[RTL]
[reactos.git] / reactos / include / ndk / rtlfuncs.h
1 /*++ NDK Version: 0098
2
3 Copyright (c) Alex Ionescu. All rights reserved.
4
5 Header Name:
6
7 rtlfuncs.h
8
9 Abstract:
10
11 Function definitions for the Run-Time Library
12
13 Author:
14
15 Alex Ionescu (alexi@tinykrnl.org) - Updated - 27-Feb-2006
16
17 --*/
18
19 #ifndef _RTLFUNCS_H
20 #define _RTLFUNCS_H
21
22 //
23 // Dependencies
24 //
25 #include <umtypes.h>
26 #include <ntnls.h>
27 #include <rtltypes.h>
28 #include <pstypes.h>
29 #include <extypes.h>
30 #include "in6addr.h"
31 #include "inaddr.h"
32
33 #ifdef __cplusplus
34 extern "C" {
35 #endif
36
37 #ifdef NTOS_MODE_USER
38
39 //
40 // List Functions
41 //
42 FORCEINLINE
43 VOID
44 InitializeListHead(
45 _Out_ PLIST_ENTRY ListHead
46 )
47 {
48 ListHead->Flink = ListHead->Blink = ListHead;
49 }
50
51 FORCEINLINE
52 VOID
53 InsertHeadList(
54 _Inout_ PLIST_ENTRY ListHead,
55 _Inout_ PLIST_ENTRY Entry
56 )
57 {
58 PLIST_ENTRY OldFlink;
59 OldFlink = ListHead->Flink;
60 Entry->Flink = OldFlink;
61 Entry->Blink = ListHead;
62 OldFlink->Blink = Entry;
63 ListHead->Flink = Entry;
64 }
65
66 FORCEINLINE
67 VOID
68 InsertTailList(
69 _Inout_ PLIST_ENTRY ListHead,
70 _Inout_ PLIST_ENTRY Entry
71 )
72 {
73 PLIST_ENTRY OldBlink;
74 OldBlink = ListHead->Blink;
75 Entry->Flink = ListHead;
76 Entry->Blink = OldBlink;
77 OldBlink->Flink = Entry;
78 ListHead->Blink = Entry;
79 }
80
81 _Must_inspect_result_
82 FORCEINLINE
83 BOOLEAN
84 IsListEmpty(
85 _In_ const LIST_ENTRY * ListHead
86 )
87 {
88 return (BOOLEAN)(ListHead->Flink == ListHead);
89 }
90
91 FORCEINLINE
92 PSINGLE_LIST_ENTRY
93 PopEntryList(
94 _Inout_ PSINGLE_LIST_ENTRY ListHead
95 )
96 {
97 PSINGLE_LIST_ENTRY FirstEntry;
98 FirstEntry = ListHead->Next;
99 if (FirstEntry != NULL) {
100 ListHead->Next = FirstEntry->Next;
101 }
102
103 return FirstEntry;
104 }
105
106 FORCEINLINE
107 VOID
108 PushEntryList(
109 _Inout_ PSINGLE_LIST_ENTRY ListHead,
110 _Inout_ PSINGLE_LIST_ENTRY Entry
111 )
112 {
113 Entry->Next = ListHead->Next;
114 ListHead->Next = Entry;
115 }
116
117 FORCEINLINE
118 BOOLEAN
119 RemoveEntryList(
120 _In_ PLIST_ENTRY Entry)
121 {
122 PLIST_ENTRY OldFlink;
123 PLIST_ENTRY OldBlink;
124
125 OldFlink = Entry->Flink;
126 OldBlink = Entry->Blink;
127 OldFlink->Blink = OldBlink;
128 OldBlink->Flink = OldFlink;
129 return (BOOLEAN)(OldFlink == OldBlink);
130 }
131
132 FORCEINLINE
133 PLIST_ENTRY
134 RemoveHeadList(
135 _Inout_ PLIST_ENTRY ListHead)
136 {
137 PLIST_ENTRY Flink;
138 PLIST_ENTRY Entry;
139
140 Entry = ListHead->Flink;
141 Flink = Entry->Flink;
142 ListHead->Flink = Flink;
143 Flink->Blink = ListHead;
144 return Entry;
145 }
146
147 FORCEINLINE
148 PLIST_ENTRY
149 RemoveTailList(
150 _Inout_ PLIST_ENTRY ListHead)
151 {
152 PLIST_ENTRY Blink;
153 PLIST_ENTRY Entry;
154
155 Entry = ListHead->Blink;
156 Blink = Entry->Blink;
157 ListHead->Blink = Blink;
158 Blink->Flink = ListHead;
159 return Entry;
160 }
161
162 //
163 // Unicode string macros
164 //
165 _At_(UnicodeString->Buffer, _Post_equal_to_(Buffer))
166 _At_(UnicodeString->Length, _Post_equal_to_(0))
167 _At_(UnicodeString->MaximumLength, _Post_equal_to_(BufferSize))
168 FORCEINLINE
169 VOID
170 RtlInitEmptyUnicodeString(
171 _Out_ PUNICODE_STRING UnicodeString,
172 _When_(BufferSize != 0, _Notnull_) _Writable_bytes_(BufferSize) __drv_aliasesMem PWCHAR Buffer,
173 _In_ USHORT BufferSize)
174 {
175 UnicodeString->Length = 0;
176 UnicodeString->MaximumLength = BufferSize;
177 UnicodeString->Buffer = Buffer;
178 }
179
180 _At_(AnsiString->Buffer, _Post_equal_to_(Buffer))
181 _At_(AnsiString->Length, _Post_equal_to_(0))
182 _At_(AnsiString->MaximumLength, _Post_equal_to_(BufferSize))
183 FORCEINLINE
184 VOID
185 RtlInitEmptyAnsiString(
186 _Out_ PANSI_STRING AnsiString,
187 _When_(BufferSize != 0, _Notnull_) _Writable_bytes_(BufferSize) __drv_aliasesMem PCHAR Buffer,
188 _In_ USHORT BufferSize)
189 {
190 AnsiString->Length = 0;
191 AnsiString->MaximumLength = BufferSize;
192 AnsiString->Buffer = Buffer;
193 }
194
195 //
196 // LUID Macros
197 //
198 #define RtlEqualLuid(L1, L2) (((L1)->HighPart == (L2)->HighPart) && \
199 ((L1)->LowPart == (L2)->LowPart))
200 FORCEINLINE
201 LUID
202 NTAPI_INLINE
203 RtlConvertUlongToLuid(
204 _In_ ULONG Ulong)
205 {
206 LUID TempLuid;
207
208 TempLuid.LowPart = Ulong;
209 TempLuid.HighPart = 0;
210 return TempLuid;
211 }
212
213 //
214 // ASSERT Macros
215 //
216 #ifndef ASSERT
217 #if DBG
218
219 #define ASSERT( exp ) \
220 ((void)((!(exp)) ? \
221 (RtlAssert( (PVOID)#exp, (PVOID)__FILE__, __LINE__, NULL ),FALSE) : \
222 TRUE))
223
224 #define ASSERTMSG( msg, exp ) \
225 ((void)((!(exp)) ? \
226 (RtlAssert( (PVOID)#exp, (PVOID)__FILE__, __LINE__, (PCHAR)msg ),FALSE) : \
227 TRUE))
228
229 #else
230
231 #define ASSERT( exp ) ((void) 0)
232 #define ASSERTMSG( msg, exp ) ((void) 0)
233
234 #endif
235 #endif
236
237 #ifdef NTOS_KERNEL_RUNTIME
238
239 //
240 // Executing RTL functions at DISPATCH_LEVEL or higher will result in a
241 // bugcheck.
242 //
243 #define RTL_PAGED_CODE PAGED_CODE
244
245 #else
246
247 //
248 // This macro does nothing in user mode
249 //
250 #define RTL_PAGED_CODE NOP_FUNCTION
251
252 #endif
253
254 //
255 // RTL Splay Tree Functions
256 //
257 #ifndef RTL_USE_AVL_TABLES
258
259 NTSYSAPI
260 VOID
261 NTAPI
262 RtlInitializeGenericTable(
263 _Out_ PRTL_GENERIC_TABLE Table,
264 _In_ PRTL_GENERIC_COMPARE_ROUTINE CompareRoutine,
265 _In_opt_ PRTL_GENERIC_ALLOCATE_ROUTINE AllocateRoutine,
266 _In_opt_ PRTL_GENERIC_FREE_ROUTINE FreeRoutine,
267 _In_opt_ PVOID TableContext
268 );
269
270 NTSYSAPI
271 PVOID
272 NTAPI
273 RtlInsertElementGenericTable(
274 _In_ PRTL_GENERIC_TABLE Table,
275 _In_reads_bytes_(BufferSize) PVOID Buffer,
276 _In_ CLONG BufferSize,
277 _Out_opt_ PBOOLEAN NewElement
278 );
279
280 NTSYSAPI
281 PVOID
282 NTAPI
283 RtlInsertElementGenericTableFull(
284 _In_ PRTL_GENERIC_TABLE Table,
285 _In_reads_bytes_(BufferSize) PVOID Buffer,
286 _In_ CLONG BufferSize,
287 _Out_opt_ PBOOLEAN NewElement,
288 _In_ PVOID NodeOrParent,
289 _In_ TABLE_SEARCH_RESULT SearchResult
290 );
291
292 NTSYSAPI
293 BOOLEAN
294 NTAPI
295 RtlDeleteElementGenericTable(
296 _In_ PRTL_GENERIC_TABLE Table,
297 _In_ PVOID Buffer
298 );
299
300 _Must_inspect_result_
301 NTSYSAPI
302 PVOID
303 NTAPI
304 RtlLookupElementGenericTable(
305 _In_ PRTL_GENERIC_TABLE Table,
306 _In_ PVOID Buffer
307 );
308
309 NTSYSAPI
310 PVOID
311 NTAPI
312 RtlLookupElementGenericTableFull(
313 _In_ PRTL_GENERIC_TABLE Table,
314 _In_ PVOID Buffer,
315 _Out_ PVOID *NodeOrParent,
316 _Out_ TABLE_SEARCH_RESULT *SearchResult
317 );
318
319 _Must_inspect_result_
320 NTSYSAPI
321 PVOID
322 NTAPI
323 RtlEnumerateGenericTable(
324 _In_ PRTL_GENERIC_TABLE Table,
325 _In_ BOOLEAN Restart
326 );
327
328 _Must_inspect_result_
329 NTSYSAPI
330 PVOID
331 NTAPI
332 RtlEnumerateGenericTableWithoutSplaying(
333 _In_ PRTL_GENERIC_TABLE Table,
334 _Inout_ PVOID *RestartKey
335 );
336
337 _Must_inspect_result_
338 NTSYSAPI
339 PVOID
340 NTAPI
341 RtlGetElementGenericTable(
342 _In_ PRTL_GENERIC_TABLE Table,
343 _In_ ULONG I
344 );
345
346 NTSYSAPI
347 ULONG
348 NTAPI
349 RtlNumberGenericTableElements(
350 _In_ PRTL_GENERIC_TABLE Table
351 );
352
353 _Must_inspect_result_
354 NTSYSAPI
355 BOOLEAN
356 NTAPI
357 RtlIsGenericTableEmpty(
358 _In_ PRTL_GENERIC_TABLE Table
359 );
360
361 #endif /* !RTL_USE_AVL_TABLES */
362
363 NTSYSAPI
364 PRTL_SPLAY_LINKS
365 NTAPI
366 RtlSplay(
367 _Inout_ PRTL_SPLAY_LINKS Links
368 );
369
370 NTSYSAPI
371 PRTL_SPLAY_LINKS
372 NTAPI
373 RtlDelete(
374 _In_ PRTL_SPLAY_LINKS Links
375 );
376
377 NTSYSAPI
378 VOID
379 NTAPI
380 RtlDeleteNoSplay(
381 _In_ PRTL_SPLAY_LINKS Links,
382 _Inout_ PRTL_SPLAY_LINKS *Root
383 );
384
385 _Must_inspect_result_
386 NTSYSAPI
387 PRTL_SPLAY_LINKS
388 NTAPI
389 RtlSubtreeSuccessor(
390 _In_ PRTL_SPLAY_LINKS Links
391 );
392
393 _Must_inspect_result_
394 NTSYSAPI
395 PRTL_SPLAY_LINKS
396 NTAPI
397 RtlSubtreePredecessor(
398 _In_ PRTL_SPLAY_LINKS Links
399 );
400
401 _Must_inspect_result_
402 NTSYSAPI
403 PRTL_SPLAY_LINKS
404 NTAPI
405 RtlRealSuccessor(
406 _In_ PRTL_SPLAY_LINKS Links
407 );
408
409 _Must_inspect_result_
410 NTSYSAPI
411 PRTL_SPLAY_LINKS
412 NTAPI
413 RtlRealPredecessor(
414 _In_ PRTL_SPLAY_LINKS Links
415 );
416
417 #define RtlIsLeftChild(Links) \
418 (RtlLeftChild(RtlParent(Links)) == (PRTL_SPLAY_LINKS)(Links))
419
420 #define RtlIsRightChild(Links) \
421 (RtlRightChild(RtlParent(Links)) == (PRTL_SPLAY_LINKS)(Links))
422
423 #define RtlRightChild(Links) \
424 ((PRTL_SPLAY_LINKS)(Links))->RightChild
425
426 #define RtlIsRoot(Links) \
427 (RtlParent(Links) == (PRTL_SPLAY_LINKS)(Links))
428
429 #define RtlLeftChild(Links) \
430 ((PRTL_SPLAY_LINKS)(Links))->LeftChild
431
432 #define RtlParent(Links) \
433 ((PRTL_SPLAY_LINKS)(Links))->Parent
434
435 // FIXME: use inline function
436
437 #define RtlInitializeSplayLinks(Links) \
438 { \
439 PRTL_SPLAY_LINKS _SplayLinks; \
440 _SplayLinks = (PRTL_SPLAY_LINKS)(Links); \
441 _SplayLinks->Parent = _SplayLinks; \
442 _SplayLinks->LeftChild = NULL; \
443 _SplayLinks->RightChild = NULL; \
444 }
445
446 #define RtlInsertAsLeftChild(ParentLinks,ChildLinks) \
447 { \
448 PRTL_SPLAY_LINKS _SplayParent; \
449 PRTL_SPLAY_LINKS _SplayChild; \
450 _SplayParent = (PRTL_SPLAY_LINKS)(ParentLinks); \
451 _SplayChild = (PRTL_SPLAY_LINKS)(ChildLinks); \
452 _SplayParent->LeftChild = _SplayChild; \
453 _SplayChild->Parent = _SplayParent; \
454 }
455
456 #define RtlInsertAsRightChild(ParentLinks,ChildLinks) \
457 { \
458 PRTL_SPLAY_LINKS _SplayParent; \
459 PRTL_SPLAY_LINKS _SplayChild; \
460 _SplayParent = (PRTL_SPLAY_LINKS)(ParentLinks); \
461 _SplayChild = (PRTL_SPLAY_LINKS)(ChildLinks); \
462 _SplayParent->RightChild = _SplayChild; \
463 _SplayChild->Parent = _SplayParent; \
464 }
465
466 //
467 // RTL AVL Tree Functions
468 //
469 NTSYSAPI
470 VOID
471 NTAPI
472 RtlInitializeGenericTableAvl(
473 _Out_ PRTL_AVL_TABLE Table,
474 _In_ PRTL_AVL_COMPARE_ROUTINE CompareRoutine,
475 _In_opt_ PRTL_AVL_ALLOCATE_ROUTINE AllocateRoutine,
476 _In_opt_ PRTL_AVL_FREE_ROUTINE FreeRoutine,
477 _In_opt_ PVOID TableContext
478 );
479
480 NTSYSAPI
481 PVOID
482 NTAPI
483 RtlInsertElementGenericTableAvl(
484 _In_ PRTL_AVL_TABLE Table,
485 _In_reads_bytes_(BufferSize) PVOID Buffer,
486 _In_ CLONG BufferSize,
487 _Out_opt_ PBOOLEAN NewElement
488 );
489
490 NTSYSAPI
491 PVOID
492 NTAPI
493 RtlInsertElementGenericTableFullAvl(
494 _In_ PRTL_AVL_TABLE Table,
495 _In_reads_bytes_(BufferSize) PVOID Buffer,
496 _In_ CLONG BufferSize,
497 _Out_opt_ PBOOLEAN NewElement,
498 _In_ PVOID NodeOrParent,
499 _In_ TABLE_SEARCH_RESULT SearchResult
500 );
501
502 NTSYSAPI
503 BOOLEAN
