ldrinit.c File Reference

#include <ntdll.h>
#include <callback.h>
#include <debug.h>

Go to the source code of this file.

Defines
#define	NDEBUG
#define	DEFAULT_SECURITY_COOKIE   0xBB40E64E
Functions
VOID	RtlpInitializeVectoredExceptionHandling (VOID)
VOID NTAPI	RtlpInitDeferedCriticalSection (VOID)
VOID	RtlInitializeHeapManager (VOID)
NTSTATUS	LdrPerformRelocations (PIMAGE_NT_HEADERS NTHeaders, PVOID ImageBase)
void	actctx_init (void)
NTSTATUS NTAPI	LdrOpenImageFileOptionsKey (IN PUNICODE_STRING SubKey, IN BOOLEAN Wow64, OUT PHANDLE NewKeyHandle)
NTSTATUS NTAPI	LdrQueryImageFileKeyOption (IN HANDLE KeyHandle, IN PCWSTR ValueName, IN ULONG Type, OUT PVOID Buffer, IN ULONG BufferSize, OUT PULONG ReturnedLength OPTIONAL)
NTSTATUS NTAPI	LdrQueryImageFileExecutionOptionsEx (IN PUNICODE_STRING SubKey, IN PCWSTR ValueName, IN ULONG Type, OUT PVOID Buffer, IN ULONG BufferSize, OUT PULONG ReturnedLength OPTIONAL, IN BOOLEAN Wow64)
NTSTATUS NTAPI	LdrQueryImageFileExecutionOptions (IN PUNICODE_STRING SubKey, IN PCWSTR ValueName, IN ULONG Type, OUT PVOID Buffer, IN ULONG BufferSize, OUT PULONG ReturnedLength OPTIONAL)
VOID NTAPI	LdrpEnsureLoaderLockIsHeld ()
PVOID NTAPI	LdrpFetchAddressOfSecurityCookie (PVOID BaseAddress, ULONG SizeOfImage)
PVOID NTAPI	LdrpInitSecurityCookie (PLDR_DATA_TABLE_ENTRY LdrEntry)
VOID NTAPI	LdrpInitializeThread (IN PCONTEXT Context)
NTSTATUS NTAPI	LdrpRunInitializeRoutines (IN PCONTEXT Context OPTIONAL)
NTSTATUS NTAPI	LdrShutdownProcess (VOID)
NTSTATUS NTAPI	LdrShutdownThread (VOID)
NTSTATUS NTAPI	LdrpInitializeTls (VOID)
NTSTATUS NTAPI	LdrpAllocateTls (VOID)
VOID NTAPI	LdrpFreeTls (VOID)
NTSTATUS NTAPI	LdrpInitializeApplicationVerifierPackage (PUNICODE_STRING ImagePathName, PPEB Peb, BOOLEAN SystemWide, BOOLEAN ReadAdvancedOptions)
NTSTATUS NTAPI	LdrpInitializeExecutionOptions (PUNICODE_STRING ImagePathName, PPEB Peb, PHANDLE OptionsKey)
VOID NTAPI	LdrpValidateImageForMp (IN PLDR_DATA_TABLE_ENTRY LdrDataTableEntry)
NTSTATUS NTAPI	LdrpInitializeProcess (IN PCONTEXT Context, IN PVOID SystemArgument1)
VOID NTAPI	LdrpInitFailure (NTSTATUS Status)
VOID NTAPI	LdrpInit (PCONTEXT Context, PVOID SystemArgument1, PVOID SystemArgument2)
Variables
HANDLE	ImageExecOptionsKey
HANDLE	Wow64ExecOptionsKey
UNICODE_STRING	ImageExecOptionsString = RTL_CONSTANT_STRING(L"\\Registry\\Machine\\Software\\Microsoft\\Windows NT\\CurrentVersion\\Image File Execution Options")
UNICODE_STRING	Wow64OptionsString = RTL_CONSTANT_STRING(L"")
UNICODE_STRING	NtDllString = RTL_CONSTANT_STRING(L"ntdll.dll")
BOOLEAN	LdrpInLdrInit
LONG	LdrpProcessInitialized
BOOLEAN	LdrpLoaderLockInit
BOOLEAN	LdrpLdrDatabaseIsSetup
BOOLEAN	LdrpShutdownInProgress
HANDLE	LdrpShutdownThreadId
BOOLEAN	LdrpDllValidation
PLDR_DATA_TABLE_ENTRY	LdrpImageEntry
PUNICODE_STRING	LdrpTopLevelDllBeingLoaded
WCHAR	StringBuffer [156]
PTEB	LdrpTopLevelDllBeingLoadedTeb
PLDR_DATA_TABLE_ENTRY	LdrpCurrentDllInitializer
PLDR_DATA_TABLE_ENTRY	LdrpNtDllDataTableEntry
RTL_BITMAP	TlsBitMap
RTL_BITMAP	TlsExpansionBitMap
RTL_BITMAP	FlsBitMap
BOOLEAN	LdrpImageHasTls
LIST_ENTRY	LdrpTlsList
ULONG	LdrpNumberOfTlsEntries
ULONG	LdrpNumberOfProcessors
PVOID	NtDllBase
LARGE_INTEGER	RtlpTimeout
BOOLEAN	RtlpTimeoutDisable
LIST_ENTRY	LdrpHashTable [LDR_HASH_TABLE_ENTRIES]
LIST_ENTRY	LdrpDllNotificationList
HANDLE	LdrpKnownDllObjectDirectory
UNICODE_STRING	LdrpKnownDllPath
WCHAR	LdrpKnownDllPathBuffer [128]
UNICODE_STRING	LdrpDefaultPath
PEB_LDR_DATA	PebLdr
RTL_CRITICAL_SECTION_DEBUG	LdrpLoaderLockDebug
RTL_CRITICAL_SECTION	LdrpLoaderLock
RTL_CRITICAL_SECTION	FastPebLock
BOOLEAN	ShowSnaps
ULONG	LdrpFatalHardErrorCount
ULONG	LdrpActiveUnloadCount
BOOLEAN	RtlpPageHeapEnabled
ULONG	RtlpDisableHeapLookaside
ULONG	RtlpShutdownProcessFlags