Syscall-Tracer is a tool designed for reverse engineering and debugging, specifically focused on extracting system call numbers from ntdll.dll. By scanning and resolving function names dynamically, this tracer aids in syscall analysis and memory forensics.
- Extracts syscall numbers for all functions from
ntdll.dll - Supports dynamic resolution of API calls
- Useful for stealth debugging and runtime analysis
- Designed to work efficiently with memory protection mechanisms