Module ntdll


Classes

ACTIVATION_CONTEXT_STACK
CLIENT_ID
CURDIR
EXCEPTION_DISPOSITION
EXCEPTION_REGISTRATION_RECORD
FILE_INFORMATION_CLASS
FILE_NAME_INFORMATION
GDI_TEB_BATCH
IO_STATUS_BLOCK
LDR_MODULE
NT_TIB
PEB
PEB_32
PEB_FREE_BLOCK
PEB_LDR_DATA
PEXCEPTION_DISPOSITION
PEXCEPTION_REGISTRATION_RECORD
PIO_STATUS_BLOCK
PNTTIB
PPEB
PPEBLOCKROUTINE
PPEB_FREE_BLOCK
PPEB_LDR_DATA
PPS_POST_PROCESS_INIT_ROUTINE
PROCESSINFOCLASS
PROCESSOR_NUMBER
PROCESS_BASIC_INFORMATION
PRTL_CRITICAL_SECTION
PRTL_CRITICAL_SECTION_DEBUG
PRTL_USER_PROCESS_PARAMETERS
PTEB
PTEB_ACTIVE_FRAME
PTEB_ACTIVE_FRAME_CONTEXT
RTL_ACTIVATION_CONTEXT_STACK_FRAME
RTL_CRITICAL_SECTION
RTL_CRITICAL_SECTION_DEBUG
RTL_DRIVE_LETTER_CURDIR
RTL_USER_PROCESS_PARAMETERS
SYSDBG_COMMAND
SYSDBG_MSR
TEB
TEB_ACTIVE_FRAME
TEB_ACTIVE_FRAME_CONTEXT
THREADINFOCLASS
THREAD_BASIC_INFORMATION
Wx86ThreadState

Functions

CsrGetProcessId
NtQueryInformationFile
NtQueryInformationProcess
NtQueryInformationThread
NtSystemDebugControl
RtlNtStatusToDosError
ZwQueryInformationFile
ZwQueryInformationProcess
ZwQueryInformationThread
ZwSystemDebugControl