504 NTAPI
505 RtlDeleteElementGenericTableAvl(
506 _In_ PRTL_AVL_TABLE Table,
507 _In_ PVOID Buffer
508 );
509
510 _Must_inspect_result_
511 NTSYSAPI
512 PVOID
513 NTAPI
514 RtlLookupElementGenericTableAvl(
515 _In_ PRTL_AVL_TABLE Table,
516 _In_ PVOID Buffer
517 );
518
519 NTSYSAPI
520 PVOID
521 NTAPI
522 RtlLookupElementGenericTableFullAvl(
523 _In_ PRTL_AVL_TABLE Table,
524 _In_ PVOID Buffer,
525 _Out_ PVOID *NodeOrParent,
526 _Out_ TABLE_SEARCH_RESULT *SearchResult
527 );
528
529 _Must_inspect_result_
530 NTSYSAPI
531 PVOID
532 NTAPI
533 RtlEnumerateGenericTableAvl(
534 _In_ PRTL_AVL_TABLE Table,
535 _In_ BOOLEAN Restart
536 );
537
538 _Must_inspect_result_
539 NTSYSAPI
540 PVOID
541 NTAPI
542 RtlEnumerateGenericTableWithoutSplayingAvl(
543 _In_ PRTL_AVL_TABLE Table,
544 _Inout_ PVOID *RestartKey
545 );
546
547 _Must_inspect_result_
548 NTSYSAPI
549 PVOID
550 NTAPI
551 RtlLookupFirstMatchingElementGenericTableAvl(
552 _In_ PRTL_AVL_TABLE Table,
553 _In_ PVOID Buffer,
554 _Out_ PVOID *RestartKey
555 );
556
557 _Must_inspect_result_
558 NTSYSAPI
559 PVOID
560 NTAPI
561 RtlEnumerateGenericTableLikeADirectory(
562 _In_ PRTL_AVL_TABLE Table,
563 _In_opt_ PRTL_AVL_MATCH_FUNCTION MatchFunction,
564 _In_opt_ PVOID MatchData,
565 _In_ ULONG NextFlag,
566 _Inout_ PVOID *RestartKey,
567 _Inout_ PULONG DeleteCount,
568 _In_ PVOID Buffer
569 );
570
571 _Must_inspect_result_
572 NTSYSAPI
573 PVOID
574 NTAPI
575 RtlGetElementGenericTableAvl(
576 _In_ PRTL_AVL_TABLE Table,
577 _In_ ULONG I
578 );
579
580 NTSYSAPI
581 ULONG
582 NTAPI
583 RtlNumberGenericTableElementsAvl(
584 _In_ PRTL_AVL_TABLE Table
585 );
586
587 _Must_inspect_result_
588 NTSYSAPI
589 BOOLEAN
590 NTAPI
591 RtlIsGenericTableEmptyAvl(
592 _In_ PRTL_AVL_TABLE Table
593 );
594
595 #ifdef RTL_USE_AVL_TABLES
596
597 #define RtlInitializeGenericTable RtlInitializeGenericTableAvl
598 #define RtlInsertElementGenericTable RtlInsertElementGenericTableAvl
599 #define RtlInsertElementGenericTableFull RtlInsertElementGenericTableFullAvl
600 #define RtlDeleteElementGenericTable RtlDeleteElementGenericTableAvl
601 #define RtlLookupElementGenericTable RtlLookupElementGenericTableAvl
602 #define RtlLookupElementGenericTableFull RtlLookupElementGenericTableFullAvl
603 #define RtlEnumerateGenericTable RtlEnumerateGenericTableAvl
604 #define RtlEnumerateGenericTableWithoutSplaying RtlEnumerateGenericTableWithoutSplayingAvl
605 #define RtlGetElementGenericTable RtlGetElementGenericTableAvl
606 #define RtlNumberGenericTableElements RtlNumberGenericTableElementsAvl
607 #define RtlIsGenericTableEmpty RtlIsGenericTableEmptyAvl
608
609 #endif /* RTL_USE_AVL_TABLES */
610
611 //
612 // Error and Exception Functions
613 //
614 NTSYSAPI
615 PVOID
616 NTAPI
617 RtlAddVectoredExceptionHandler(
618 _In_ ULONG FirstHandler,
619 _In_ PVECTORED_EXCEPTION_HANDLER VectoredHandler
620 );
621
622 __analysis_noreturn
623 NTSYSAPI
624 VOID
625 NTAPI
626 RtlAssert(
627 _In_ PVOID FailedAssertion,
628 _In_ PVOID FileName,
629 _In_ ULONG LineNumber,
630 _In_opt_z_ PCHAR Message
631 );
632
633 NTSYSAPI
634 VOID
635 NTAPI
636 RtlSetUnhandledExceptionFilter(
637 _In_ PRTLP_UNHANDLED_EXCEPTION_FILTER TopLevelExceptionFilter
638 );
639
640 #endif /* NTOS_MODE_USER */
641
642 NTSYSAPI
643 VOID
644 NTAPI
645 RtlCaptureContext(
646 _Out_ PCONTEXT ContextRecord
647 );
648
649 NTSYSAPI
650 PVOID
651 NTAPI
652 RtlEncodePointer(
653 _In_ PVOID Pointer
654 );
655
656 NTSYSAPI
657 PVOID
658 NTAPI
659 RtlDecodePointer(
660 _In_ PVOID Pointer
661 );
662
663 NTSYSAPI
664 PVOID
665 NTAPI
666 RtlEncodeSystemPointer(
667 _In_ PVOID Pointer
668 );
669
670 NTSYSAPI
671 PVOID
672 NTAPI
673 RtlDecodeSystemPointer(
674 _In_ PVOID Pointer
675 );
676
677 NTSYSAPI
678 BOOLEAN
679 NTAPI
680 RtlDispatchException(
681 _In_ PEXCEPTION_RECORD ExceptionRecord,
682 _In_ PCONTEXT Context
683 );
684
685 _IRQL_requires_max_(APC_LEVEL)
686 _When_(Status < 0, _Out_range_(>, 0))
687 _When_(Status >= 0, _Out_range_(==, 0))
688 NTSYSAPI
689 ULONG
690 NTAPI
691 RtlNtStatusToDosError(
692 _In_ NTSTATUS Status
693 );
694
695 _When_(Status < 0, _Out_range_(>, 0))
696 _When_(Status >= 0, _Out_range_(==, 0))
697 NTSYSAPI
698 ULONG
699 NTAPI
700 RtlNtStatusToDosErrorNoTeb(
701 _In_ NTSTATUS Status
702 );
703
704 NTSYSAPI
705 VOID
706 NTAPI
707 RtlSetLastWin32ErrorAndNtStatusFromNtStatus(
708 _In_ NTSTATUS Status
709 );
710
711 NTSYSAPI
712 VOID
713 NTAPI
714 RtlRaiseException(
715 _In_ PEXCEPTION_RECORD ExceptionRecord
716 );
717
718 DECLSPEC_NORETURN
719 NTSYSAPI
720 VOID
721 NTAPI
722 RtlRaiseStatus(
723 _In_ NTSTATUS Status
724 );
725
726 NTSYSAPI
727 LONG
728 NTAPI
729 RtlUnhandledExceptionFilter(
730 _In_ struct _EXCEPTION_POINTERS* ExceptionInfo
731 );
732
733 NTSYSAPI
734 VOID
735 NTAPI
736 RtlUnwind(
737 _In_opt_ PVOID TargetFrame,
738 _In_opt_ PVOID TargetIp,
739 _In_opt_ PEXCEPTION_RECORD ExceptionRecord,
740 _In_ PVOID ReturnValue
741 );
742
743 #define RTL_STACK_WALKING_MODE_FRAMES_TO_SKIP_SHIFT 8
744
745 //
746 // Tracing Functions
747 //
748 NTSYSAPI
749 ULONG
750 NTAPI
751 RtlWalkFrameChain(
752 _Out_writes_(Count - (Flags >> RTL_STACK_WALKING_MODE_FRAMES_TO_SKIP_SHIFT)) PVOID *Callers,
753 _In_ ULONG Count,
754 _In_ ULONG Flags
755 );
756
757 NTSYSAPI
758 USHORT
759 NTAPI
760 RtlLogStackBackTrace(
761 VOID
762 );
763
764 #ifdef NTOS_MODE_USER
765 //
766 // Heap Functions
767 //
768 _Must_inspect_result_
769 _Ret_maybenull_
770 _Post_writable_byte_size_(Size)
771 NTSYSAPI
772 PVOID
773 NTAPI
774 RtlAllocateHeap(
775 _In_ PVOID HeapHandle,
776 _In_opt_ ULONG Flags,
777 _In_ SIZE_T Size
778 );
779
780 _Must_inspect_result_
781 NTSYSAPI
782 PVOID
783 NTAPI
784 RtlCreateHeap(
785 _In_ ULONG Flags,
786 _In_opt_ PVOID BaseAddress,
787 _In_opt_ SIZE_T SizeToReserve,
788 _In_opt_ SIZE_T SizeToCommit,
789 _In_opt_ PVOID Lock,
790 _In_opt_ PRTL_HEAP_PARAMETERS Parameters
791 );
792
793 NTSYSAPI
794 ULONG
795 NTAPI
796 RtlCreateTagHeap(
797 _In_ HANDLE HeapHandle,
798 _In_ ULONG Flags,
799 _In_ PWSTR TagName,
800 _In_ PWSTR TagSubName
801 );
802
803 ULONG
804 NTAPI
805 RtlCompactHeap(
806 _In_ HANDLE Heap,
807 _In_ ULONG Flags
808 );
809
810 _Must_inspect_result_
811 NTSYSAPI
812 PVOID
813 NTAPI
814 RtlDebugCreateHeap(
815 _In_ ULONG Flags,
816 _In_opt_ PVOID BaseAddress,
817 _In_opt_ SIZE_T SizeToReserve,
818 _In_opt_ SIZE_T SizeToCommit,
819 _In_opt_ PVOID Lock,
820 _In_opt_ PRTL_HEAP_PARAMETERS Parameters
821 );
822
823 NTSYSAPI
824 HANDLE
825 NTAPI
826 RtlDestroyHeap(
827 _In_ _Post_invalid_ HANDLE Heap
828 );
829
830 NTSYSAPI
831 ULONG
832 NTAPI
833 RtlExtendHeap(
834 _In_ HANDLE Heap,
835 _In_ ULONG Flags,
836 _In_ PVOID P,
837 _In_ SIZE_T Size
838 );
839
840 _Success_(return != 0)
841 NTSYSAPI
842 BOOLEAN
843 NTAPI
844 RtlFreeHeap(
845 _In_ HANDLE HeapHandle,
846 _In_opt_ ULONG Flags,
847 _In_ _Post_invalid_ PVOID P
848 );
849
850 ULONG
851 NTAPI
852 RtlGetProcessHeaps(
853 _In_ ULONG HeapCount,
854 _Out_cap_(HeapCount) HANDLE *HeapArray
855 );
856
857 _Success_(return != 0)
858 BOOLEAN
859 NTAPI
860 RtlGetUserInfoHeap(
861 _In_ PVOID HeapHandle,
862 _In_ ULONG Flags,
863 _In_ PVOID BaseAddress,
864 _Inout_opt_ PVOID *UserValue,
865 _Out_opt_ PULONG UserFlags
866 );
867
868 NTSYSAPI
869 PVOID
870 NTAPI
871 RtlProtectHeap(
872 _In_ PVOID HeapHandle,
873 _In_ BOOLEAN Protect
874 );
875
876 NTSYSAPI
877 NTSTATUS
878 NTAPI
879 RtlQueryHeapInformation(
880 _In_ PVOID HeapHandle,
881 _In_ HEAP_INFORMATION_CLASS HeapInformationClass,
882 _Out_ PVOID HeapInformation,
883 _In_ SIZE_T HeapInformationLength,
884 _When_(HeapInformationClass==HeapCompatibilityInformation, _On_failure_(_Out_opt_))
885 _Out_opt_ PSIZE_T ReturnLength
886 );
887
888 _Ret_opt_z_
889 NTSYSAPI
890 PWSTR
891 NTAPI
892 RtlQueryTagHeap(
893 _In_ PVOID HeapHandle,
894 _In_ ULONG Flags,
895 _In_ USHORT TagIndex,
896 _In_ BOOLEAN ResetCounters,
897 _Out_ PRTL_HEAP_TAG_INFO HeapTagInfo
898 );
899
900 _Must_inspect_result_
901 _Ret_maybenull_
902 _Post_writable_byte_size_(Size)
903 NTSYSAPI
904 PVOID
905 NTAPI
906 RtlReAllocateHeap(
907 _In_ HANDLE Heap,
908 _In_opt_ ULONG Flags,
909 _In_ _Post_invalid_ PVOID Ptr,
910 _In_ SIZE_T Size
911 );
912
913 NTSYSAPI
914 NTSTATUS
915 NTAPI
916 RtlSetHeapInformation(
917 _In_ PVOID HeapHandle,
918 _In_ HEAP_INFORMATION_CLASS HeapInformationClass,
919 _When_(HeapInformationClass==HeapCompatibilityInformation,_In_) PVOID HeapInformation,
920 _In_ SIZE_T HeapInformationLength
921 );
922
923 NTSYSAPI
924 BOOLEAN
925 NTAPI
926 RtlLockHeap(
927 _In_ HANDLE Heap
928 );
929
930 _Must_inspect_result_
931 NTSYSAPI
932 NTSTATUS
933 NTAPI
934 RtlMultipleAllocateHeap (
935 _In_ HANDLE HeapHandle,
936 _In_ ULONG Flags,
937 _In_ SIZE_T Size,
938 _In_ ULONG Count,
939 _Out_cap_(Count) _Deref_post_bytecap_(Size) PVOID * Array
940 );
941
942 NTSYSAPI
943 NTSTATUS
944 NTAPI
945 RtlMultipleFreeHeap (
946 _In_ HANDLE HeapHandle,
947 _In_ ULONG Flags,
948 _In_ ULONG Count,
949 _In_count_(Count) /* _Deref_ _Post_invalid_ */ PVOID * Array
950 );
951
952 NTSYSAPI
953 NTSTATUS
954 NTAPI
955 RtlUsageHeap(
956 _In_ HANDLE Heap,
957 _In_ ULONG Flags,
958 _Out_ PRTL_HEAP_USAGE Usage
959 );
960
961 NTSYSAPI
962 BOOLEAN
963 NTAPI
964 RtlUnlockHeap(
965 _In_ HANDLE Heap
966 );
967
968 BOOLEAN
969 NTAPI
970 RtlSetUserValueHeap(
971 _In_ PVOID HeapHandle,
972 _In_ ULONG Flags,
973 _In_ PVOID BaseAddress,
974 _In_ PVOID UserValue
975 );
976
977 BOOLEAN
978 NTAPI
979 RtlSetUserFlagsHeap(
980 _In_ PVOID HeapHandle,
981 _In_ ULONG Flags,
982 _In_ PVOID BaseAddress,
983 _In_ ULONG UserFlagsReset,
984 _In_ ULONG UserFlagsSet
985 );
986
987 NTSYSAPI
988 BOOLEAN
989 NTAPI
990 RtlValidateHeap(
991 _In_ HANDLE Heap,
992 _In_ ULONG Flags,
993 _In_opt_ PVOID P
994 );
995
996 NTSYSAPI
997 NTSTATUS
998 NTAPI
999 RtlWalkHeap(
1000 _In_ HANDLE HeapHandle,
1001 _In_ PVOID HeapEntry
1002 );
1003
1004 #define RtlGetProcessHeap() (NtCurrentPeb()->ProcessHeap)
1005
1006 #endif // NTOS_MODE_USER
1007
1008 NTSYSAPI
1009 SIZE_T
1010 NTAPI
1011 RtlSizeHeap(
1012 _In_ PVOID HeapHandle,
1013 _In_ ULONG Flags,
1014 _In_ PVOID MemoryPointer
1015 );
1016
1017
1018 //
1019 // Security Functions
1020 //
1021 _IRQL_requires_max_(APC_LEVEL)
1022 NTSYSAPI
1023 NTSTATUS
1024 NTAPI
1025 RtlAbsoluteToSelfRelativeSD(
1026 _In_ PSECURITY_DESCRIPTOR AbsoluteSecurityDescriptor,
1027 _Out_writes_bytes_to_opt_(*BufferLength, *BufferLength) PSECURITY_DESCRIPTOR SelfRelativeSecurityDescriptor,
1028 _Inout_ PULONG BufferLength
1029 );
1030
1031 _IRQL_requires_max_(APC_LEVEL)
1032 NTSYSAPI
1033 NTSTATUS
1034 NTAPI
1035 RtlAddAccessAllowedAce(
1036 _Inout_ PACL Acl,
1037 _In_ ULONG Revision,
1038 _In_ ACCESS_MASK AccessMask,
1039 _In_ PSID Sid
1040 );
1041
1042 _IRQL_requires_max_(APC_LEVEL)
