logoalt Hacker News

pcwalton • today at 4:49 AM • 1 reply • view on HN

Windows apps don't use syscalls directly; they call into kernel32.dll, which is convenient for Wine. (Microsoft enforces this by scrambling the syscall numbers on OS updates [1].)

[1]: https://j00ru.vexillium.org/syscalls/nt/64/


Replies

throwaway27448 • today at 6:41 AM

Huh, now I know. I suppose macos is the same way these days even if you can technically bypass it.

➕ show 1 reply