#ifndef _NTRTL_H

/**
 * The RtlRemoteCall routine calls a function in the context of a specified thread in a remote process.
 *
 * \param ProcessHandle Handle to the process in which the thread resides.
 * \param ThreadHandle Handle to the thread in which the function is to be called.
 * \param CallSite Address of the function to call in the remote process.
 * \param ArgumentCount Number of arguments to pass to the function.
 * \param Arguments Pointer to an array of arguments to pass to the function. Can be NULL if no arguments are needed.
 * \param PassContext If TRUE, the thread context is passed to the function.
 * \param AlreadySuspended If TRUE, the thread is already suspended and does not need to be suspended by this routine.
 * \return NTSTATUS Successful or errant status.
 */
NTSYSAPI
NTSTATUS
NTAPI
RtlRemoteCall(
    _In_ HANDLE ProcessHandle,
    _In_ HANDLE ThreadHandle,
    _In_ PVOID CallSite,
    _In_ ULONG ArgumentCount,
    _In_opt_ PULONG_PTR Arguments,
    _In_ BOOLEAN PassContext,
    _In_ BOOLEAN AlreadySuspended
    );

#endif
View code on GitHub