When I read the title, I thought this was going to be a REALLY stupid post. But this post is amazing and explains a pretty tricky concept, and history, of "sub

When I read the title, I thought this was going to be a REALLY stupid post. But this post is amazing and explains a pretty tricky concept, and history, of "subsystems" in a pretty easy way. Effectively, Kernel32(Now KernelBase) has the logic for usermode stuff, and goes into ntdll solely for syscall stubs. It then gently eases the idea of User32 having a similar purpose, as well as GDI. These are the 3 "subsystems" that interact with the Kernel, and it's a pretty core concept, but alot of newbies struggle to understand.