mirror of
https://github.com/youssefnoob003/SindriKit
synced 2026-07-07 21:57:09 +00:00
sibouzitoun
82 lines
2.6 KiB
C
82 lines
2.6 KiB
C
#ifndef SND_PRIMITIVES_SYSCALLS_COMMON_H
|
|
#define SND_PRIMITIVES_SYSCALLS_COMMON_H
|
|
|
|
#include <sindri/common/helpers.h>
|
|
#include <sindri/common/status.h>
|
|
#include <sindri/internal/nt_defs.h>
|
|
#include <sindri/primitives/os_api.h>
|
|
#include <windows.h>
|
|
|
|
SND_BEGIN_EXTERN_C
|
|
|
|
/**
|
|
* @brief Syscall entry structure holding the address, hash, and syscall number.
|
|
*/
|
|
typedef struct {
|
|
PVOID pAddress;
|
|
DWORD dwHash;
|
|
WORD wSystemCall;
|
|
} snd_syscall_entry_t;
|
|
|
|
/**
|
|
* @brief Arguments struct passed to the generic ASM syscall invoker.
|
|
*/
|
|
typedef struct {
|
|
WORD ssn;
|
|
PVOID arg1;
|
|
PVOID arg2;
|
|
PVOID arg3;
|
|
PVOID arg4;
|
|
PVOID arg5;
|
|
PVOID arg6;
|
|
PVOID arg7;
|
|
PVOID arg8;
|
|
PVOID arg9;
|
|
PVOID arg10;
|
|
} snd_syscall_args_t;
|
|
|
|
/**
|
|
* @brief Universal function signature for any syscall resolution strategy.
|
|
* Any custom or future gate can be plugged into the engine if it matches this.
|
|
*/
|
|
typedef snd_status_t (*snd_syscall_resolver_t)(PVOID ntdll_base, DWORD func_hash, snd_syscall_entry_t *entry_out);
|
|
|
|
snd_status_t snd_hell_extract_syscall(PVOID ntdll_base, DWORD func_hash, snd_syscall_entry_t *entry_out);
|
|
snd_status_t snd_halo_extract_syscall(PVOID ntdll_base, DWORD func_hash, snd_syscall_entry_t *entry_out);
|
|
snd_status_t snd_tartarus_extract_syscall(PVOID ntdll_base, DWORD func_hash, snd_syscall_entry_t *entry_out);
|
|
snd_status_t snd_veles_extract_syscall(PVOID ntdll_base, DWORD func_hash, snd_syscall_entry_t *entry_out);
|
|
|
|
/**
|
|
* @brief Sets the primary syscall resolution strategy using a function pointer.
|
|
* @param resolver The resolver function to use as the primary strategy.
|
|
*/
|
|
void snd_set_syscall_strategy(snd_syscall_resolver_t resolver);
|
|
|
|
/**
|
|
* @brief Adds a fallback syscall resolution strategy to the pipeline.
|
|
* @param resolver The fallback resolver function to add.
|
|
* @return SND_OK on success, or an error if the pipeline is full.
|
|
*/
|
|
snd_status_t snd_add_syscall_strategy(snd_syscall_resolver_t resolver);
|
|
|
|
/**
|
|
* @brief Core resolution entrypoint (evaluates the internal fallback chain
|
|
* automatically).
|
|
*
|
|
* @param func_hash The hash of the target syscall function name.
|
|
* @param entry_out Pointer to the entry structure to populate.
|
|
* @return SND_OK on success, or an error code if resolution fails.
|
|
*/
|
|
snd_status_t snd_resolve_syscall(DWORD func_hash, snd_syscall_entry_t *entry_out);
|
|
|
|
/**
|
|
* @brief ASM stub for invoking syscalls.
|
|
* @param args Pointer to the syscall arguments structure.
|
|
* @return The NTSTATUS returned by the syscall.
|
|
*/
|
|
extern NTSTATUS snd_invoke_syscall_asm(snd_syscall_args_t *args);
|
|
|
|
SND_END_EXTERN_C
|
|
|
|
#endif // SND_PRIMITIVES_SYSCALLS_COMMON_H
|