The functions exported from ntdll.dll on windows nt/2000/xp are not documented in the
conventional win32 sdk,where i can find information about their prototypes and
data structures?
Examples: NtCreateFile,NtCreateProcess,NtCreateKey,LdrLoadDl l,...
Printable View
The functions exported from ntdll.dll on windows nt/2000/xp are not documented in the
conventional win32 sdk,where i can find information about their prototypes and
data structures?
Examples: NtCreateFile,NtCreateProcess,NtCreateKey,LdrLoadDl l,...
They're not designed to be used by conventional applications, so you'll have a hard time finding anything about them (Although the usage of NtCreateFile and its supporting functions is pretty obvious).
http://www.sysinternals.com/Information/NativeApi.html
Systernals wrote up a little page on there, I thought the was a .chm on it, I guess not. Have a look around though, that page is interesting.