CLASS_8   0x00008000

Definition at line 3255 of file ntrtl.h.

#define HEAP_CLASS_MASK   0x0000f000

Definition at line 3256 of file ntrtl.h.

#define HEAP_SETTABLE_USER_FLAG1   0x00000200

Definition at line 3242 of file ntrtl.h.

#define HEAP_SETTABLE_USER_FLAG2   0x00000400

Definition at line 3243 of file ntrtl.h.

#define HEAP_SETTABLE_USER_FLAG3   0x00000800

Definition at line 3244 of file ntrtl.h.

#define HEAP_SETTABLE_USER_FLAGS   0x00000e00

Definition at line 3245 of file ntrtl.h.

#define HEAP_SETTABLE_USER_VALUE   0x00000100

Definition at line 3241 of file ntrtl.h.

#define HEAP_USAGE_ALLOCATED_BLOCKS   HEAP_REALLOC_IN_PLACE_ONLY

Definition at line 3485 of file ntrtl.h.

#define HEAP_USAGE_FREE_BUFFER   HEAP_ZERO_MEMORY

Definition at line 3486 of file ntrtl.h.

#define HeapDebuggingInformation   0x80000002

Definition at line 3532 of file ntrtl.h.

#define INIT_PARSE_MESSAGE_CONTEXT (   ctx)
Value:
{ \
(ctx)->fFlags = 0; \
}

Definition at line 3967 of file ntrtl.h.

#define MAX_UNICODE_STACK_BUFFER_LENGTH   256

Definition at line 5025 of file ntrtl.h.

#define RTL_ACQUIRE_PRIVILEGE_PROCESS   0x00000002

Definition at line 5692 of file ntrtl.h.

#define RTL_ACQUIRE_PRIVILEGE_REVERT   0x00000001

Definition at line 5691 of file ntrtl.h.

#define RTL_ATOM_INVALID_ATOM   (RTL_ATOM)0x0000

Definition at line 4759 of file ntrtl.h.

#define RTL_ATOM_MAXIMUM_INTEGER_ATOM   (RTL_ATOM)0xc000

Definition at line 4758 of file ntrtl.h.

#define RTL_ATOM_MAXIMUM_NAME_LENGTH   255

Definition at line 4761 of file ntrtl.h.

#define RTL_ATOM_PINNED   0x01

Definition at line 4762 of file ntrtl.h.

#define RTL_ATOM_TABLE_DEFAULT_NUMBER_OF_BUCKETS   37

Definition at line 4760 of file ntrtl.h.

#define RTL_BARRIER_FLAGS_BLOCK_ONLY   0x00000002

Definition at line 1145 of file ntrtl.h.

#define RTL_BARRIER_FLAGS_NO_DELETE   0x00000004

Definition at line 1146 of file ntrtl.h.

#define RTL_BARRIER_FLAGS_SPIN_ONLY   0x00000001

Definition at line 1144 of file ntrtl.h.

#define RTL_CLONE_PROCESS_FLAGS_CREATE_SUSPENDED   0x00000001

Definition at line 2504 of file ntrtl.h.

#define RTL_CLONE_PROCESS_FLAGS_INHERIT_HANDLES   0x00000002

Definition at line 2505 of file ntrtl.h.

#define RTL_CLONE_PROCESS_FLAGS_NO_SYNCHRONIZE   0x00000004

Definition at line 2506 of file ntrtl.h.

#define RTL_CREATE_ENVIRONMENT_EMPTY   0x4

Definition at line 2853 of file ntrtl.h.

#define RTL_CREATE_ENVIRONMENT_TRANSLATE   0x1

Definition at line 2851 of file ntrtl.h.

#define RTL_CREATE_ENVIRONMENT_TRANSLATE_FROM_OEM   0x2

Definition at line 2852 of file ntrtl.h.

#define RTL_DOS_SEARCH_PATH_FLAG_APPLY_DEFAULT_EXTENSION_WHEN_NOT_RELATIVE_PATH_EVEN_IF_FILE_HAS_EXTENSION   0x00000004)

Definition at line 3131 of file ntrtl.h.

#define RTL_DOS_SEARCH_PATH_FLAG_APPLY_ISOLATION_REDIRECTION   0x00000001

Definition at line 3129 of file ntrtl.h.

#define RTL_DOS_SEARCH_PATH_FLAG_DISALLOW_DOT_RELATIVE_PATH_SEARCH   0x00000002

Definition at line 3130 of file ntrtl.h.

#define RTL_DRIVE_LETTER_VALID   (USHORT)0x0001

Definition at line 2338 of file ntrtl.h.

#define RTL_DUPLICATE_UNICODE_STRING_ALLOCATE_NULL_STRING   (0x00000002)

Definition at line 1395 of file ntrtl.h.

#define RTL_DUPLICATE_UNICODE_STRING_NULL_TERMINATE   (0x00000001)

Definition at line 1394 of file ntrtl.h.

#define RTL_ERRORMODE_NOGPFAULTERRORBOX   0x0020

Definition at line 4043 of file ntrtl.h.

#define RTL_ERRORMODE_NOOPENFILEERRORBOX   0x0040

Definition at line 4044 of file ntrtl.h.

#define RTL_FIND_CHAR_IN_UNICODE_STRING_CASE_INSENSITIVE   0x00000004

Definition at line 1508 of file ntrtl.h.

#define RTL_FIND_CHAR_IN_UNICODE_STRING_COMPLEMENT_CHAR_SET   0x00000002

Definition at line 1507 of file ntrtl.h.

#define RTL_FIND_CHAR_IN_UNICODE_STRING_START_AT_END   0x00000001

Definition at line 1506 of file ntrtl.h.

#define RTL_HANDLE_ALLOCATED   (USHORT)0x0001

Definition at line 4694 of file ntrtl.h.

#define RTL_HASH_ALLOCATED_HEADER   0x00000001

Definition at line 584 of file ntrtl.h.

#define RTL_HASH_RESERVED_SIGNATURE   0

Definition at line 585 of file ntrtl.h.

#define RTL_HEAP_BUSY   (USHORT)0x0001

Definition at line 3177 of file ntrtl.h.

#define RTL_HEAP_MAKE_TAG   HEAP_MAKE_TAG_FLAGS

Definition at line 3385 of file ntrtl.h.

#define RTL_HEAP_PROTECTED_ENTRY   (USHORT)0x0200

Definition at line 3185 of file ntrtl.h.

#define RTL_HEAP_SEGMENT   (USHORT)0x0002

Definition at line 3178 of file ntrtl.h.

#define RTL_HEAP_SETTABLE_FLAG1   (USHORT)0x0020

Definition at line 3180 of file ntrtl.h.

#define RTL_HEAP_SETTABLE_FLAG2   (USHORT)0x0040

Definition at line 3181 of file ntrtl.h.

#define RTL_HEAP_SETTABLE_FLAG3   (USHORT)0x0080

Definition at line 3182 of file ntrtl.h.

#define RTL_HEAP_SETTABLE_FLAGS   (USHORT)0x00e0

Definition at line 3183 of file ntrtl.h.

#define RTL_HEAP_SETTABLE_VALUE   (USHORT)0x0010

Definition at line 3179 of file ntrtl.h.

#define RTL_HEAP_UNCOMMITTED_RANGE   (USHORT)0x0100

Definition at line 3184 of file ntrtl.h.

#define RTL_IMAGE_NT_HEADER_EX_FLAG_NO_RANGE_CHECK   0x00000001

Definition at line 2752 of file ntrtl.h.

#define RTL_MAX_DRIVE_LETTERS   32

Definition at line 2337 of file ntrtl.h.

#define RTL_QUERY_PROCESS_BACKTRACES   0x00000002

Definition at line 3908 of file ntrtl.h.

#define RTL_QUERY_PROCESS_CS_OWNER   0x00000400

Definition at line 3917 of file ntrtl.h.

#define RTL_QUERY_PROCESS_HEAP_ENTRIES   0x00000010

Definition at line 3911 of file ntrtl.h.

#define RTL_QUERY_PROCESS_HEAP_ENTRIES_EX   0x00000200

Definition at line 3916 of file ntrtl.h.

#define RTL_QUERY_PROCESS_HEAP_SUMMARY   0x00000004

Definition at line 3909 of file ntrtl.h.

#define RTL_QUERY_PROCESS_HEAP_TAGS   0x00000008

Definition at line 3910 of file ntrtl.h.

#define RTL_QUERY_PROCESS_LOCKS   0x00000020

Definition at line 3912 of file ntrtl.h.

#define RTL_QUERY_PROCESS_MODULES   0x00000001

Definition at line 3907 of file ntrtl.h.

#define RTL_QUERY_PROCESS_MODULES32   0x00000040

Definition at line 3913 of file ntrtl.h.

#define RTL_QUERY_PROCESS_MODULESEX   0x00000100

Definition at line 3915 of file ntrtl.h.

#define RTL_QUERY_PROCESS_NONINVASIVE   0x80000000

Definition at line 3918 of file ntrtl.h.

#define RTL_QUERY_PROCESS_VERIFIER_OPTIONS   0x00000080

Definition at line 3914 of file ntrtl.h.

#define RTL_QUERY_REGISTRY_DELETE   0x00000040

Definition at line 6016 of file ntrtl.h.

#define RTL_QUERY_REGISTRY_DIRECT   0x00000020

Definition at line 6015 of file ntrtl.h.

#define RTL_QUERY_REGISTRY_NOEXPAND   0x00000010

Definition at line 6014 of file ntrtl.h.

#define RTL_QUERY_REGISTRY_NOVALUE   0x00000008

Definition at line 6013 of file ntrtl.h.

#define RTL_QUERY_REGISTRY_REQUIRED   0x00000004

Definition at line 6012 of file ntrtl.h.

#define RTL_QUERY_REGISTRY_SUBKEY   0x00000001

Definition at line 6010 of file ntrtl.h.

#define RTL_QUERY_REGISTRY_TOPKEY   0x00000002

Definition at line 6011 of file ntrtl.h.

#define RTL_REGISTRY_ABSOLUTE   0

Definition at line 5964 of file ntrtl.h.

#define RTL_REGISTRY_CONTROL   2

Definition at line 5966 of file ntrtl.h.

#define RTL_REGISTRY_DEVICEMAP   4

Definition at line 5968 of file ntrtl.h.

#define RTL_REGISTRY_HANDLE   0x40000000

Definition at line 5971 of file ntrtl.h.

#define RTL_REGISTRY_MAXIMUM   6

Definition at line 5970 of file ntrtl.h.

#define RTL_REGISTRY_OPTIONAL   0x80000000

Definition at line 5972 of file ntrtl.h.

#define RTL_REGISTRY_SERVICES   1

Definition at line 5965 of file ntrtl.h.

#define RTL_REGISTRY_USER   5

Definition at line 5969 of file ntrtl.h.

#define RTL_REGISTRY_WINDOWS_NT   3

Definition at line 5967 of file ntrtl.h.

#define RTL_RESOURCE_FLAG_LONG_TERM   ((ULONG)0x00000001)

Definition at line 969 of file ntrtl.h.

#define RTL_UNLOAD_EVENT_TRACE_NUMBER   64

Definition at line 6320 of file ntrtl.h.

#define RTL_USER_PROC_APP_MANIFEST_PRESENT   0x00002000

Definition at line 2392 of file ntrtl.h.

#define RTL_USER_PROC_CASE_SENSITIVE   0x00000080

Definition at line 2389 of file ntrtl.h.

#define RTL_USER_PROC_CURDIR_CLOSE   0x00000002

Definition at line 2326 of file ntrtl.h.

#define RTL_USER_PROC_CURDIR_INHERIT   0x00000003

Definition at line 2327 of file ntrtl.h.

#define RTL_USER_PROC_DISABLE_HEAP_DECOMMIT   0x00000100

Definition at line 2390 of file ntrtl.h.

#define RTL_USER_PROC_DLL_REDIRECTION_LOCAL   0x00001000

Definition at line 2391 of file ntrtl.h.

#define RTL_USER_PROC_IMAGE_KEY_MISSING   0x00004000

Definition at line 2393 of file ntrtl.h.

#define RTL_USER_PROC_OPTIN_PROCESS   0x00020000

Definition at line 2394 of file ntrtl.h.

#define RTL_USER_PROC_PARAMS_NORMALIZED   0x00000001

Definition at line 2383 of file ntrtl.h.

#define RTL_USER_PROC_PROFILE_KERNEL   0x00000004

Definition at line 2385 of file ntrtl.h.

#define RTL_USER_PROC_PROFILE_SERVER   0x00000008

Definition at line 2386 of file ntrtl.h.

#define RTL_USER_PROC_PROFILE_USER   0x00000002

Definition at line 2384 of file ntrtl.h.

#define RTL_USER_PROC_RESERVE_16MB   0x00000040

Definition at line 2388 of file ntrtl.h.

#define RTL_USER_PROC_RESERVE_1MB   0x00000020

Definition at line 2387 of file ntrtl.h.

#define RtlInitializeSplayLinks (   Links)
Value:
{ \
PRTL_SPLAY_LINKS _SplayLinks; \
_SplayLinks = (PRTL_SPLAY_LINKS)(Links); \
_SplayLinks->Parent = _SplayLinks; \
_SplayLinks->LeftChild = NULL; \
_SplayLinks->RightChild = NULL; \
}

Definition at line 325 of file ntrtl.h.

#define RtlInsertAsLeftChild (   ParentLinks,
  ChildLinks 
)
Value:
{ \
PRTL_SPLAY_LINKS _SplayParent; \
PRTL_SPLAY_LINKS _SplayChild; \
_SplayParent = (PRTL_SPLAY_LINKS)(ParentLinks); \
_SplayChild = (PRTL_SPLAY_LINKS)(ChildLinks); \
_SplayParent->LeftChild = _SplayChild; \
_SplayChild->Parent = _SplayParent; \
}

Definition at line 341 of file ntrtl.h.

#define RtlInsertAsRightChild (   ParentLinks,
  ChildLinks 
)
Value:
{ \
PRTL_SPLAY_LINKS _SplayParent; \
PRTL_SPLAY_LINKS _SplayChild; \
_SplayParent = (PRTL_SPLAY_LINKS)(ParentLinks); \
_SplayChild = (PRTL_SPLAY_LINKS)(ChildLinks); \
_SplayParent->RightChild = _SplayChild; \
_SplayChild->Parent = _SplayParent; \
}

Definition at line 351 of file ntrtl.h.

#define RtlIntPtrToUnicodeString (   Value,
  Base,
  String 
)    RtlIntegerToUnicodeString(Value, Base, String)

Definition at line 4215 of file ntrtl.h.

#define RtlIpv4AddressToString   RtlIpv4AddressToStringW

Definition at line 4308 of file ntrtl.h.

#define RtlIpv4AddressToStringEx   RtlIpv4AddressToStringExW

Definition at line 4309 of file ntrtl.h.

#define RtlIpv4StringToAddress   RtlIpv4StringToAddressW

Definition at line 4312 of file ntrtl.h.

#define RtlIpv4StringToAddressEx   RtlIpv4StringToAddressExW

Definition at line 4313 of file ntrtl.h.

#define RtlIpv6AddressToString   RtlIpv6AddressToStringW

Definition at line 4310 of file ntrtl.h.

#define RtlIpv6AddressToStringEx   RtlIpv6AddressToStringExW

Definition at line 4311 of file ntrtl.h.

#define RtlIpv6StringToAddress   RtlIpv6StringToAddressW

Definition at line 4314 of file ntrtl.h.

#define RtlIpv6StringToAddressEx   RtlIpv6StringToAddressExW

Definition at line 4315 of file ntrtl.h.

#define RtlIsLeftChild (   Links)    ((RtlLeftChild(RtlParent(Links)) == (PRTL_SPLAY_LINKS)(Links)))

Definition at line 338 of file ntrtl.h.

#define RtlIsRightChild (   Links)    ((RtlRightChild(RtlParent(Links)) == (PRTL_SPLAY_LINKS)(Links)))

Definition at line 339 of file ntrtl.h.

#define RtlIsRoot (   Links)    ((RtlParent(Links) == (PRTL_SPLAY_LINKS)(Links)))

Definition at line 337 of file ntrtl.h.

#define RtlLeftChild (   Links)    ((PRTL_SPLAY_LINKS)(Links)->LeftChild)

Definition at line 335 of file ntrtl.h.

#define RtlParent (   Links)    ((PRTL_SPLAY_LINKS)(Links)->Parent)

Definition at line 334 of file ntrtl.h.

#define RtlProcessHeap ( )    (NtCurrentPeb()->ProcessHeap)

Definition at line 3320 of file ntrtl.h.

#define RtlRightChild (   Links)    ((PRTL_SPLAY_LINKS)(Links)->RightChild)

Definition at line 336 of file ntrtl.h.

#define SET_PARSE_MESSAGE_CONTEXT_FLAG (   ctx,
  flag 
)    ((ctx)->fFlags |= (flag))

Definition at line 3973 of file ntrtl.h.

#define TEST_PARSE_MESSAGE_CONTEXT_FLAG (   ctx,
  flag 
)    ((ctx)->fFlags & (flag))

Definition at line 3972 of file ntrtl.h.

