You cannot call syscalls directly, as the syscall table is generated dynamically from the kernel source code on NT. The closest thing you can do is call the Nt*

You cannot call syscalls directly, as the syscall table is generated dynamically from the kernel source code on NT. The closest thing you can do is call the Nt* class of functions, which are often direct thunks to syscalls.