Aric Stewart aric@codeweavers.com writes:
I would love to head Alexandre chime in on this. I could go either way. In our private discussions he lead me toward ZwLoadDriver but maybe I misunderstood and I can move this to NtLoadDriver if that is what is better.
There's no NtLoadDriver in ntoskrnl, which makes sense given its purpose. I don't think we want to invent our own.
There's NtLoadDriver in ntdll, but its behavior should of course be different, it's meant to be called from userspace instead of kernel space.