1043 NTSYSAPI
1044 NTSTATUS
1045 NTAPI
1046 RtlAddAccessAllowedAceEx(
1047 _Inout_ PACL pAcl,
1048 _In_ ULONG dwAceRevision,
1049 _In_ ULONG AceFlags,
1050 _In_ ACCESS_MASK AccessMask,
1051 _In_ PSID pSid
1052 );
1053
1054 NTSYSAPI
1055 NTSTATUS
1056 NTAPI
1057 RtlAddAccessAllowedObjectAce(
1058 _Inout_ PACL pAcl,
1059 _In_ ULONG dwAceRevision,
1060 _In_ ULONG AceFlags,
1061 _In_ ACCESS_MASK AccessMask,
1062 _In_opt_ GUID *ObjectTypeGuid,
1063 _In_opt_ GUID *InheritedObjectTypeGuid,
1064 _In_ PSID pSid
1065 );
1066
1067 NTSYSAPI
1068 NTSTATUS
1069 NTAPI
1070 RtlAddAccessDeniedAce(
1071 _Inout_ PACL Acl,
1072 _In_ ULONG Revision,
1073 _In_ ACCESS_MASK AccessMask,
1074 _In_ PSID Sid
1075 );
1076
1077 NTSYSAPI
1078 NTSTATUS
1079 NTAPI
1080 RtlAddAccessDeniedAceEx(
1081 _Inout_ PACL Acl,
1082 _In_ ULONG Revision,
1083 _In_ ULONG Flags,
1084 _In_ ACCESS_MASK AccessMask,
1085 _In_ PSID Sid
1086 );
1087
1088 NTSYSAPI
1089 NTSTATUS
1090 NTAPI
1091 RtlAddAccessDeniedObjectAce(
1092 _Inout_ PACL pAcl,
1093 _In_ ULONG dwAceRevision,
1094 _In_ ULONG AceFlags,
1095 _In_ ACCESS_MASK AccessMask,
1096 _In_opt_ GUID *ObjectTypeGuid,
1097 _In_opt_ GUID *InheritedObjectTypeGuid,
1098 _In_ PSID pSid
1099 );
1100
1101 NTSYSAPI
1102 NTSTATUS
1103 NTAPI
1104 RtlAddAce(
1105 _Inout_ PACL Acl,
1106 _In_ ULONG AceRevision,
1107 _In_ ULONG StartingAceIndex,
1108 _In_reads_bytes_(AceListLength) PVOID AceList,
1109 _In_ ULONG AceListLength
1110 );
1111
1112 NTSYSAPI
1113 NTSTATUS
1114 NTAPI
1115 RtlAddAuditAccessAce(
1116 _Inout_ PACL Acl,
1117 _In_ ULONG Revision,
1118 _In_ ACCESS_MASK AccessMask,
1119 _In_ PSID Sid,
1120 _In_ BOOLEAN Success,
1121 _In_ BOOLEAN Failure
1122 );
1123
1124 NTSYSAPI
1125 NTSTATUS
1126 NTAPI
1127 RtlAcquirePrivilege(
1128 _In_ PULONG Privilege,
1129 _In_ ULONG NumPriv,
1130 _In_ ULONG Flags,
1131 _Out_ PVOID *ReturnedState
1132 );
1133
1134 NTSYSAPI
1135 NTSTATUS
1136 NTAPI
1137 RtlAddAuditAccessAceEx(
1138 _Inout_ PACL Acl,
1139 _In_ ULONG Revision,
1140 _In_ ULONG Flags,
1141 _In_ ACCESS_MASK AccessMask,
1142 _In_ PSID Sid,
1143 _In_ BOOLEAN Success,
1144 _In_ BOOLEAN Failure
1145 );
1146
1147 NTSYSAPI
1148 NTSTATUS
1149 NTAPI
1150 RtlAddAuditAccessObjectAce(
1151 _Inout_ PACL Acl,
1152 _In_ ULONG Revision,
1153 _In_ ULONG Flags,
1154 _In_ ACCESS_MASK AccessMask,
1155 _In_opt_ GUID *ObjectTypeGuid,
1156 _In_opt_ GUID *InheritedObjectTypeGuid,
1157 _In_ PSID Sid,
1158 _In_ BOOLEAN Success,
1159 _In_ BOOLEAN Failure
1160 );
1161
1162 NTSYSAPI
1163 NTSTATUS
1164 NTAPI
1165 RtlAddMandatoryAce(
1166 _Inout_ PACL Acl,
1167 _In_ ULONG Revision,
1168 _In_ ULONG Flags,
1169 _In_ ULONG MandatoryFlags,
1170 _In_ UCHAR AceType,
1171 _In_ PSID LabelSid);
1172
1173 NTSYSAPI
1174 NTSTATUS
1175 NTAPI
1176 RtlAdjustPrivilege(
1177 _In_ ULONG Privilege,
1178 _In_ BOOLEAN NewValue,
1179 _In_ BOOLEAN ForThread,
1180 _Out_ PBOOLEAN OldValue
1181 );
1182
1183 _Must_inspect_result_
1184 NTSYSAPI
1185 NTSTATUS
1186 NTAPI
1187 RtlAllocateAndInitializeSid(
1188 _In_ PSID_IDENTIFIER_AUTHORITY IdentifierAuthority,
1189 _In_ UCHAR SubAuthorityCount,
1190 _In_ ULONG SubAuthority0,
1191 _In_ ULONG SubAuthority1,
1192 _In_ ULONG SubAuthority2,
1193 _In_ ULONG SubAuthority3,
1194 _In_ ULONG SubAuthority4,
1195 _In_ ULONG SubAuthority5,
1196 _In_ ULONG SubAuthority6,
1197 _In_ ULONG SubAuthority7,
1198 _Outptr_ PSID *Sid
1199 );
1200
1201 NTSYSAPI
1202 BOOLEAN
1203 NTAPI
1204 RtlAreAllAccessesGranted(
1205 ACCESS_MASK GrantedAccess,
1206 ACCESS_MASK DesiredAccess
1207 );
1208
1209 NTSYSAPI
1210 BOOLEAN
1211 NTAPI
1212 RtlAreAnyAccessesGranted(
1213 ACCESS_MASK GrantedAccess,
1214 ACCESS_MASK DesiredAccess
1215 );
1216
1217 _IRQL_requires_max_(APC_LEVEL)
1218 NTSYSAPI
1219 VOID
1220 NTAPI
1221 RtlCopyLuid (
1222 _Out_ PLUID DestinationLuid,
1223 _In_ PLUID SourceLuid
1224 );
1225
1226 NTSYSAPI
1227 VOID
1228 NTAPI
1229 RtlCopyLuidAndAttributesArray(
1230 ULONG Count,
1231 PLUID_AND_ATTRIBUTES Src,
1232 PLUID_AND_ATTRIBUTES Dest
1233 );
1234
1235 NTSYSAPI
1236 NTSTATUS
1237 NTAPI
1238 RtlCopySidAndAttributesArray(
1239 ULONG Count,
1240 PSID_AND_ATTRIBUTES Src,
1241 ULONG SidAreaSize,
1242 PSID_AND_ATTRIBUTES Dest,
1243 PVOID SidArea,
1244 PVOID* RemainingSidArea,
1245 PULONG RemainingSidAreaSize
1246 );
1247
1248 _IRQL_requires_max_(APC_LEVEL)
1249 NTSYSAPI
1250 NTSTATUS
1251 NTAPI
1252 RtlConvertSidToUnicodeString(
1253 _Inout_ PUNICODE_STRING UnicodeString,
1254 _In_ PSID Sid,
1255 _In_ BOOLEAN AllocateDestinationString
1256 );
1257
1258 _IRQL_requires_max_(APC_LEVEL)
1259 NTSYSAPI
1260 NTSTATUS
1261 NTAPI
1262 RtlCopySid(
1263 _In_ ULONG DestinationSidLength,
1264 _Out_writes_bytes_(DestinationSidLength) PSID DestinationSid,
1265 _In_ PSID SourceSid
1266 );
1267
1268 NTSYSAPI
1269 NTSTATUS
1270 NTAPI
1271 RtlCreateAcl(
1272 PACL Acl,
1273 ULONG AclSize,
1274 ULONG AclRevision
1275 );
1276
1277 NTSYSAPI
1278 NTSTATUS
1279 NTAPI
1280 RtlCreateSecurityDescriptor(
1281 _Out_ PSECURITY_DESCRIPTOR SecurityDescriptor,
1282 _In_ ULONG Revision
1283 );
1284
1285 NTSYSAPI
1286 NTSTATUS
1287 NTAPI
1288 RtlCreateSecurityDescriptorRelative(
1289 _Out_ PISECURITY_DESCRIPTOR_RELATIVE SecurityDescriptor,
1290 _In_ ULONG Revision
1291 );
1292
1293 NTSYSAPI
1294 NTSTATUS
1295 NTAPI
1296 RtlCopySecurityDescriptor(
1297 _In_ PSECURITY_DESCRIPTOR pSourceSecurityDescriptor,
1298 _Out_ PSECURITY_DESCRIPTOR *pDestinationSecurityDescriptor
1299 );
1300
1301 NTSYSAPI
1302 NTSTATUS
1303 NTAPI
1304 RtlDeleteAce(
1305 PACL Acl,
1306 ULONG AceIndex
1307 );
1308
1309 NTSYSAPI
1310 BOOLEAN
1311 NTAPI
1312 RtlEqualPrefixSid(
1313 PSID Sid1,
1314 PSID Sid2
1315 );
1316
1317 NTSYSAPI
1318 BOOLEAN
1319 NTAPI
1320 RtlEqualSid (
1321 _In_ PSID Sid1,
1322 _In_ PSID Sid2
1323 );
1324
1325 NTSYSAPI
1326 BOOLEAN
1327 NTAPI
1328 RtlFirstFreeAce(
1329 PACL Acl,
1330 PACE* Ace
1331 );
1332
1333 NTSYSAPI
1334 PVOID
1335 NTAPI
1336 RtlFreeSid(
1337 _In_ _Post_invalid_ PSID Sid
1338 );
1339
1340 NTSYSAPI
1341 NTSTATUS
1342 NTAPI
1343 RtlGetAce(
1344 PACL Acl,
1345 ULONG AceIndex,
1346 PVOID *Ace
1347 );
1348
1349 NTSYSAPI
1350 NTSTATUS
1351 NTAPI
1352 RtlGetControlSecurityDescriptor(
1353 _In_ PSECURITY_DESCRIPTOR SecurityDescriptor,
1354 _Out_ PSECURITY_DESCRIPTOR_CONTROL Control,
1355 _Out_ PULONG Revision
1356 );
1357
1358 NTSYSAPI
1359 NTSTATUS
1360 NTAPI
1361 RtlGetDaclSecurityDescriptor(
1362 _In_ PSECURITY_DESCRIPTOR SecurityDescriptor,
1363 _Out_ PBOOLEAN DaclPresent,
1364 _Out_ PACL *Dacl,
1365 _Out_ PBOOLEAN DaclDefaulted
1366 );
1367
1368 NTSYSAPI
1369 NTSTATUS
1370 NTAPI
1371 RtlGetSaclSecurityDescriptor(
1372 _In_ PSECURITY_DESCRIPTOR SecurityDescriptor,
1373 _Out_ PBOOLEAN SaclPresent,
1374 _Out_ PACL* Sacl,
1375 _Out_ PBOOLEAN SaclDefaulted
1376 );
1377
1378 NTSYSAPI
1379 NTSTATUS
1380 NTAPI
1381 RtlGetGroupSecurityDescriptor(
1382 _In_ PSECURITY_DESCRIPTOR SecurityDescriptor,
1383 _Out_ PSID *Group,
1384 _Out_ PBOOLEAN GroupDefaulted
1385 );
1386
1387 NTSYSAPI
1388 NTSTATUS
1389 NTAPI
1390 RtlGetOwnerSecurityDescriptor(
1391 _In_ PSECURITY_DESCRIPTOR SecurityDescriptor,
1392 _Out_ PSID *Owner,
1393 _Out_ PBOOLEAN OwnerDefaulted
1394 );
1395
1396 NTSYSAPI
1397 BOOLEAN
1398 NTAPI
1399 RtlGetSecurityDescriptorRMControl(
1400 _In_ PSECURITY_DESCRIPTOR SecurityDescriptor,
1401 _Out_ PUCHAR RMControl
1402 );
1403
1404 NTSYSAPI
1405 PSID_IDENTIFIER_AUTHORITY
1406 NTAPI
1407 RtlIdentifierAuthoritySid(PSID Sid);
1408
1409 NTSYSAPI
1410 NTSTATUS
1411 NTAPI
1412 RtlImpersonateSelf(IN SECURITY_IMPERSONATION_LEVEL ImpersonationLevel);
1413
1414 _IRQL_requires_max_(APC_LEVEL)
1415 NTSYSAPI
1416 NTSTATUS
1417 NTAPI
1418 RtlInitializeSid(
1419 _Out_ PSID Sid,
1420 _In_ PSID_IDENTIFIER_AUTHORITY IdentifierAuthority,
1421 _In_ UCHAR SubAuthorityCount
1422 );
1423
1424 NTSYSAPI
1425 ULONG
1426 NTAPI
1427 RtlLengthRequiredSid(IN ULONG SubAuthorityCount);
1428
1429 NTSYSAPI
1430 ULONG
1431 NTAPI
1432 RtlLengthSid(IN PSID Sid);
1433
1434 NTSYSAPI
1435 NTSTATUS
1436 NTAPI
1437 RtlMakeSelfRelativeSD(
1438 _In_ PSECURITY_DESCRIPTOR AbsoluteSD,
1439 _Out_ PSECURITY_DESCRIPTOR SelfRelativeSD,
1440 _Inout_ PULONG BufferLength);
1441
1442 NTSYSAPI
1443 VOID
1444 NTAPI
1445 RtlMapGenericMask(
1446 PACCESS_MASK AccessMask,
1447 PGENERIC_MAPPING GenericMapping
1448 );
1449
1450 #ifdef NTOS_MODE_USER
1451
1452 NTSYSAPI
1453 NTSTATUS
1454 NTAPI
1455 RtlQueryInformationAcl(
1456 PACL Acl,
1457 PVOID Information,
1458 ULONG InformationLength,
1459 ACL_INFORMATION_CLASS InformationClass
1460 );
1461
1462 #endif
1463
1464 NTSYSAPI
1465 VOID
1466 NTAPI
1467 RtlReleasePrivilege(
1468 _In_ PVOID ReturnedState
1469 );
1470
1471 _IRQL_requires_max_(APC_LEVEL)
1472 NTSYSAPI
1473 NTSTATUS
1474 NTAPI
1475 RtlSelfRelativeToAbsoluteSD(
1476 _In_ PSECURITY_DESCRIPTOR SelfRelativeSecurityDescriptor,
1477 _Out_writes_bytes_to_opt_(*AbsoluteSecurityDescriptorSize, *AbsoluteSecurityDescriptorSize) PSECURITY_DESCRIPTOR AbsoluteSecurityDescriptor,
1478 _Inout_ PULONG AbsoluteSecurityDescriptorSize,
1479 _Out_writes_bytes_to_opt_(*DaclSize, *DaclSize) PACL Dacl,
1480 _Inout_ PULONG DaclSize,
1481 _Out_writes_bytes_to_opt_(*SaclSize, *SaclSize) PACL Sacl,
1482 _Inout_ PULONG SaclSize,
1483 _Out_writes_bytes_to_opt_(*OwnerSize, *OwnerSize) PSID Owner,
1484 _Inout_ PULONG OwnerSize,
1485 _Out_writes_bytes_to_opt_(*PrimaryGroupSize, *PrimaryGroupSize) PSID PrimaryGroup,
1486 _Inout_ PULONG PrimaryGroupSize
1487 );
1488
1489 NTSYSAPI
1490 NTSTATUS
1491 NTAPI
1492 RtlSelfRelativeToAbsoluteSD2(
1493 _Inout_ PSECURITY_DESCRIPTOR SelfRelativeSD,
1494 _Out_ PULONG BufferSize
1495 );
1496
1497 NTSYSAPI
1498 NTSTATUS
1499 NTAPI
1500 RtlSetAttributesSecurityDescriptor(
1501 _Inout_ PSECURITY_DESCRIPTOR SecurityDescriptor,
1502 _In_ SECURITY_DESCRIPTOR_CONTROL Control,
1503 _Out_ PULONG Revision
1504 );
1505
1506 NTSYSAPI
1507 NTSTATUS
1508 NTAPI
1509 RtlSetControlSecurityDescriptor(
1510 _In_ PSECURITY_DESCRIPTOR SecurityDescriptor,
1511 _In_ SECURITY_DESCRIPTOR_CONTROL ControlBitsOfInterest,
1512 _In_ SECURITY_DESCRIPTOR_CONTROL ControlBitsToSet
1513 );
1514
1515 _IRQL_requires_max_(APC_LEVEL)
1516 NTSYSAPI
1517 NTSTATUS
1518 NTAPI
1519 RtlSetDaclSecurityDescriptor(
1520 _Inout_ PSECURITY_DESCRIPTOR SecurityDescriptor,
1521 _In_ BOOLEAN DaclPresent,
1522 _In_opt_ PACL Dacl,
1523 _In_opt_ BOOLEAN DaclDefaulted
1524 );
1525
1526 _IRQL_requires_max_(APC_LEVEL)
1527 NTSYSAPI
1528 NTSTATUS
1529 NTAPI
1530 RtlSetGroupSecurityDescriptor(
1531 _Inout_ PSECURITY_DESCRIPTOR SecurityDescriptor,
1532 _In_opt_ PSID Group,
1533 _In_opt_ BOOLEAN GroupDefaulted
1534 );
1535
1536 #ifdef NTOS_MODE_USER
1537
1538 NTSYSAPI
1539 NTSTATUS
1540 NTAPI
1541 RtlSetInformationAcl(
1542 PACL Acl,
1543 PVOID Information,