Typedef Documentation

typedef struct _CURDIR CURDIR
typedef _In_ PVOID FirstStruct

Definition at line 419 of file ntrtl.h.

typedef struct _CURDIR * PCURDIR
typedef struct _PREFIX_TABLE * PPREFIX_TABLE
typedef struct _PREFIX_TABLE PREFIX_TABLE
typedef PVOID(NTAPI * PRTL_AVL_ALLOCATE_ROUTINE)(_In_ struct _RTL_AVL_TABLE *Table, _In_ CLONG ByteSize)

Definition at line 152 of file ntrtl.h.

typedef RTL_GENERIC_COMPARE_RESULTS(NTAPI * PRTL_AVL_COMPARE_ROUTINE)(_In_ struct _RTL_AVL_TABLE *Table, _In_ PVOID FirstStruct, _In_ PVOID SecondStruct)

Definition at line 146 of file ntrtl.h.

typedef VOID(NTAPI * PRTL_AVL_FREE_ROUTINE)(_In_ struct _RTL_AVL_TABLE *Table, _In_ _Post_invalid_ PVOID Buffer)

Definition at line 157 of file ntrtl.h.

typedef NTSTATUS(NTAPI * PRTL_AVL_MATCH_FUNCTION)(_In_ struct _RTL_AVL_TABLE *Table, _In_ PVOID UserData, _In_ PVOID MatchData)

Definition at line 162 of file ntrtl.h.

typedef struct _RTL_AVL_TABLE * PRTL_AVL_TABLE
typedef struct _RTL_BITMAP * PRTL_BITMAP
typedef struct _RTL_BITMAP_RUN * PRTL_BITMAP_RUN
typedef NTSTATUS(NTAPI * PRTL_ENUM_HEAPS_ROUTINE)(_In_ PVOID HeapHandle, _In_ PVOID Parameter)

Definition at line 3450 of file ntrtl.h.

typedef PVOID(NTAPI * PRTL_GENERIC_ALLOCATE_ROUTINE)(_In_ struct _RTL_GENERIC_TABLE *Table, _In_ CLONG ByteSize)

Definition at line 423 of file ntrtl.h.

typedef VOID(NTAPI * PRTL_GENERIC_FREE_ROUTINE)(_In_ struct _RTL_GENERIC_TABLE *Table, _In_ _Post_invalid_ PVOID Buffer)

Definition at line 428 of file ntrtl.h.

typedef NTSTATUS(NTAPI * PRTL_HEAP_COMMIT_ROUTINE)(_In_ PVOID Base, _Inout_ PVOID *CommitAddress, _Inout_ PSIZE_T CommitSize)

Definition at line 3220 of file ntrtl.h.

typedef struct _RTL_HEAP_ENTRY * PRTL_HEAP_ENTRY
typedef NTSTATUS(NTAPI * PRTL_HEAP_LEAK_ENUMERATION_ROUTINE)(_In_ LONG Reserved, _In_ PVOID HeapHandle, _In_ PVOID BaseAddress, _In_ SIZE_T BlockSize, _In_ ULONG StackTraceDepth, _In_ PVOID *StackTrace)

Definition at line 3535 of file ntrtl.h.

typedef struct _RTL_HEAP_TAG * PRTL_HEAP_TAG
typedef struct _RTL_HEAP_USAGE * PRTL_HEAP_USAGE
typedef NTSTATUS(NTAPI * PRTL_QUERY_REGISTRY_ROUTINE)(_In_ PWSTR ValueName, _In_ ULONG ValueType, _In_ PVOID ValueData, _In_ ULONG ValueLength, _In_ PVOID Context, _In_ PVOID EntryContext)

Definition at line 5990 of file ntrtl.h.

typedef struct _RTL_RB_TREE * PRTL_RB_TREE
typedef struct _RTL_RESOURCE * PRTL_RESOURCE
typedef struct _RTLP_CURDIR_REF* PRTLP_CURDIR_REF

Definition at line 2965 of file ntrtl.h.

typedef struct _TIME_FIELDS * PTIME_FIELDS
typedef NTSTATUS(NTAPI * PUSER_THREAD_START_ROUTINE)(_In_ PVOID ThreadParameter)

Definition at line 2583 of file ntrtl.h.

typedef struct _RTL_AVL_TABLE RTL_AVL_TABLE
typedef struct _RTL_BITMAP RTL_BITMAP
typedef struct _RTL_HEAP_TAG RTL_HEAP_TAG
typedef struct _RTL_RB_TREE RTL_RB_TREE
typedef struct _RTL_RESOURCE RTL_RESOURCE
typedef _In_ PVOID _In_ PVOID SecondStruct

Definition at line 419 of file ntrtl.h.

typedef struct _TIME_FIELDS TIME_FIELDS

Enumeration Type Documentation

Enumerator:
OS_DEPLOYMENT_STANDARD 
OS_DEPLOYMENT_COMPACT 

Definition at line 5831 of file ntrtl.h.

Enumerator:
GenericLessThan 
GenericGreaterThan 
GenericEqual 

Definition at line 139 of file ntrtl.h.

Enumerator:
NormOther 
NormC 
NormD 
NormKC 
NormKD 
NormIdna 
DisallowUnassigned 
NormCDisallowUnassigned 
NormDDisallowUnassigned 
NormKCDisallowUnassigned 
NormKDDisallowUnassigned 
NormIdnaDisallowUnassigned 

Definition at line 1832 of file ntrtl.h.

Enumerator:
RtlPathTypeUnknown 
RtlPathTypeUncAbsolute 
RtlPathTypeDriveAbsolute 
RtlPathTypeDriveRelative 
RtlPathTypeRooted 
RtlPathTypeRelative 
RtlPathTypeLocalDevice 
RtlPathTypeRootLocalDevice 

Definition at line 2974 of file ntrtl.h.

Enumerator:
TableEmptyTree 
TableFoundNode 
TableInsertAsLeft 
TableInsertAsRight 

Definition at line 131 of file ntrtl.h.

Function Documentation

_Success_ ( return!  = -1)
FORCEINLINE VOID AppendTailList ( _Inout_ PLIST_ENTRY  ListHead,
_Inout_ PLIST_ENTRY  ListToAppend 
)

Definition at line 93 of file ntrtl.h.

NTSYSAPI VOID NTAPI DbgBreakPoint ( VOID  )
NTSYSAPI VOID NTAPI DbgBreakPointWithStatus ( _In_ ULONG  Status)
NTSYSAPI ULONG __cdecl DbgPrint ( _In_z_ _Printf_format_string_ PSTR  Format,
  ... 
)
NTSYSAPI ULONG __cdecl DbgPrintEx ( _In_ ULONG  ComponentId,
_In_ ULONG  Level,
_In_z_ _Printf_format_string_ PSTR  Format,
  ... 
)
NTSYSAPI ULONG NTAPI DbgPrompt ( _In_ PCH  Prompt,
_Out_writes_bytes_(Length) PCH  Response,
_In_ ULONG  Length 
)
NTSYSAPI NTSTATUS NTAPI DbgQueryDebugFilterState ( _In_ ULONG  ComponentId,
_In_ ULONG  Level 
)
NTSYSAPI NTSTATUS NTAPI DbgSetDebugFilterState ( _In_ ULONG  ComponentId,
_In_ ULONG  Level,
_In_ BOOLEAN  State 
)
NTSYSAPI VOID NTAPI DbgUserBreakPoint ( VOID  )
FORCEINLINE VOID InitializeListHead ( _Out_ PLIST_ENTRY  ListHead)

Definition at line 6 of file ntrtl.h.

FORCEINLINE VOID InsertHeadList ( _Inout_ PLIST_ENTRY  ListHead,
_Inout_ PLIST_ENTRY  Entry 
)

Definition at line 79 of file ntrtl.h.

FORCEINLINE VOID InsertTailList ( _Inout_ PLIST_ENTRY  ListHead,
_Inout_ PLIST_ENTRY  Entry 
)

Definition at line 65 of file ntrtl.h.

_Check_return_ FORCEINLINE BOOLEAN IsListEmpty ( _In_ PLIST_ENTRY  ListHead)

Definition at line 13 of file ntrtl.h.

NTSYSAPI PPREFIX_TABLE_ENTRY NTAPI PfxFindPrefix ( _In_ PPREFIX_TABLE  PrefixTable,
_In_ PSTRING  FullName 
)
NTSYSAPI VOID NTAPI PfxInitialize ( _Out_ PPREFIX_TABLE  PrefixTable)
NTSYSAPI BOOLEAN NTAPI PfxInsertPrefix ( _In_ PPREFIX_TABLE  PrefixTable,
_In_ PSTRING  Prefix,
_Out_ PPREFIX_TABLE_ENTRY  PrefixTableEntry 
)
NTSYSAPI VOID NTAPI PfxRemovePrefix ( _In_ PPREFIX_TABLE  PrefixTable,
_In_ PPREFIX_TABLE_ENTRY  PrefixTableEntry 
)
FORCEINLINE PSINGLE_LIST_ENTRY PopEntryList ( _Inout_ PSINGLE_LIST_ENTRY  ListHead)

Definition at line 106 of file ntrtl.h.

FORCEINLINE VOID PushEntryList ( _Inout_ PSINGLE_LIST_ENTRY  ListHead,
_Inout_ PSINGLE_LIST_ENTRY  Entry 
)

Definition at line 120 of file ntrtl.h.

FORCEINLINE BOOLEAN RemoveEntryList ( _In_ PLIST_ENTRY  Entry)

Definition at line 20 of file ntrtl.h.

FORCEINLINE PLIST_ENTRY RemoveHeadList ( _Inout_ PLIST_ENTRY  ListHead)

Definition at line 35 of file ntrtl.h.

FORCEINLINE PLIST_ENTRY RemoveTailList ( _Inout_ PLIST_ENTRY  ListHead)

Definition at line 50 of file ntrtl.h.

typedef RTL_GENERIC_COMPARE_RESULTS ( NTAPI *  PRTL_GENERIC_COMPARE_ROUTINE)
NTSYSAPI NTSTATUS NTAPI RtlAbsoluteToSelfRelativeSD ( _In_ PSECURITY_DESCRIPTOR  AbsoluteSecurityDescriptor,
_Out_writes_bytes_to_opt_ *,*BufferLength PSECURITY_DESCRIPTOR  SelfRelativeSecurityDescriptor,
_Inout_ PULONG  BufferLength 
)
NTSYSAPI VOID NTAPI RtlAcquirePebLock ( VOID  )
NTSYSAPI NTSTATUS NTAPI RtlAcquirePrivilege ( _In_ PULONG  Privilege,
_In_ ULONG  NumPriv,
_In_ ULONG  Flags,
_Out_ PVOID *  ReturnedState 
)
NTSYSAPI VOID NTAPI RtlAcquireReleaseSRWLockExclusive ( _Inout_ PRTL_SRWLOCK  SRWLock)
NTSYSAPI BOOLEAN NTAPI RtlAcquireResourceExclusive ( _Inout_ PRTL_RESOURCE  Resource,
_In_ BOOLEAN  Wait 
)
NTSYSAPI BOOLEAN NTAPI RtlAcquireResourceShared ( _Inout_ PRTL_RESOURCE  Resource,
_In_ BOOLEAN  Wait 
)
NTSYSAPI VOID NTAPI RtlAcquireSRWLockExclusive ( _Inout_ PRTL_SRWLOCK  SRWLock)
NTSYSAPI VOID NTAPI RtlAcquireSRWLockShared ( _Inout_ PRTL_SRWLOCK  SRWLock)
FORCEINLINE ULONG RtlActiveEnumeratorsHashTable ( _In_ PRTL_DYNAMIC_HASH_TABLE  HashTable)

Definition at line 700 of file ntrtl.h.

NTSYSAPI NTSTATUS NTAPI RtlAddAccessAllowedAce ( _Inout_ PACL  Acl,
_In_ ULONG  AceRevision,
_In_ ACCESS_MASK  AccessMask,
_In_ PSID  Sid 
)
NTSYSAPI NTSTATUS NTAPI RtlAddAccessAllowedAceEx ( _Inout_ PACL  Acl,
_In_ ULONG  AceRevision,
_In_ ULONG  AceFlags,
_In_ ACCESS_MASK  AccessMask,
_In_ PSID  Sid 
)
NTSYSAPI NTSTATUS NTAPI RtlAddAccessAllowedObjectAce ( _Inout_ PACL  Acl,
_In_ ULONG  AceRevision,
_In_ ULONG  AceFlags,
_In_ ACCESS_MASK  AccessMask,
_In_opt_ PGUID  ObjectTypeGuid,
_In_opt_ PGUID  InheritedObjectTypeGuid,
_In_ PSID  Sid 
)
NTSYSAPI NTSTATUS NTAPI RtlAddAccessDeniedAce ( _Inout_ PACL  Acl,
_In_ ULONG  AceRevision,
_In_ ACCESS_MASK  AccessMask,
_In_ PSID  Sid 
)
NTSYSAPI NTSTATUS NTAPI RtlAddAccessDeniedAceEx ( _Inout_ PACL  Acl,
_In_ ULONG  AceRevision,
_In_ ULONG  AceFlags,
_In_ ACCESS_MASK  AccessMask,
_In_ PSID  Sid 
)
NTSYSAPI NTSTATUS NTAPI RtlAddAccessDeniedObjectAce ( _Inout_ PACL  Acl,
_In_ ULONG  AceRevision,
_In_ ULONG  AceFlags,
_In_ ACCESS_MASK  AccessMask,
_In_opt_ PGUID  ObjectTypeGuid,
_In_opt_ PGUID  InheritedObjectTypeGuid,
_In_ PSID  Sid 
)
NTSYSAPI NTSTATUS NTAPI RtlAddAce ( _Inout_ PACL  Acl,
_In_ ULONG  AceRevision,
_In_ ULONG  StartingAceIndex,
_In_reads_bytes_(AceListLength) PVOID  AceList,
_In_ ULONG  AceListLength 
)
NTSYSAPI NTSTATUS NTAPI RtlAddAtomToAtomTable ( _In_ PVOID  AtomTableHandle,
_In_ PWSTR  AtomName,
_Inout_opt_ PRTL_ATOM  Atom 
)
NTSYSAPI NTSTATUS NTAPI RtlAddAuditAccessAce ( _Inout_ PACL  Acl,
_In_ ULONG  AceRevision,
_In_ ACCESS_MASK  AccessMask,
_In_ PSID  Sid,
_In_ BOOLEAN  AuditSuccess,
_In_ BOOLEAN  AuditFailure 
)
NTSYSAPI NTSTATUS NTAPI RtlAddAuditAccessAceEx ( _Inout_ PACL  Acl,
_In_ ULONG  AceRevision,
_In_ ULONG  AceFlags,
_In_ ACCESS_MASK  AccessMask,
_In_ PSID  Sid,
_In_ BOOLEAN  AuditSuccess,
_In_ BOOLEAN  AuditFailure 
)
NTSYSAPI NTSTATUS NTAPI RtlAddAuditAccessObjectAce ( _Inout_ PACL  Acl,
_In_ ULONG  AceRevision,
_In_ ULONG  AceFlags,
_In_ ACCESS_MASK  AccessMask,
_In_opt_ PGUID  ObjectTypeGuid,
_In_opt_ PGUID  InheritedObjectTypeGuid,
_In_ PSID  Sid,
_In_ BOOLEAN  AuditSuccess,
_In_ BOOLEAN  AuditFailure 
)
NTSYSAPI NTSTATUS NTAPI RtlAddCompoundAce ( _Inout_ PACL  Acl,
_In_ ULONG  AceRevision,
_In_ UCHAR  AceType,
_In_ ACCESS_MASK  AccessMask,
_In_ PSID  ServerSid,
_In_ PSID  ClientSid 
)
NTSYSAPI NTSTATUS NTAPI RtlAddIntegrityLabelToBoundaryDescriptor ( _Inout_ PVOID *  BoundaryDescriptor,
_In_ PSID  IntegrityLabel 
)
NTSYSAPI NTSTATUS NTAPI RtlAddMandatoryAce ( _Inout_ PACL  Acl,
_In_ ULONG  AceRevision,
_In_ ULONG  AceFlags,
_In_ PSID  Sid,
_In_ UCHAR  AceType,
_In_ ACCESS_MASK  AccessMask 
)
NTSYSAPI PVOID NTAPI RtlAddressInSectionTable ( _In_ PIMAGE_NT_HEADERS  NtHeaders,
_In_ PVOID  BaseOfImage,
_In_ ULONG  VirtualAddress 
)
NTSYSAPI NTSTATUS NTAPI RtlAddSIDToBoundaryDescriptor ( _Inout_ PVOID *  BoundaryDescriptor,
_In_ PSID  RequiredSid 
)
NTSYSAPI PVOID NTAPI RtlAddVectoredContinueHandler ( _In_ ULONG  First,
_In_ PVECTORED_EXCEPTION_HANDLER  Handler 
)
NTSYSAPI PVOID NTAPI RtlAddVectoredExceptionHandler ( _In_ ULONG  First,
_In_ PVECTORED_EXCEPTION_HANDLER  Handler 
)
NTSYSAPI NTSTATUS NTAPI RtlAdjustPrivilege ( _In_ ULONG  Privilege,
_In_ BOOLEAN  Enable,
_In_ BOOLEAN  Client,
_Out_ PBOOLEAN  WasEnabled 
)
_Check_return_ NTSYSAPI NTSTATUS NTAPI RtlAllocateAndInitializeSid ( _In_ PSID_IDENTIFIER_AUTHORITY  IdentifierAuthority,
_In_ UCHAR  SubAuthorityCount,
_In_ ULONG  SubAuthority0,
_In_ ULONG  SubAuthority1,
_In_ ULONG  SubAuthority2,
_In_ ULONG  SubAuthority3,
_In_ ULONG  SubAuthority4,
_In_ ULONG  SubAuthority5,
_In_ ULONG  SubAuthority6,
_In_ ULONG  SubAuthority7,
_Outptr_ PSID *  Sid 
)
NTSYSAPI NTSTATUS NTAPI RtlAllocateFromPeb ( _In_ ULONG  Size,
_Out_ PVOID *  Block 
)
NTSYSAPI PRTL_HANDLE_TABLE_ENTRY NTAPI RtlAllocateHandle ( _In_ PRTL_HANDLE_TABLE  HandleTable,
_Out_opt_ PULONG  HandleIndex 
)
NTSYSAPI PVOID NTAPI RtlAllocateHeap ( _In_ PVOID  HeapHandle,
_In_opt_ ULONG  Flags,
_In_ SIZE_T  Size 
)
NTSYSAPI NTSTATUS NTAPI RtlAllocateMemoryBlockLookaside ( _In_ PVOID  MemoryBlockLookaside,
_In_ ULONG  BlockSize,
_Out_ PVOID *  Block 
)
NTSYSAPI NTSTATUS NTAPI RtlAllocateMemoryZone ( _In_ PVOID  MemoryZone,
_In_ SIZE_T  BlockSize,
_Out_ PVOID *  Block 
)
NTSYSAPI WCHAR NTAPI RtlAnsiCharToUnicodeChar ( _Inout_ PUCHAR *  SourceCharacter)
NTSYSAPI NTSTATUS NTAPI RtlAnsiStringToUnicodeString ( _Inout_ PUNICODE_STRING  DestinationString,
_In_ PANSI_STRING  SourceString,
_In_ BOOLEAN  AllocateDestinationString 
)
NTSYSAPI NTSTATUS NTAPI RtlAppendAsciizToString ( _In_ PSTRING  Destination,
_In_opt_ PSTR  Source 
)
NTSYSAPI NTSTATUS NTAPI RtlAppendStringToString ( _In_ PSTRING  Destination,
_In_ PSTRING  Source 
)
NTSYSAPI NTSTATUS NTAPI RtlAppendUnicodeStringToString ( _In_ PUNICODE_STRING  Destination,
_In_ PUNICODE_STRING  Source 
)
NTSYSAPI NTSTATUS NTAPI RtlAppendUnicodeToString ( _In_ PUNICODE_STRING  Destination,
_In_opt_ PWSTR  Source 
)
NTSYSAPI BOOLEAN NTAPI RtlAreAllAccessesGranted ( _In_ ACCESS_MASK  GrantedAccess,
_In_ ACCESS_MASK  DesiredAccess 
)
NTSYSAPI BOOLEAN NTAPI RtlAreAnyAccessesGranted ( _In_ ACCESS_MASK  GrantedAccess,
_In_ ACCESS_MASK  DesiredAccess 
)
_Check_return_ NTSYSAPI BOOLEAN NTAPI RtlAreBitsClear ( _In_ PRTL_BITMAP  BitMapHeader,
_In_ ULONG  StartingIndex,
_In_ ULONG  Length 
)
_Check_return_ NTSYSAPI BOOLEAN NTAPI RtlAreBitsSet ( _In_ PRTL_BITMAP  BitMapHeader,
_In_ ULONG  StartingIndex,
_In_ ULONG  Length 
)
NTSYSAPI BOOLEAN NTAPI RtlBarrier ( _Inout_ PRTL_BARRIER  Barrier,
_In_ ULONG  Flags 
)
NTSYSAPI BOOLEAN NTAPI RtlBarrierForDelete ( _Inout_ PRTL_BARRIER  Barrier,
_In_ ULONG  Flags 
)
NTSYSAPI NTSTATUS NTAPI RtlCharToInteger ( _In_ PSTR  String,
_In_opt_ ULONG  Base,
_Out_ PULONG  Value 
)
_Check_return_ FORCEINLINE BOOLEAN RtlCheckBit ( _In_ PRTL_BITMAP  BitMapHeader,
_In_range_(<, BitMapHeader->SizeOfBitMap) ULONG  BitPosition 
)

