How Windows API Works Under the Hood

In this video we will follow a Python open file function call all the way to the native API of Windows.

Tools:
- windbg - winget install windbg
- Visual Studio Build Tools
- Python 3.10 IDLE

Docs used in video:

[frddyfrsh]

Unbelievable, one random guy can do what the biggest SW company in the world is not able to do.
A 5 minute hands on video about windbg, which teaches enough to get started. Including proper English, resolution and good audio quality. And without 20 minutes of BS.

[HarperLee]

You just make hours of reading and searching on MSDN into 5 mins, great video sir.

[guilhermecarvalhotrindade]

Odd time to upload a video, but I’ll take it. Thanks for your work: the world needs more no-nonsense guides like this.

[paulushdk]

Your channel will BLOW UP!! what an amazing video and youtube channel!!

[lalitshankarchowdhury]

Keep these videos coming man! A real treasure trove of knowledge!

[tom_zanna]

Direct, simple and pragmatic... simply fantastic! From today you have a new subscriber to the channel

[abcdefg-nuxj]

thanks for the video. something i've been looking for (you can take it as a video suggestion) is a video comparing syscalls in linux vs windows, focusing on the difference between how the syscall ID and arguments are passed using registers in linux and windows.

[SaiponathGames]

As a new C programmer, where could I find the documentation of the C standard library? I am using multiple sources like GeekforGeeks, Javatpoint, etc. I would love to have a one source whom I can depend on. Do you know any?

[genohm]

This is amazingly cool!!!
plz more of things like that.... windows internals are much harder to learn than linux ones

[adamhafchadi]

Hey Nir,
First, Thanks for another great video
can you make more tutorials about winDg? maybe focusing on blue screen debugging
I didn't find any good examples of how to debug blue screen so I just re install windows :(

[GuildOfCalamity]

Nice video, would love to see this done on the FileSystemWatcher process.

[dylanh]

People complain about GDB, but I find the command-names/mnemonics for WinDBG far more obtuse.

GDB uses `bt` to show a backtrace of the stack, whereas WinDBG uses `k`, for instance.

Any good "cheat sheet" suggestions for WinDBG?

[jasdfff]

Very cool video!! I would still happily watch it if it were 1 hour long and more detailed! Thanks.

[kinershah]

Nice video, WinDbg is so similar to gdb or maybe better 🤔. So to summarize working, user level function calls the windows api functions which in turn calls kernel functions which actually execute the operation (syscall). Right?

[christianfoster]

First time seeing WinDbg, and based on other comments, showing how to actually quick start work with it.