int 2eh 方式调用Native api
小技巧。但是用的人好像不多。例子: Windows 2000 下
NtQuerySystemInformationNo = 0x97;
_declspec(naked)
NTSTATUS __stdcall PrivateNtQuerySystemInformation
(IN SYSTEM_INFORMATION_CLASS,
IN OUT PVOID,
IN ULONG,
OUT PULONG OPTIONAL)
{
_asm {
mov eax, NtQuerySystemInformationNo
lea edx, [esp+4]
int 2Eh
ret 10h
}
}
int 2eh 方式调用Native api
https://usmacd.com/cn/int23_native_api/