nt-native-api

I want to call some Native API function from the user mode with C++. I was wondering if it is possible to circumvent the Windows API interface completely and call directly the Native API functions from the user mode. If possible then any code examples will be really helpful. Yes it is possible, as all functions are exposed ntdll.dll . However you would need to write your own header file for those API functions you want to use. There is no official documentation on the NT API and it is not really meant to be used directly. But it is possible. Here is a starting point. 来源： https://stackoverflow

Recently I've been using lot of Assembly language in *NIX operating systems. I was wondering about the windows domain. Calling convention in linux: mov $SYS_Call_NUM, %eax mov $param1 , %ebx mov $param2 , %ecx int $0x80 Thats it. That is how we should make a system call in linux. Reference of all system calls in linux: Regarding which $SYS_Call_NUM & which parameters we can use this reference : http://docs.cs.up.ac.za/programming/asm/derick_tut/syscalls.html OFFICIAL Reference : http://kernel.org/doc/man-pages/online/dir_section_2.html Calling convention in Windows: ??? Reference of all system