SSN Resolution Methods

mov eax, 0x18          ; SSN for NtAllocateVirtualMemory (Win10 x64)
syscall                ; Kernel entry with SSN in eax

python syswhispers.py --preset common --resolve static

python syswhispers.py --preset injection --resolve freshycalls

python syswhispers.py --preset stealth --resolve recycled

python syswhispers.py --preset stealth --resolve from_disk --unhook-ntdll

#include "SW4Syscalls.h"

int main(void) {
    // Resolve SSNs at runtime
    if (!SW4_Initialize()) {
        // Failed to resolve SSNs
        return 1;
    }

    // SSNs are now resolved — safe to call syscalls
    PVOID base = NULL;
    SIZE_T size = 0x1000;
    SW4_NtAllocateVirtualMemory(
        GetCurrentProcess(), &base, 0, &size,
        MEM_COMMIT | MEM_RESERVE, PAGE_READWRITE
    );

    return 0;
}