libintrovirt v0.57.4
IntroVirt introspection library
Loading...
Searching...
No Matches
RTL_USER_PROCESS_PARAMETERS.hh
Go to the documentation of this file.
1/*
2 * Copyright 2021 Assured Information Security, Inc.
3 *
4 * Licensed under the Apache License, Version 2.0 (the "License");
5 * you may not use this file except in compliance with the License.
6 * You may obtain a copy of the License at
7 *
8 * http://www.apache.org/licenses/LICENSE-2.0
9 *
10 * Unless required by applicable law or agreed to in writing, software
11 * distributed under the License is distributed on an "AS IS" BASIS,
12 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
13 * See the License for the specific language governing permissions and
14 * limitations under the License.
15 */
16#pragma once
17
20
21#include <introvirt/util/json/json.hh>
22
23#include <cstdint>
24#include <map>
25#include <memory>
26#include <string>
27#include <vector>
28
29namespace introvirt {
30namespace windows {
31namespace nt {
32
34 public:
35 virtual const std::string& CommandLine() const = 0;
36 virtual const std::string& ImagePathName() const = 0;
37 virtual const std::string& WindowTitle() const = 0;
38
42 virtual guest_ptr<char16_t> pEnvironment() const = 0;
43
49 virtual std::map<std::string, std::string> EnvironmentMap() const = 0;
50
51 virtual guest_ptr<void> ptr() const = 0;
52 virtual void write(std::ostream& os, const std::string& linePrefix = "") const = 0;
53 virtual Json::Value json() const = 0;
54
55 static std::unique_ptr<RTL_USER_PROCESS_PARAMETERS> make_unique(const NtKernel& kernel,
56 const guest_ptr<void>& ptr);
57
58 virtual ~RTL_USER_PROCESS_PARAMETERS() = default;
59};
60
61} /* namespace nt */
62} /* namespace windows */
63} /* namespace introvirt */
Definition guest_ptr.hh:88
Abstraction for the Windows NT kernel.
Definition NtKernel.hh:37
Definition RTL_USER_PROCESS_PARAMETERS.hh:33
virtual const std::string & CommandLine() const =0
virtual guest_ptr< void > ptr() const =0
virtual const std::string & WindowTitle() const =0
static std::unique_ptr< RTL_USER_PROCESS_PARAMETERS > make_unique(const NtKernel &kernel, const guest_ptr< void > &ptr)
virtual void write(std::ostream &os, const std::string &linePrefix="") const =0
virtual const std::string & ImagePathName() const =0
virtual std::map< std::string, std::string > EnvironmentMap() const =0
Get the environment as a string map, for quick lookups.
virtual guest_ptr< char16_t > pEnvironment() const =0
Get a pointer to the environment array.
Type-safe guest virtual address pointer and guest_ptr template.
Core IntroVirt classes.
Definition Cr0.hh:20