I'm not sure what you're trying to say here, but those "shims" exist. Apps generally do not talk directly to the Executive (kernel). Instead, the OS has protect

I'm not sure what you're trying to say here, but those "shims" exist. Apps generally do not talk directly to the Executive (kernel). Instead, the OS has protected subsystems that publish APIs. Apps talk to the subsystem, and the subsystem talks to the Executive (kernel). Traditionally, Windows apps talk to the Win32 subsystem[1]. This subsystem, as currently designed, is an issue as described in my previous comment. 1. https://en.wikipedia.org/wiki/Architecture_of_Windows_NT#Win32_environment_subsystem https://en.wikipedia.org/wiki/Architecture_of_Windows_NT#Win... Caveat: Details of this may have changed in the last couple major Windows versions. I've been out of the NT game for a bit. Someone correct me, if so.