Definition at line 4595 of file ntrtl.h.

NTSYSAPI VOID NTAPI RtlCheckForOrphanedCriticalSections ( _In_ HANDLE  hThread)
NTSYSAPI NTSTATUS NTAPI RtlCheckRegistryKey ( _In_ ULONG  RelativeTo,
_In_ PWSTR  Path 
)
NTSYSAPI VOID NTAPI RtlCleanUpTEBLangLists ( VOID  )
NTSYSAPI VOID NTAPI RtlClearAllBits ( _In_ PRTL_BITMAP  BitMapHeader)
NTSYSAPI VOID NTAPI RtlClearBit ( _In_ PRTL_BITMAP  BitMapHeader,
_In_range_(<, BitMapHeader->SizeOfBitMap) ULONG  BitNumber 
)
NTSYSAPI VOID NTAPI RtlClearBits ( _In_ PRTL_BITMAP  BitMapHeader,
_In_range_(0, BitMapHeader->SizeOfBitMap-NumberToClear) ULONG  StartingIndex,
_In_range_(0, BitMapHeader->SizeOfBitMap-StartingIndex) ULONG  NumberToClear 
)
NTSYSAPI NTSTATUS NTAPI RtlCloneUserProcess ( _In_ ULONG  ProcessFlags,
_In_opt_ PSECURITY_DESCRIPTOR  ProcessSecurityDescriptor,
_In_opt_ PSECURITY_DESCRIPTOR  ThreadSecurityDescriptor,
_In_opt_ HANDLE  DebugPort,
_Out_ PRTL_USER_PROCESS_INFORMATION  ProcessInformation 
)
NTSYSAPI PVOID NTAPI RtlCommitDebugInfo ( _Inout_ PRTL_DEBUG_INFORMATION  Buffer,
_In_ SIZE_T  Size 
)
NTSYSAPI SIZE_T NTAPI RtlCompactHeap ( _In_ PVOID  HeapHandle,
_In_ ULONG  Flags 
)
NTSYSAPI LONG NTAPI RtlCompareAltitudes ( _In_ PUNICODE_STRING  Altitude1,
_In_ PUNICODE_STRING  Altitude2 
)
NTSYSAPI SIZE_T NTAPI RtlCompareMemoryUlong ( _In_ PVOID  Source,
_In_ SIZE_T  Length,
_In_ ULONG  Pattern 
)
_Must_inspect_result_ NTSYSAPI LONG NTAPI RtlCompareString ( _In_ PSTRING  String1,
_In_ PSTRING  String2,
_In_ BOOLEAN  CaseInSensitive 
)
_Must_inspect_result_ NTSYSAPI LONG NTAPI RtlCompareUnicodeString ( _In_ PUNICODE_STRING  String1,
_In_ PUNICODE_STRING  String2,
_In_ BOOLEAN  CaseInSensitive 
)
_Must_inspect_result_ NTSYSAPI LONG NTAPI RtlCompareUnicodeStrings ( _In_reads_(String1Length) PWCH  String1,
_In_ SIZE_T  String1Length,
_In_reads_(String2Length) PWCH  String2,
_In_ SIZE_T  String2Length,
_In_ BOOLEAN  CaseInSensitive 
)
NTSYSAPI NTSTATUS NTAPI RtlCompressBuffer ( _In_ USHORT  CompressionFormatAndEngine,
_In_reads_bytes_(UncompressedBufferSize) PUCHAR  UncompressedBuffer,
_In_ ULONG  UncompressedBufferSize,
_Out_writes_bytes_to_(CompressedBufferSize,*FinalCompressedSize) PUCHAR  CompressedBuffer,
_In_ ULONG  CompressedBufferSize,
_In_ ULONG  UncompressedChunkSize,
_Out_ PULONG  FinalCompressedSize,
_In_ PVOID  WorkSpace 
)
NTSYSAPI NTSTATUS NTAPI RtlCompressChunks ( _In_reads_bytes_(UncompressedBufferSize) PUCHAR  UncompressedBuffer,
_In_ ULONG  UncompressedBufferSize,
_Out_writes_bytes_(CompressedBufferSize) PUCHAR  CompressedBuffer,
_In_range_(>=,(UncompressedBufferSize-(UncompressedBufferSize/16))) ULONG  CompressedBufferSize,
_Inout_updates_bytes_(CompressedDataInfoLength) PCOMPRESSED_DATA_INFO  CompressedDataInfo,
_In_range_(>, sizeof(COMPRESSED_DATA_INFO)) ULONG  CompressedDataInfoLength,
_In_ PVOID  WorkSpace 
)
NTSYSAPI ULONG32 NTAPI RtlComputeCrc32 ( _In_ ULONG32  PartialCrc,
_In_ PVOID  Buffer,
_In_ ULONG  Length 
)
NTSYSAPI NTSTATUS NTAPI RtlComputeImportTableHash ( _In_ HANDLE  hFile,
_Out_writes_bytes_(16) PCHAR  Hash,
_In_ ULONG  ImportTableHashRevision 
)
NTSYSAPI NTSTATUS NTAPI RtlConsoleMultiByteToUnicodeN ( _Out_writes_bytes_to_(MaxBytesInUnicodeString,*BytesInUnicodeString) PWCH  UnicodeString,
_In_ ULONG  MaxBytesInUnicodeString,
_Out_opt_ PULONG  BytesInUnicodeString,
_In_reads_bytes_(BytesInMultiByteString) PCH  MultiByteString,
_In_ ULONG  BytesInMultiByteString,
_Out_ PULONG  pdwSpecialChar 
)
NTSYSAPI BOOLEAN NTAPI RtlContractHashTable ( _In_ PRTL_DYNAMIC_HASH_TABLE  HashTable)
NTSYSAPI VOID NTAPI RtlConvertExclusiveToShared ( _Inout_ PRTL_RESOURCE  Resource)
NTSYSAPI NTSTATUS NTAPI RtlConvertLCIDToString ( _In_ LCID  LcidValue,
_In_ ULONG  Base,
_In_ ULONG  Padding,
_Out_writes_(Size) PWSTR  pResultBuf,
_In_ ULONG  Size 
)
FORCEINLINE LUID RtlConvertLongToLuid ( _In_ LONG  Long)

Definition at line 3793 of file ntrtl.h.

NTSYSAPI VOID NTAPI RtlConvertSharedToExclusive ( _Inout_ PRTL_RESOURCE  Resource)
NTSYSAPI NTSTATUS NTAPI RtlConvertSidToUnicodeString ( _Inout_ PUNICODE_STRING  UnicodeString,
_In_ PSID  Sid,
_In_ BOOLEAN  AllocateDestinationString 
)
NTSYSAPI NTSTATUS NTAPI RtlConvertToAutoInheritSecurityObject ( _In_opt_ PSECURITY_DESCRIPTOR  ParentDescriptor,
_In_ PSECURITY_DESCRIPTOR  CurrentSecurityDescriptor,
_Out_ PSECURITY_DESCRIPTOR *  NewSecurityDescriptor,
_In_opt_ GUID *  ObjectType,
_In_ BOOLEAN  IsDirectoryObject,
_In_ PGENERIC_MAPPING  GenericMapping 
)
FORCEINLINE LUID RtlConvertUlongToLuid ( _In_ ULONG  Ulong)

Definition at line 3807 of file ntrtl.h.

