https://github.com/cycyrild/nt-call
Minimal Windows x64 NT syscall dispatcher
https://github.com/cycyrild/nt-call
ntapi syscall windows-internals
Last synced: 27 days ago
JSON representation
Minimal Windows x64 NT syscall dispatcher
- Host: GitHub
- URL: https://github.com/cycyrild/nt-call
- Owner: cycyrild
- Created: 2026-05-08T21:07:53.000Z (2 months ago)
- Default Branch: master
- Last Pushed: 2026-05-28T20:37:37.000Z (about 1 month ago)
- Last Synced: 2026-05-28T22:05:00.078Z (about 1 month ago)
- Topics: ntapi, syscall, windows-internals
- Language: C++
- Homepage:
- Size: 115 KB
- Stars: 0
- Watchers: 0
- Forks: 0
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
Awesome Lists containing this project
README
# nt-call
Minimal NT syscall dispatcher for Windows x64.
`nt-call` provides a generic interface for invoking NT system calls using:
- runtime syscall numbers
- external `syscall; ret` stubs
- a single syscall bridge
## Use Cases
- Direct NT syscall dispatching
- Runtime-oriented alternative to SysWhispers-like stub generation
## Example
```cpp
HMODULE ntdll = GetModuleHandleW(L"ntdll.dll");
FARPROC pNtClose =
GetProcAddress(ntdll, "NtClose");
NTSTATUS status =
nt::NtCall(
0x000F, // Syscall number
(uintptr_t)pNtClose + 0x12, // "syscall; ret" stub
handle // NtClose(HANDLE)
);
```