Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

NTDLL is NT’s kernel ABI, not syscalls. Nothing on Windows uses syscalls to call the kernel.

NTDLL isn’t some higher level library. It’s just a series of entry points into NT kernel.





Yes, the fact that functions in NTDLL issue a syscall instruction is a platform-specific implementation detail.



Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: