Comment on Windows 95 defenses against installers that overwrite a file with an older oneparentComments−MarkSweep5moThe best statement of whether or not calling functions in ntdll is here: https://learn.microsoft.com/en-us/windows-hardware/drivers/k...documentation for the WDK and Windows SDK recommends that application developers avoid calling undocumented Nt entry pointsSo it's safe to call documented ntdll functions. But calling undocumented functions is more risky.
Comments
The best statement of whether or not calling functions in ntdll is here: https://learn.microsoft.com/en-us/windows-hardware/drivers/k...
So it's safe to call documented ntdll functions. But calling undocumented functions is more risky.