Package winappdbg :: Package win32 :: Module ntdll
[hide private]
[frames] | no frames]

Module ntdll

source code

Debugging API wrappers in ctypes.


See Also: http://apps.sourceforge.net/trac/winappdbg/wiki/Win32APIWrappers

Classes [hide private]
  PROCESS_BASIC_INFORMATION
  THREAD_BASIC_INFORMATION
  FILE_NAME_INFORMATION
  SYSDBG_MSR
  IO_STATUS_BLOCK
  PIO_STATUS_BLOCK
Functions [hide private]
 
RtlNtStatusToDosError(Status) source code
 
NtSystemDebugControl(Command, InputBuffer=None, InputBufferLength=None, OutputBuffer=None, OutputBufferLength=None) source code
 
ZwSystemDebugControl(Command, InputBuffer=None, InputBufferLength=None, OutputBuffer=None, OutputBufferLength=None) source code
 
NtQueryInformationProcess(ProcessHandle, ProcessInformationClass, ProcessInformationLength=None) source code
 
ZwQueryInformationProcess(ProcessHandle, ProcessInformationClass, ProcessInformationLength=None) source code
 
NtQueryInformationThread(ThreadHandle, ThreadInformationClass, ThreadInformationLength=None) source code
 
ZwQueryInformationThread(ThreadHandle, ThreadInformationClass, ThreadInformationLength=None) source code
 
NtQueryInformationFile(FileHandle, FileInformationClass, FileInformation, Length) source code
 
ZwQueryInformationFile(FileHandle, FileInformationClass, FileInformation, Length) source code
 
