Quantcast
Channel: Active questions tagged kernel - Stack Overflow
Viewing all articles
Browse latest Browse all 6334

Viewing how Windows syscalls are handled by OS

$
0
0

I am trying to figure out how syscalls are performed on kernel, Are there any good explanation about what exactly happens on kernel, when a "syscall" instruction is encountered. What are the ways to view those kernel-mode callbacks and maybe documenting some undocumented functions.

Basically what I'm asking

mov eax, 23h ; NtQueryVirtualMemorysyscall      ; Any way to view what OS does, how it fills registers, sets return value etc. after executing this instruction

Thanks.


Viewing all articles
Browse latest Browse all 6334

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>