Native API

0001-01-01

The Native API is an API used by Windows NT and user mode applications.

Most of the native API calls are implemented in ntoskrnl.exe and exposed to user mode via ntdll.dll

The entry point of ntdll.dll is LdrInitializeThunk

Native API calls are handled b the kernel via the System Service Descriptor Table (SSDT)

https://en.wikipedia.org/wiki/Windows_Native_API