RtlCaptureContext - NtDoc
Native API online documentation, based on the System Informer
(formerly Process Hacker) phnt
headers
#ifndef _NTRTL_H
/**
* The RtlCaptureContext routine retrieves a context record in the context of the caller.
*
* \param ContextRecord A pointer to a CONTEXT structure.
* \return This function does not return a value.
* \sa https://learn.microsoft.com/en-us/windows-hardware/drivers/ddi/ntifs/nf-ntifs-rtlcapturecontext
*/
NTSYSAPI
VOID
NTAPI
RtlCaptureContext(
_Out_ PCONTEXT ContextRecord
);
View code on GitHub// ntifs.h
NTSYSAPI VOID RtlCaptureContext(
[out] PCONTEXT ContextRecord
);
View the official Windows Driver Kit DDI reference// winnt.h
NTSYSAPI VOID RtlCaptureContext(
[out] PCONTEXT ContextRecord
);
View the official Win32 API referenceNo description available.
The RtlCaptureContext function retrieves a context record in the context of the caller.
ContextRecord [out]A pointer to a CONTEXT structure.
This function does not return a value.
The captured ContextRecord contains processor-specific register data.
For kernel-mode code, the CONTEXT structure is defined in Ntddk.h. For more information, see the CONTEXT structure topic in the SDK documentation.
Retrieves a context record in the context of the caller.
ContextRecord [out]A pointer to a CONTEXT structure.
This function does not return a value.
Vertdll APIs available in VBS enclaves