Question : Using NATIVE NT Calls in a DRIVER

There are some calls like NTSuspendThread, ZwSuspendThread, etc as part of the native NT calls. These calls are not available as part of the NT DDK. These calls are also not present in the NTOSKRNL.LIB, but are present in NTDLL.LIB. Is there a way to use such calls in the NT KERNEL DRIVER (not a native program and not in user space).

Answer : Using NATIVE NT Calls in a DRIVER

You need to purchase the IFS Kit from Microsoft. Believe it or not, the IFS (which contains about 25 more apis) costs $1,000 !!!  You also have to sign an NDA. I think they figure that they will weed out the people that aren't serious that way.

The Microsoft IFS Kit home page is at http://www.microsoft.com/hwdev/ntifskit/default.htm

HTH,
Tom
Random Solutions  
 
programming4us programming4us