RtlUnwindEx - NtDoc

Native API online documentation, based on the System Informer (formerly Process Hacker) phnt headers
// winnt.h

NTSYSAPI VOID RtlUnwindEx(
  [in, optional] PVOID                 TargetFrame,
  [in, optional] PVOID                 TargetIp,
  [in, optional] PEXCEPTION_RECORD     ExceptionRecord,
  [in]           PVOID                 ReturnValue,
  [in]           PCONTEXT              ContextRecord,
  [in, optional] PUNWIND_HISTORY_TABLE HistoryTable
);
View the official Win32 API reference

NtDoc

No description available.

Win32 API reference (nf-winnt-rtlunwindex)

RtlUnwindEx function

Description

Initiates an unwind of procedure call frames.

Parameters

TargetFrame [in, optional]

A pointer to the call frame that is the target of the unwind. If this parameter is NULL, the function performs an exit unwind.

TargetIp [in, optional]

The continuation address of the unwind. This parameter is ignored if TargetFrame is NULL.

ExceptionRecord [in, optional]

A pointer to an EXCEPTION_RECORD structure.

ReturnValue [in]

A value to be placed in the integer function return register before continuing execution.

ContextRecord [in]

A pointer to a CONTEXT structure that stores context during the unwind operation.

HistoryTable [in, optional]

A pointer to the unwind history table. This structure is processor specific. For definitions of this structure, see Winternl.h.

Return value

This function does not return a value.

Remarks

The FRAME_POINTERS structure is defined as follows:

typedef struct _FRAME_POINTERS {
    ULONGLONG MemoryStackFp;
    ULONGLONG BackingStoreFp;
} FRAME_POINTERS, *PFRAME_POINTERS;

See also

CONTEXT

EXCEPTION_RECORD

Vertdll APIs available in VBS enclaves