File talk:RevEngMSArch.JPG

This diagram is incorrect. NTDLL is a user-mode DLL, not a kernel-mode module.