Struct IndirectSyscall 

pub struct IndirectSyscall { /* private fields */ }

indirect syscall invoker

instead of using inline syscall instruction, jumps to the syscall instruction inside ntdll for cleaner call stack

Implementations

impl IndirectSyscall

pub const unsafe fn new_unchecked(ssn: u16, syscall_addr: usize) -> Self

create from SSN and syscall instruction address

Safety

caller must ensure syscall_addr points to a valid syscall instruction

pub fn new(ssn: u16, syscall_addr: usize) -> Result<Self>

create from SSN and syscall instruction address with validation

pub fn from_entry(entry: &SyscallEntry) -> Result<Self>

create from syscall entry

pub fn from_table(table: &SyscallTable, name: &str) -> Result<Self>

create from syscall table lookup

pub const fn ssn(&self) -> u16

get SSN

pub const fn syscall_address(&self) -> usize

get syscall instruction address

impl IndirectSyscall

pub unsafe fn call0(&self) -> i32

invoke indirect syscall with 0 arguments

Safety

caller must ensure the syscall is appropriate to call with 0 args

pub unsafe fn call1(&self, arg1: usize) -> i32

invoke indirect syscall with 1 argument

Safety

caller must ensure args are valid for this syscall

pub unsafe fn call2(&self, arg1: usize, arg2: usize) -> i32

invoke indirect syscall with 2 arguments

Safety

caller must ensure args are valid for this syscall

pub unsafe fn call3(&self, arg1: usize, arg2: usize, arg3: usize) -> i32

invoke indirect syscall with 3 arguments

Safety

caller must ensure args are valid for this syscall

pub unsafe fn call4( &self, arg1: usize, arg2: usize, arg3: usize, arg4: usize, ) -> i32

invoke indirect syscall with 4 arguments

Safety

caller must ensure args are valid for this syscall

pub unsafe fn call5( &self, arg1: usize, arg2: usize, arg3: usize, arg4: usize, arg5: usize, ) -> i32

invoke indirect syscall with 5 arguments

Safety

caller must ensure args are valid for this syscall

pub unsafe fn call6( &self, arg1: usize, arg2: usize, arg3: usize, arg4: usize, arg5: usize, arg6: usize, ) -> i32

invoke indirect syscall with 6 arguments

Safety

caller must ensure args are valid for this syscall

pub unsafe fn call_many(&self, args: &[usize]) -> i32

invoke indirect syscall with variable arguments

Safety

caller must ensure args are valid for this syscall