|
libintrovirt v0.57.4
IntroVirt introspection library
|
#include <WindowsSystemCallEvent.hh>


Public Member Functions | |
| virtual WindowsSystemCall * | handler ()=0 |
| Gets the associated system call handler with this event. | |
| virtual const WindowsSystemCall * | handler () const =0 |
| Gets the associated system call handler with this event. | |
| virtual SystemCallIndex | index () const =0 |
Public Member Functions inherited from introvirt::SystemCallEvent | |
| virtual FastCallType | instruction () const =0 |
| Get the type of fast system call instruction. | |
| virtual std::string | name () const =0 |
| Get a string represenatation of the system call name. | |
| virtual uint64_t | raw_index () const =0 |
| Get the system call number executed. | |
| virtual void | hook_return (bool enabled)=0 |
| Instruct that the system call's return should be hooked. | |
| virtual bool | hook_return () const =0 |
| Check if the return is set to be hooked. | |
| virtual uint64_t | return_address () const =0 |
| Get the address where the system call will return. | |
| virtual SystemCallEventImpl & | impl ()=0 |
| Used internally. | |
| virtual | ~SystemCallEvent ()=default |
| Destroy the instance. | |
Additional Inherited Members | |
Protected Member Functions inherited from introvirt::SystemCallEvent | |
| SystemCallEvent ()=default | |
|
pure virtual |
Gets the associated system call handler with this event.
This is set by the OS library (i.e., libwintrovirt). It can return nullptr if the underlying system call is not supported.
Implements introvirt::SystemCallEvent.
|
pure virtual |
Gets the associated system call handler with this event.
This is set by the OS library (i.e., libwintrovirt). It can return nullptr if the underlying system call is not supported.
Implements introvirt::SystemCallEvent.
|
pure virtual |