b1tg / syscall-finder

Find Windows syscall numbers from ntdll.dll

syscall-finder

Find Windows syscall numbers from ntdll.dll

# syscall-finder.exe <ntdll.dll path> <func-name>
$ ./syscall-finder.exe C:\Windows\System32\ntdll.dll NtAllocateVirtualMemory
syscall code: 24(0x18)