3 ms·
Fine, but you get this thanks to already being linked with these megagodzillas like kernel32.dll. Try without them.
by qb45 10y ago
Fine, but you get this thanks to already being linked with these megagodzillas like kernel32.dll. Try without them.
- vertex-four 10y agoA program which isn't linked against the Win32 stuff is an invalid program, since syscalls in Windows are not at all stable.
- ekr 10y agoOn windows nt, ntdll gets loaded in all processes, it's hardcoded in the kernel (http://gate.upm.ro/os/LABs/Windows_OS_Internals_Curriculum_Resource_Kit-ACADEMIC/WindowsResearchKernel-WRK/WRK-v1.2/base/ntos/ps/psinit.c http://gate.upm.ro/os/LABs/Windows_OS_Internals_Curriculum_R...). That's where the loader resides, so you can't go without it. And that's where all the Zw/Nt* functions/ i.e. where the syscalls are. So you can't really go without it.
- tubs 10y agoExcept the new picoprocesses, which don't get ntdll (or anything really, I guess).