Variables

ANYSIZE_ARRAY
CritSecTracingEnabled
DELETE
DbgClonedThread
DbgHasFiberData
DbgInDebugPrint
DbgRanProcessInit
DbgSafeThunkCall
DbgSkipThreadAttach
DbgSuppressDebugMsg
DbgWerInShipAssertCode
ERROR_ACCESS_DENIED
ERROR_ALREADY_EXISTS
ERROR_ALREADY_RUNNING_LKG
ERROR_ASSERTION_FAILURE
ERROR_BAD_ARGUMENTS
ERROR_BAD_LENGTH
ERROR_BAD_PATHNAME
ERROR_BAD_THREADID_ADDR
ERROR_BOOT_ALREADY_ACCEPTED
ERROR_BUFFER_OVERFLOW
ERROR_CALL_NOT_IMPLEMENTED
ERROR_CANNOT_DETECT_DRIVER_FAILURE
ERROR_CANNOT_DETECT_PROCESS_ABORT
ERROR_CIRCULAR_DEPENDENCY
ERROR_CONTROL_C_EXIT
ERROR_DATABASE_DOES_NOT_EXIST
ERROR_DBG_COMMAND_EXCEPTION
ERROR_DBG_CONTINUE
ERROR_DBG_CONTROL_BREAK
ERROR_DBG_CONTROL_C
ERROR_DBG_EXCEPTION_HANDLED
ERROR_DBG_EXCEPTION_NOT_HANDLED
ERROR_DBG_PRINTEXCEPTION_C
ERROR_DBG_REPLY_LATER
ERROR_DBG_RIPEXCEPTION
ERROR_DBG_TERMINATE_PROCESS
ERROR_DBG_TERMINATE_THREAD
ERROR_DBG_UNABLE_TO_PROVIDE_HANDLE
ERROR_DEBUGGER_INACTIVE
ERROR_DIFFERENT_SERVICE_ACCOUNT
ERROR_DIR_NOT_EMPTY
ERROR_DISK_FULL
ERROR_DUPLICATE_SERVICE_NAME
ERROR_ELEVATION_REQUIRED
ERROR_ENVVAR_NOT_FOUND
ERROR_EXCEPTION_IN_SERVICE
ERROR_FAILED_SERVICE_CONTROLLER_CONNECT
ERROR_FILENAME_EXCED_RANGE
ERROR_FILE_EXISTS
ERROR_FILE_NOT_FOUND
ERROR_HANDLE_DISK_FULL
ERROR_HANDLE_EOF
ERROR_INSUFFICIENT_BUFFER
ERROR_INVALID_ADDRESS
ERROR_INVALID_DRIVE
ERROR_INVALID_FLAG_NUMBER
ERROR_INVALID_FUNCTION
ERROR_INVALID_HANDLE
ERROR_INVALID_NAME
ERROR_INVALID_PARAMETER
ERROR_INVALID_SERVICE_LOCK
ERROR_MOD_NOT_FOUND
ERROR_MORE_DATA
ERROR_NOACCESS
ERROR_NONE_MAPPED
ERROR_NOT_ENOUGH_MEMORY
ERROR_NOT_SAFEBOOT_SERVICE
ERROR_NOT_SUPPORTED
ERROR_NO_MORE_FILES
ERROR_NO_MORE_ITEMS
ERROR_NO_RECOVERY_PROGRAM
ERROR_PARTIAL_COPY
ERROR_PATH_NOT_FOUND
ERROR_PRIVILEGE_NOT_HELD
ERROR_PROCESS_ABORTED
ERROR_PROC_NOT_FOUND
ERROR_SEM_TIMEOUT
ERROR_SERVICE_CANNOT_ACCEPT_CTRL
ERROR_SERVICE_DEPENDENCY_DELETED
ERROR_SERVICE_DEPENDENCY_FAIL
ERROR_SERVICE_DOES_NOT_EXIST
ERROR_SERVICE_EXISTS
ERROR_SERVICE_LOGON_FAILED
ERROR_SERVICE_MARKED_FOR_DELETE
ERROR_SERVICE_NEVER_STARTED
ERROR_SERVICE_NOT_ACTIVE
ERROR_SERVICE_NOT_IN_EXE
ERROR_SERVICE_SPECIFIC_ERROR
ERROR_SERVICE_START_HANG
ERROR_SUCCESS
ERROR_THREAD_NOT_IN_PROCESS
ERROR_UNHANDLED_EXCEPTION
ERROR_WOW_ASSERTION
ExceptionCollidedUnwind
ExceptionContinueExecution
ExceptionContinueSearch
ExceptionNestedException
FALSE
FLG_DEBUG_INITIAL_COMMAND
FLG_DEBUG_WINLOGON
FLG_DISABLE_DLL_VERIFICATION
FLG_DISABLE_PAGE_KERNEL_STACKS
FLG_EARLY_CRITICAL_SECTION_EVT
FLG_ENABLE_CLOSE_EXCEPTION
FLG_ENABLE_CSRDEBUG
FLG_ENABLE_DBGPRINT_BUFFERING
FLG_ENABLE_EXCEPTION_LOGGING
FLG_ENABLE_HANDLE_TYPE_TAGGING
FLG_ENABLE_KDEBUG_SYMBOL_LOAD
FLG_HEAP_DISABLE_COALESCING
FLG_HEAP_ENABLE_CALL_TRACING
FLG_HEAP_ENABLE_FREE_CHECK
FLG_HEAP_ENABLE_TAGGING
FLG_HEAP_ENABLE_TAG_BY_DLL
FLG_HEAP_ENABLE_TAIL_CHECK
FLG_HEAP_PAGE_ALLOCS
FLG_HEAP_VALIDATE_ALL
FLG_HEAP_VALIDATE_PARAMETERS
FLG_IGNORE_DEBUG_PRIV
FLG_KERNEL_STACK_TRACE_DB
FLG_MAINTAIN_OBJECT_TYPELIST
FLG_POOL_ENABLE_FREE_CHECK
FLG_POOL_ENABLE_TAGGING
FLG_POOL_ENABLE_TAIL_CHECK
FLG_SHOW_LDR_SNAPS
FLG_STOP_ON_EXCEPTION
FLG_STOP_ON_HUNG_GUI
FLG_USER_STACK_TRACE_DB
FLG_VALID_BITS
FileAccessInformation
FileAlignmentInformation
FileAllInformation
FileAllocationInformation
FileAlternateNameInformation
FileBasicInformation
FileBothDirectoryInformation
FileCompletionInformation
FileCompressionInformation
FileContentIndexInformation
FileCopyOnWriteInformation
FileDirectoryInformation
FileDispositionInformation
FileEaInformation
FileEndOfFileInformation
FileFullDirectoryInformation
FileFullEaInformation
FileInheritContentIndexInformation
FileInternalInformation
FileLinkInformation
FileMailslotQueryInformation
FileMailslotSetInformation
FileMaximumInformation
FileModeInformation
FileMoveClusterInformation
FileNameInformation
FileNamesInformation
FileNetworkOpenInformation
FileObjectIdInformation
FileOleDirectoryInformation
FileOleInformation
FilePipeInformation
FilePipeLocalInformation
FilePipeRemoteInformation
FilePositionInformation
FileQuotaInformation
FileRenameInformation
FileReparsePointInformation
FileStandardInformation
FileStreamInformation
FileTrackingInformation
HeapTracingEnabled
INFINITE
INVALID_HANDLE_VALUE
ImageUsesLargePages
IsImageDynamicallyRelocated
IsLegacyProcess
IsProtectedProcess
MAX_MODULE_NAME32
MAX_PATH
MEM_EXECUTE_OPTION_ATL7_THUNK_EMULATION
MEM_EXECUTE_OPTION_DISABLE
MEM_EXECUTE_OPTION_ENABLE
MEM_EXECUTE_OPTION_PERMANENT
NULL
ObjectAllTypesInformation
ObjectBasicInformation
ObjectHandleInformation
ObjectNameInformation
ObjectTypeInformation
ProcessAccessToken
ProcessAffinityMask
ProcessBasePriority
ProcessBasicInformation
ProcessDebugObjectHandle
ProcessDebugPort
ProcessDefaultHardErrorMode
ProcessEnableAlignmentFaultFixup
ProcessExceptionPort
ProcessExecuteFlags
ProcessHandleCount
ProcessImageFileName
ProcessInJob
ProcessInitializing
ProcessIoCounters
ProcessIoPortHandlers
ProcessLdtInformation
ProcessLdtSize
ProcessPooledUsageAndLimits
ProcessPriorityBoost
ProcessPriorityClass
ProcessQuotaLimits
ProcessRaisePriority
ProcessTimes
ProcessUserModeIOPL
ProcessUsingFTH
ProcessUsingVCH
ProcessUsingVEH
ProcessVmCounters
ProcessWorkingSetWatch
ProcessWow64Information
ProcessWx86Information
READ_CONTROL
RPC_S_SERVER_UNAVAILABLE
RtlDisableUserStackWalk
RtlExceptionAttached
RtlInitialThread
SPECIFIC_RIGHTS_ALL
STANDARD_RIGHTS_ALL
STANDARD_RIGHTS_EXECUTE
STANDARD_RIGHTS_READ
STANDARD_RIGHTS_REQUIRED
STANDARD_RIGHTS_WRITE
SYNCHRONIZE
SkipPatchingUser32Forwarders
SysDbgReadMsr
SysDbgWriteMsr
SystemAddVerifier
SystemBasicInformation
SystemCacheInformation
SystemCallInformation
SystemConfigurationInformation
SystemCrashDumpInformation
SystemCrashDumpStateInformation
SystemCreateSession
SystemDebuggerInformation
SystemDeleteSession
SystemDpcInformation
SystemExceptionInformation
SystemGlobalFlag
SystemHandleInformation
SystemInfo10
SystemInfo13
SystemInfo20
SystemInfo30
SystemInfo31
SystemInfo40
SystemInfo41
SystemInfo42
SystemInfo43
SystemInfo49
SystemInstemulInformation
SystemLoadDriver
SystemLoadImage
SystemLockInformation
SystemLookasideInformation
SystemMemoryUsageInformation1
SystemMemoryUsageInformation2
SystemModuleInformation
SystemNonPagedPoolInformation
SystemObjectInformation
SystemPagedPoolInformation
SystemPagefileInformation
SystemPathInformation
SystemPerformanceInformation
SystemPoolTagInformation
SystemPrioritySeparationInformation
SystemProcessInformation
SystemProcessorCounters
SystemProcessorInformation
SystemProcessorStatistics
SystemRangeStartInformation
SystemRegistryQuotaInformation
SystemSessionProcessesInformation
SystemSetTimeSlipEvent
SystemThreadSwitchInformation
SystemTimeAdjustmentInformation
SystemTimeInformation
SystemTimeZoneInformation
SystemUnloadImage
SystemVerifierInformation
TRUE
ThreadAffinityMask
ThreadAmILastThread
ThreadBasePriority
ThreadBasicInformation
ThreadDescriptorTableEntry
ThreadEnableAlignmentFaultFixup
ThreadEventPair
ThreadHideFromDebugger
ThreadIdealProcessor
ThreadImpersonationToken
ThreadIsIoPending
ThreadPerformanceCount
ThreadPriority
ThreadPriorityBoost
ThreadQuerySetWin32StartAddress
ThreadSetTlsArrayAddress
ThreadTimes
ThreadZeroTlsCell
WAIT_TIMEOUT
WIN32_VERBOSE_MODE
WRITE_DAC
WRITE_OWNER
WinCallHook
WinDllHook
WinFuncHook
__package__
__revision__
_all
_x
os
windll

[hide private]