1544 ULONG InformationLength,
1545 ACL_INFORMATION_CLASS InformationClass
1546 );
1547
1548 #endif
1549
1550 _IRQL_requires_max_(APC_LEVEL)
1551 NTSYSAPI
1552 NTSTATUS
1553 NTAPI
1554 RtlSetOwnerSecurityDescriptor(
1555 _Inout_ PSECURITY_DESCRIPTOR SecurityDescriptor,
1556 _In_opt_ PSID Owner,
1557 _In_opt_ BOOLEAN OwnerDefaulted
1558 );
1559
1560 NTSYSAPI
1561 NTSTATUS
1562 NTAPI
1563 RtlSetSaclSecurityDescriptor(
1564 _Inout_ PSECURITY_DESCRIPTOR SecurityDescriptor,
1565 _In_ BOOLEAN SaclPresent,
1566 _In_ PACL Sacl,
1567 _In_ BOOLEAN SaclDefaulted
1568 );
1569
1570 NTSYSAPI
1571 VOID
1572 NTAPI
1573 RtlSetSecurityDescriptorRMControl(
1574 _Inout_ PSECURITY_DESCRIPTOR SecurityDescriptor,
1575 _In_ PUCHAR RMControl
1576 );
1577
1578 NTSYSAPI
1579 PUCHAR
1580 NTAPI
1581 RtlSubAuthorityCountSid(
1582 _In_ PSID Sid
1583 );
1584
1585 NTSYSAPI
1586 PULONG
1587 NTAPI
1588 RtlSubAuthoritySid(
1589 _In_ PSID Sid,
1590 _In_ ULONG SubAuthority
1591 );
1592
1593 _IRQL_requires_max_(APC_LEVEL)
1594 _Must_inspect_result_
1595 NTSYSAPI
1596 BOOLEAN
1597 NTAPI
1598 RtlValidRelativeSecurityDescriptor(
1599 _In_reads_bytes_(SecurityDescriptorLength) PSECURITY_DESCRIPTOR SecurityDescriptorInput,
1600 _In_ ULONG SecurityDescriptorLength,
1601 _In_ SECURITY_INFORMATION RequiredInformation
1602 );
1603
1604 NTSYSAPI
1605 BOOLEAN
1606 NTAPI
1607 RtlValidSecurityDescriptor(IN PSECURITY_DESCRIPTOR SecurityDescriptor);
1608
1609 NTSYSAPI
1610 BOOLEAN
1611 NTAPI
1612 RtlValidSid(IN PSID Sid);
1613
1614 NTSYSAPI
1615 BOOLEAN
1616 NTAPI
1617 RtlValidAcl(PACL Acl);
1618
1619 NTSYSAPI
1620 NTSTATUS
1621 NTAPI
1622 RtlDeleteSecurityObject(
1623 _In_ PSECURITY_DESCRIPTOR *ObjectDescriptor
1624 );
1625
1626 NTSYSAPI
1627 NTSTATUS
1628 NTAPI
1629 RtlNewSecurityObject(
1630 _In_ PSECURITY_DESCRIPTOR ParentDescriptor,
1631 _In_ PSECURITY_DESCRIPTOR CreatorDescriptor,
1632 _Out_ PSECURITY_DESCRIPTOR *NewDescriptor,
1633 _In_ BOOLEAN IsDirectoryObject,
1634 _In_ HANDLE Token,
1635 _In_ PGENERIC_MAPPING GenericMapping
1636 );
1637
1638 NTSYSAPI
1639 NTSTATUS
1640 NTAPI
1641 RtlQuerySecurityObject(
1642 _In_ PSECURITY_DESCRIPTOR ObjectDescriptor,
1643 _In_ SECURITY_INFORMATION SecurityInformation,
1644 _Out_ PSECURITY_DESCRIPTOR ResultantDescriptor,
1645 _In_ ULONG DescriptorLength,
1646 _Out_ PULONG ReturnLength
1647 );
1648
1649 NTSYSAPI
1650 NTSTATUS
1651 NTAPI
1652 RtlSetSecurityObject(
1653 _In_ SECURITY_INFORMATION SecurityInformation,
1654 _In_ PSECURITY_DESCRIPTOR ModificationDescriptor,
1655 _Out_ PSECURITY_DESCRIPTOR *ObjectsSecurityDescriptor,
1656 _In_ PGENERIC_MAPPING GenericMapping,
1657 _In_ HANDLE Token
1658 );
1659
1660 //
1661 // Single-Character Functions
1662 //
1663 NTSYSAPI
1664 NTSTATUS
1665 NTAPI
1666 RtlLargeIntegerToChar(
1667 _In_ PLARGE_INTEGER Value,
1668 _In_ ULONG Base,
1669 _In_ ULONG Length,
1670 _Out_ PCHAR String
1671 );
1672
1673 NTSYSAPI
1674 CHAR
1675 NTAPI
1676 RtlUpperChar(CHAR Source);
1677
1678 NTSYSAPI
1679 WCHAR
1680 NTAPI
1681 RtlUpcaseUnicodeChar(WCHAR Source);
1682
1683 NTSYSAPI
1684 WCHAR
1685 NTAPI
1686 RtlDowncaseUnicodeChar(IN WCHAR Source);
1687
1688 NTSYSAPI
1689 NTSTATUS
1690 NTAPI
1691 RtlIntegerToChar(
1692 _In_ ULONG Value,
1693 _In_ ULONG Base,
1694 _In_ ULONG Length,
1695 _Out_ PCHAR String
1696 );
1697
1698 NTSYSAPI
1699 NTSTATUS
1700 NTAPI
1701 RtlIntegerToUnicode(
1702 _In_ ULONG Value,
1703 _In_opt_ ULONG Base,
1704 _In_opt_ ULONG Length,
1705 _Inout_ LPWSTR String
1706 );
1707
1708 _IRQL_requires_max_(PASSIVE_LEVEL)
1709 _At_(String->MaximumLength, _Const_)
1710 NTSYSAPI
1711 NTSTATUS
1712 NTAPI
1713 RtlIntegerToUnicodeString(
1714 _In_ ULONG Value,
1715 _In_opt_ ULONG Base,
1716 _Inout_ PUNICODE_STRING String
1717 );
1718
1719 NTSYSAPI
1720 NTSTATUS
1721 NTAPI
1722 RtlCharToInteger(
1723 PCSZ String,
1724 ULONG Base,
1725 PULONG Value
1726 );
1727
1728 //
1729 // Byte Swap Functions
1730 //
1731 #ifdef NTOS_MODE_USER
1732
1733 #if (defined(_M_IX86) && (_MSC_FULL_VER > 13009037)) || \
1734 ((defined(_M_AMD64) || \
1735 defined(_M_IA64)) && (_MSC_FULL_VER > 13009175))
1736
1737 unsigned short __cdecl _byteswap_ushort(unsigned short);
1738 unsigned long __cdecl _byteswap_ulong (unsigned long);
1739 unsigned __int64 __cdecl _byteswap_uint64(unsigned __int64);
1740 #pragma intrinsic(_byteswap_ushort)
1741 #pragma intrinsic(_byteswap_ulong)
1742 #pragma intrinsic(_byteswap_uint64)
1743 #define RtlUshortByteSwap(_x) _byteswap_ushort((USHORT)(_x))
1744 #define RtlUlongByteSwap(_x) _byteswap_ulong((_x))
1745 #define RtlUlonglongByteSwap(_x) _byteswap_uint64((_x))
1746
1747 #elif defined (__GNUC__)
1748
1749 #define RtlUshortByteSwap(_x) _byteswap_ushort((USHORT)(_x))
1750 #define RtlUlongByteSwap(_x) _byteswap_ulong((_x))
1751 #define RtlUlonglongByteSwap(_x) _byteswap_uint64((_x))
1752
1753 #else
1754
1755 #if (NTDDI_VERSION >= NTDDI_WIN2K)
1756 NTSYSAPI
1757 USHORT
1758 FASTCALL
1759 RtlUshortByteSwap(IN USHORT Source);
1760
1761 NTSYSAPI
1762 ULONG
1763 FASTCALL
1764 RtlUlongByteSwap(IN ULONG Source);
1765
1766 NTSYSAPI
1767 ULONGLONG
1768 FASTCALL
1769 RtlUlonglongByteSwap(IN ULONGLONG Source);
1770 #endif
1771
1772 #endif
1773 #endif // NTOS_MODE_USER
1774
1775 //
1776 // Unicode->Ansi String Functions
1777 //
1778 NTSYSAPI
1779 ULONG
1780 NTAPI
1781 RtlxUnicodeStringToAnsiSize(IN PCUNICODE_STRING UnicodeString);
1782
1783 #ifdef NTOS_MODE_USER
1784
1785 #define RtlUnicodeStringToAnsiSize(STRING) ( \
1786 NLS_MB_CODE_PAGE_TAG ? \
1787 RtlxUnicodeStringToAnsiSize(STRING) : \
1788 ((STRING)->Length + sizeof(UNICODE_NULL)) / sizeof(WCHAR) \
1789 )
1790
1791 #endif
1792
1793 NTSYSAPI
1794 NTSTATUS
1795 NTAPI
1796 RtlUnicodeStringToAnsiString(
1797 PANSI_STRING DestinationString,
1798 PCUNICODE_STRING SourceString,
1799 BOOLEAN AllocateDestinationString
1800 );
1801
1802 //
1803 // Unicode->OEM String Functions
1804 //
1805 NTSYSAPI
1806 NTSTATUS
1807 NTAPI
1808 RtlUpcaseUnicodeStringToOemString(
1809 POEM_STRING DestinationString,
1810 PCUNICODE_STRING SourceString,
1811 BOOLEAN AllocateDestinationString
1812 );
1813
1814 _IRQL_requires_max_(PASSIVE_LEVEL)
1815 _Must_inspect_result_
1816 //_At_(DestinationString->Buffer, _Post_bytecount_(DestinationString->Length))
1817 NTSYSAPI
1818 NTSTATUS
1819 NTAPI
1820 RtlUpcaseUnicodeStringToCountedOemString(
1821 _When_(AllocateDestinationString, _Out_ _At_(DestinationString->Buffer, __drv_allocatesMem(Mem)))
1822 _When_(!AllocateDestinationString, _Inout_)
1823 POEM_STRING DestinationString,
1824 _In_ PCUNICODE_STRING SourceString,
1825 _In_ BOOLEAN AllocateDestinationString
1826 );
1827
1828 NTSYSAPI
1829 NTSTATUS
1830 NTAPI
1831 RtlUnicodeStringToOemString(
1832 POEM_STRING DestinationString,
1833 PCUNICODE_STRING SourceString,
1834 BOOLEAN AllocateDestinationString
1835 );
1836
1837 NTSYSAPI
1838 NTSTATUS
1839 NTAPI
1840 RtlUpcaseUnicodeToOemN(
1841 PCHAR OemString,
1842 ULONG OemSize,
1843 PULONG ResultSize,
1844 PCWCH UnicodeString,
1845 ULONG UnicodeSize
1846 );
1847
1848 NTSYSAPI
1849 ULONG
1850 NTAPI
1851 RtlxUnicodeStringToOemSize(IN PCUNICODE_STRING UnicodeString);
1852
1853 #ifdef NTOS_MODE_USER
1854
1855 #define RtlUnicodeStringToOemSize(STRING) ( \
1856 NLS_MB_OEM_CODE_PAGE_TAG ? \
1857 RtlxUnicodeStringToOemSize(STRING) : \
1858 ((STRING)->Length + sizeof(UNICODE_NULL)) / sizeof(WCHAR) \
1859 )
1860
1861 #define RtlUnicodeStringToCountedOemSize(STRING) ( \
1862 (ULONG)(RtlUnicodeStringToOemSize(STRING) - sizeof(ANSI_NULL)) \
1863 )
1864
1865 #endif
1866
1867 NTSYSAPI
1868 NTSTATUS
1869 NTAPI
1870 RtlUnicodeToOemN(
1871 PCHAR OemString,
1872 ULONG OemSize,
1873 PULONG ResultSize,
1874 PCWCH UnicodeString,
1875 ULONG UnicodeSize
1876 );
1877
1878 //
1879 // Unicode->MultiByte String Functions
1880 //
1881 NTSYSAPI
1882 NTSTATUS
1883 NTAPI
1884 RtlUnicodeToMultiByteN(
1885 PCHAR MbString,
1886 ULONG MbSize,
1887 PULONG ResultSize,
1888 PCWCH UnicodeString,
1889 ULONG UnicodeSize
1890 );
1891
1892 NTSYSAPI
1893 NTSTATUS
1894 NTAPI
1895 RtlUpcaseUnicodeToMultiByteN(
1896 PCHAR MbString,
1897 ULONG MbSize,
1898 PULONG ResultSize,
1899 PCWCH UnicodeString,
1900 ULONG UnicodeSize
1901 );
1902
1903 NTSYSAPI
1904 NTSTATUS
1905 NTAPI
1906 RtlUnicodeToMultiByteSize(
1907 PULONG MbSize,
1908 PCWCH UnicodeString,
1909 ULONG UnicodeSize
1910 );
1911
1912 NTSYSAPI
1913 ULONG
1914 NTAPI
1915 RtlxOemStringToUnicodeSize(IN PCOEM_STRING OemString);
1916
1917 //
1918 // OEM to Unicode Functions
1919 //
1920 NTSYSAPI
1921 NTSTATUS
1922 NTAPI
1923 RtlOemStringToUnicodeString(
1924 PUNICODE_STRING DestinationString,
1925 PCOEM_STRING SourceString,
1926 BOOLEAN AllocateDestinationString
1927 );
1928
1929 _IRQL_requires_max_(PASSIVE_LEVEL)
1930 NTSYSAPI
1931 NTSTATUS
1932 NTAPI
1933 RtlOemToUnicodeN(
1934 _Out_writes_bytes_to_(MaxBytesInUnicodeString, *BytesInUnicodeString) PWCH UnicodeString,
1935 _In_ ULONG MaxBytesInUnicodeString,
1936 _Out_opt_ PULONG BytesInUnicodeString,
1937 _In_reads_bytes_(BytesInOemString) PCCH OemString,
1938 _In_ ULONG BytesInOemString
1939 );
1940
1941 #ifdef NTOS_MODE_USER
1942
1943 #define RtlOemStringToUnicodeSize(STRING) ( \
1944 NLS_MB_OEM_CODE_PAGE_TAG ? \
1945 RtlxOemStringToUnicodeSize(STRING) : \
1946 ((STRING)->Length + sizeof(ANSI_NULL)) * sizeof(WCHAR) \
1947 )
1948
1949 #define RtlOemStringToCountedUnicodeSize(STRING) ( \
1950 (ULONG)(RtlOemStringToUnicodeSize(STRING) - sizeof(UNICODE_NULL)) \
1951 )
1952
1953 #endif
1954
1955 //
1956 // Ansi->Unicode String Functions
1957 //
1958 NTSYSAPI
1959 ULONG
1960 NTAPI
1961 RtlxAnsiStringToUnicodeSize(
1962 PCANSI_STRING AnsiString
1963 );
1964
1965 NTSYSAPI
1966 NTSTATUS
1967 NTAPI
1968 RtlAnsiStringToUnicodeString(
1969 PUNICODE_STRING DestinationString,
1970 PCANSI_STRING SourceString,
1971 BOOLEAN AllocateDestinationString
1972 );
1973
1974 #ifdef NTOS_MODE_USER
1975
1976 #define RtlAnsiStringToUnicodeSize(STRING) ( \
1977 NLS_MB_CODE_PAGE_TAG ? \
1978 RtlxAnsiStringToUnicodeSize(STRING) : \
1979 ((STRING)->Length + sizeof(ANSI_NULL)) * sizeof(WCHAR) \
1980 )
1981
1982 #endif
1983
1984 NTSYSAPI
1985 BOOLEAN
1986 NTAPI
1987 RtlCreateUnicodeStringFromAsciiz(
1988 _Out_ PUNICODE_STRING Destination,
1989 _In_ PCSZ Source
1990 );
1991
1992 //
1993 // Unicode String Functions
1994 //
1995 NTSYSAPI
1996 NTSTATUS
1997 NTAPI
1998 RtlAppendUnicodeToString(
1999 PUNICODE_STRING Destination,
2000 PCWSTR Source
2001 );
2002
2003 NTSYSAPI
2004 NTSTATUS
2005 NTAPI
2006 RtlAppendUnicodeStringToString(
2007 PUNICODE_STRING Destination,
2008 PCUNICODE_STRING Source
2009 );
2010
2011 NTSYSAPI
2012 LONG
2013 NTAPI
2014 RtlCompareUnicodeString(
2015 PCUNICODE_STRING String1,
2016 PCUNICODE_STRING String2,
2017 BOOLEAN CaseInsensitive
2018 );
2019
2020 NTSYSAPI
2021 VOID
2022 NTAPI
