Reverse Engineering for Beginners

CHAPTER 66. SYSTEM CALLS (SYSCALL-S) CHAPTER 66. SYSTEM CALLS (SYSCALL-S)

Compilation:

nasm -f elf32 1.s

ld 1.o

The full list of syscalls in Linux:http://go.yurichev.com/17319.

For system calls interception and tracing in Linux, strace(71 on page 704) can be used.

66.2 Windows.

Here they are called viaint 0x2eor using the special x86 instructionSYSENTER.

The full list of syscalls in Windows:http://go.yurichev.com/17320.

Further reading:

“Windows Syscall Shellcode” by Piotr Bania:
http://go.yurichev.com/17321.