Jump to navigation Jump to search This article is about a computer file that contains a part of Windows kernel, among other things. Ntkrnlpa.exe server 2003 article may be too technical for most readers to understand.
Please help improve it to make it understandable to non-experts, without removing the technical details. This section needs additional citations for verification. Overall, there are four kernel image files for each revision of Windows, and two kernel image files for each Windows system. Multiprocessor or uniprocessor files are selected at install time, and PAE or non-PAE files are selected by boot. Routines in ntoskrnl use prefixes on their names to indicate in which component of ntoskrnl they are defined. The following table lists some of them. Windows executive, an “outer layer” of Ntoskrnl.
Nt or Zw are system calls declared in ntdll. When calling the functions directly in ntoskrnl. Zw variants ensure kernel mode, whereas the Nt variants do not. When the kernel receives control, it gets a pointer to a structure as parameter.