NTSYSAPI VOID NTAPI RtlCopyLuid ( _Out_ PLUID  DestinationLuid,
_In_ PLUID  SourceLuid 
)
NTSYSAPI NTSTATUS NTAPI RtlCopySecurityDescriptor ( _In_ PSECURITY_DESCRIPTOR  InputSecurityDescriptor,
_Out_ PSECURITY_DESCRIPTOR *  OutputSecurityDescriptor 
)
NTSYSAPI NTSTATUS NTAPI RtlCopySid ( _In_ ULONG  DestinationSidLength,
_In_reads_bytes_(DestinationSidLength) PSID  DestinationSid,
_In_ PSID  SourceSid 
)
NTSYSAPI VOID NTAPI RtlCopyString ( _In_ PSTRING  DestinationString,
_In_opt_ PSTRING  SourceString 
)
NTSYSAPI VOID NTAPI RtlCopyUnicodeString ( _In_ PUNICODE_STRING  DestinationString,
_In_ PUNICODE_STRING  SourceString 
)
NTSYSAPI ULONG NTAPI RtlCrc32 ( _In_reads_bytes_(Size) const void *  Buffer,
_In_ size_t  Size,
_In_ ULONG  InitialCrc 
)
NTSYSAPI ULONGLONG NTAPI RtlCrc64 ( _In_reads_bytes_(Size) const void *  Buffer,
_In_ size_t  Size,
_In_ ULONGLONG  InitialCrc 
)
NTSYSAPI NTSTATUS NTAPI RtlCreateAcl ( _Out_writes_bytes_(AclLength) PACL  Acl,
_In_ ULONG  AclLength,
_In_ ULONG  AclRevision 
)
NTSYSAPI NTSTATUS NTAPI RtlCreateAtomTable ( _In_ ULONG  NumberOfBuckets,
_Out_ PVOID *  AtomTableHandle 
)
NTSYSAPI PVOID NTAPI RtlCreateBoundaryDescriptor ( _In_ PUNICODE_STRING  Name,
_In_ ULONG  Flags 
)
NTSYSAPI NTSTATUS NTAPI RtlCreateEnvironment ( _In_ BOOLEAN  CloneCurrentEnvironment,
_Out_ PVOID *  Environment 
)
NTSYSAPI NTSTATUS NTAPI RtlCreateEnvironmentEx ( _In_ PVOID  SourceEnv,
_Out_ PVOID *  Environment,
_In_ ULONG  Flags 
)
_Must_inspect_result_ NTSYSAPI BOOLEAN NTAPI RtlCreateHashTable ( _Inout_ _When_(*==,  Mem)
NTSYSAPI PVOID NTAPI RtlCreateHeap ( _In_ ULONG  Flags,
_In_opt_ PVOID  HeapBase,
_In_opt_ SIZE_T  ReserveSize,
_In_opt_ SIZE_T  CommitSize,
_In_opt_ PVOID  Lock,
_In_opt_ PRTL_HEAP_PARAMETERS  Parameters 
)
NTSYSAPI NTSTATUS NTAPI RtlCreateMemoryBlockLookaside ( _Out_ PVOID *  MemoryBlockLookaside,
_Reserved_ ULONG  Flags,
_In_ ULONG  InitialSize,
_In_ ULONG  MinimumBlockSize,
_In_ ULONG  MaximumBlockSize 
)
NTSYSAPI NTSTATUS NTAPI RtlCreateMemoryZone ( _Out_ PVOID *  MemoryZone,
_In_ SIZE_T  InitialSize,
_Reserved_ ULONG  Flags 
)
NTSYSAPI NTSTATUS NTAPI RtlCreateProcessParameters ( _Out_ PRTL_USER_PROCESS_PARAMETERS pProcessParameters,
_In_ PUNICODE_STRING  ImagePathName,
_In_opt_ PUNICODE_STRING  DllPath,
_In_opt_ PUNICODE_STRING  CurrentDirectory,
_In_opt_ PUNICODE_STRING  CommandLine,
_In_opt_ PVOID  Environment,
_In_opt_ PUNICODE_STRING  WindowTitle,
_In_opt_ PUNICODE_STRING  DesktopInfo,
_In_opt_ PUNICODE_STRING  ShellInfo,
_In_opt_ PUNICODE_STRING  RuntimeData 
)
NTSYSAPI NTSTATUS NTAPI RtlCreateProcessParametersEx ( _Out_ PRTL_USER_PROCESS_PARAMETERS pProcessParameters,
_In_ PUNICODE_STRING  ImagePathName,
_In_opt_ PUNICODE_STRING  DllPath,
_In_opt_ PUNICODE_STRING  CurrentDirectory,
_In_opt_ PUNICODE_STRING  CommandLine,
_In_opt_ PVOID  Environment,
_In_opt_ PUNICODE_STRING  WindowTitle,
_In_opt_ PUNICODE_STRING  DesktopInfo,
_In_opt_ PUNICODE_STRING  ShellInfo,
_In_opt_ PUNICODE_STRING  RuntimeData,
_In_ ULONG  Flags 
)
NTSYSAPI NTSTATUS NTAPI RtlCreateProcessReflection ( _In_ HANDLE  ProcessHandle,
_In_ ULONG  Flags,
_In_opt_ PVOID  StartRoutine,
_In_opt_ PVOID  StartContext,
_In_opt_ HANDLE  EventHandle,
_Out_opt_ PRTLP_PROCESS_REFLECTION_REFLECTION_INFORMATION  ReflectionInformation 
)
NTSYSAPI PRTL_DEBUG_INFORMATION NTAPI RtlCreateQueryDebugBuffer ( _In_opt_ ULONG  MaximumCommit,
_In_ BOOLEAN  UseEventPair 
)
NTSYSAPI NTSTATUS NTAPI RtlCreateRegistryKey ( _In_ ULONG  RelativeTo,
_In_ PWSTR  Path 
)
NTSYSAPI NTSTATUS NTAPI RtlCreateSecurityDescriptor ( _Out_ PSECURITY_DESCRIPTOR  SecurityDescriptor,
_In_ ULONG  Revision 
)
NTSYSAPI NTSTATUS NTAPI RtlCreateServiceSid ( _In_ PUNICODE_STRING  ServiceName,
_Out_writes_bytes_opt_ *ServiceSidLength PSID  ServiceSid,
_Inout_ PULONG  ServiceSidLength 
)
NTSYSAPI ULONG NTAPI RtlCreateTagHeap ( _In_ PVOID  HeapHandle,
_In_ ULONG  Flags,
_In_opt_ PWSTR  TagPrefix,
_In_ PWSTR  TagNames 
)
NTSYSAPI NTSTATUS NTAPI RtlCreateTimer ( _In_ HANDLE  TimerQueueHandle,
_Out_ PHANDLE  Handle,
_In_ WAITORTIMERCALLBACKFUNC  Function,
_In_ PVOID  Context,
_In_ ULONG  DueTime,
_In_ ULONG  Period,
_In_ ULONG  Flags 
)
NTSYSAPI NTSTATUS NTAPI RtlCreateTimerQueue ( _Out_ PHANDLE  TimerQueueHandle)
NTSYSAPI BOOLEAN NTAPI RtlCreateUnicodeString ( _Out_ PUNICODE_STRING  DestinationString,
_In_ PWSTR  SourceString 
)
NTSYSAPI BOOLEAN NTAPI RtlCreateUnicodeStringFromAsciiz ( _Out_ PUNICODE_STRING  DestinationString,
_In_ PSTR  SourceString 
)
NTSYSAPI NTSTATUS NTAPI RtlCreateUserProcess ( _In_ PUNICODE_STRING  NtImagePathName,
_In_ ULONG  AttributesDeprecated,
_In_ PRTL_USER_PROCESS_PARAMETERS  ProcessParameters,
_In_opt_ PSECURITY_DESCRIPTOR  ProcessSecurityDescriptor,
_In_opt_ PSECURITY_DESCRIPTOR  ThreadSecurityDescriptor,
_In_opt_ HANDLE  ParentProcess,
_In_ BOOLEAN  InheritHandles,
_In_opt_ HANDLE  DebugPort,
_In_opt_ HANDLE  TokenHandle,
_Out_ PRTL_USER_PROCESS_INFORMATION  ProcessInformation 
)
NTSYSAPI NTSTATUS NTAPI RtlCreateUserStack ( _In_opt_ SIZE_T  CommittedStackSize,
_In_opt_ SIZE_T  MaximumStackSize,
_In_opt_ ULONG_PTR  ZeroBits,
_In_ SIZE_T  PageSize,
_In_ ULONG_PTR  ReserveAlignment,
_Out_ PINITIAL_TEB  InitialTeb 
)
NTSYSAPI NTSTATUS NTAPI RtlCreateUserThread ( _In_ HANDLE  Process,
_In_opt_ PSECURITY_DESCRIPTOR  ThreadSecurityDescriptor,
_In_ BOOLEAN  CreateSuspended,
_In_opt_ ULONG  ZeroBits,
_In_opt_ SIZE_T  MaximumStackSize,
_In_opt_ SIZE_T  CommittedStackSize,
_In_ PUSER_THREAD_START_ROUTINE  StartAddress,
_In_opt_ PVOID  Parameter,
_Out_opt_ PHANDLE  Thread,
_Out_opt_ PCLIENT_ID  ClientId 
)
NTSYSAPI NTSTATUS NTAPI RtlCreateVirtualAccountSid ( _In_ PUNICODE_STRING  Name,
_In_ ULONG  BaseSubAuthority,
_Out_writes_bytes_ *SidLength PSID  Sid,
_Inout_ PULONG  SidLength 
)
NTSYSAPI BOOLEAN NTAPI RtlCultureNameToLCID ( _In_ PUNICODE_STRING  String,
_Out_ PLCID  Lcid 
)
NTSYSAPI NTSTATUS NTAPI RtlCustomCPToUnicodeN ( _In_ PCPTABLEINFO  CustomCP,
_Out_writes_bytes_to_(MaxBytesInUnicodeString,*BytesInUnicodeString) PWCH  UnicodeString,
_In_ ULONG  MaxBytesInUnicodeString,
_Out_opt_ PULONG  BytesInUnicodeString,
_In_reads_bytes_(BytesInCustomCPString) PCH  CustomCPString,
_In_ ULONG  BytesInCustomCPString 
)
NTSYSAPI BOOLEAN NTAPI RtlCutoverTimeToSystemTime ( _In_ PTIME_FIELDS  CutoverTime,
_Out_ PLARGE_INTEGER  SystemTime,
_In_ PLARGE_INTEGER  CurrentSystemTime,
_In_ BOOLEAN  ThisYear 
)
NTSYSAPI PVOID NTAPI RtlDecodePointer ( _In_ PVOID  Ptr)
NTSYSAPI PVOID NTAPI RtlDecodeSystemPointer ( _In_ PVOID  Ptr)
NTSYSAPI VOID NTAPI RtlDeCommitDebugInfo ( _Inout_ PRTL_DEBUG_INFORMATION  Buffer,
_In_ PVOID  p,
_In_ SIZE_T  Size 
)
NTSYSAPI NTSTATUS NTAPI RtlDecompressBuffer ( _In_ USHORT  CompressionFormat,
_Out_writes_bytes_to_(UncompressedBufferSize,*FinalUncompressedSize) PUCHAR  UncompressedBuffer,
_In_ ULONG  UncompressedBufferSize,
_In_reads_bytes_(CompressedBufferSize) PUCHAR  CompressedBuffer,
_In_ ULONG  CompressedBufferSize,
_Out_ PULONG  FinalUncompressedSize 
)
NTSYSAPI NTSTATUS NTAPI RtlDecompressBufferEx ( _In_ USHORT  CompressionFormat,
_Out_writes_bytes_to_(UncompressedBufferSize,*FinalUncompressedSize) PUCHAR  UncompressedBuffer,
_In_ ULONG  UncompressedBufferSize,
_In_reads_bytes_(CompressedBufferSize) PUCHAR  CompressedBuffer,
_In_ ULONG  CompressedBufferSize,
_Out_ PULONG  FinalUncompressedSize,
_In_ PVOID  WorkSpace 
)
NTSYSAPI NTSTATUS NTAPI RtlDecompressChunks ( _Out_writes_bytes_(UncompressedBufferSize) PUCHAR  UncompressedBuffer,
_In_ ULONG  UncompressedBufferSize,
_In_reads_bytes_(CompressedBufferSize) PUCHAR  CompressedBuffer,
_In_ ULONG  CompressedBufferSize,
_In_reads_bytes_(CompressedTailSize) PUCHAR  CompressedTail,
_In_ ULONG  CompressedTailSize,
_In_ PCOMPRESSED_DATA_INFO  CompressedDataInfo 
)
NTSYSAPI NTSTATUS NTAPI RtlDecompressFragment ( _In_ USHORT  CompressionFormat,
_Out_writes_bytes_to_(UncompressedFragmentSize,*FinalUncompressedSize) PUCHAR  UncompressedFragment,
_In_ ULONG  UncompressedFragmentSize,
_In_reads_bytes_(CompressedBufferSize) PUCHAR  CompressedBuffer,
_In_ ULONG  CompressedBufferSize,
_In_range_(<, CompressedBufferSize) ULONG  FragmentOffset,
_Out_ PULONG  FinalUncompressedSize,
_In_ PVOID  WorkSpace 
)
NTSYSAPI PRTL_SPLAY_LINKS NTAPI RtlDelete ( _In_ PRTL_SPLAY_LINKS  Links)
NTSYSAPI NTSTATUS NTAPI RtlDeleteAce ( _Inout_ PACL  Acl,
_In_ ULONG  AceIndex 
)
NTSYSAPI NTSTATUS NTAPI RtlDeleteAtomFromAtomTable ( _In_ PVOID  AtomTableHandle,
_In_ RTL_ATOM  Atom 
)
NTSYSAPI NTSTATUS NTAPI RtlDeleteBarrier ( _In_ PRTL_BARRIER  Barrier)
NTSYSAPI VOID NTAPI RtlDeleteBoundaryDescriptor ( _In_ PVOID  BoundaryDescriptor)
NTSYSAPI NTSTATUS NTAPI RtlDeleteCriticalSection ( _Inout_ PRTL_CRITICAL_SECTION  CriticalSection)
NTSYSAPI BOOLEAN NTAPI RtlDeleteElementGenericTable ( _In_ PRTL_GENERIC_TABLE  Table,
_In_ PVOID  Buffer 
)
NTSYSAPI BOOLEAN NTAPI RtlDeleteElementGenericTableAvl ( _In_ PRTL_AVL_TABLE  Table,
_In_ PVOID  Buffer 
)
NTSYSAPI VOID NTAPI RtlDeleteHashTable ( _In_ PRTL_DYNAMIC_HASH_TABLE  HashTable)
NTSYSAPI VOID NTAPI RtlDeleteNoSplay ( _In_ PRTL_SPLAY_LINKS  Links,
_Inout_ PRTL_SPLAY_LINKS Root 
)
NTSYSAPI NTSTATUS NTAPI RtlDeleteRegistryValue ( _In_ ULONG  RelativeTo,
_In_ PWSTR  Path,
_In_ PWSTR  ValueName 
)
NTSYSAPI VOID NTAPI RtlDeleteResource ( _Inout_ PRTL_RESOURCE  Resource)
NTSYSAPI NTSTATUS NTAPI RtlDeleteSecurityObject ( _Inout_ PSECURITY_DESCRIPTOR *  ObjectDescriptor)
NTSYSAPI NTSTATUS NTAPI RtlDeleteTimer ( _In_ HANDLE  TimerQueueHandle,
_In_ HANDLE  TimerToCancel,
_In_ HANDLE  Event 
)
NTSYSAPI NTSTATUS NTAPI RtlDeleteTimerQueue ( _In_ HANDLE  TimerQueueHandle)
NTSYSAPI NTSTATUS NTAPI RtlDeleteTimerQueueEx ( _In_ HANDLE  TimerQueueHandle,
_In_ HANDLE  Event 
)
NTSYSAPI PRTL_USER_PROCESS_PARAMETERS NTAPI RtlDeNormalizeProcessParams ( _Inout_ PRTL_USER_PROCESS_PARAMETERS  ProcessParameters)
NTSYSAPI NTSTATUS NTAPI RtlDeregisterWait ( _In_ HANDLE  WaitHandle)
NTSYSAPI NTSTATUS NTAPI RtlDeregisterWaitEx ( _In_ HANDLE  WaitHandle,
_In_ HANDLE  Event 
)
NTSYSAPI NTSTATUS NTAPI RtlDescribeChunk ( _In_ USHORT  CompressionFormat,
_Inout_ PUCHAR *  CompressedBuffer,
_In_ PUCHAR  EndOfCompressedBufferPlus1,
_Out_ PUCHAR *  ChunkBuffer,
_Out_ PULONG  ChunkSize 
)
NTSYSAPI NTSTATUS NTAPI RtlDestroyAtomTable ( _In_ _Post_invalid_ PVOID  AtomTableHandle)
NTSYSAPI NTSTATUS NTAPI RtlDestroyEnvironment ( _In_ PVOID  Environment)
NTSYSAPI NTSTATUS NTAPI RtlDestroyHandleTable ( _Inout_ PRTL_HANDLE_TABLE  HandleTable)
NTSYSAPI PVOID NTAPI RtlDestroyHeap ( _In_ _Post_invalid_ PVOID  HeapHandle)
NTSYSAPI NTSTATUS NTAPI RtlDestroyMemoryBlockLookaside ( _In_ PVOID  MemoryBlockLookaside)
NTSYSAPI NTSTATUS NTAPI RtlDestroyMemoryZone ( _In_ _Post_invalid_ PVOID  MemoryZone)
NTSYSAPI NTSTATUS NTAPI RtlDestroyProcessParameters ( _In_ _Post_invalid_ PRTL_USER_PROCESS_PARAMETERS  ProcessParameters)
NTSYSAPI NTSTATUS NTAPI RtlDestroyQueryDebugBuffer ( _In_ PRTL_DEBUG_INFORMATION  Buffer)
NTSYSAPI VOID NTAPI RtlDetectHeapLeaks ( VOID  )
NTSYSAPI RTL_PATH_TYPE NTAPI RtlDetermineDosPathNameType_U ( _In_ PWSTR  DosFileName)
NTSYSAPI NTSTATUS NTAPI RtlDisableThreadProfiling ( _In_ PVOID  PerformanceDataHandle)
NTSYSAPI NTSTATUS NTAPI RtlDnsHostNameToComputerName ( _Out_ PUNICODE_STRING  ComputerNameString,
_In_ PCUNICODE_STRING  DnsHostNameString,
_In_ BOOLEAN  AllocateComputerNameString 
)
NTSYSAPI BOOLEAN NTAPI RtlDoesFileExists_U ( _In_ PWSTR  FileName)
NTSYSAPI BOOLEAN NTAPI RtlDosPathNameToNtPathName_U ( _In_ PWSTR  DosFileName,
_Out_ PUNICODE_STRING  NtFileName,
_Out_opt_ PWSTR *  FilePart,
_Out_opt_ PRTL_RELATIVE_NAME_U  RelativeName 
)
NTSYSAPI NTSTATUS NTAPI RtlDosPathNameToNtPathName_U_WithStatus ( _In_ PWSTR  DosFileName,
_Out_ PUNICODE_STRING  NtFileName,
_Out_opt_ PWSTR *  FilePart,
_Out_opt_ PRTL_RELATIVE_NAME_U  RelativeName 
)
NTSYSAPI BOOLEAN NTAPI RtlDosPathNameToRelativeNtPathName_U ( _In_ PWSTR  DosFileName,
_Out_ PUNICODE_STRING  NtFileName,
_Out_opt_ PWSTR *  FilePart,
_Out_opt_ PRTL_RELATIVE_NAME_U  RelativeName 
)
NTSYSAPI NTSTATUS NTAPI RtlDosPathNameToRelativeNtPathName_U_WithStatus ( _In_ PWSTR  DosFileName,
_Out_ PUNICODE_STRING  NtFileName,
_Out_opt_ PWSTR *  FilePart,
_Out_opt_ PRTL_RELATIVE_NAME_U  RelativeName 
)
NTSYSAPI ULONG NTAPI RtlDosSearchPath_U ( _In_ PWSTR  Path,
_In_ PWSTR  FileName,
_In_opt_ PWSTR  Extension,
_In_ ULONG  BufferLength,
_Out_writes_bytes_(BufferLength) PWSTR  Buffer,
_Out_opt_ PWSTR *  FilePart 
)
NTSYSAPI NTSTATUS NTAPI RtlDosSearchPath_Ustr ( _In_ ULONG  Flags,
_In_ PUNICODE_STRING  Path,
_In_ PUNICODE_STRING  FileName,
_In_opt_ PUNICODE_STRING  DefaultExtension,
_Out_opt_ PUNICODE_STRING  StaticString,
_Out_opt_ PUNICODE_STRING  DynamicString,
_Out_opt_ PCUNICODE_STRING FullFileNameOut,
_Out_opt_ SIZE_T *  FilePartPrefixCch,
_Out_opt_ SIZE_T *  BytesRequired 
)
NTSYSAPI WCHAR NTAPI RtlDowncaseUnicodeChar ( _In_ WCHAR  SourceCharacter)
NTSYSAPI NTSTATUS NTAPI RtlDowncaseUnicodeString ( _Inout_ PUNICODE_STRING  DestinationString,
_In_ PUNICODE_STRING  SourceString,
_In_ BOOLEAN  AllocateDestinationString 
)
NTSYSAPI NTSTATUS NTAPI RtlDuplicateUnicodeString ( _In_ ULONG  Flags,
_In_ PUNICODE_STRING  StringIn,
_Out_ PUNICODE_STRING  StringOut 
)
NTSYSAPI NTSTATUS NTAPI RtlEmptyAtomTable ( _In_ PVOID  AtomTableHandle,
_In_ BOOLEAN  IncludePinnedAtoms 
)
FORCEINLINE ULONG RtlEmptyBucketsHashTable ( _In_ PRTL_DYNAMIC_HASH_TABLE  HashTable)

Definition at line 682 of file ntrtl.h.

