4 ms·
Windows syscall interface changes all the time. [1] has a table of windows syscall numbers. Just looking at the first syscall, NtAcceptConnectPort, you can se
by moonchild 6y ago
Windows syscall interface changes all the time. [1] has a table of windows syscall numbers. Just looking at the first syscall, NtAcceptConnectPort, you can see that all windowses up to and including 7 used 0x60; windows 8 changed to 0x61; 8.1 changed it to 1; and then 10 changed it to 2.
1. https://j00ru.vexillium.org/syscalls/nt/64/ https://j00ru.vexillium.org/syscalls/nt/64/
- sedatk 6y agoI see, that’s interesting. I guess software ecosystem almost always uses Ntdll instead of raw syscalls. I’m still curious why there’s been a reshuffling at all.
- pjmlp 6y agoThe kernel has been refactored several times. The most famous one being MinWin https://arstechnica.com/information-technology/2007/10/core-of-windows-7-taking-shape-meet-the-minwin-kernel/ https://arstechnica.com/information-technology/2007/10/core-... During Windows 10 that happened also a couple of times.