Geoff Chappell, Software Analyst
INTRODUCTION IN OCCASIONAL PROGRESS: There always seem to be more interesting things to do than write introductions.
As well as being the kernel’s public face in user mode, NTDLL does much that might on its own be regarded as system work. In particular, it does the work of loading executable modules.
As usual for NTDLL functions, none of the following are documented. For some, though nowhere near all, KERNEL32 exports a function that is essentially the NTDLL function but re-dressed in some way such as taking arguments in a different form. Such KERNEL32 functions are, of course, to be preferred in practice.