NTSYSAPI NTSTATUS NTAPI RtlEnableThreadProfiling ( _In_ HANDLE  ThreadHandle,
_In_ ULONG  Flags,
_In_ ULONG64  HardwareCounters,
_Out_ PVOID *  PerformanceDataHandle 
)
NTSYSAPI PVOID NTAPI RtlEncodePointer ( _In_ PVOID  Ptr)
NTSYSAPI PVOID NTAPI RtlEncodeSystemPointer ( _In_ PVOID  Ptr)
NTSYSAPI VOID NTAPI RtlEndEnumerationHashTable ( _In_ PRTL_DYNAMIC_HASH_TABLE  HashTable,
_Inout_ PRTL_DYNAMIC_HASH_TABLE_ENUMERATOR  Enumerator 
)
NTSYSAPI VOID NTAPI RtlEndStrongEnumerationHashTable ( _In_ PRTL_DYNAMIC_HASH_TABLE  HashTable,
_Inout_ PRTL_DYNAMIC_HASH_TABLE_ENUMERATOR  Enumerator 
)
NTSYSAPI VOID NTAPI RtlEndWeakEnumerationHashTable ( _In_ PRTL_DYNAMIC_HASH_TABLE  HashTable,
_Inout_ PRTL_DYNAMIC_HASH_TABLE_ENUMERATOR  Enumerator 
)
NTSYSAPI NTSTATUS NTAPI RtlEnterCriticalSection ( _Inout_ PRTL_CRITICAL_SECTION  CriticalSection)
_Must_inspect_result_ NTSYSAPI PRTL_DYNAMIC_HASH_TABLE_ENTRY NTAPI RtlEnumerateEntryHashTable ( _In_ PRTL_DYNAMIC_HASH_TABLE  HashTable,
_Inout_ PRTL_DYNAMIC_HASH_TABLE_ENUMERATOR  Enumerator 
)
_Check_return_ NTSYSAPI PVOID NTAPI RtlEnumerateGenericTable ( _In_ PRTL_GENERIC_TABLE  Table,
_In_ BOOLEAN  Restart 
)
_Check_return_ NTSYSAPI PVOID NTAPI RtlEnumerateGenericTableAvl ( _In_ PRTL_AVL_TABLE  Table,
_In_ BOOLEAN  Restart 
)
_Check_return_ NTSYSAPI PVOID NTAPI RtlEnumerateGenericTableLikeADirectory ( _In_ PRTL_AVL_TABLE  Table,
_In_opt_ PRTL_AVL_MATCH_FUNCTION  MatchFunction,
_In_opt_ PVOID  MatchData,
_In_ ULONG  NextFlag,
_Inout_ PVOID *  RestartKey,
_Inout_ PULONG  DeleteCount,
_In_ PVOID  Buffer 
)
_Check_return_ NTSYSAPI PVOID NTAPI RtlEnumerateGenericTableWithoutSplaying ( _In_ PRTL_GENERIC_TABLE  Table,
_Inout_ PVOID *  RestartKey 
)
_Check_return_ NTSYSAPI PVOID NTAPI RtlEnumerateGenericTableWithoutSplayingAvl ( _In_ PRTL_AVL_TABLE  Table,
_Inout_ PVOID *  RestartKey 
)
NTSYSAPI NTSTATUS NTAPI RtlEnumProcessHeaps ( _In_ PRTL_ENUM_HEAPS_ROUTINE  EnumRoutine,
_In_ PVOID  Parameter 
)
NTSYSAPI BOOLEAN NTAPI RtlEqualComputerName ( _In_ PUNICODE_STRING  String1,
_In_ PUNICODE_STRING  String2 
)
NTSYSAPI BOOLEAN NTAPI RtlEqualDomainName ( _In_ PUNICODE_STRING  String1,
_In_ PUNICODE_STRING  String2 
)
_Check_return_ NTSYSAPI BOOLEAN NTAPI RtlEqualSid ( _In_ PSID  Sid1,
_In_ PSID  Sid2 
)
_Must_inspect_result_ NTSYSAPI BOOLEAN NTAPI RtlEqualString ( _In_ PSTRING  String1,
_In_ PSTRING  String2,
_In_ BOOLEAN  CaseInSensitive 
)
_Must_inspect_result_ NTSYSAPI BOOLEAN NTAPI RtlEqualUnicodeString ( _In_ PUNICODE_STRING  String1,
_In_ PUNICODE_STRING  String2,
_In_ BOOLEAN  CaseInSensitive 
)
NTSYSAPI VOID NTAPI RtlEraseUnicodeString ( _Inout_ PUNICODE_STRING  String)
DECLSPEC_NORETURN NTSYSAPI VOID NTAPI RtlExitUserProcess ( _In_ NTSTATUS  ExitStatus)
DECLSPEC_NORETURN NTSYSAPI VOID NTAPI RtlExitUserThread ( _In_ NTSTATUS  ExitStatus)
NTSYSAPI NTSTATUS NTAPI RtlExpandEnvironmentStrings ( _In_opt_ PVOID  Environment,
_In_reads_(SrcLength) PWSTR  Src,
_In_ SIZE_T  SrcLength,
_Out_writes_(DstLength) PWSTR  Dst,
_In_ SIZE_T  DstLength,
_Out_opt_ PSIZE_T  ReturnLength 
)
NTSYSAPI NTSTATUS NTAPI RtlExpandEnvironmentStrings_U ( _In_opt_ PVOID  Environment,
_In_ PUNICODE_STRING  Source,
_Out_ PUNICODE_STRING  Destination,
_Out_opt_ PULONG  ReturnedLength 
)
NTSYSAPI BOOLEAN NTAPI RtlExpandHashTable ( _In_ PRTL_DYNAMIC_HASH_TABLE  HashTable)
NTSYSAPI NTSTATUS NTAPI RtlExtendHeap ( _In_ PVOID  HeapHandle,
_In_ ULONG  Flags,
_In_ PVOID  Base,
_In_ SIZE_T  Size 
)
NTSYSAPI NTSTATUS NTAPI RtlExtendMemoryBlockLookaside ( _In_ PVOID  MemoryBlockLookaside,
_In_ ULONG  Increment 
)
NTSYSAPI VOID NTAPI RtlFillMemoryUlong ( _Out_ PVOID  Destination,
_In_ SIZE_T  Length,
_In_ ULONG  Pattern 
)
NTSYSAPI VOID NTAPI RtlFillMemoryUlonglong ( _Out_ PVOID  Destination,
_In_ SIZE_T  Length,
_In_ ULONGLONG  Pattern 
)
NTSYSAPI PVOID NTAPI RtlFindAceByType ( _In_ PACL  pAcl,
_In_ UCHAR  AceType,
_Out_opt_ PULONG  pIndex 
)
NTSYSAPI NTSTATUS NTAPI RtlFindCharInUnicodeString ( _In_ ULONG  Flags,
_In_ PUNICODE_STRING  StringToSearch,
_In_ PUNICODE_STRING  CharSet,
_Out_ PUSHORT  NonInclusivePrefixLength 
)
NTSYSAPI ULONG NTAPI RtlFindClearRuns ( _In_ PRTL_BITMAP  BitMapHeader,
_Out_writes_to_(SizeOfRunArray, return) PRTL_BITMAP_RUN  RunArray,
_In_range_(>, 0) ULONG  SizeOfRunArray,
_In_ BOOLEAN  LocateLongestRuns 
)
NTSYSAPI ULONG NTAPI RtlFindFirstRunClear ( _In_ PRTL_BITMAP  BitMapHeader,
_Out_ PULONG  StartingIndex 
)
NTSYSAPI ULONG NTAPI RtlFindLastBackwardRunClear ( _In_ PRTL_BITMAP  BitMapHeader,
_In_ ULONG  FromIndex,
_Out_ PULONG  StartingRunIndex 
)
NTSYSAPI ULONG NTAPI RtlFindLongestRunClear ( _In_ PRTL_BITMAP  BitMapHeader,
_Out_ PULONG  StartingIndex 
)
NTSYSAPI NTSTATUS NTAPI RtlFindMessage ( _In_ PVOID  DllHandle,
_In_ ULONG  MessageTableId,
_In_ ULONG  MessageLanguageId,
_In_ ULONG  MessageId,
_Out_ PMESSAGE_RESOURCE_ENTRY *  MessageEntry 
)
NTSYSAPI ULONG NTAPI RtlFindNextForwardRunClear ( _In_ PRTL_BITMAP  BitMapHeader,
_In_ ULONG  FromIndex,
_Out_ PULONG  StartingRunIndex 
)
NTSYSAPI PUNICODE_PREFIX_TABLE_ENTRY NTAPI RtlFindUnicodePrefix ( _In_ PUNICODE_PREFIX_TABLE  PrefixTable,
_In_ PUNICODE_STRING  FullName,
_In_ ULONG  CaseInsensitiveIndex 
)
NTSYSAPI BOOLEAN NTAPI RtlFirstFreeAce ( _In_ PACL  Acl,
_Out_ PVOID *  FirstFree 
)
NTSYSAPI NTSTATUS NTAPI RtlFormatCurrentUserKeyPath ( _Out_ PUNICODE_STRING  CurrentUserKeyPath)
NTSYSAPI NTSTATUS NTAPI RtlFormatMessage ( _In_ PWSTR  MessageFormat,
_In_ ULONG  MaximumWidth,
_In_ BOOLEAN  IgnoreInserts,
_In_ BOOLEAN  ArgumentsAreAnsi,
_In_ BOOLEAN  ArgumentsAreAnArray,
_In_ va_list *  Arguments,
_Out_writes_bytes_to_(Length,*ReturnLength) PWSTR  Buffer,
_In_ ULONG  Length,
_Out_opt_ PULONG  ReturnLength 
)
NTSYSAPI NTSTATUS NTAPI RtlFormatMessageEx ( _In_ PWSTR  MessageFormat,
_In_ ULONG  MaximumWidth,
_In_ BOOLEAN  IgnoreInserts,
_In_ BOOLEAN  ArgumentsAreAnsi,
_In_ BOOLEAN  ArgumentsAreAnArray,
_In_ va_list *  Arguments,
_Out_writes_bytes_to_(Length,*ReturnLength) PWSTR  Buffer,
_In_ ULONG  Length,
_Out_opt_ PULONG  ReturnLength,
_Out_opt_ PPARSE_MESSAGE_CONTEXT  ParseContext 
)
NTSYSAPI VOID NTAPI RtlFreeAnsiString ( _In_ PANSI_STRING  AnsiString)
NTSYSAPI BOOLEAN NTAPI RtlFreeHandle ( _In_ PRTL_HANDLE_TABLE  HandleTable,
_In_ PRTL_HANDLE_TABLE_ENTRY  Handle 
)
NTSYSAPI BOOLEAN NTAPI RtlFreeHeap ( _In_ PVOID  HeapHandle,
_In_opt_ ULONG  Flags,
_In_ _Post_invalid_ PVOID  BaseAddress 
)
NTSYSAPI NTSTATUS NTAPI RtlFreeMemoryBlockLookaside ( _In_ PVOID  MemoryBlockLookaside,
_In_ PVOID  Block 
)
NTSYSAPI VOID NTAPI RtlFreeOemString ( _In_ POEM_STRING  OemString)
NTSYSAPI PVOID NTAPI RtlFreeSid ( _In_ _Post_invalid_ PSID  Sid)
NTSYSAPI NTSTATUS NTAPI RtlFreeToPeb ( _In_ PVOID  Block,
_In_ ULONG  Size 
)
NTSYSAPI VOID NTAPI RtlFreeUnicodeString ( _In_ PUNICODE_STRING  UnicodeString)
NTSYSAPI NTSTATUS NTAPI RtlFreeUserStack ( _In_ PVOID  AllocationBase)
NTSYSAPI NTSTATUS NTAPI RtlGetAce ( _In_ PACL  Acl,
_In_ ULONG  AceIndex,
_Outptr_ PVOID *  Ace 
)
NTSYSAPI NTSTATUS NTAPI RtlGetCompressionWorkSpaceSize ( _In_ USHORT  CompressionFormatAndEngine,
_Out_ PULONG  CompressBufferWorkSpaceSize,
_Out_ PULONG  CompressFragmentWorkSpaceSize 
)
NTSYSAPI NTSTATUS NTAPI RtlGetControlSecurityDescriptor ( _In_ PSECURITY_DESCRIPTOR  SecurityDescriptor,
_Out_ PSECURITY_DESCRIPTOR_CONTROL  Control,
_Out_ PULONG  Revision 
)
NTSYSAPI ULONG NTAPI RtlGetCriticalSectionRecursionCount ( _In_ PRTL_CRITICAL_SECTION  CriticalSection)
NTSYSAPI ULONG NTAPI RtlGetCurrentDirectory_U ( _In_ ULONG  BufferLength,
_Out_writes_bytes_(BufferLength) PWSTR  Buffer 
)
NTSYSAPI ULONG NTAPI RtlGetCurrentProcessorNumber ( VOID  )
NTSYSAPI HANDLE NTAPI RtlGetCurrentTransaction ( VOID  )
NTSYSAPI NTSTATUS NTAPI RtlGetDaclSecurityDescriptor ( _In_ PSECURITY_DESCRIPTOR  SecurityDescriptor,
_Out_ PBOOLEAN  DaclPresent,
_Out_ PACL *  Dacl,
_Out_ PBOOLEAN  DaclDefaulted 
)
_Check_return_ NTSYSAPI PVOID NTAPI RtlGetElementGenericTable ( _In_ PRTL_GENERIC_TABLE  Table,
_In_ ULONG  I 
)
_Check_return_ NTSYSAPI PVOID NTAPI RtlGetElementGenericTableAvl ( _In_ PRTL_AVL_TABLE  Table,
_In_ ULONG  I 
)
NTSYSAPI ULONG NTAPI RtlGetFullPathName_U ( _In_ PWSTR  FileName,
_In_ ULONG  BufferLength,
_Out_writes_bytes_(BufferLength) PWSTR  Buffer,
_Out_opt_ PWSTR *  FilePart 
)
NTSYSAPI NTSTATUS NTAPI RtlGetFullPathName_UEx ( _In_ PWSTR  FileName,
_In_ ULONG  BufferLength,
_Out_writes_bytes_(BufferLength) PWSTR  Buffer,
_Out_opt_ PWSTR *  FilePart,
_Out_opt_ RTL_PATH_TYPE InputPathType 
)
NTSYSAPI NTSTATUS NTAPI RtlGetFullPathName_UstrEx ( _In_ PUNICODE_STRING  FileName,
_Inout_ PUNICODE_STRING  StaticString,
_Out_opt_ PUNICODE_STRING  DynamicString,
_Out_opt_ PUNICODE_STRING StringUsed,
_Out_opt_ SIZE_T *  FilePartPrefixCch,
_Out_opt_ PBOOLEAN  NameInvalid,
_Out_ RTL_PATH_TYPE InputPathType,
_Out_opt_ SIZE_T *  BytesRequired 
)
NTSYSAPI NTSTATUS NTAPI RtlGetGroupSecurityDescriptor ( _In_ PSECURITY_DESCRIPTOR  SecurityDescriptor,
_Out_ PSID *  Group,
_Out_ PBOOLEAN  GroupDefaulted 
)
NTSYSAPI BOOLEAN NTAPI RtlGetIntegerAtom ( _In_ PWSTR  AtomName,
_Out_opt_ PUSHORT  IntegerAtom 
)
NTSYSAPI NTSTATUS NTAPI RtlGetLastNtStatus ( VOID  )
NTSYSAPI LONG NTAPI RtlGetLastWin32Error ( VOID  )
NTSYSAPI NTSTATUS NTAPI RtlGetLocaleFileMappingAddress ( _Out_ PVOID *  BaseAddress,
_Out_ PLCID  DefaultLocaleId,
_Out_ PLARGE_INTEGER  DefaultCasingTableSize 
)
NTSYSAPI ULONG NTAPI RtlGetLongestNtPathLength ( VOID  )
_Must_inspect_result_ NTSYSAPI PRTL_DYNAMIC_HASH_TABLE_ENTRY NTAPI RtlGetNextEntryHashTable ( _In_ PRTL_DYNAMIC_HASH_TABLE  HashTable,
_In_ PRTL_DYNAMIC_HASH_TABLE_CONTEXT  Context 
)
NTSYSAPI ULONG NTAPI RtlGetNtGlobalFlags ( VOID  )
NTSYSAPI BOOLEAN NTAPI RtlGetNtProductType ( _Out_ PNT_PRODUCT_TYPE  NtProductType)
NTSYSAPI VOID NTAPI RtlGetNtVersionNumbers ( _Out_opt_ PULONG  pNtMajorVersion,
_Out_opt_ PULONG  pNtMinorVersion,
_Out_opt_ PULONG  pNtBuildNumber 
)
NTSYSAPI NTSTATUS NTAPI RtlGetOwnerSecurityDescriptor ( _In_ PSECURITY_DESCRIPTOR  SecurityDescriptor,
_Out_ PSID *  Owner,
_Out_ PBOOLEAN  OwnerDefaulted 
)
NTSYSAPI NTSTATUS NTAPI RtlGetParentLocaleName ( _In_ PWSTR  LocaleName,
_Inout_ PUNICODE_STRING  ParentLocaleName,
_In_ ULONG  Flags,
_In_ BOOLEAN  AllocateDestinationString 
)
NTSYSAPI ULONG NTAPI RtlGetProcessHeaps ( _In_ ULONG  NumberOfHeaps,
_Out_ PVOID *  ProcessHeaps 
)
NTSYSAPI NTSTATUS NTAPI RtlGetSaclSecurityDescriptor ( _In_ PSECURITY_DESCRIPTOR  SecurityDescriptor,
_Out_ PBOOLEAN  SaclPresent,
_Out_ PACL *  Sacl,
_Out_ PBOOLEAN  SaclDefaulted 
)
NTSYSAPI BOOLEAN NTAPI RtlGetSecurityDescriptorRMControl ( _In_ PSECURITY_DESCRIPTOR  SecurityDescriptor,
_Out_ PUCHAR  RMControl 
)
NTSYSAPI ULONG NTAPI RtlGetThreadErrorMode ( VOID  )
NTSYSAPI PRTL_UNLOAD_EVENT_TRACE NTAPI RtlGetUnloadEventTrace ( VOID  )
NTSYSAPI VOID NTAPI RtlGetUnloadEventTraceEx ( _Out_ PULONG *  ElementSize,
_Out_ PULONG *  ElementCount,
_Out_ PVOID *  EventTrace 
)
NTSYSAPI BOOLEAN NTAPI RtlGetUserInfoHeap ( _In_ PVOID  HeapHandle,
_In_ ULONG  Flags,
_In_ PVOID  BaseAddress,
_Out_opt_ PVOID *  UserValue,
_Out_opt_ PULONG  UserFlags 
)
NTSYSAPI NTSTATUS NTAPI RtlGetVersion ( _Out_ PRTL_OSVERSIONINFOW  lpVersionInformation)
NTSYSAPI NTSTATUS NTAPI RtlGUIDFromString ( _In_ PUNICODE_STRING  GuidString,
_Out_ PGUID  Guid 
)
NTSYSAPI NTSTATUS NTAPI RtlHashUnicodeString ( _In_ PUNICODE_STRING  String,
_In_ BOOLEAN  CaseInSensitive,
_In_ ULONG  HashAlgorithm,
_Out_ PULONG  HashValue 
)
NTSYSAPI PSID_IDENTIFIER_AUTHORITY NTAPI RtlIdentifierAuthoritySid ( _In_ PSID  Sid)
NTSYSAPI PVOID NTAPI RtlImageDirectoryEntryToData ( _In_ PVOID  BaseOfImage,
_In_ BOOLEAN  MappedAsImage,
_In_ USHORT  DirectoryEntry,
_Out_ PULONG  Size 
)
NTSYSAPI PIMAGE_NT_HEADERS NTAPI RtlImageNtHeader ( _In_ PVOID  Base)
NTSYSAPI NTSTATUS NTAPI RtlImageNtHeaderEx ( _In_ ULONG  Flags,
_In_ PVOID  Base,
_In_ ULONG64  Size,
_Out_ PIMAGE_NT_HEADERS *  OutHeaders 
)
NTSYSAPI PIMAGE_SECTION_HEADER NTAPI RtlImageRvaToSection ( _In_ PIMAGE_NT_HEADERS  NtHeaders,
_In_ PVOID  Base,
_In_ ULONG  Rva 
)
NTSYSAPI PVOID NTAPI RtlImageRvaToVa ( _In_ PIMAGE_NT_HEADERS  NtHeaders,
_In_ PVOID  Base,
_In_ ULONG  Rva,
_Inout_opt_ PIMAGE_SECTION_HEADER *  LastRvaSection 
)
NTSYSAPI NTSTATUS NTAPI RtlImpersonateSelf ( _In_ SECURITY_IMPERSONATION_LEVEL  ImpersonationLevel)
NTSYSAPI NTSTATUS NTAPI RtlImpersonateSelfEx ( _In_ SECURITY_IMPERSONATION_LEVEL  ImpersonationLevel,
_In_opt_ ACCESS_MASK  AdditionalAccess,
_Out_opt_ PHANDLE  ThreadToken 
)
FORCEINLINE VOID RtlInitAnsiString ( _Out_ PANSI_STRING  DestinationString,
_In_opt_ PSTR  SourceString 
)

