Undocumented functions of NTDLL

2OOO, 27 December

typedef struct _PEB_LDR_DATA {


  ULONG                   Length;
  BOOLEAN                 Initialized;
  PVOID                   SsHandle;
  LIST_ENTRY              InLoadOrderModuleList;
  LIST_ENTRY              InMemoryOrderModuleList;
  LIST_ENTRY              InInitializationOrderModuleList;



} PEB_LDR_DATA, *PPEB_LDR_DATA;

Length
Size of structure, used by ntdll.dll as structure version ID.

Initialized
If set, loader data section for current process is initialized.

SsHandle
- ???

InLoadOrderModuleList
Doubly linked list containing pointers to LDR_MODULE structure for previous and next module in load order.

InMemoryOrderModuleList
As above, but in memory placement order.

InInitializationOrderModuleList
As InLoadOrderModuleList, but in initialization order.