2023 RtlCopyUnicodeString(
2024 PUNICODE_STRING DestinationString,
2025 PCUNICODE_STRING SourceString
2026 );
2027
2028 NTSYSAPI
2029 BOOLEAN
2030 NTAPI
2031 RtlCreateUnicodeString(
2032 PUNICODE_STRING DestinationString,
2033 PCWSTR SourceString
2034 );
2035
2036 #ifdef NTOS_MODE_USER
2037
2038 NTSYSAPI
2039 NTSTATUS
2040 NTAPI
2041 RtlDowncaseUnicodeString(
2042 _Inout_ PUNICODE_STRING UniDest,
2043 _In_ PCUNICODE_STRING UniSource,
2044 _In_ BOOLEAN AllocateDestinationString
2045 );
2046
2047 NTSYSAPI
2048 NTSTATUS
2049 NTAPI
2050 RtlDuplicateUnicodeString(
2051 _In_ ULONG Flags,
2052 _In_ PCUNICODE_STRING SourceString,
2053 _Out_ PUNICODE_STRING DestinationString
2054 );
2055
2056 //
2057 // Memory Functions
2058 //
2059 NTSYSAPI
2060 VOID
2061 NTAPI
2062 RtlFillMemoryUlong(
2063 _In_ PVOID Destination,
2064 _In_ SIZE_T Length,
2065 _In_ ULONG Fill
2066 );
2067
2068 NTSYSAPI
2069 VOID
2070 NTAPI
2071 RtlFillMemoryUlonglong(
2072 _Out_ PVOID Destination,
2073 _In_ SIZE_T Length,
2074 _In_ ULONGLONG Pattern
2075 );
2076
2077
2078 NTSYSAPI
2079 SIZE_T
2080 NTAPI
2081 RtlCompareMemoryUlong(
2082 _In_ PVOID Source,
2083 _In_ SIZE_T Length,
2084 _In_ ULONG Pattern
2085 );
2086
2087 #define RtlEqualMemory(Destination, Source, Length) \
2088 (!memcmp(Destination, Source, Length))
2089
2090 #define RtlCopyBytes RtlCopyMemory
2091 #define RtlFillBytes RtlFillMemory
2092 #define RtlZeroBytes RtlZeroMemory
2093
2094 #endif
2095
2096 NTSYSAPI
2097 BOOLEAN
2098 NTAPI
2099 RtlEqualUnicodeString(
2100 PCUNICODE_STRING String1,
2101 PCUNICODE_STRING String2,
2102 BOOLEAN CaseInsensitive
2103 );
2104
2105 NTSYSAPI
2106 NTSTATUS
2107 NTAPI
2108 RtlFindCharInUnicodeString(
2109 _In_ ULONG Flags,
2110 _In_ PCUNICODE_STRING SearchString,
2111 _In_ PCUNICODE_STRING MatchString,
2112 _Out_ PUSHORT Position
2113 );
2114
2115 NTSYSAPI
2116 VOID
2117 NTAPI
2118 RtlFreeUnicodeString(IN PUNICODE_STRING UnicodeString);
2119
2120 NTSYSAPI
2121 NTSTATUS
2122 NTAPI
2123 RtlHashUnicodeString(
2124 _In_ CONST UNICODE_STRING *String,
2125 _In_ BOOLEAN CaseInSensitive,
2126 _In_ ULONG HashAlgorithm,
2127 _Out_ PULONG HashValue
2128 );
2129
2130 _IRQL_requires_max_(DISPATCH_LEVEL)
2131 _At_(DestinationString->Buffer, _Post_equal_to_(SourceString))
2132 _When_(SourceString != NULL,
2133 _At_(DestinationString->Length, _Post_equal_to_(_String_length_(SourceString) * sizeof(WCHAR)))
2134 _At_(DestinationString->MaximumLength, _Post_equal_to_(DestinationString->Length + sizeof(WCHAR))))
2135 _When_(SourceString == NULL,
2136 _At_(DestinationString->Length, _Post_equal_to_(0))
2137 _At_(DestinationString->MaximumLength, _Post_equal_to_(0)))
2138 NTSYSAPI
2139 VOID
2140 NTAPI
2141 RtlInitUnicodeString(
2142 _Out_ PUNICODE_STRING DestinationString,
2143 _In_opt_z_ __drv_aliasesMem PCWSTR SourceString
2144 );
2145
2146 _IRQL_requires_max_(DISPATCH_LEVEL)
2147 NTSYSAPI
2148 NTSTATUS
2149 NTAPI
2150 RtlInitUnicodeStringEx(
2151 _Out_ PUNICODE_STRING DestinationString,
2152 _In_opt_z_ __drv_aliasesMem PCWSTR SourceString
2153 );
2154
2155 NTSYSAPI
2156 BOOLEAN
2157 NTAPI
2158 RtlIsTextUnicode(
2159 PVOID Buffer,
2160 INT Length,
2161 INT *Flags
2162 );
2163
2164 NTSYSAPI
2165 BOOLEAN
2166 NTAPI
2167 RtlPrefixString(
2168 PSTRING String1,
2169 PSTRING String2,
2170 BOOLEAN CaseInsensitive
2171 );
2172
2173 NTSYSAPI
2174 BOOLEAN
2175 NTAPI
2176 RtlPrefixUnicodeString(
2177 PCUNICODE_STRING String1,
2178 PCUNICODE_STRING String2,
2179 BOOLEAN CaseInsensitive
2180 );
2181
2182 _IRQL_requires_max_(PASSIVE_LEVEL)
2183 _When_(AllocateDestinationString, _Must_inspect_result_)
2184 NTSYSAPI
2185 NTSTATUS
2186 NTAPI
2187 RtlUpcaseUnicodeString(
2188 _When_(AllocateDestinationString, _Out_ _At_(DestinationString->Buffer, __drv_allocatesMem(Mem)))
2189 _When_(!AllocateDestinationString, _Inout_)
2190 PUNICODE_STRING DestinationString,
2191 _In_ PCUNICODE_STRING SourceString,
2192 _In_ BOOLEAN AllocateDestinationString
2193 );
2194
2195 _IRQL_requires_max_(PASSIVE_LEVEL)
2196 NTSYSAPI
2197 NTSTATUS
2198 NTAPI
2199 RtlUnicodeStringToInteger(
2200 _In_ PCUNICODE_STRING String,
2201 _In_opt_ ULONG Base,
2202 _Out_ PULONG Value
2203 );
2204
2205 NTSYSAPI
2206 NTSTATUS
2207 NTAPI
2208 RtlValidateUnicodeString(
2209 _In_ ULONG Flags,
2210 _In_ PCUNICODE_STRING String
2211 );
2212
2213 //
2214 // Ansi String Functions
2215 //
2216 _IRQL_requires_max_(PASSIVE_LEVEL)
2217 NTSYSAPI
2218 VOID
2219 NTAPI
2220 RtlFreeAnsiString(
2221 _Inout_ _At_(AnsiString->Buffer, __drv_freesMem(Mem))
2222 PANSI_STRING AnsiString
2223 );
2224
2225 _IRQL_requires_max_(DISPATCH_LEVEL)
2226 NTSYSAPI
2227 VOID
2228 NTAPI
2229 RtlInitAnsiString(
2230 _Out_ PANSI_STRING DestinationString,
2231 _In_opt_z_ __drv_aliasesMem PCSZ SourceString
2232 );
2233
2234 _IRQL_requires_max_(DISPATCH_LEVEL)
2235 NTSYSAPI
2236 NTSTATUS
2237 NTAPI
2238 RtlInitAnsiStringEx(
2239 _Out_ PANSI_STRING DestinationString,
2240 _In_opt_z_ __drv_aliasesMem PCSZ SourceString
2241 );
2242
2243 //
2244 // OEM String Functions
2245 //
2246 _IRQL_requires_max_(PASSIVE_LEVEL)
2247 NTSYSAPI
2248 VOID
2249 NTAPI
2250 RtlFreeOemString(
2251 _Inout_ _At_(OemString->Buffer, __drv_freesMem(Mem))
2252 POEM_STRING OemString
2253 );
2254
2255 //
2256 // MultiByte->Unicode String Functions
2257 //
2258 _IRQL_requires_max_(PASSIVE_LEVEL)
2259 NTSYSAPI
2260 NTSTATUS
2261 NTAPI
2262 RtlMultiByteToUnicodeN(
2263 _Out_writes_bytes_to_(MaxBytesInUnicodeString, *BytesInUnicodeString) PWCH UnicodeString,
2264 _In_ ULONG MaxBytesInUnicodeString,
2265 _Out_opt_ PULONG BytesInUnicodeString,
2266 _In_reads_bytes_(BytesInMultiByteString) const CHAR *MultiByteString,
2267 _In_ ULONG BytesInMultiByteString
2268 );
2269
2270 _IRQL_requires_max_(PASSIVE_LEVEL)
2271 NTSYSAPI
2272 NTSTATUS
2273 NTAPI
2274 RtlMultiByteToUnicodeSize(
2275 _Out_ PULONG BytesInUnicodeString,
2276 _In_reads_bytes_(BytesInMultiByteString) const CHAR *MultiByteString,
2277 _In_ ULONG BytesInMultiByteString
2278 );
2279
2280 //
2281 // Atom Functions
2282 //
2283 NTSYSAPI
2284 NTSTATUS
2285 NTAPI
2286 RtlAddAtomToAtomTable(
2287 _In_ PRTL_ATOM_TABLE AtomTable,
2288 _In_ PWSTR AtomName,
2289 _Out_ PRTL_ATOM Atom
2290 );
2291
2292 NTSYSAPI
2293 NTSTATUS
2294 NTAPI
2295 RtlCreateAtomTable(
2296 _In_ ULONG TableSize,
2297 _Inout_ PRTL_ATOM_TABLE *AtomTable
2298 );
2299
2300 NTSYSAPI
2301 NTSTATUS
2302 NTAPI
2303 RtlDeleteAtomFromAtomTable(
2304 _In_ PRTL_ATOM_TABLE AtomTable,
2305 _In_ RTL_ATOM Atom
2306 );
2307
2308 NTSYSAPI
2309 NTSTATUS
2310 NTAPI
2311 RtlDestroyAtomTable(IN PRTL_ATOM_TABLE AtomTable);
2312
2313 NTSYSAPI
2314 NTSTATUS
2315 NTAPI
2316 RtlQueryAtomInAtomTable(
2317 _In_ PRTL_ATOM_TABLE AtomTable,
2318 _In_ RTL_ATOM Atom,
2319 _Out_opt_ PULONG RefCount,
2320 _Out_opt_ PULONG PinCount,
2321 _Out_opt_z_bytecap_(*NameLength) PWSTR AtomName,
2322 _Inout_opt_ PULONG NameLength
2323 );
2324
2325 NTSYSAPI
2326 NTSTATUS
2327 NTAPI
2328 RtlPinAtomInAtomTable(
2329 _In_ PRTL_ATOM_TABLE AtomTable,
2330 _In_ RTL_ATOM Atom
2331 );
2332
2333 NTSYSAPI
2334 NTSTATUS
2335 NTAPI
2336 RtlLookupAtomInAtomTable(
2337 _In_ PRTL_ATOM_TABLE AtomTable,
2338 _In_ PWSTR AtomName,
2339 _Out_ PRTL_ATOM Atom
2340 );
2341
2342 //
2343 // Process Management Functions
2344 //
2345 NTSYSAPI
2346 PPEB
2347 NTAPI
2348 RtlGetCurrentPeb(
2349 VOID
2350 );
2351
2352 NTSYSAPI
2353 VOID
2354 NTAPI
2355 RtlAcquirePebLock(VOID);
2356
2357 NTSYSAPI
2358 NTSTATUS
2359 NTAPI
2360 RtlCreateProcessParameters (
2361 _Out_ PRTL_USER_PROCESS_PARAMETERS *ProcessParameters,
2362 _In_ PUNICODE_STRING ImagePathName,
2363 _In_opt_ PUNICODE_STRING DllPath,
2364 _In_opt_ PUNICODE_STRING CurrentDirectory,
2365 _In_opt_ PUNICODE_STRING CommandLine,
2366 _In_opt_ PWSTR Environment,
2367 _In_opt_ PUNICODE_STRING WindowTitle,
2368 _In_opt_ PUNICODE_STRING DesktopInfo,
2369 _In_opt_ PUNICODE_STRING ShellInfo,
2370 _In_opt_ PUNICODE_STRING RuntimeInfo
2371 );
2372
2373 NTSYSAPI
2374 NTSTATUS
2375 NTAPI
2376 RtlCreateUserProcess(
2377 _In_ PUNICODE_STRING ImageFileName,
2378 _In_ ULONG Attributes,
2379 _In_ PRTL_USER_PROCESS_PARAMETERS ProcessParameters,
2380 _In_opt_ PSECURITY_DESCRIPTOR ProcessSecutityDescriptor,
2381 _In_opt_ PSECURITY_DESCRIPTOR ThreadSecurityDescriptor,
2382 _In_opt_ HANDLE ParentProcess,
2383 _In_ BOOLEAN CurrentDirectory,
2384 _In_opt_ HANDLE DebugPort,
2385 _In_opt_ HANDLE ExceptionPort,
2386 _Out_ PRTL_USER_PROCESS_INFORMATION ProcessInfo
2387 );
2388
2389 #if (NTDDI_VERSION >= NTDDI_WIN7)
2390 NTSYSAPI
2391 NTSTATUS
2392 NTAPI
2393 RtlCreateUserThread(
2394 _In_ PVOID ThreadContext,
2395 _Out_ HANDLE *OutThreadHandle,
2396 _Reserved_ PVOID Reserved1,
2397 _Reserved_ PVOID Reserved2,
2398 _Reserved_ PVOID Reserved3,
2399 _Reserved_ PVOID Reserved4,
2400 _Reserved_ PVOID Reserved5,
2401 _Reserved_ PVOID Reserved6,
2402 _Reserved_ PVOID Reserved7,
2403 _Reserved_ PVOID Reserved8
2404 );
2405 #else
2406 NTSYSAPI
2407 NTSTATUS
2408 NTAPI
2409 RtlCreateUserThread(
2410 _In_ HANDLE ProcessHandle,
2411 _In_opt_ PSECURITY_DESCRIPTOR SecurityDescriptor,
2412 _In_ BOOLEAN CreateSuspended,
2413 _In_ ULONG StackZeroBits,
2414 _In_ SIZE_T StackReserve,
2415 _In_ SIZE_T StackCommit,
2416 _In_ PTHREAD_START_ROUTINE StartAddress,
2417 _In_ PVOID Parameter,
2418 _Out_opt_ PHANDLE ThreadHandle,
2419 _Out_opt_ PCLIENT_ID ClientId
2420 );
2421 #endif
2422
2423 NTSYSAPI
2424 PRTL_USER_PROCESS_PARAMETERS
2425 NTAPI
2426 RtlDeNormalizeProcessParams(
2427 _In_ PRTL_USER_PROCESS_PARAMETERS ProcessParameters);
2428
2429 NTSYSAPI
2430 NTSTATUS
2431 NTAPI
2432 RtlDestroyProcessParameters(
2433 _In_ PRTL_USER_PROCESS_PARAMETERS ProcessParameters);
2434
2435 NTSYSAPI
2436 VOID
2437 NTAPI
2438 RtlExitUserThread(
2439 _In_ NTSTATUS Status);
2440
2441 NTSYSAPI
2442 VOID
2443 NTAPI
2444 RtlInitializeContext(
2445 _In_ HANDLE ProcessHandle,
2446 _Out_ PCONTEXT ThreadContext,
2447 _In_opt_ PVOID ThreadStartParam,
2448 _In_ PTHREAD_START_ROUTINE ThreadStartAddress,
2449 _In_ PINITIAL_TEB InitialTeb
2450 );
2451
2452 #ifdef _M_AMD64
2453 typedef struct _WOW64_CONTEXT *PWOW64_CONTEXT;
2454
2455 NTSYSAPI
2456 NTSTATUS
2457 NTAPI
2458 RtlWow64GetThreadContext(
2459 _In_ HANDLE ThreadHandle,
2460 _Inout_ PWOW64_CONTEXT ThreadContext
2461 );
2462
2463
2464 NTSYSAPI
2465 NTSTATUS
2466 NTAPI
2467 RtlWow64SetThreadContext(
2468 _In_ HANDLE ThreadHandle,
2469 _In_ PWOW64_CONTEXT ThreadContext
2470 );
2471 #endif
2472
2473 NTSYSAPI
2474 BOOLEAN
2475 NTAPI
2476 RtlIsThreadWithinLoaderCallout(VOID);
2477
2478 NTSYSAPI
2479 PRTL_USER_PROCESS_PARAMETERS
2480 NTAPI
2481 RtlNormalizeProcessParams(
2482 _In_ PRTL_USER_PROCESS_PARAMETERS ProcessParameters);
2483
2484 NTSYSAPI
2485 VOID
2486 NTAPI
2487 RtlReleasePebLock(VOID);
2488
