> Another weird thing that keeps popping into my head is native > ntdll. If > we can trap int 2F (or whatever), then it may be possible to use NT's > ntdll.dll, and hence every NT DLL. IIRC is the version of the ntdll linked to the version of the kernel, it can't be exchanged even between different service packs, so I don't think it will be possible or at least not without difficulty. Of course actually implementing int 2F _much_ more difficult...
