Windows Native API Programming

This book is fantastic if you want to learn the Native Windows API this is different from the normal user mode windows APIs. This API layer talks directly to the kernel which is useful for understanding the windows kernel.It walks you through many examples of undocumented windows APIs with example code and explanations along the way. The key point of this book is the fact that these are undocumented APIs. This is stuff you will not find on the MSDN documentation. I would argue the best audience for this is security people with a coding background in c or c++.