undefined | Better HN

0 pointssedatk4mo ago0 comments

NTDLL is NT’s kernel ABI, not syscalls. Nothing on Windows uses syscalls to call the kernel.

NTDLL isn’t some higher level library. It’s just a series of entry points into NT kernel.

0 comments

dcrazy4mo ago

Yes, the fact that functions in NTDLL issue a syscall instruction is a platform-specific implementation detail.

j / k navigate · click thread line to collapse

dcrazy4mo ago

Yes, the fact that functions in NTDLL issue a syscall instruction is a platform-specific implementation detail.

j / k navigate · click thread line to collapse