Geoff Chappell - Software Analyst
SKETCH OF HOW RESEARCH MIGHT CONTINUE AND RESULTS BE PRESENTED
The LDR_DDAG_STATE enumeration is known only for the State member of the LDR_DDAG_NODE structure.
The defined values are known from Microsoft’s symbol files for the kernel and NTDLL starting with Windows 8.
| Value | Name |
|---|---|
| -5 | LdrModulesMerged |
| -4 | LdrModulesInitError |
| -3 | LdrModulesSnapError |
| -2 | LdrModulesUnloaded |
| -1 | LdrModulesUnloading |
| 0 | LdrModulesPlaceHolder |
| 1 | LdrModulesMapping |
| 2 | LdrModulesMapped |
| 3 | LdrModulesWaitingForDependencies |
| 4 | LdrModulesSnapping |
| 5 | LdrModulesSnapped |
| 6 | LdrModulesCondensed |
| 7 | LdrModulesReadyToInit |
| 8 | LdrModulesInitializing |
| 9 | LdrModulesReadyToRun |