2489 NTSYSAPI
2490 NTSTATUS
2491 NTAPI
2492 RtlRemoteCall(
2493 _In_ HANDLE Process,
2494 _In_ HANDLE Thread,
2495 _In_ PVOID CallSite,
2496 _In_ ULONG ArgumentCount,
2497 _In_ PULONG Arguments,
2498 _In_ BOOLEAN PassContext,
2499 _In_ BOOLEAN AlreadySuspended
2500 );
2501
2502 NTSYSAPI
2503 NTSTATUS
2504 NTAPI
2505 RtlSetProcessIsCritical(
2506 _In_ BOOLEAN NewValue,
2507 _Out_opt_ PBOOLEAN OldValue,
2508 _In_ BOOLEAN NeedBreaks
2509 );
2510
2511 NTSYSAPI
2512 NTSTATUS
2513 NTAPI
2514 RtlSetThreadIsCritical(
2515 _In_ BOOLEAN NewValue,
2516 _Out_opt_ PBOOLEAN OldValue,
2517 _In_ BOOLEAN NeedBreaks
2518 );
2519
2520 NTSYSAPI
2521 ULONG
2522 NTAPI
2523 RtlGetCurrentProcessorNumber(
2524 VOID
2525 );
2526
2527 #define NtCurrentPeb() (NtCurrentTeb()->ProcessEnvironmentBlock)
2528
2529 //
2530 // Thread Pool Functions
2531 //
2532 //
2533 NTSTATUS
2534 NTAPI
2535 RtlSetThreadPoolStartFunc(
2536 _In_ PRTL_START_POOL_THREAD StartPoolThread,
2537 _In_ PRTL_EXIT_POOL_THREAD ExitPoolThread
2538 );
2539
2540 NTSYSAPI
2541 NTSTATUS
2542 NTAPI
2543 RtlDeregisterWaitEx(
2544 _In_ HANDLE hWaitHandle,
2545 _In_opt_ HANDLE hCompletionEvent
2546 );
2547
2548 NTSYSAPI
2549 NTSTATUS
2550 NTAPI
2551 RtlDeregisterWait(
2552 _In_ HANDLE hWaitHandle
2553 );
2554
2555 NTSYSAPI
2556 NTSTATUS
2557 NTAPI
2558 RtlQueueWorkItem(
2559 _In_ WORKERCALLBACKFUNC Function,
2560 _In_opt_ PVOID Context,
2561 _In_ ULONG Flags
2562 );
2563
2564 NTSYSAPI
2565 NTSTATUS
2566 NTAPI
2567 RtlSetIoCompletionCallback(
2568 _In_ HANDLE FileHandle,
2569 _In_ PIO_APC_ROUTINE Callback,
2570 _In_ ULONG Flags
2571 );
2572
2573 NTSYSAPI
2574 NTSTATUS
2575 NTAPI
2576 RtlRegisterWait(
2577 _In_ PHANDLE phNewWaitObject,
2578 _In_ HANDLE hObject,
2579 _In_ WAITORTIMERCALLBACKFUNC Callback,
2580 _In_ PVOID pvContext,
2581 _In_ ULONG ulMilliseconds,
2582 _In_ ULONG ulFlags
2583 );
2584
2585 //
2586 // Environment/Path Functions
2587 //
2588 NTSYSAPI
2589 NTSTATUS
2590 NTAPI
2591 RtlCreateEnvironment(
2592 _In_ BOOLEAN Inherit,
2593 _Out_ PWSTR *Environment
2594 );
2595
2596 NTSYSAPI
2597 NTSTATUS
2598 NTAPI
2599 RtlComputePrivatizedDllName_U(
2600 _In_ PUNICODE_STRING DllName,
2601 _Out_ PUNICODE_STRING RealName,
2602 _Out_ PUNICODE_STRING LocalName
2603 );
2604
2605 NTSYSAPI
2606 VOID
2607 NTAPI
2608 RtlDestroyEnvironment(
2609 _In_ PWSTR Environment
2610 );
2611
2612 NTSYSAPI
2613 BOOLEAN
2614 NTAPI
2615 RtlDoesFileExists_U(
2616 _In_ PCWSTR FileName
2617 );
2618
2619 NTSYSAPI
2620 RTL_PATH_TYPE
2621 NTAPI
2622 RtlDetermineDosPathNameType_U(
2623 _In_ PCWSTR Path
2624 );
2625
2626 NTSYSAPI
2627 ULONG
2628 NTAPI
2629 RtlDosSearchPath_U(
2630 _In_ PCWSTR Path,
2631 _In_ PCWSTR FileName,
2632 _In_ PCWSTR Extension,
2633 _In_ ULONG BufferSize,
2634 _Out_ PWSTR Buffer,
2635 _Out_ PWSTR *PartName
2636 );
2637
2638 NTSYSAPI
2639 NTSTATUS
2640 NTAPI
2641 RtlDosSearchPath_Ustr(
2642 _In_ ULONG Flags,
2643 _In_ PUNICODE_STRING PathString,
2644 _In_ PUNICODE_STRING FileNameString,
2645 _In_ PUNICODE_STRING ExtensionString,
2646 _In_ PUNICODE_STRING CallerBuffer,
2647 _Inout_opt_ PUNICODE_STRING DynamicString,
2648 _Out_opt_ PUNICODE_STRING* FullNameOut,
2649 _Out_opt_ PSIZE_T FilePartSize,
2650 _Out_opt_ PSIZE_T LengthNeeded
2651 );
2652
2653 NTSYSAPI
2654 BOOLEAN
2655 NTAPI
2656 RtlDosPathNameToNtPathName_U(
2657 _In_opt_z_ PCWSTR DosPathName,
2658 _Out_ PUNICODE_STRING NtPathName,
2659 _Out_opt_ PCWSTR *NtFileNamePart,
2660 _Out_opt_ PRTL_RELATIVE_NAME_U DirectoryInfo
2661 );
2662
2663 NTSYSAPI
2664 BOOLEAN
2665 NTAPI
2666 RtlDosPathNameToRelativeNtPathName_U(
2667 _In_ PCWSTR DosName,
2668 _Out_ PUNICODE_STRING NtName,
2669 _Out_ PCWSTR *PartName,
2670 _Out_ PRTL_RELATIVE_NAME_U RelativeName
2671 );
2672
2673 _At_(Destination->Buffer, _Out_bytecap_(Destination->MaximumLength))
2674 NTSYSAPI
2675 NTSTATUS
2676 NTAPI
2677 RtlExpandEnvironmentStrings_U(
2678 _In_z_ PWSTR Environment,
2679 _In_ PUNICODE_STRING Source,
2680 _Inout_ PUNICODE_STRING Destination,
2681 _Out_ PULONG Length
2682 );
2683
2684 NTSYSAPI
2685 ULONG
2686 NTAPI
2687 RtlGetCurrentDirectory_U(
2688 _In_ ULONG MaximumLength,
2689 _Out_bytecap_(MaximumLength) PWSTR Buffer
2690 );
2691
2692 NTSYSAPI
2693 ULONG
2694 NTAPI
2695 RtlGetFullPathName_U(
2696 _In_ PCWSTR FileName,
2697 _In_ ULONG Size,
2698 _Out_z_bytecap_(Size) PWSTR Buffer,
2699 _Out_opt_ PWSTR *ShortName
2700 );
2701
2702 #if (NTDDI_VERSION >= NTDDI_WIN7)
2703 NTSYSAPI
2704 NTSTATUS
2705 NTAPI
2706 RtlGetFullPathName_UEx(
2707 _In_ PWSTR FileName,
2708 _In_ ULONG BufferLength,
2709 _Out_ PWSTR Buffer,
2710 _Out_opt_ PWSTR *FilePart,
2711 _Out_opt_ RTL_PATH_TYPE *InputPathType
2712 );
2713 #endif
2714
2715 NTSTATUS
2716 NTAPI
2717 RtlGetFullPathName_UstrEx(
2718 _In_ PUNICODE_STRING FileName,
2719 _In_opt_ PUNICODE_STRING StaticString,
2720 _In_opt_ PUNICODE_STRING DynamicString,
2721 _Out_opt_ PUNICODE_STRING *StringUsed,
2722 _Out_opt_ PSIZE_T FilePartSize,
2723 _Out_opt_ PBOOLEAN NameInvalid,
2724 _Out_ RTL_PATH_TYPE* PathType,
2725 _Out_opt_ PSIZE_T LengthNeeded
2726 );
2727
2728 NTSYSAPI
2729 NTSTATUS
2730 NTAPI
2731 RtlGetLengthWithoutTrailingPathSeparators(
2732 _In_ ULONG Flags,
2733 _In_ PCUNICODE_STRING PathString,
2734 _Out_ PULONG Length
2735 );
2736
2737 NTSYSAPI
2738 ULONG
2739 NTAPI
2740 RtlGetLongestNtPathLength(
2741 VOID
2742 );
2743
2744 NTSYSAPI
2745 ULONG
2746 NTAPI
2747 RtlIsDosDeviceName_U(
2748 _In_ PCWSTR Name
2749 );
2750
2751 NTSYSAPI
2752 ULONG
2753 NTAPI
2754 RtlIsDosDeviceName_Ustr(
2755 _In_ PCUNICODE_STRING Name
2756 );
2757
2758 _IRQL_requires_max_(PASSIVE_LEVEL)
2759 _Must_inspect_result_
2760 NTSYSAPI
2761 BOOLEAN
2762 NTAPI
2763 RtlIsNameLegalDOS8Dot3(
2764 _In_ PCUNICODE_STRING Name,
2765 _Inout_opt_ POEM_STRING OemName,
2766 _Out_opt_ PBOOLEAN NameContainsSpaces
2767 );
2768
2769 NTSYSAPI
2770 NTSTATUS
2771 NTAPI
2772 RtlQueryEnvironmentVariable_U(
2773 _In_opt_ PWSTR Environment,
2774 _In_ PUNICODE_STRING Name,
2775 _Out_ PUNICODE_STRING Value
2776 );
2777
2778 VOID
2779 NTAPI
2780 RtlReleaseRelativeName(
2781 _In_ PRTL_RELATIVE_NAME_U RelativeName
2782 );
2783
2784 NTSYSAPI
2785 NTSTATUS
2786 NTAPI
2787 RtlSetCurrentDirectory_U(
2788 _In_ PUNICODE_STRING name
2789 );
2790
2791 NTSYSAPI
2792 NTSTATUS
2793 NTAPI
2794 RtlSetEnvironmentVariable(
2795 _In_z_ PWSTR *Environment,
2796 _In_ PUNICODE_STRING Name,
2797 _In_ PUNICODE_STRING Value
2798 );
2799
2800 //
2801 // Critical Section/Resource Functions
2802 //
2803 NTSYSAPI
2804 NTSTATUS
2805 NTAPI
2806 RtlDeleteCriticalSection (
2807 _In_ PRTL_CRITICAL_SECTION CriticalSection
2808 );
2809
2810 NTSYSAPI
2811 NTSTATUS
2812 NTAPI
2813 RtlEnterCriticalSection(
2814 _In_ PRTL_CRITICAL_SECTION CriticalSection
2815 );
2816
2817 NTSYSAPI
2818 NTSTATUS
2819 NTAPI
2820 RtlInitializeCriticalSection(
2821 _In_ PRTL_CRITICAL_SECTION CriticalSection
2822 );
2823
2824 NTSYSAPI
2825 NTSTATUS
2826 NTAPI
2827 RtlInitializeCriticalSectionAndSpinCount(
2828 _In_ PRTL_CRITICAL_SECTION CriticalSection,
2829 _In_ ULONG SpinCount
2830 );
2831
2832 NTSYSAPI
2833 NTSTATUS
2834 NTAPI
2835 RtlLeaveCriticalSection(
2836 _In_ PRTL_CRITICAL_SECTION CriticalSection
2837 );
2838
2839 NTSYSAPI
2840 BOOLEAN
2841 NTAPI
2842 RtlTryEnterCriticalSection(
2843 _In_ PRTL_CRITICAL_SECTION CriticalSection
2844 );
2845
2846 NTSYSAPI
2847 VOID
2848 NTAPI
2849 RtlpUnWaitCriticalSection(
2850 _In_ PRTL_CRITICAL_SECTION CriticalSection
2851 );
2852
2853 NTSYSAPI
2854 NTSTATUS
2855 NTAPI
2856 RtlpWaitForCriticalSection(
2857 _In_ PRTL_CRITICAL_SECTION CriticalSection
2858 );
2859
2860 NTSYSAPI
2861 BOOLEAN
2862 NTAPI
2863 RtlAcquireResourceExclusive(
2864 _In_ PRTL_RESOURCE Resource,
2865 _In_ BOOLEAN Wait
2866 );
2867
2868 NTSYSAPI
2869 BOOLEAN
2870 NTAPI
2871 RtlAcquireResourceShared(
2872 _In_ PRTL_RESOURCE Resource,
2873 _In_ BOOLEAN Wait
2874 );
2875
2876 NTSYSAPI
2877 VOID
2878 NTAPI
2879 RtlConvertExclusiveToShared(
2880 _In_ PRTL_RESOURCE Resource
2881 );
2882
2883 NTSYSAPI
2884 VOID
2885 NTAPI
2886 RtlConvertSharedToExclusive(
2887 _In_ PRTL_RESOURCE Resource
2888 );
2889
2890 NTSYSAPI
2891 VOID
2892 NTAPI
2893 RtlDeleteResource(
2894 _In_ PRTL_RESOURCE Resource
2895 );
2896
2897 NTSYSAPI
2898 VOID
2899 NTAPI
2900 RtlDumpResource(
2901 _In_ PRTL_RESOURCE Resource
2902 );
2903
2904 NTSYSAPI
2905 VOID
2906 NTAPI
2907 RtlInitializeResource(
2908 _In_ PRTL_RESOURCE Resource
2909 );
2910
2911 NTSYSAPI
2912 VOID
2913 NTAPI
2914 RtlReleaseResource(
2915 _In_ PRTL_RESOURCE Resource
2916 );
2917
2918 //
2919 // Compression Functions
2920 //
2921 NTSYSAPI //NT_RTL_COMPRESS_API
2922 NTSTATUS
2923 NTAPI
2924 RtlCompressBuffer(
2925 _In_ USHORT CompressionFormatAndEngine,
2926 _In_reads_bytes_(UncompressedBufferSize) PUCHAR UncompressedBuffer,
2927 _In_ ULONG UncompressedBufferSize,
2928 _Out_writes_bytes_to_(CompressedBufferSize, *FinalCompressedSize) PUCHAR CompressedBuffer,
2929 _In_ ULONG CompressedBufferSize,
2930 _In_ ULONG UncompressedChunkSize,
2931 _Out_ PULONG FinalCompressedSize,
2932 _In_ PVOID WorkSpace
2933 );
2934
2935 _IRQL_requires_max_(APC_LEVEL)
2936 NTSYSAPI //NT_RTL_COMPRESS_API
2937 NTSTATUS
2938 NTAPI
2939 RtlDecompressBuffer(
2940 _In_ USHORT CompressionFormat,
2941 _Out_writes_bytes_to_(UncompressedBufferSize, *FinalUncompressedSize) PUCHAR UncompressedBuffer,
2942 _In_ ULONG UncompressedBufferSize,
2943 _In_reads_bytes_(CompressedBufferSize) PUCHAR CompressedBuffer,
2944 _In_ ULONG CompressedBufferSize,
2945 _Out_ PULONG FinalUncompressedSize
2946 );
2947
2948 NTSYSAPI
2949 NTSTATUS
2950 NTAPI
2951 RtlGetCompressionWorkSpaceSize(
2952 _In_ USHORT CompressionFormatAndEngine,
2953 _Out_ PULONG CompressBufferWorkSpaceSize,
2954 _Out_ PULONG CompressFragmentWorkSpaceSize
2955 );
2956
2957 //
2958 // Debug Info Functions
2959 //
2960 NTSYSAPI
2961 PRTL_DEBUG_INFORMATION
2962 NTAPI
2963 RtlCreateQueryDebugBuffer(
2964 _In_ ULONG Size,
2965 _In_ BOOLEAN EventPair
2966 );
2967
2968 NTSYSAPI
2969 NTSTATUS
2970 NTAPI
2971 RtlDestroyQueryDebugBuffer(IN PRTL_DEBUG_INFORMATION DebugBuffer);
2972
2973 NTSYSAPI
2974 NTSTATUS
2975 NTAPI
2976 RtlQueryProcessDebugInformation(
2977 _In_ ULONG ProcessId,
2978 _In_ ULONG DebugInfoClassMask,
2979 _Inout_ PRTL_DEBUG_INFORMATION DebugBuffer
2980 );
2981
2982 //
2983 // Bitmap Functions
2984 //
2985 NTSYSAPI
2986 BOOLEAN
2987 NTAPI
2988 RtlAreBitsClear(
2989 _In_ PRTL_BITMAP BitMapHeader,
2990 _In_ ULONG StartingIndex,
2991 _In_ ULONG Length
2992 );
2993
2994 NTSYSAPI
2995 BOOLEAN
2996 NTAPI
2997 RtlAreBitsSet(
2998 _In_ PRTL_BITMAP BitMapHeader,
2999 _In_ ULONG StartingIndex,
3000 _In_ ULONG Length
3001 );
3002
3003 NTSYSAPI
3004 VOID
3005 NTAPI
3006 RtlClearAllBits(
3007 _In_ PRTL_BITMAP BitMapHeader
3008 );
3009
3010 NTSYSAPI
3011 VOID