Definition at line 1225 of file ntrtl.h.

NTSYSAPI NTSTATUS NTAPI RtlInitAnsiStringEx ( _Out_ PANSI_STRING  DestinationString,
_In_opt_z_ PCSZ  SourceString 
)
NTSYSAPI NTSTATUS NTAPI RtlInitBarrier ( _Out_ PRTL_BARRIER  Barrier,
_In_ ULONG  TotalThreads,
_In_ ULONG  SpinCount 
)
NTSYSAPI VOID NTAPI RtlInitCodePageTable ( _In_ PUSHORT  TableBase,
_Out_ PCPTABLEINFO  CodePageTable 
)
NTSYSAPI BOOLEAN NTAPI RtlInitEnumerationHashTable ( _In_ PRTL_DYNAMIC_HASH_TABLE  HashTable,
_Out_ PRTL_DYNAMIC_HASH_TABLE_ENUMERATOR  Enumerator 
)
FORCEINLINE VOID RtlInitHashTableContext ( _Inout_ PRTL_DYNAMIC_HASH_TABLE_CONTEXT  Context)

Definition at line 633 of file ntrtl.h.

FORCEINLINE VOID RtlInitHashTableContextFromEnumerator ( _Inout_ PRTL_DYNAMIC_HASH_TABLE_CONTEXT  Context,
_In_ PRTL_DYNAMIC_HASH_TABLE_ENUMERATOR  Enumerator 
)

Definition at line 643 of file ntrtl.h.

NTSYSAPI VOID NTAPI RtlInitializeBitMap ( _Out_ PRTL_BITMAP  BitMapHeader,
_In_ PULONG  BitMapBuffer,
_In_ ULONG  SizeOfBitMap 
)
NTSYSAPI VOID NTAPI RtlInitializeConditionVariable ( _Out_ PRTL_CONDITION_VARIABLE  ConditionVariable)
NTSYSAPI VOID NTAPI RtlInitializeContext ( _In_ HANDLE  Process,
_Out_ PCONTEXT  Context,
_In_opt_ PVOID  Parameter,
_In_opt_ PVOID  InitialPc,
_In_opt_ PVOID  InitialSp 
)
NTSYSAPI NTSTATUS NTAPI RtlInitializeCriticalSection ( _Out_ PRTL_CRITICAL_SECTION  CriticalSection)
NTSYSAPI NTSTATUS NTAPI RtlInitializeCriticalSectionAndSpinCount ( _Inout_ PRTL_CRITICAL_SECTION  CriticalSection,
_In_ ULONG  SpinCount 
)
NTSYSAPI VOID NTAPI RtlInitializeGenericTable ( _Out_ PRTL_GENERIC_TABLE  Table,
_In_ PRTL_GENERIC_COMPARE_ROUTINE  CompareRoutine,
_In_ PRTL_GENERIC_ALLOCATE_ROUTINE  AllocateRoutine,
_In_ PRTL_GENERIC_FREE_ROUTINE  FreeRoutine,
_In_opt_ PVOID  TableContext 
)
NTSYSAPI VOID NTAPI RtlInitializeGenericTableAvl ( _Out_ PRTL_AVL_TABLE  Table,
_In_ PRTL_AVL_COMPARE_ROUTINE  CompareRoutine,
_In_ PRTL_AVL_ALLOCATE_ROUTINE  AllocateRoutine,
_In_ PRTL_AVL_FREE_ROUTINE  FreeRoutine,
_In_opt_ PVOID  TableContext 
)
NTSYSAPI VOID NTAPI RtlInitializeHandleTable ( _In_ ULONG  MaximumNumberOfHandles,
_In_ ULONG  SizeOfHandleTableEntry,
_Out_ PRTL_HANDLE_TABLE  HandleTable 
)
NTSYSAPI VOID NTAPI RtlInitializeResource ( _Out_ PRTL_RESOURCE  Resource)
NTSYSAPI NTSTATUS NTAPI RtlInitializeSid ( _Out_ PSID  Sid,
_In_ PSID_IDENTIFIER_AUTHORITY  IdentifierAuthority,
_In_ UCHAR  SubAuthorityCount 
)
NTSYSAPI NTSTATUS NTAPI RtlInitializeSidEx ( _Out_writes_bytes_(SECURITY_SID_SIZE(SubAuthorityCount)) PSID  Sid,
_In_ PSID_IDENTIFIER_AUTHORITY  IdentifierAuthority,
_In_ UCHAR  SubAuthorityCount,
  ... 
)
NTSYSAPI VOID NTAPI RtlInitializeSRWLock ( _Out_ PRTL_SRWLOCK  SRWLock)
NTSYSAPI VOID NTAPI RtlInitializeUnicodePrefix ( _Out_ PUNICODE_PREFIX_TABLE  PrefixTable)
NTSYSAPI VOID NTAPI RtlInitNlsTables ( _In_ PUSHORT  AnsiNlsBase,
_In_ PUSHORT  OemNlsBase,
_In_ PUSHORT  LanguageNlsBase,
_Out_ PNLSTABLEINFO  TableInfo 
)
FORCEINLINE VOID RtlInitString ( _Out_ PSTRING  DestinationString,
_In_opt_ PSTR  SourceString 
)

Definition at line 1192 of file ntrtl.h.

NTSYSAPI NTSTATUS NTAPI RtlInitStringEx ( _Out_ PSTRING  DestinationString,
_In_opt_z_ PCSZ  SourceString 
)
NTSYSAPI BOOLEAN NTAPI RtlInitStrongEnumerationHashTable ( _In_ PRTL_DYNAMIC_HASH_TABLE  HashTable,
_Out_ PRTL_DYNAMIC_HASH_TABLE_ENUMERATOR  Enumerator 
)
FORCEINLINE VOID RtlInitUnicodeString ( _Out_ PUNICODE_STRING  DestinationString,
_In_opt_ PWSTR  SourceString 
)

Definition at line 1341 of file ntrtl.h.

NTSYSAPI NTSTATUS NTAPI RtlInitUnicodeStringEx ( _Out_ PUNICODE_STRING  DestinationString,
_In_opt_ PWSTR  SourceString 
)
NTSYSAPI BOOLEAN NTAPI RtlInitWeakEnumerationHashTable ( _In_ PRTL_DYNAMIC_HASH_TABLE  HashTable,
_Out_ PRTL_DYNAMIC_HASH_TABLE_ENUMERATOR  Enumerator 
)
NTSYSAPI PVOID NTAPI RtlInsertElementGenericTable ( _In_ PRTL_GENERIC_TABLE  Table,
_In_reads_bytes_(BufferSize) PVOID  Buffer,
_In_ CLONG  BufferSize,
_Out_opt_ PBOOLEAN  NewElement 
)
NTSYSAPI PVOID NTAPI RtlInsertElementGenericTableAvl ( _In_ PRTL_AVL_TABLE  Table,
_In_reads_bytes_(BufferSize) PVOID  Buffer,
_In_ CLONG  BufferSize,
_Out_opt_ PBOOLEAN  NewElement 
)
NTSYSAPI PVOID NTAPI RtlInsertElementGenericTableFull ( _In_ PRTL_GENERIC_TABLE  Table,
_In_reads_bytes_(BufferSize) PVOID  Buffer,
_In_ CLONG  BufferSize,
_Out_opt_ PBOOLEAN  NewElement,
_In_ PVOID  NodeOrParent,
_In_ TABLE_SEARCH_RESULT  SearchResult 
)
NTSYSAPI PVOID NTAPI RtlInsertElementGenericTableFullAvl ( _In_ PRTL_AVL_TABLE  Table,
_In_reads_bytes_(BufferSize) PVOID  Buffer,
_In_ CLONG  BufferSize,
_Out_opt_ PBOOLEAN  NewElement,
_In_ PVOID  NodeOrParent,
_In_ TABLE_SEARCH_RESULT  SearchResult 
)
NTSYSAPI BOOLEAN NTAPI RtlInsertEntryHashTable ( _In_ PRTL_DYNAMIC_HASH_TABLE  HashTable,
_In_ PRTL_DYNAMIC_HASH_TABLE_ENTRY  Entry,
_In_ ULONG_PTR  Signature,
_Inout_opt_ PRTL_DYNAMIC_HASH_TABLE_CONTEXT  Context 
)
NTSYSAPI BOOLEAN NTAPI RtlInsertUnicodePrefix ( _In_ PUNICODE_PREFIX_TABLE  PrefixTable,
_In_ PUNICODE_STRING  Prefix,
_Out_ PUNICODE_PREFIX_TABLE_ENTRY  PrefixTableEntry 
)
NTSYSAPI NTSTATUS NTAPI RtlInt64ToUnicodeString ( _In_ ULONGLONG  Value,
_In_opt_ ULONG  Base,
_Inout_ PUNICODE_STRING  String 
)
NTSYSAPI NTSTATUS NTAPI RtlIntegerToChar ( _In_ ULONG  Value,
_In_opt_ ULONG  Base,
_In_ LONG  OutputLength,
_Out_ PSTR  String 
)
NTSYSAPI NTSTATUS NTAPI RtlIntegerToUnicodeString ( _In_ ULONG  Value,
_In_opt_ ULONG  Base,
_Inout_ PUNICODE_STRING  String 
)
NTSYSAPI VOID NTAPI RtlInterlockedClearBitRun ( _In_ PRTL_BITMAP  BitMapHeader,
_In_range_(0, BitMapHeader->SizeOfBitMap-NumberToClear) ULONG  StartingIndex,
_In_range_(0, BitMapHeader->SizeOfBitMap-StartingIndex) ULONG  NumberToClear 
)
NTSYSAPI VOID NTAPI RtlInterlockedSetBitRun ( _In_ PRTL_BITMAP  BitMapHeader,
_In_range_(0, BitMapHeader->SizeOfBitMap-NumberToSet) ULONG  StartingIndex,
_In_range_(0, BitMapHeader->SizeOfBitMap-StartingIndex) ULONG  NumberToSet 
)
NTSYSAPI NTSTATUS NTAPI RtlIpv4AddressToStringExW ( _In_ struct in_addr *  Address,
_In_ USHORT  Port,
_Out_writes_to_ *,*AddressStringLength PWSTR  AddressString,
_Inout_ PULONG  AddressStringLength 
)
NTSYSAPI PWSTR NTAPI RtlIpv4AddressToStringW ( _In_ struct in_addr *  Addr,
_Out_writes_(16) PWSTR  S 
)
NTSYSAPI NTSTATUS NTAPI RtlIpv4StringToAddressExW ( _In_ PWSTR  AddressString,
_In_ BOOLEAN  Strict,
_Out_ struct in_addr *  Address,
_Out_ PUSHORT  Port 
)
NTSYSAPI NTSTATUS NTAPI RtlIpv4StringToAddressW ( _In_ PWSTR  S,
_In_ BOOLEAN  Strict,
_Out_ PWSTR *  Terminator,
_Out_ struct in_addr *  Addr 
)
NTSYSAPI NTSTATUS NTAPI RtlIpv6AddressToStringExW ( _In_ struct in6_addr *  Address,
_In_ ULONG  ScopeId,
_In_ USHORT  Port,
_Out_writes_to_ *,*AddressStringLength PWSTR  AddressString,
_Inout_ PULONG  AddressStringLength 
)
NTSYSAPI PWSTR NTAPI RtlIpv6AddressToStringW ( _In_ struct in6_addr *  Addr,
_Out_writes_(65) PWSTR  S 
)
NTSYSAPI NTSTATUS NTAPI RtlIpv6StringToAddressExW ( _In_ PWSTR  AddressString,
_Out_ struct in6_addr *  Address,
_Out_ PULONG  ScopeId,
_Out_ PUSHORT  Port 
)
NTSYSAPI NTSTATUS NTAPI RtlIpv6StringToAddressW ( _In_ PWSTR  S,
_Out_ PWSTR *  Terminator,
_Out_ struct in6_addr *  Addr 
)
NTSYSAPI LOGICAL NTAPI RtlIsCriticalSectionLocked ( _In_ PRTL_CRITICAL_SECTION  CriticalSection)
NTSYSAPI LOGICAL NTAPI RtlIsCriticalSectionLockedByThread ( _In_ PRTL_CRITICAL_SECTION  CriticalSection)
NTSYSAPI ULONG NTAPI RtlIsDosDeviceName_U ( _In_ PWSTR  DosFileName)
FORCEINLINE BOOLEAN RtlIsEqualLuid ( _In_ PLUID  L1,
_In_ PLUID  L2 
)

Definition at line 3777 of file ntrtl.h.

_Check_return_ NTSYSAPI BOOLEAN NTAPI RtlIsGenericTableEmpty ( _In_ PRTL_GENERIC_TABLE  Table)
_Check_return_ NTSYSAPI BOOLEAN NTAPI RtlIsGenericTableEmptyAvl ( _In_ PRTL_AVL_TABLE  Table)
NTSYSAPI BOOLEAN NTAPI RtlIsNameInExpression ( _In_ PUNICODE_STRING  Expression,
_In_ PUNICODE_STRING  Name,
_In_ BOOLEAN  IgnoreCase,
_In_opt_ PWCH  UpcaseTable 
)
NTSYSAPI NTSTATUS NTAPI RtlIsNormalizedString ( _In_ ULONG  NormForm,
_In_ PCWSTR  SourceString,
_In_ LONG  SourceStringLength,
_Out_ PBOOLEAN  Normalized 
)
NTSYSAPI BOOLEAN NTAPI RtlIsTextUnicode ( _In_ PVOID  Buffer,
_In_ ULONG  Size,
_Inout_opt_ PULONG  Result 
)
NTSYSAPI BOOLEAN NTAPI RtlIsThreadWithinLoaderCallout ( VOID  )
NTSYSAPI NTSTATUS NTAPI RtlIsUntrustedObject ( _In_opt_ HANDLE  Handle,
_In_opt_ PVOID  Object,
_Out_ PBOOLEAN  UntrustedObject 
)
NTSYSAPI BOOLEAN NTAPI RtlIsValidHandle ( _In_ PRTL_HANDLE_TABLE  HandleTable,
_In_ PRTL_HANDLE_TABLE_ENTRY  Handle 
)
NTSYSAPI BOOLEAN NTAPI RtlIsValidIndexHandle ( _In_ PRTL_HANDLE_TABLE  HandleTable,
_In_ ULONG  HandleIndex,
_Out_ PRTL_HANDLE_TABLE_ENTRY Handle 
)
NTSYSAPI BOOLEAN NTAPI RtlIsValidLocaleName ( _In_ PWSTR  LocaleName,
_In_ ULONG  Flags 
)
FORCEINLINE BOOLEAN RtlIsZeroLuid ( _In_ PLUID  L1)

Definition at line 3786 of file ntrtl.h.

