On Windows, however, there are far too many places where message handlers are registered to watch them all, requiring a different strategy. Fortunately, the kernel always sends control to user mode at a small set of dispatcher routines in a special system library called ntdll. The target dispatcher then calls the appropriate application handler.