3012 NTAPI
3013 RtlClearBits(
3014 _In_ PRTL_BITMAP BitMapHeader,
3015 _In_range_(0, BitMapHeader->SizeOfBitMap - NumberToClear) ULONG StartingIndex,
3016 _In_range_(0, BitMapHeader->SizeOfBitMap - StartingIndex) ULONG NumberToClear
3017 );
3018
3019 NTSYSAPI
3020 ULONG
3021 NTAPI
3022 RtlFindClearBits(
3023 _In_ PRTL_BITMAP BitMapHeader,
3024 _In_ ULONG NumberToFind,
3025 _In_ ULONG HintIndex
3026 );
3027
3028 NTSYSAPI
3029 ULONG
3030 NTAPI
3031 RtlFindClearBitsAndSet(
3032 _In_ PRTL_BITMAP BitMapHeader,
3033 _In_ ULONG NumberToFind,
3034 _In_ ULONG HintIndex
3035 );
3036
3037 NTSYSAPI
3038 CCHAR
3039 NTAPI
3040 RtlFindLeastSignificantBit(
3041 _In_ ULONGLONG Value
3042 );
3043
3044 NTSYSAPI
3045 CCHAR
3046 NTAPI
3047 RtlFindMostSignificantBit(
3048 _In_ ULONGLONG Value
3049 );
3050
3051 NTSYSAPI
3052 ULONG
3053 NTAPI
3054 RtlFindNextForwardRunClear(
3055 _In_ PRTL_BITMAP BitMapHeader,
3056 _In_ ULONG FromIndex,
3057 _Out_ PULONG StartingRunIndex
3058 );
3059
3060 NTSYSAPI
3061 ULONG
3062 NTAPI
3063 RtlFindNextForwardRunSet(
3064 _In_ PRTL_BITMAP BitMapHeader,
3065 _In_ ULONG FromIndex,
3066 _Out_ PULONG StartingRunIndex
3067 );
3068
3069 NTSYSAPI
3070 ULONG
3071 NTAPI
3072 RtlFindSetBits(
3073 _In_ PRTL_BITMAP BitMapHeader,
3074 _In_ ULONG NumberToFind,
3075 _In_ ULONG HintIndex
3076 );
3077
3078 NTSYSAPI
3079 ULONG
3080 NTAPI
3081 RtlFindSetBitsAndClear(
3082 _In_ PRTL_BITMAP BitMapHeader,
3083 _In_ ULONG NumberToFind,
3084 _In_ ULONG HintIndex
3085 );
3086
3087 #ifdef _REACTOS_ // ReactOS improvement
3088 _At_(BitMapHeader->SizeOfBitMap, _Post_equal_to_(SizeOfBitMap))
3089 _At_(BitMapHeader->Buffer, _Post_equal_to_(BitMapBuffer))
3090 #endif
3091 NTSYSAPI
3092 VOID
3093 NTAPI
3094 RtlInitializeBitMap(
3095 _Out_ PRTL_BITMAP BitMapHeader,
3096 _In_opt_ __drv_aliasesMem PULONG BitMapBuffer,
3097 _In_opt_ ULONG SizeOfBitMap
3098 );
3099
3100 NTSYSAPI
3101 ULONG
3102 NTAPI
3103 RtlNumberOfClearBits(
3104 _In_ PRTL_BITMAP BitMapHeader
3105 );
3106
3107 NTSYSAPI
3108 ULONG
3109 NTAPI
3110 RtlNumberOfSetBits(
3111 _In_ PRTL_BITMAP BitMapHeader
3112 );
3113
3114 NTSYSAPI
3115 VOID
3116 NTAPI
3117 RtlSetBit(
3118 _In_ PRTL_BITMAP BitMapHeader,
3119 _In_range_(<, BitMapHeader->SizeOfBitMap) ULONG BitNumber
3120 );
3121
3122 NTSYSAPI
3123 VOID
3124 NTAPI
3125 RtlSetBits(
3126 _In_ PRTL_BITMAP BitMapHeader,
3127 _In_range_(0, BitMapHeader->SizeOfBitMap - NumberToSet) ULONG StartingIndex,
3128 _In_range_(0, BitMapHeader->SizeOfBitMap - StartingIndex) ULONG NumberToSet
3129 );
3130
3131 NTSYSAPI
3132 VOID
3133 NTAPI
3134 RtlSetAllBits(
3135 _In_ PRTL_BITMAP BitMapHeader
3136 );
3137
3138 _Must_inspect_result_
3139 NTSYSAPI
3140 BOOLEAN
3141 NTAPI
3142 RtlTestBit(
3143 _In_ PRTL_BITMAP BitMapHeader,
3144 _In_range_(<, BitMapHeader->SizeOfBitMap) ULONG BitNumber
3145 );
3146
3147 //
3148 // Timer Functions
3149 //
3150 NTSYSAPI
3151 NTSTATUS
3152 NTAPI
3153 RtlCreateTimer(
3154 _In_ HANDLE TimerQueue,
3155 _In_ PHANDLE phNewTimer,
3156 _In_ WAITORTIMERCALLBACKFUNC Callback,
3157 _In_ PVOID Parameter,
3158 _In_ ULONG DueTime,
3159 _In_ ULONG Period,
3160 _In_ ULONG Flags
3161 );
3162
3163 NTSYSAPI
3164 NTSTATUS
3165 NTAPI
3166 RtlCreateTimerQueue(PHANDLE TimerQueue);
3167
3168 NTSYSAPI
3169 NTSTATUS
3170 NTAPI
3171 RtlDeleteTimer(
3172 _In_ HANDLE TimerQueue,
3173 _In_ HANDLE Timer,
3174 _In_ HANDLE CompletionEvent
3175 );
3176
3177 NTSYSAPI
3178 NTSTATUS
3179 NTAPI
3180 RtlUpdateTimer(
3181 _In_ HANDLE TimerQueue,
3182 _In_ HANDLE Timer,
3183 _In_ ULONG DueTime,
3184 _In_ ULONG Period
3185 );
3186
3187 NTSYSAPI
3188 NTSTATUS
3189 NTAPI
3190 RtlDeleteTimerQueueEx(
3191 _In_ HANDLE TimerQueue,
3192 _In_opt_ HANDLE CompletionEvent
3193 );
3194
3195 NTSYSAPI
3196 NTSTATUS
3197 NTAPI
3198 RtlDeleteTimerQueue(HANDLE TimerQueue);
3199
3200 //
3201 // SList functions
3202 //
3203 PSLIST_ENTRY
3204 FASTCALL
3205 InterlockedPushListSList(
3206 _Inout_ PSLIST_HEADER ListHead,
3207 _Inout_ __drv_aliasesMem PSLIST_ENTRY List,
3208 _Inout_ PSLIST_ENTRY ListEnd,
3209 _In_ ULONG Count
3210 );
3211
3212 //
3213 // Range List functions
3214 //
3215 NTSYSAPI
3216 VOID
3217 NTAPI
3218 RtlInitializeRangeList(
3219 _Inout_ PRTL_RANGE_LIST RangeList
3220 );
3221
3222 NTSYSAPI
3223 VOID
3224 NTAPI
3225 RtlFreeRangeList(
3226 _In_ PRTL_RANGE_LIST RangeList
3227 );
3228
3229 NTSYSAPI
3230 NTSTATUS
3231 NTAPI
3232 RtlAddRange(
3233 _Inout_ PRTL_RANGE_LIST RangeList,
3234 _In_ ULONGLONG Start,
3235 _In_ ULONGLONG End,
3236 _In_ UCHAR Attributes,
3237 _In_ ULONG Flags,
3238 _In_opt_ PVOID UserData,
3239 _In_opt_ PVOID Owner
3240 );
3241
3242 //
3243 // Debug Functions
3244 //
3245 ULONG
3246 __cdecl
3247 DbgPrint(
3248 _In_z_ _Printf_format_string_ PCSTR Format,
3249 ...
3250 );
3251
3252 NTSYSAPI
3253 ULONG
3254 __cdecl
3255 DbgPrintEx(
3256 _In_ ULONG ComponentId,
3257 _In_ ULONG Level,
3258 _In_z_ _Printf_format_string_ PCSTR Format,
3259 ...
3260 );
3261
3262 NTSYSAPI
3263 ULONG
3264 NTAPI
3265 DbgPrompt(
3266 _In_z_ PCCH Prompt,
3267 _Out_writes_bytes_(MaximumResponseLength) PCH Response,
3268 _In_ ULONG MaximumResponseLength
3269 );
3270
3271 #undef DbgBreakPoint
3272 VOID
3273 NTAPI
3274 DbgBreakPoint(
3275 VOID
3276 );
3277
3278 VOID
3279 NTAPI
3280 DbgLoadImageSymbols(
3281 _In_ PSTRING Name,
3282 _In_ PVOID Base,
3283 _In_ ULONG_PTR ProcessId
3284 );
3285
3286 VOID
3287 NTAPI
3288 DbgUnLoadImageSymbols(
3289 _In_ PSTRING Name,
3290 _In_ PVOID Base,
3291 _In_ ULONG_PTR ProcessId
3292 );
3293
3294 VOID
3295 NTAPI
3296 DbgCommandString(
3297 _In_ PCCH Name,
3298 _In_ PCCH Command
3299 );
3300
3301 //
3302 // Generic Table Functions
3303 //
3304 #if defined(NTOS_MODE_USER) || defined(_NTIFS_)
3305 NTSYSAPI
3306 PVOID
3307 NTAPI
3308 RtlInsertElementGenericTable(
3309 _In_ PRTL_GENERIC_TABLE Table,
3310 _In_reads_bytes_(BufferSize) PVOID Buffer,
3311 _In_ CLONG BufferSize,
3312 _Out_opt_ PBOOLEAN NewElement
3313 );
3314
3315 NTSYSAPI
3316 PVOID
3317 NTAPI
3318 RtlInsertElementGenericTableFull(
3319 _In_ PRTL_GENERIC_TABLE Table,
3320 _In_reads_bytes_(BufferSize) PVOID Buffer,
3321 _In_ CLONG BufferSize,
3322 _Out_opt_ PBOOLEAN NewElement,
3323 _In_ PVOID NodeOrParent,
3324 _In_ TABLE_SEARCH_RESULT SearchResult
3325 );
3326
3327 NTSYSAPI
3328 BOOLEAN
3329 NTAPI
3330 RtlIsGenericTableEmpty(
3331 _In_ PRTL_GENERIC_TABLE Table
3332 );
3333
3334 NTSYSAPI
3335 PVOID
3336 NTAPI
3337 RtlLookupElementGenericTableFull(
3338 _In_ PRTL_GENERIC_TABLE Table,
3339 _In_ PVOID Buffer,
3340 _Out_ PVOID *NodeOrParent,
3341 _Out_ TABLE_SEARCH_RESULT *SearchResult
3342 );
3343 #endif
3344
3345 //
3346 // Handle Table Functions
3347 //
3348 NTSYSAPI
3349 PRTL_HANDLE_TABLE_ENTRY
3350 NTAPI
3351 RtlAllocateHandle(
3352 _In_ PRTL_HANDLE_TABLE HandleTable,
3353 _Inout_ PULONG Index
3354 );
3355
3356 NTSYSAPI
3357 VOID
3358 NTAPI
3359 RtlDestroyHandleTable(
3360 _Inout_ PRTL_HANDLE_TABLE HandleTable);
3361
3362 NTSYSAPI
3363 BOOLEAN
3364 NTAPI
3365 RtlFreeHandle(
3366 _In_ PRTL_HANDLE_TABLE HandleTable,
3367 _In_ PRTL_HANDLE_TABLE_ENTRY Handle
3368 );
3369
3370 NTSYSAPI
3371 VOID
3372 NTAPI
3373 RtlInitializeHandleTable(
3374 _In_ ULONG TableSize,
3375 _In_ ULONG HandleSize,
3376 _In_ PRTL_HANDLE_TABLE HandleTable
3377 );
3378
3379 NTSYSAPI
3380 BOOLEAN
3381 NTAPI
3382 RtlIsValidHandle(
3383 _In_ PRTL_HANDLE_TABLE HandleTable,
3384 _In_ PRTL_HANDLE_TABLE_ENTRY Handle
3385 );
3386
3387 _Success_(return!=FALSE)
3388 NTSYSAPI
3389 BOOLEAN
3390 NTAPI
3391 RtlIsValidIndexHandle(
3392 _In_ PRTL_HANDLE_TABLE HandleTable,
3393 _In_ ULONG Index,
3394 _Out_ PRTL_HANDLE_TABLE_ENTRY *Handle
3395 );
3396
3397 //
3398 // PE Functions
3399 //
3400 NTSYSAPI
3401 NTSTATUS
3402 NTAPI
3403 RtlFindMessage(
3404 _In_ PVOID BaseAddress,
3405 _In_ ULONG Type,
3406 _In_ ULONG Language,
3407 _In_ ULONG MessageId,
3408 _Out_ PMESSAGE_RESOURCE_ENTRY *MessageResourceEntry
3409 );
3410
3411 NTSYSAPI
3412 ULONG
3413 NTAPI
3414 RtlGetNtGlobalFlags(VOID);
3415
3416 _Success_(return!=NULL)
3417 NTSYSAPI
3418 PVOID
3419 NTAPI
3420 RtlImageDirectoryEntryToData(
3421 _In_ PVOID BaseAddress,
3422 _In_ BOOLEAN MappedAsImage,
3423 _In_ USHORT Directory,
3424 _Out_ PULONG Size
3425 );
3426
3427 NTSYSAPI
3428 PVOID
3429 NTAPI
3430 RtlImageRvaToVa(
3431 _In_ PIMAGE_NT_HEADERS NtHeader,
3432 _In_ PVOID BaseAddress,
3433 _In_ ULONG Rva,
3434 _Inout_opt_ PIMAGE_SECTION_HEADER *SectionHeader
3435 );
3436
3437 NTSYSAPI
3438 PIMAGE_NT_HEADERS
3439 NTAPI
3440 RtlImageNtHeader(
3441 _In_ PVOID BaseAddress);
3442
3443 NTSYSAPI
3444 NTSTATUS
3445 NTAPI
3446 RtlImageNtHeaderEx(
3447 _In_ ULONG Flags,
3448 _In_ PVOID BaseAddress,
3449 _In_ ULONGLONG Size,
3450 _Out_ PIMAGE_NT_HEADERS *NtHeader
3451 );
3452
3453 NTSYSAPI
3454 PIMAGE_SECTION_HEADER
3455 NTAPI
3456 RtlImageRvaToSection(
3457 _In_ PIMAGE_NT_HEADERS NtHeader,
3458 _In_ PVOID BaseAddress,
3459 _In_ ULONG Rva
3460 );
3461
3462 NTSYSAPI
3463 ULONG
3464 NTAPI
3465 LdrRelocateImageWithBias(
3466 _In_ PVOID NewAddress,
3467 _In_ LONGLONG AdditionalBias,
3468 _In_ PCCH LoaderName,
3469 _In_ ULONG Success,
3470 _In_ ULONG Conflict,
3471 _In_ ULONG Invalid
3472 );
3473
3474 //
3475 // Activation Context Functions
3476 //
3477 #ifdef NTOS_MODE_USER
3478 NTSYSAPI
3479 NTSTATUS
3480 NTAPI
3481 RtlActivateActivationContextEx(
3482 _In_ ULONG Flags,
3483 _In_ PTEB Teb,
3484 _In_ PVOID Context,
3485 _Out_ PULONG_PTR Cookie
3486 );
3487
3488 NTSYSAPI
3489 NTSTATUS
3490 NTAPI
3491 RtlActivateActivationContext(
3492 _In_ ULONG Flags,
3493 _In_ HANDLE Handle,
3494 _Out_ PULONG_PTR Cookie
3495 );
3496
3497 NTSYSAPI
3498 VOID
3499 NTAPI
3500 RtlAddRefActivationContext(
3501 _In_ PVOID Context
3502 );
3503
3504 NTSYSAPI
3505 PRTL_ACTIVATION_CONTEXT_STACK_FRAME
3506 FASTCALL
3507 RtlActivateActivationContextUnsafeFast(
3508 _In_ PRTL_CALLER_ALLOCATED_ACTIVATION_CONTEXT_STACK_FRAME_EXTENDED Frame,
3509 _In_ PVOID Context
3510 );
3511
3512 NTSYSAPI
3513 NTSTATUS
3514 NTAPI
3515 RtlAllocateActivationContextStack(
3516 _In_ PACTIVATION_CONTEXT_STACK *Stack
3517 );
3518
3519 NTSYSAPI
3520 NTSTATUS
3521 NTAPI
3522 RtlCreateActivationContext(
3523 _In_ ULONG Flags,
3524 _In_ PACTIVATION_CONTEXT_DATA ActivationContextData,
3525 _In_ ULONG ExtraBytes,
3526 _In_ PVOID NotificationRoutine,
3527 _In_ PVOID NotificationContext,
3528 _Out_ PACTIVATION_CONTEXT *ActCtx
3529 );
3530
3531 NTSYSAPI
3532 NTSTATUS
3533 NTAPI
3534 RtlGetActiveActivationContext(
3535 _In_ PVOID *Context
3536 );
3537
3538 NTSYSAPI
3539 VOID
3540 NTAPI
3541 RtlReleaseActivationContext(
3542 _In_ HANDLE handle
3543 );
3544
3545 NTSYSAPI
3546 NTSTATUS
3547 NTAPI
3548 RtlDeactivateActivationContext(
3549 _In_ ULONG dwFlags,
3550 _In_ ULONG_PTR ulCookie
3551 );
3552
3553 NTSYSAPI
3554 VOID
3555 NTAPI