NTSYSAPI NTSTATUS NTAPI RtlLargeIntegerToChar ( _In_ PLARGE_INTEGER  Value,
_In_opt_ ULONG  Base,
_In_ LONG  OutputLength,
_Out_ PSTR  String 
)
NTSYSAPI BOOLEAN NTAPI RtlLCIDToCultureName ( _In_ LCID  Lcid,
_Inout_ PUNICODE_STRING  String 
)
NTSYSAPI NTSTATUS NTAPI RtlLcidToLocaleName ( _In_ LCID  lcid,
_Inout_ PUNICODE_STRING  LocaleName,
_In_ ULONG  Flags,
_In_ BOOLEAN  AllocateDestinationString 
)
NTSYSAPI NTSTATUS NTAPI RtlLeaveCriticalSection ( _Inout_ PRTL_CRITICAL_SECTION  CriticalSection)
NTSYSAPI ULONG NTAPI RtlLengthRequiredSid ( _In_ ULONG  SubAuthorityCount)
NTSYSAPI ULONG NTAPI RtlLengthSecurityDescriptor ( _In_ PSECURITY_DESCRIPTOR  SecurityDescriptor)
NTSYSAPI ULONG NTAPI RtlLengthSid ( _In_ PSID  Sid)
NTSYSAPI NTSTATUS NTAPI RtlLocaleNameToLcid ( _In_ PWSTR  LocaleName,
_Out_ PLCID  lcid,
_In_ ULONG  Flags 
)
NTSYSAPI NTSTATUS NTAPI RtlLocalTimeToSystemTime ( _In_ PLARGE_INTEGER  LocalTime,
_Out_ PLARGE_INTEGER  SystemTime 
)
NTSYSAPI NTSTATUS NTAPI RtlLockCurrentThread ( VOID  )
NTSYSAPI BOOLEAN NTAPI RtlLockHeap ( _In_ PVOID  HeapHandle)
NTSYSAPI NTSTATUS NTAPI RtlLockMemoryBlockLookaside ( _In_ PVOID  MemoryBlockLookaside)
NTSYSAPI NTSTATUS NTAPI RtlLockMemoryZone ( _In_ PVOID  MemoryZone)
NTSYSAPI NTSTATUS NTAPI RtlLockModuleSection ( _In_ PVOID  Address)
NTSYSAPI NTSTATUS NTAPI RtlLookupAtomInAtomTable ( _In_ PVOID  AtomTableHandle,
_In_ PWSTR  AtomName,
_Out_opt_ PRTL_ATOM  Atom 
)
_Check_return_ NTSYSAPI PVOID NTAPI RtlLookupElementGenericTable ( _In_ PRTL_GENERIC_TABLE  Table,
_In_ PVOID  Buffer 
)
_Check_return_ NTSYSAPI PVOID NTAPI RtlLookupElementGenericTableAvl ( _In_ PRTL_AVL_TABLE  Table,
_In_ PVOID  Buffer 
)
NTSYSAPI PVOID NTAPI RtlLookupElementGenericTableFull ( _In_ PRTL_GENERIC_TABLE  Table,
_In_ PVOID  Buffer,
_Out_ PVOID *  NodeOrParent,
_Out_ TABLE_SEARCH_RESULT SearchResult 
)
NTSYSAPI PVOID NTAPI RtlLookupElementGenericTableFullAvl ( _In_ PRTL_AVL_TABLE  Table,
_In_ PVOID  Buffer,
_Out_ PVOID *  NodeOrParent,
_Out_ TABLE_SEARCH_RESULT SearchResult 
)
_Must_inspect_result_ NTSYSAPI PRTL_DYNAMIC_HASH_TABLE_ENTRY NTAPI RtlLookupEntryHashTable ( _In_ PRTL_DYNAMIC_HASH_TABLE  HashTable,
_In_ ULONG_PTR  Signature,
_Out_opt_ PRTL_DYNAMIC_HASH_TABLE_CONTEXT  Context 
)
_Check_return_ NTSYSAPI PVOID NTAPI RtlLookupFirstMatchingElementGenericTableAvl ( _In_ PRTL_AVL_TABLE  Table,
_In_ PVOID  Buffer,
_Out_ PVOID *  RestartKey 
)
NTSYSAPI NTSTATUS NTAPI RtlMakeSelfRelativeSD ( _In_ PSECURITY_DESCRIPTOR  AbsoluteSecurityDescriptor,
_Out_writes_bytes_ *BufferLength PSECURITY_DESCRIPTOR  SelfRelativeSecurityDescriptor,
_Inout_ PULONG  BufferLength 
)
NTSYSAPI VOID NTAPI RtlMapGenericMask ( _Inout_ PACCESS_MASK  AccessMask,
_In_ PGENERIC_MAPPING  GenericMapping 
)
NTSYSAPI NTSTATUS NTAPI RtlMultiByteToUnicodeN ( _Out_writes_bytes_to_(MaxBytesInUnicodeString,*BytesInUnicodeString) PWCH  UnicodeString,
_In_ ULONG  MaxBytesInUnicodeString,
_Out_opt_ PULONG  BytesInUnicodeString,
_In_reads_bytes_(BytesInMultiByteString) PSTR  MultiByteString,
_In_ ULONG  BytesInMultiByteString 
)
NTSYSAPI NTSTATUS NTAPI RtlMultiByteToUnicodeSize ( _Out_ PULONG  BytesInUnicodeString,
_In_reads_bytes_(BytesInMultiByteString) PSTR  MultiByteString,
_In_ ULONG  BytesInMultiByteString 
)
NTSYSAPI ULONG NTAPI RtlMultipleAllocateHeap ( _In_ PVOID  HeapHandle,
_In_ ULONG  Flags,
_In_ SIZE_T  Size,
_In_ ULONG  Count,
_Out_ PVOID *  Array 
)
NTSYSAPI ULONG NTAPI RtlMultipleFreeHeap ( _In_ PVOID  HeapHandle,
_In_ ULONG  Flags,
_In_ ULONG  Count,
_In_ PVOID *  Array 
)
NTSYSAPI NTSTATUS NTAPI RtlNewInstanceSecurityObject ( _In_ BOOLEAN  ParentDescriptorChanged,
_In_ BOOLEAN  CreatorDescriptorChanged,
_In_ PLUID  OldClientTokenModifiedId,
_Out_ PLUID  NewClientTokenModifiedId,
_In_opt_ PSECURITY_DESCRIPTOR  ParentDescriptor,
_In_opt_ PSECURITY_DESCRIPTOR  CreatorDescriptor,
_Out_ PSECURITY_DESCRIPTOR *  NewDescriptor,
_In_ BOOLEAN  IsDirectoryObject,
_In_ HANDLE  Token,
_In_ PGENERIC_MAPPING  GenericMapping 
)
NTSYSAPI NTSTATUS NTAPI RtlNewSecurityObject ( _In_opt_ PSECURITY_DESCRIPTOR  ParentDescriptor,
_In_opt_ PSECURITY_DESCRIPTOR  CreatorDescriptor,
_Out_ PSECURITY_DESCRIPTOR *  NewDescriptor,
_In_ BOOLEAN  IsDirectoryObject,
_In_opt_ HANDLE  Token,
_In_ PGENERIC_MAPPING  GenericMapping 
)
NTSYSAPI NTSTATUS NTAPI RtlNewSecurityObjectEx ( _In_opt_ PSECURITY_DESCRIPTOR  ParentDescriptor,
_In_opt_ PSECURITY_DESCRIPTOR  CreatorDescriptor,
_Out_ PSECURITY_DESCRIPTOR *  NewDescriptor,
_In_opt_ GUID *  ObjectType,
_In_ BOOLEAN  IsDirectoryObject,
_In_ ULONG  AutoInheritFlags,
_In_opt_ HANDLE  Token,
_In_ PGENERIC_MAPPING  GenericMapping 
)
NTSYSAPI NTSTATUS NTAPI RtlNewSecurityObjectWithMultipleInheritance ( _In_opt_ PSECURITY_DESCRIPTOR  ParentDescriptor,
_In_opt_ PSECURITY_DESCRIPTOR  CreatorDescriptor,
_Out_ PSECURITY_DESCRIPTOR *  NewDescriptor,
_In_opt_ GUID **  ObjectType,
_In_ ULONG  GuidCount,
_In_ BOOLEAN  IsDirectoryObject,
_In_ ULONG  AutoInheritFlags,
_In_opt_ HANDLE  Token,
_In_ PGENERIC_MAPPING  GenericMapping 
)
NTSYSAPI PUNICODE_PREFIX_TABLE_ENTRY NTAPI RtlNextUnicodePrefix ( _In_ PUNICODE_PREFIX_TABLE  PrefixTable,
_In_ BOOLEAN  Restart 
)
FORCEINLINE ULONG RtlNonEmptyBucketsHashTable ( _In_ PRTL_DYNAMIC_HASH_TABLE  HashTable)

Definition at line 673 of file ntrtl.h.

NTSYSAPI PRTL_USER_PROCESS_PARAMETERS NTAPI RtlNormalizeProcessParams ( _Inout_ PRTL_USER_PROCESS_PARAMETERS  ProcessParameters)
NTSYSAPI NTSTATUS NTAPI RtlNormalizeString ( _In_ ULONG  NormForm,
_In_ PCWSTR  SourceString,
_In_ LONG  SourceStringLength,
_Out_writes_to_ *,*DestinationStringLength PWSTR  DestinationString,
_Inout_ PLONG  DestinationStringLength 
)
NTSYSAPI ULONG NTAPI RtlNtStatusToDosError ( _In_ NTSTATUS  Status)
NTSYSAPI ULONG NTAPI RtlNtStatusToDosErrorNoTeb ( _In_ NTSTATUS  Status)
NTSYSAPI ULONG NTAPI RtlNumberGenericTableElements ( _In_ PRTL_GENERIC_TABLE  Table)
NTSYSAPI ULONG NTAPI RtlNumberGenericTableElementsAvl ( _In_ PRTL_AVL_TABLE  Table)
NTSYSAPI ULONG NTAPI RtlNumberOfClearBits ( _In_ PRTL_BITMAP  BitMapHeader)
NTSYSAPI ULONG NTAPI RtlNumberOfSetBits ( _In_ PRTL_BITMAP  BitMapHeader)
NTSYSAPI NTSTATUS NTAPI RtlOemStringToUnicodeString ( _Inout_ PUNICODE_STRING  DestinationString,
_In_ POEM_STRING  SourceString,
_In_ BOOLEAN  AllocateDestinationString 
)
NTSYSAPI NTSTATUS NTAPI RtlOemToUnicodeN ( _Out_writes_bytes_to_(MaxBytesInUnicodeString,*BytesInUnicodeString) PWSTR  UnicodeString,
_In_ ULONG  MaxBytesInUnicodeString,
_Out_opt_ PULONG  BytesInUnicodeString,
_In_reads_bytes_(BytesInOemString) PCH  OemString,
_In_ ULONG  BytesInOemString 
)
NTSYSAPI NTSTATUS NTAPI RtlOpenCurrentUser ( _In_ ACCESS_MASK  DesiredAccess,
_Out_ PHANDLE  CurrentUserKey 
)
NTSYSAPI OS_DEPLOYEMENT_STATE_VALUES NTAPI RtlOsDeploymentState ( _In_ ULONG  Flags)
NTSYSAPI BOOLEAN NTAPI RtlOwnerAcesPresent ( _In_ PACL  pAcl)
NTSYSAPI PVOID NTAPI RtlPcToFileHeader ( _In_ PVOID  PcValue,
_Out_ PVOID *  BaseOfImage 
)
NTSYSAPI NTSTATUS NTAPI RtlPinAtomInAtomTable ( _In_ PVOID  AtomTableHandle,
_In_ RTL_ATOM  Atom 
)
_Must_inspect_result_ NTSYSAPI BOOLEAN NTAPI RtlPrefixString ( _In_ PSTRING  String1,
_In_ PSTRING  String2,
_In_ BOOLEAN  CaseInSensitive 
)
_Must_inspect_result_ NTSYSAPI BOOLEAN NTAPI RtlPrefixUnicodeString ( _In_ PCUNICODE_STRING  String1,
_In_ PCUNICODE_STRING  String2,
_In_ BOOLEAN  CaseInSensitive 
)
NTSYSAPI VOID NTAPI RtlProtectHeap ( _In_ PVOID  HeapHandle,
_In_ BOOLEAN  MakeReadOnly 
)
NTSYSAPI NTSTATUS NTAPI RtlQueryAtomInAtomTable ( _In_ PVOID  AtomTableHandle,
_In_ RTL_ATOM  Atom,
_Out_opt_ PULONG  AtomUsage,
_Out_opt_ PULONG  AtomFlags,
_Inout_updates_bytes_to_opt_ *,*AtomNameLength PWSTR  AtomName,
_Inout_opt_ PULONG  AtomNameLength 
)
NTSYSAPI HANDLE NTAPI RtlQueryCriticalSectionOwner ( _In_ HANDLE  EventHandle)
NTSYSAPI NTSTATUS NTAPI RtlQueryElevationFlags ( _Out_ PRTL_ELEVATION_FLAGS  Flags)
NTSYSAPI NTSTATUS NTAPI RtlQueryEnvironmentVariable ( _In_opt_ PVOID  Environment,
_In_reads_(NameLength) PWSTR  Name,
_In_ SIZE_T  NameLength,
_Out_writes_(ValueLength) PWSTR  Value,
_In_ SIZE_T  ValueLength,
_Out_ PSIZE_T  ReturnLength 
)
NTSYSAPI NTSTATUS NTAPI RtlQueryEnvironmentVariable_U ( _In_opt_ PVOID  Environment,
_In_ PUNICODE_STRING  Name,
_Out_ PUNICODE_STRING  Value 
)
NTSYSAPI NTSTATUS NTAPI RtlQueryHeapInformation ( _In_ PVOID  HeapHandle,
_In_ HEAP_INFORMATION_CLASS  HeapInformationClass,
_Out_opt_ PVOID  HeapInformation,
_In_opt_ SIZE_T  HeapInformationLength,
_Out_opt_ PSIZE_T  ReturnLength 
)
NTSYSAPI NTSTATUS NTAPI RtlQueryInformationAcl ( _In_ PACL  Acl,
_Out_writes_bytes_(AclInformationLength) PVOID  AclInformation,
_In_ ULONG  AclInformationLength,
_In_ ACL_INFORMATION_CLASS  AclInformationClass 
)
NTSYSAPI LOGICAL NTAPI RtlQueryPerformanceCounter ( _Out_ PLARGE_INTEGER  PerformanceCounter)
NTSYSAPI LOGICAL NTAPI RtlQueryPerformanceFrequency ( _Out_ PLARGE_INTEGER  PerformanceFrequency)
NTSYSAPI NTSTATUS NTAPI RtlQueryProcessDebugInformation ( _In_ HANDLE  UniqueProcessId,
_In_ ULONG  Flags,
_Inout_ PRTL_DEBUG_INFORMATION  Buffer 
)
NTSYSAPI NTSTATUS NTAPI RtlQueryRegistryValues ( _In_ ULONG  RelativeTo,
_In_ PWSTR  Path,
_In_ PRTL_QUERY_REGISTRY_TABLE  QueryTable,
_In_ PVOID  Context,
_In_opt_ PVOID  Environment 
)
NTSYSAPI NTSTATUS NTAPI RtlQuerySecurityObject ( _In_ PSECURITY_DESCRIPTOR  ObjectDescriptor,
_In_ SECURITY_INFORMATION  SecurityInformation,
_Out_opt_ PSECURITY_DESCRIPTOR  ResultantDescriptor,
_In_ ULONG  DescriptorLength,
_Out_ PULONG  ReturnLength 
)
NTSYSAPI PWSTR NTAPI RtlQueryTagHeap ( _In_ PVOID  HeapHandle,
_In_ ULONG  Flags,
_In_ USHORT  TagIndex,
_In_ BOOLEAN  ResetCounters,
_Out_opt_ PRTL_HEAP_TAG_INFO  TagInfo 
)
NTSYSAPI NTSTATUS NTAPI RtlQueryThreadProfiling ( _In_ HANDLE  ThreadHandle,
_Out_ PBOOLEAN  Enabled 
)
NTSYSAPI NTSTATUS NTAPI RtlQueryTimeZoneInformation ( _Out_ PRTL_TIME_ZONE_INFORMATION  TimeZoneInformation)
NTSYSAPI ULONG NTAPI RtlQueryValidationRunlevel ( _In_opt_ PCUNICODE_STRING  ComponentName)
NTSYSAPI NTSTATUS NTAPI RtlQueueWorkItem ( _In_ WORKERCALLBACKFUNC  Function,
_In_ PVOID  Context,
_In_ ULONG  Flags 
)
NTSYSAPI ULONG NTAPI RtlRandom ( _Inout_ PULONG  Seed)
NTSYSAPI ULONG NTAPI RtlRandomEx ( _Inout_ PULONG  Seed)
NTSYSAPI VOID NTAPI RtlRbInsertNodeEx ( _In_ PRTL_RB_TREE  Tree,
_In_opt_ PRTL_BALANCED_NODE  Parent,
_In_ BOOLEAN  Right,
_Out_ PRTL_BALANCED_NODE  Node 
)
NTSYSAPI VOID NTAPI RtlRbRemoveNode ( _In_ PRTL_RB_TREE  Tree,
_In_ PRTL_BALANCED_NODE  Node 
)
NTSYSAPI NTSTATUS NTAPI RtlReadThreadProfilingData ( _In_ HANDLE  PerformanceDataHandle,
_In_ ULONG  Flags,
_Out_ PPERFORMANCE_DATA  PerformanceData 
)
NTSYSAPI PVOID NTAPI RtlReAllocateHeap ( _In_ PVOID  HeapHandle,
_In_ ULONG  Flags,
_In_ PVOID  BaseAddress,
_In_ SIZE_T  Size 
)
_Check_return_ NTSYSAPI PRTL_SPLAY_LINKS NTAPI RtlRealPredecessor ( _In_ PRTL_SPLAY_LINKS  Links)
_Check_return_ NTSYSAPI PRTL_SPLAY_LINKS NTAPI RtlRealSuccessor ( _In_ PRTL_SPLAY_LINKS  Links)
NTSYSAPI NTSTATUS NTAPI RtlRegisterThreadWithCsrss ( VOID  )
NTSYSAPI NTSTATUS NTAPI RtlRegisterWait ( _Out_ PHANDLE  WaitHandle,
_In_ HANDLE  Handle,
_In_ WAITORTIMERCALLBACKFUNC  Function,
_In_ PVOID  Context,
_In_ ULONG  Milliseconds,
_In_ ULONG  Flags 
)
FORCEINLINE VOID RtlReleaseHashTableContext ( _Inout_ PRTL_DYNAMIC_HASH_TABLE_CONTEXT  Context)

Definition at line 654 of file ntrtl.h.

