Path: news.mitre.org!blanket.mitre.org!agate!newsgate.duke.edu!nntprelay.mathworks.com!news-peer.gip.net!news-penn.gip.net!news.gsl.net!gip.net!news.NetVision.net.il!not-for-mail
From: "Roman Rutman" <romanr@DELETE-ITmailhost.net>
Newsgroups: comp.os.ms-windows.programmer.nt.kernel-mode
Subject: Re: Undocumented NT SYSTEM CALLS CODES AND PROTOTYPES
Date: Fri, 28 Nov 1997 14:21:40 +0200
Organization: NetVision LTD.
Lines: 18
Message-ID: <65md6c$2qt$1@news.NetVision.net.il>
References: <347D563C.2CE572D9@iris.co.il>
NNTP-Posting-Host: romik-home.softwinter.com
X-Newsreader: Microsoft Outlook Express 4.71.1712.3
X-MimeOLE: Produced By Microsoft MimeOLE V4.71.1712.3

>I have some UNDOCUMENTED NT SYSTEM CALLS PROTOTYPES AND CODES.
>I got it from the Registry Monitor source code which is attached to this
>message.
>The source code contains the prototypes and codes for ONLY registry
>access calls.
>Does anyone know the remaining system-calls codes and prototypes???

For what you need them?
Simple go to any Zw function and read dword after address of function +1.
it will be ok for Intel machines,

Shalom from Tel-Aviv,

Roman Rutman