3556 RtlFreeActivationContextStack(
3557 _In_ PACTIVATION_CONTEXT_STACK Stack
3558 );
3559
3560 NTSYSAPI
3561 VOID
3562 NTAPI
3563 RtlFreeThreadActivationContextStack(VOID);
3564
3565 NTSYSAPI
3566 PRTL_ACTIVATION_CONTEXT_STACK_FRAME
3567 FASTCALL
3568 RtlDeactivateActivationContextUnsafeFast(
3569 _In_ PRTL_CALLER_ALLOCATED_ACTIVATION_CONTEXT_STACK_FRAME_EXTENDED Frame
3570 );
3571
3572 NTSYSAPI
3573 NTSTATUS
3574 NTAPI
3575 RtlDosApplyFileIsolationRedirection_Ustr(
3576 _In_ ULONG Flags,
3577 _In_ PUNICODE_STRING OriginalName,
3578 _In_ PUNICODE_STRING Extension,
3579 _Inout_ PUNICODE_STRING StaticString,
3580 _Inout_ PUNICODE_STRING DynamicString,
3581 _Inout_ PUNICODE_STRING *NewName,
3582 _In_ PULONG NewFlags,
3583 _In_ PSIZE_T FileNameSize,
3584 _In_ PSIZE_T RequiredLength
3585 );
3586
3587 NTSYSAPI
3588 NTSTATUS
3589 NTAPI
3590 RtlFindActivationContextSectionString(
3591 _In_ ULONG dwFlags,
3592 _In_ const GUID *ExtensionGuid,
3593 _In_ ULONG SectionType,
3594 _In_ PUNICODE_STRING SectionName,
3595 _Inout_ PVOID ReturnedData
3596 );
3597
3598 NTSYSAPI
3599 NTSTATUS
3600 NTAPI
3601 RtlQueryInformationActivationContext(
3602 _In_ DWORD dwFlags,
3603 _In_opt_ PVOID Context,
3604 _In_opt_ PVOID pvSubInstance,
3605 _In_ ULONG ulInfoClass,
3606 _Out_bytecap_(cbBuffer) PVOID pvBuffer,
3607 _In_opt_ SIZE_T cbBuffer,
3608 _Out_opt_ SIZE_T *pcbWrittenOrRequired
3609 );
3610
3611 NTSYSAPI
3612 NTSTATUS
3613 NTAPI
3614 RtlQueryInformationActiveActivationContext(
3615 _In_ ULONG ulInfoClass,
3616 _Out_bytecap_(cbBuffer) PVOID pvBuffer,
3617 _In_opt_ SIZE_T cbBuffer,
3618 _Out_opt_ SIZE_T *pcbWrittenOrRequired
3619 );
3620
3621 NTSYSAPI
3622 NTSTATUS
3623 NTAPI
3624 RtlZombifyActivationContext(
3625 PVOID Context
3626 );
3627
3628 //
3629 // WOW64 Functions
3630 //
3631 NTSYSAPI
3632 NTSTATUS
3633 NTAPI
3634 RtlWow64EnableFsRedirection(
3635 _In_ BOOLEAN Wow64FsEnableRedirection
3636 );
3637
3638 NTSYSAPI
3639 NTSTATUS
3640 NTAPI
3641 RtlWow64EnableFsRedirectionEx(
3642 _In_ PVOID Wow64FsEnableRedirection,
3643 _Out_ PVOID *OldFsRedirectionLevel
3644 );
3645
3646 #endif
3647
3648 //
3649 // Registry Functions
3650 //
3651 _IRQL_requires_max_(PASSIVE_LEVEL)
3652 _Must_inspect_result_
3653 NTSYSAPI
3654 NTSTATUS
3655 NTAPI
3656 RtlCheckRegistryKey(
3657 _In_ ULONG RelativeTo,
3658 _In_ PWSTR Path
3659 );
3660
3661 NTSYSAPI
3662 NTSTATUS
3663 NTAPI
3664 RtlCreateRegistryKey(
3665 _In_ ULONG RelativeTo,
3666 _In_ PWSTR Path
3667 );
3668
3669 NTSYSAPI
3670 NTSTATUS
3671 NTAPI
3672 RtlFormatCurrentUserKeyPath(
3673 _Out_ _At_(KeyPath->Buffer, __drv_allocatesMem(Mem) _Post_bytecap_(KeyPath->MaximumLength) _Post_bytecount_(KeyPath->Length))
3674 PUNICODE_STRING KeyPath
3675 );
3676
3677 NTSYSAPI
3678 NTSTATUS
3679 NTAPI
3680 RtlOpenCurrentUser(
3681 _In_ ACCESS_MASK DesiredAccess,
3682 _Out_ PHANDLE KeyHandle
3683 );
3684
3685 _IRQL_requires_max_(PASSIVE_LEVEL)
3686 NTSYSAPI
3687 NTSTATUS
3688 NTAPI
3689 RtlQueryRegistryValues(
3690 _In_ ULONG RelativeTo,
3691 _In_ PCWSTR Path,
3692 _Inout_ _At_(*(*QueryTable).EntryContext, _Pre_unknown_)
3693 PRTL_QUERY_REGISTRY_TABLE QueryTable,
3694 _In_opt_ PVOID Context,
3695 _In_opt_ PVOID Environment
3696 );
3697
3698 _IRQL_requires_max_(PASSIVE_LEVEL)
3699 NTSYSAPI
3700 NTSTATUS
3701 NTAPI
3702 RtlWriteRegistryValue(
3703 _In_ ULONG RelativeTo,
3704 _In_ PCWSTR Path,
3705 _In_z_ PCWSTR ValueName,
3706 _In_ ULONG ValueType,
3707 _In_reads_bytes_opt_(ValueLength) PVOID ValueData,
3708 _In_ ULONG ValueLength
3709 );
3710
3711 #ifdef NTOS_MODE_USER
3712 NTSYSAPI
3713 NTSTATUS
3714 NTAPI
3715 RtlpNtCreateKey(
3716 _Out_ HANDLE KeyHandle,
3717 _In_ ACCESS_MASK DesiredAccess,
3718 _In_ POBJECT_ATTRIBUTES ObjectAttributes,
3719 _In_ ULONG TitleIndex,
3720 _In_ PUNICODE_STRING Class,
3721 _Out_ PULONG Disposition
3722 );
3723
3724 NTSYSAPI
3725 NTSTATUS
3726 NTAPI
3727 RtlpNtEnumerateSubKey(
3728 _In_ HANDLE KeyHandle,
3729 _Inout_ PUNICODE_STRING SubKeyName,
3730 _In_ ULONG Index,
3731 _In_ ULONG Unused
3732 );
3733
3734 NTSYSAPI
3735 NTSTATUS
3736 NTAPI
3737 RtlpNtMakeTemporaryKey(
3738 _In_ HANDLE KeyHandle
3739 );
3740
3741 NTSYSAPI
3742 NTSTATUS
3743 NTAPI
3744 RtlpNtOpenKey(
3745 _Out_ HANDLE KeyHandle,
3746 _In_ ACCESS_MASK DesiredAccess,
3747 _In_ POBJECT_ATTRIBUTES ObjectAttributes,
3748 _In_ ULONG Unused
3749 );
3750
3751 NTSYSAPI
3752 NTSTATUS
3753 NTAPI
3754 RtlpNtQueryValueKey(
3755 _In_ HANDLE KeyHandle,
3756 _Out_opt_ PULONG Type,
3757 _Out_opt_ PVOID Data,
3758 _Inout_opt_ PULONG DataLength,
3759 _In_ ULONG Unused
3760 );
3761
3762 NTSYSAPI
3763 NTSTATUS
3764 NTAPI
3765 RtlpNtSetValueKey(
3766 _In_ HANDLE KeyHandle,
3767 _In_ ULONG Type,
3768 _In_ PVOID Data,
3769 _In_ ULONG DataLength
3770 );
3771 #endif
3772
3773 //
3774 // NLS Functions
3775 //
3776 NTSYSAPI
3777 VOID
3778 NTAPI
3779 RtlGetDefaultCodePage(
3780 _Out_ PUSHORT AnsiCodePage,
3781 _Out_ PUSHORT OemCodePage
3782 );
3783
3784 NTSYSAPI
3785 VOID
3786 NTAPI
3787 RtlInitNlsTables(
3788 _In_ PUSHORT AnsiTableBase,
3789 _In_ PUSHORT OemTableBase,
3790 _In_ PUSHORT CaseTableBase,
3791 _Out_ PNLSTABLEINFO NlsTable
3792 );
3793
3794 _IRQL_requires_max_(PASSIVE_LEVEL)
3795 NTSYSAPI
3796 VOID
3797 NTAPI
3798 RtlInitCodePageTable(
3799 _In_ PUSHORT TableBase,
3800 _Out_ PCPTABLEINFO CodePageTable
3801 );
3802
3803 NTSYSAPI
3804 VOID
3805 NTAPI
3806 RtlResetRtlTranslations(
3807 _In_ PNLSTABLEINFO NlsTable);
3808
3809 #if defined(NTOS_MODE_USER) && !defined(NO_RTL_INLINES)
3810
3811 //
3812 // Misc conversion functions
3813 //
3814 static __inline
3815 LARGE_INTEGER
3816 NTAPI_INLINE
3817 RtlConvertLongToLargeInteger(
3818 _In_ LONG SignedInteger
3819 )
3820 {
3821 LARGE_INTEGER Result;
3822
3823 Result.QuadPart = SignedInteger;
3824 return Result;
3825 }
3826
3827 static __inline
3828 LARGE_INTEGER
3829 NTAPI_INLINE
3830 RtlEnlargedIntegerMultiply(
3831 _In_ LONG Multiplicand,
3832 _In_ LONG Multiplier
3833 )
3834 {
3835 LARGE_INTEGER Product;
3836
3837 Product.QuadPart = (LONGLONG)Multiplicand * (ULONGLONG)Multiplier;
3838 return Product;
3839 }
3840
3841 static __inline
3842 ULONG
3843 NTAPI_INLINE
3844 RtlEnlargedUnsignedDivide(
3845 _In_ ULARGE_INTEGER Dividend,
3846 _In_ ULONG Divisor,
3847 _In_opt_ PULONG Remainder
3848 )
3849 {
3850 ULONG Quotient;
3851
3852 Quotient = (ULONG)(Dividend.QuadPart / Divisor);
3853 if (Remainder) {
3854 *Remainder = (ULONG)(Dividend.QuadPart % Divisor);
3855 }
3856
3857 return Quotient;
3858 }
3859
3860 static __inline
3861 LARGE_INTEGER
3862 NTAPI_INLINE
3863 RtlEnlargedUnsignedMultiply(
3864 _In_ ULONG Multiplicand,
3865 _In_ ULONG Multiplier
3866 )
3867 {
3868 LARGE_INTEGER Product;
3869
3870 Product.QuadPart = (ULONGLONG)Multiplicand * (ULONGLONG)Multiplier;
3871 return Product;
3872 }
3873
3874 #if defined(_AMD64_) || defined(_IA64_)
3875 static __inline
3876 LARGE_INTEGER
3877 NTAPI_INLINE
3878 RtlExtendedLargeIntegerDivide(
3879 _In_ LARGE_INTEGER Dividend,
3880 _In_ ULONG Divisor,
3881 _Out_opt_ PULONG Remainder)
3882 {
3883 LARGE_INTEGER ret;
3884 ret.QuadPart = (ULONG64)Dividend.QuadPart / Divisor;
3885 if (Remainder)
3886 *Remainder = (ULONG)(Dividend.QuadPart % Divisor);
3887 return ret;
3888 }
3889
3890 #else
3891 NTSYSAPI
3892 LARGE_INTEGER
3893 NTAPI
3894 RtlExtendedLargeIntegerDivide(
3895 _In_ LARGE_INTEGER Dividend,
3896 _In_ ULONG Divisor,
3897 _Out_opt_ PULONG Remainder
3898 );
3899
3900 #endif /* defined(_AMD64_) || defined(_IA64_) */
3901
3902 #endif
3903
3904
3905 NTSYSAPI
3906 ULONG
3907 NTAPI
3908 RtlUniform(
3909 _In_ PULONG Seed
3910 );
3911
3912 NTSYSAPI
3913 ULONG
3914 NTAPI
3915 RtlRandom(
3916 _Inout_ PULONG Seed
3917 );
3918
3919 NTSYSAPI
3920 ULONG
3921 NTAPI
3922 RtlComputeCrc32(
3923 _In_ ULONG InitialCrc,
3924 _In_ PUCHAR Buffer,
3925 _In_ ULONG Length
3926 );
3927
3928 //
3929 // Network Functions
3930 //
3931 NTSYSAPI
3932 NTSTATUS
3933 NTAPI
3934 RtlIpv4StringToAddressW(
3935 _In_ PCWSTR String,
3936 _In_ BOOLEAN Strict,
3937 _Out_ LPWSTR *Terminator,
3938 _Out_ struct in_addr *Addr
3939 );
3940
3941 NTSYSAPI
3942 NTSTATUS
3943 NTAPI
3944 RtlIpv6StringToAddressA(
3945 _In_ PCHAR Name,
3946 _Out_ PCHAR *Terminator,
3947 _Out_ struct in6_addr *Addr
3948 );
3949
3950 NTSYSAPI
3951 NTSTATUS
3952 NTAPI
3953 RtlIpv6StringToAddressW(
3954 _In_ PWCHAR Name,
3955 _Out_ PCHAR *Terminator,
3956 _Out_ struct in6_addr *Addr
3957 );
3958
3959 NTSYSAPI
3960 NTSTATUS
3961 NTAPI
3962 RtlIpv6StringToAddressExA(
3963 _In_ PCHAR AddressString,
3964 _In_ struct in6_addr *Address,
3965 _In_ PULONG ScopeId,
3966 _In_ PUSHORT Port
3967 );
3968
3969 NTSYSAPI
3970 NTSTATUS
3971 NTAPI
3972 RtlIpv6StringToAddressExW(
3973 _In_ PWCHAR AddressName,
3974 _In_ struct in6_addr *Address,
3975 _In_ PULONG ScopeId,
3976 _In_ PUSHORT Port
3977 );
3978
3979
3980 //
3981 // Time Functions
3982 //
3983 NTSYSAPI
3984 NTSTATUS
3985 NTAPI
3986 RtlQueryTimeZoneInformation(
3987 _Out_ PRTL_TIME_ZONE_INFORMATION TimeZoneInformation);
3988
3989 NTSYSAPI
3990 VOID
3991 NTAPI
3992 RtlSecondsSince1970ToTime(
3993 _In_ ULONG SecondsSince1970,
3994 _Out_ PLARGE_INTEGER Time
3995 );
3996
3997 NTSYSAPI
3998 NTSTATUS
3999 NTAPI
4000 RtlSetTimeZoneInformation(
4001 _In_ PRTL_TIME_ZONE_INFORMATION TimeZoneInformation);
4002
4003 _Success_(return!=FALSE)
4004 _Must_inspect_result_
4005 NTSYSAPI
4006 BOOLEAN
4007 NTAPI
4008 RtlTimeFieldsToTime(
4009 _In_ PTIME_FIELDS TimeFields,
4010 _Out_ PLARGE_INTEGER Time
4011 );
4012
4013 _Success_(return != 0)
4014 _Must_inspect_result_
4015 NTSYSAPI
4016 BOOLEAN
4017 NTAPI
4018 RtlTimeToSecondsSince1970(
4019 _In_ PLARGE_INTEGER Time,
4020 _Out_ PULONG ElapsedSeconds
4021 );
4022
4023 NTSYSAPI
4024 VOID
4025 NTAPI
4026 RtlTimeToTimeFields(
4027 PLARGE_INTEGER Time,
4028 PTIME_FIELDS TimeFields
4029 );
4030
4031 NTSYSAPI
4032 NTSTATUS
4033 NTAPI
4034 RtlSystemTimeToLocalTime(
4035 _In_ PLARGE_INTEGER SystemTime,
4036 _Out_ PLARGE_INTEGER LocalTime
4037 );
4038
4039 //
4040 // Version Functions
4041 //
4042 _IRQL_requires_max_(PASSIVE_LEVEL)
4043 _Must_inspect_result_
4044 NTSYSAPI
4045 NTSTATUS
4046 NTAPI
4047 RtlVerifyVersionInfo(
4048 _In_ PRTL_OSVERSIONINFOEXW VersionInfo,
4049 _In_ ULONG TypeMask,
4050 _In_ ULONGLONG ConditionMask
4051 );
4052
4053 _IRQL_requires_max_(PASSIVE_LEVEL)
4054 NTSYSAPI
4055 NTSTATUS
4056 NTAPI
4057 RtlGetVersion(
4058 _Out_
4059 _At_(lpVersionInformation->dwOSVersionInfoSize, _Pre_ _Valid_)
4060 _When_(lpVersionInformation->dwOSVersionInfoSize == sizeof(RTL_OSVERSIONINFOEXW),
4061 _At_((PRTL_OSVERSIONINFOEXW)lpVersionInformation, _Out_))
4062 PRTL_OSVERSIONINFOW lpVersionInformation
4063 );
4064
4065 NTSYSAPI
4066 BOOLEAN
4067 NTAPI
4068 RtlGetNtProductType(OUT PNT_PRODUCT_TYPE ProductType);
4069
4070 //
4071