NTSYSAPI VOID NTAPI RtlReleasePebLock ( VOID  )
NTSYSAPI VOID NTAPI RtlReleasePrivilege ( _In_ PVOID  StatePointer)
NTSYSAPI VOID NTAPI RtlReleaseRelativeName ( _Inout_ PRTL_RELATIVE_NAME_U  RelativeName)
NTSYSAPI VOID NTAPI RtlReleaseResource ( _Inout_ PRTL_RESOURCE  Resource)
NTSYSAPI VOID NTAPI RtlReleaseSRWLockExclusive ( _Inout_ PRTL_SRWLOCK  SRWLock)
NTSYSAPI VOID NTAPI RtlReleaseSRWLockShared ( _Inout_ PRTL_SRWLOCK  SRWLock)
NTSYSAPI NTSTATUS NTAPI RtlRemoteCall ( _In_ HANDLE  Process,
_In_ HANDLE  Thread,
_In_ PVOID  CallSite,
_In_ ULONG  ArgumentCount,
_In_opt_ PULONG_PTR  Arguments,
_In_ BOOLEAN  PassContext,
_In_ BOOLEAN  AlreadySuspended 
)
NTSYSAPI BOOLEAN NTAPI RtlRemoveEntryHashTable ( _In_ PRTL_DYNAMIC_HASH_TABLE  HashTable,
_In_ PRTL_DYNAMIC_HASH_TABLE_ENTRY  Entry,
_Inout_opt_ PRTL_DYNAMIC_HASH_TABLE_CONTEXT  Context 
)
NTSYSAPI NTSTATUS NTAPI RtlRemovePrivileges ( _In_ HANDLE  hToken,
_In_ PULONG  PrivilegesToKeep,
_In_ ULONG  PrivilegeCount 
)
NTSYSAPI VOID NTAPI RtlRemoveUnicodePrefix ( _In_ PUNICODE_PREFIX_TABLE  PrefixTable,
_In_ PUNICODE_PREFIX_TABLE_ENTRY  PrefixTableEntry 
)
NTSYSAPI ULONG NTAPI RtlRemoveVectoredContinueHandler ( _In_ PVOID  Handle)
NTSYSAPI ULONG NTAPI RtlRemoveVectoredExceptionHandler ( _In_ PVOID  Handle)
NTSYSAPI NTSTATUS NTAPI RtlReplaceSidInSd ( _Inout_ PSECURITY_DESCRIPTOR  SecurityDescriptor,
_In_ PSID  OldSid,
_In_ PSID  NewSid,
_Out_ ULONG *  NumChanges 
)
NTSYSAPI NTSTATUS NTAPI RtlReportException ( _In_ PEXCEPTION_RECORD  ExceptionRecord,
_In_ PCONTEXT  ContextRecord,
_In_ ULONG  Flags 
)
NTSYSAPI NTSTATUS NTAPI RtlReportSilentProcessExit ( _In_ HANDLE  ProcessHandle,
_In_ NTSTATUS  ExitStatus 
)
NTSYSAPI NTSTATUS NTAPI RtlReserveChunk ( _In_ USHORT  CompressionFormat,
_Inout_ PUCHAR *  CompressedBuffer,
_In_ PUCHAR  EndOfCompressedBufferPlus1,
_Out_ PUCHAR *  ChunkBuffer,
_In_ ULONG  ChunkSize 
)
NTSYSAPI NTSTATUS NTAPI RtlResetMemoryBlockLookaside ( _In_ PVOID  MemoryBlockLookaside)
NTSYSAPI NTSTATUS NTAPI RtlResetMemoryZone ( _In_ PVOID  MemoryZone)
NTSYSAPI VOID NTAPI RtlResetRtlTranslations ( _In_ PNLSTABLEINFO  TableInfo)
NTSYSAPI VOID NTAPI RtlRestoreLastWin32Error ( _In_ LONG  Win32Error)
NTSYSAPI VOID NTAPI RtlRunDecodeUnicodeString ( _In_ UCHAR  Seed,
_In_ PUNICODE_STRING  String 
)
NTSYSAPI VOID NTAPI RtlRunEncodeUnicodeString ( _Inout_ PUCHAR  Seed,
_In_ PUNICODE_STRING  String 
)
NTSYSAPI VOID NTAPI RtlSecondsSince1970ToTime ( _In_ ULONG  ElapsedSeconds,
_Out_ PLARGE_INTEGER  Time 
)
NTSYSAPI VOID NTAPI RtlSecondsSince1980ToTime ( _In_ ULONG  ElapsedSeconds,
_Out_ PLARGE_INTEGER  Time 
)
NTSYSAPI PIMAGE_SECTION_HEADER NTAPI RtlSectionTableFromVirtualAddress ( _In_ PIMAGE_NT_HEADERS  NtHeaders,
_In_ PVOID  BaseOfImage,
_In_ ULONG  VirtualAddress 
)
NTSYSAPI NTSTATUS NTAPI RtlSelfRelativeToAbsoluteSD ( _In_ PSECURITY_DESCRIPTOR  SelfRelativeSecurityDescriptor,
_Out_writes_bytes_to_opt_ *,*AbsoluteSecurityDescriptorSize PSECURITY_DESCRIPTOR  AbsoluteSecurityDescriptor,
_Inout_ PULONG  AbsoluteSecurityDescriptorSize,
_Out_writes_bytes_to_opt_ *,*DaclSize PACL  Dacl,
_Inout_ PULONG  DaclSize,
_Out_writes_bytes_to_opt_ *,*SaclSize PACL  Sacl,
_Inout_ PULONG  SaclSize,
_Out_writes_bytes_to_opt_ *,*OwnerSize PSID  Owner,
_Inout_ PULONG  OwnerSize,
_Out_writes_bytes_to_opt_ *,*PrimaryGroupSize PSID  PrimaryGroup,
_Inout_ PULONG  PrimaryGroupSize 
)
NTSYSAPI NTSTATUS NTAPI RtlSelfRelativeToAbsoluteSD2 ( _Inout_ PSECURITY_DESCRIPTOR  pSelfRelativeSecurityDescriptor,
_Inout_ PULONG  pBufferSize 
)
NTSYSAPI VOID NTAPI RtlSetAllBits ( _In_ PRTL_BITMAP  BitMapHeader)
NTSYSAPI NTSTATUS NTAPI RtlSetAttributesSecurityDescriptor ( _Inout_ PSECURITY_DESCRIPTOR  SecurityDescriptor,
_In_ SECURITY_DESCRIPTOR_CONTROL  Control,
_Out_ PULONG  Revision 
)
NTSYSAPI VOID NTAPI RtlSetBit ( _In_ PRTL_BITMAP  BitMapHeader,
_In_range_(<, BitMapHeader->SizeOfBitMap) ULONG  BitNumber 
)
NTSYSAPI VOID NTAPI RtlSetBits ( _In_ PRTL_BITMAP  BitMapHeader,
_In_range_(0, BitMapHeader->SizeOfBitMap-NumberToSet) ULONG  StartingIndex,
_In_range_(0, BitMapHeader->SizeOfBitMap-StartingIndex) ULONG  NumberToSet 
)
NTSYSAPI NTSTATUS NTAPI RtlSetControlSecurityDescriptor ( _Inout_ PSECURITY_DESCRIPTOR  SecurityDescriptor,
_In_ SECURITY_DESCRIPTOR_CONTROL  ControlBitsOfInterest,
_In_ SECURITY_DESCRIPTOR_CONTROL  ControlBitsToSet 
)
NTSYSAPI ULONG NTAPI RtlSetCriticalSectionSpinCount ( _Inout_ PRTL_CRITICAL_SECTION  CriticalSection,
_In_ ULONG  SpinCount 
)
NTSYSAPI NTSTATUS NTAPI RtlSetCurrentDirectory_U ( _In_ PUNICODE_STRING  PathName)
NTSYSAPI NTSTATUS NTAPI RtlSetCurrentEnvironment ( _In_ PVOID  Environment,
_Out_opt_ PVOID *  PreviousEnvironment 
)
NTSYSAPI LOGICAL NTAPI RtlSetCurrentTransaction ( _In_ HANDLE  TransactionHandle)
NTSYSAPI NTSTATUS NTAPI RtlSetDaclSecurityDescriptor ( _Inout_ PSECURITY_DESCRIPTOR  SecurityDescriptor,
_In_ BOOLEAN  DaclPresent,
_In_opt_ PACL  Dacl,
_In_opt_ BOOLEAN  DaclDefaulted 
)
NTSYSAPI NTSTATUS NTAPI RtlSetEnvironmentStrings ( _In_ PWCHAR  NewEnvironment,
_In_ SIZE_T  NewEnvironmentSize 
)
NTSYSAPI NTSTATUS NTAPI RtlSetEnvironmentVar ( _In_opt_ PWSTR *  Environment,
_In_reads_(NameLength) PWSTR  Name,
_In_ SIZE_T  NameLength,
_In_reads_(ValueLength) PWSTR  Value,
_In_ SIZE_T  ValueLength 
)
NTSYSAPI NTSTATUS NTAPI RtlSetEnvironmentVariable ( _In_opt_ PVOID *  Environment,
_In_ PUNICODE_STRING  Name,
_In_ PUNICODE_STRING  Value 
)
NTSYSAPI NTSTATUS NTAPI RtlSetGroupSecurityDescriptor ( _Inout_ PSECURITY_DESCRIPTOR  SecurityDescriptor,
_In_opt_ PSID  Group,
_In_opt_ BOOLEAN  GroupDefaulted 
)
NTSYSAPI NTSTATUS NTAPI RtlSetHeapInformation ( _In_ PVOID  HeapHandle,
_In_ HEAP_INFORMATION_CLASS  HeapInformationClass,
_In_opt_ PVOID  HeapInformation,
_In_opt_ SIZE_T  HeapInformationLength 
)
NTSYSAPI NTSTATUS NTAPI RtlSetInformationAcl ( _Inout_ PACL  Acl,
_In_reads_bytes_(AclInformationLength) PVOID  AclInformation,
_In_ ULONG  AclInformationLength,
_In_ ACL_INFORMATION_CLASS  AclInformationClass 
)
NTSYSAPI NTSTATUS NTAPI RtlSetIoCompletionCallback ( _In_ HANDLE  FileHandle,
_In_ APC_CALLBACK_FUNCTION  CompletionProc,
_In_ ULONG  Flags 
)
NTSYSAPI VOID NTAPI RtlSetLastWin32Error ( _In_ LONG  Win32Error)
NTSYSAPI VOID NTAPI RtlSetLastWin32ErrorAndNtStatusFromNtStatus ( _In_ NTSTATUS  Status)
NTSYSAPI NTSTATUS NTAPI RtlSetOwnerSecurityDescriptor ( _Inout_ PSECURITY_DESCRIPTOR  SecurityDescriptor,
_In_opt_ PSID  Owner,
_In_opt_ BOOLEAN  OwnerDefaulted 
)
NTSYSAPI NTSTATUS STDAPIVCALLTYPE RtlSetProcessIsCritical ( _In_ BOOLEAN  NewValue,
_Out_opt_ PBOOLEAN  OldValue,
_In_ BOOLEAN  CheckFlag 
)
NTSYSAPI NTSTATUS NTAPI RtlSetSaclSecurityDescriptor ( _Inout_ PSECURITY_DESCRIPTOR  SecurityDescriptor,
_In_ BOOLEAN  SaclPresent,
_In_opt_ PACL  Sacl,
_In_opt_ BOOLEAN  SaclDefaulted 
)
NTSYSAPI VOID NTAPI RtlSetSecurityDescriptorRMControl ( _Inout_ PSECURITY_DESCRIPTOR  SecurityDescriptor,
_In_opt_ PUCHAR  RMControl 
)
NTSYSAPI NTSTATUS NTAPI RtlSetSecurityObject ( _In_ SECURITY_INFORMATION  SecurityInformation,
_In_ PSECURITY_DESCRIPTOR  ModificationDescriptor,
_Inout_ PSECURITY_DESCRIPTOR *  ObjectsSecurityDescriptor,
_In_ PGENERIC_MAPPING  GenericMapping,
_In_opt_ HANDLE  Token 
)
NTSYSAPI NTSTATUS NTAPI RtlSetSecurityObjectEx ( _In_ SECURITY_INFORMATION  SecurityInformation,
_In_ PSECURITY_DESCRIPTOR  ModificationDescriptor,
_Inout_ PSECURITY_DESCRIPTOR *  ObjectsSecurityDescriptor,
_In_ ULONG  AutoInheritFlags,
_In_ PGENERIC_MAPPING  GenericMapping,
_In_opt_ HANDLE  Token 
)
NTSYSAPI NTSTATUS NTAPI RtlSetThreadErrorMode ( _In_ ULONG  NewMode,
_Out_opt_ PULONG  OldMode 
)
NTSYSAPI NTSTATUS STDAPIVCALLTYPE RtlSetThreadIsCritical ( _In_ BOOLEAN  NewValue,
_Out_opt_ PBOOLEAN  OldValue,
_In_ BOOLEAN  CheckFlag 
)
NTSYSAPI NTSTATUS NTAPI RtlSetTimeZoneInformation ( _In_ PRTL_TIME_ZONE_INFORMATION  TimeZoneInformation)
NTSYSAPI BOOLEAN NTAPI RtlSetUserFlagsHeap ( _In_ PVOID  HeapHandle,
_In_ ULONG  Flags,
_In_ PVOID  BaseAddress,
_In_ ULONG  UserFlagsReset,
_In_ ULONG  UserFlagsSet 
)
NTSYSAPI BOOLEAN NTAPI RtlSetUserValueHeap ( _In_ PVOID  HeapHandle,
_In_ ULONG  Flags,
_In_ PVOID  BaseAddress,
_In_ PVOID  UserValue 
)
NTSYSAPI NTSTATUS NTAPI RtlSidDominates ( _In_ PSID  Sid1,
_In_ PSID  Sid2,
_Out_ PBOOLEAN  pbDominate 
)
NTSYSAPI NTSTATUS NTAPI RtlSidEqualLevel ( _In_ PSID  Sid1,
_In_ PSID  Sid2,
_Out_ PBOOLEAN  pbEqual 
)
NTSYSAPI NTSTATUS NTAPI RtlSidHashInitialize ( _In_reads_(SidCount) PSID_AND_ATTRIBUTES  SidAttr,
_In_ ULONG  SidCount,
_Out_ PSID_AND_ATTRIBUTES_HASH  SidAttrHash 
)
NTSYSAPI PSID_AND_ATTRIBUTES NTAPI RtlSidHashLookup ( _In_ PSID_AND_ATTRIBUTES_HASH  SidAttrHash,
_In_ PSID  Sid 
)
NTSYSAPI NTSTATUS NTAPI RtlSidIsHigherLevel ( _In_ PSID  Sid1,
_In_ PSID  Sid2,
_Out_ PBOOLEAN  pbHigher 
)