CsrGetProcessId() source code
Variables [hide private]
  __revision__ = '$Id: ntdll.py 478 2009-11-28 04:19:09Z qvasimo...
  MEM_EXECUTE_OPTION_ENABLE = 1
  MEM_EXECUTE_OPTION_DISABLE = 2
  MEM_EXECUTE_OPTION_ATL7_THUNK_EMULATION = 4
  MEM_EXECUTE_OPTION_PERMANENT = 8
  SystemBasicInformation = 1
  SystemProcessorInformation = 2
  SystemPerformanceInformation = 3
  SystemTimeInformation = 4
  SystemPathInformation = 5
  SystemProcessInformation = 6
  SystemCallInformation = 7
  SystemConfigurationInformation = 8
  SystemProcessorCounters = 9
  SystemGlobalFlag = 10
  SystemInfo10 = 11
  SystemModuleInformation = 12
  SystemLockInformation = 13
  SystemInfo13 = 14
  SystemPagedPoolInformation = 15
  SystemNonPagedPoolInformation = 16
  SystemHandleInformation = 17
  SystemObjectInformation = 18
  SystemPagefileInformation = 19
  SystemInstemulInformation = 20
  SystemInfo20 = 21
  SystemCacheInformation = 22
  SystemPoolTagInformation = 23
  SystemProcessorStatistics = 24
  SystemDpcInformation = 25
  SystemMemoryUsageInformation1 = 26
  SystemLoadImage = 27
  SystemUnloadImage = 28
  SystemTimeAdjustmentInformation = 29
  SystemMemoryUsageInformation2 = 30
  SystemInfo30 = 31
  SystemInfo31 = 32
  SystemCrashDumpInformation = 33
  SystemExceptionInformation = 34
  SystemCrashDumpStateInformation = 35
  SystemDebuggerInformation = 36
  SystemThreadSwitchInformation = 37
  SystemRegistryQuotaInformation = 38
  SystemLoadDriver = 39
  SystemPrioritySeparationInformation = 40
  SystemInfo40 = 41
  SystemInfo41 = 42
  SystemInfo42 = 43
  SystemInfo43 = 44
  SystemTimeZoneInformation = 45
  SystemLookasideInformation = 46
  SystemSetTimeSlipEvent = 47
  SystemCreateSession = 48
  SystemDeleteSession = 49
  SystemInfo49 = 50
  SystemRangeStartInformation = 51
  SystemVerifierInformation = 52
  SystemAddVerifier = 53
  SystemSessionProcessesInformation = 54
  ProcessBasicInformation = 0
  ProcessQuotaLimits = 1
  ProcessIoCounters = 2
  ProcessVmCounters = 3
  ProcessTimes = 4
  ProcessBasePriority = 5
  ProcessRaisePriority = 6
  ProcessDebugPort = 7
  ProcessExceptionPort = 8
  ProcessAccessToken = 9
  ProcessLdtInformation = 10
  ProcessLdtSize = 11
  ProcessDefaultHardErrorMode = 12
  ProcessIoPortHandlers = 13
  ProcessPooledUsageAndLimits = 14
  ProcessWorkingSetWatch = 15
  ProcessUserModeIOPL = 16
  ProcessEnableAlignmentFaultFixup = 17
  ProcessPriorityClass = 18
  ProcessWx86Information = 19
  ProcessHandleCount = 20
  ProcessAffinityMask = 21
  ProcessPriorityBoost = 22
  ProcessWow64Information = 26
  ProcessImageFileName = 27
  ProcessDebugObjectHandle = 30
  ProcessExecuteFlags = 34
  ThreadBasicInformation = 0
  ThreadTimes = 1
  ThreadPriority = 2
  ThreadBasePriority = 3
  ThreadAffinityMask = 4
  ThreadImpersonationToken = 5
  ThreadDescriptorTableEntry = 6
  ThreadEnableAlignmentFaultFixup = 7
  ThreadEventPair = 8
  ThreadQuerySetWin32StartAddress = 9
  ThreadZeroTlsCell = 10
  ThreadPerformanceCount = 11
  ThreadAmILastThread = 12
  ThreadIdealProcessor = 13
  ThreadPriorityBoost = 14
  ThreadSetTlsArrayAddress = 15
  ThreadIsIoPending = 16
  ThreadHideFromDebugger = 17
  ObjectBasicInformation = 0
  ObjectNameInformation = 1
  ObjectTypeInformation = 2
  ObjectAllTypesInformation = 3
  ObjectHandleInformation = 4
  FileDirectoryInformation = 1
  FileFullDirectoryInformation = 2
  FileBothDirectoryInformation = 3
  FileBasicInformation = 4
  FileStandardInformation = 5
  FileInternalInformation = 6
  FileEaInformation = 7
  FileAccessInformation = 8
  FileNameInformation = 9
  FileRenameInformation = 10
  FileLinkInformation = 11
  FileNamesInformation = 12
  FileDispositionInformation = 13
  FilePositionInformation = 14
  FileFullEaInformation = 15
  FileModeInformation = 16
  FileAlignmentInformation = 17
  FileAllInformation = 18
  FileAllocationInformation = 19
  FileEndOfFileInformation = 20
  FileAlternateNameInformation = 21
  FileStreamInformation = 22
  FilePipeInformation = 23
  FilePipeLocalInformation = 24
  FilePipeRemoteInformation = 25
  FileMailslotQueryInformation = 26
  FileMailslotSetInformation = 27
  FileCompressionInformation = 28
  FileCopyOnWriteInformation = 29
  FileCompletionInformation = 30
  FileMoveClusterInformation = 31
  FileQuotaInformation = 32
  FileReparsePointInformation = 33
  FileNetworkOpenInformation = 34
  FileObjectIdInformation = 35
  FileTrackingInformation = 36
  FileOleDirectoryInformation = 37
  FileContentIndexInformation = 38
  FileInheritContentIndexInformation = 37
  FileOleInformation = 39
  FileMaximumInformation = 40
  ExceptionContinueExecution = 0
  ExceptionContinueSearch = 1
  ExceptionNestedException = 2
  ExceptionCollidedUnwind = 3
  SysDbgReadMsr = 16
  SysDbgWriteMsr = 17
  __package__ = 'winappdbg.win32'
Variables Details [hide private]

__revision__

Value:
'$Id: ntdll.py 478 2009-11-28 04:19:09Z qvasimodo $'