introvirt::windows::nt::CM_KEY_BODY Class Reference

Class for the CM_KEY_BODY NT Kernel structure. More...

#include <CM_KEY_BODY.hh>

Inheritance diagram for introvirt::windows::nt::CM_KEY_BODY:

Collaboration diagram for introvirt::windows::nt::CM_KEY_BODY:

Public Member Functions
virtual const CM_KEY_CONTROL_BLOCK &	KeyControlBlock () const =0
	Get the KeyControlBlock member of the structure.
virtual uint64_t	ProcessID () const =0
virtual const std::string &	full_key_path () const =0
	Helper function for traversing the key back to the root.
virtual	~CM_KEY_BODY ()=default
Public Member Functions inherited from introvirt::windows::nt::OBJECT
virtual const OBJECT_HEADER &	header () const =0
	Get the OBJECT_HEADER for this object.
virtual guest_ptr< void >	ptr () const =0
virtual	~OBJECT ()=default
	Destroy the instance.

Static Public Member Functions
static std::shared_ptr< CM_KEY_BODY >	make_shared (const NtKernel &kernel, const guest_ptr< void > &ptr)
static std::shared_ptr< CM_KEY_BODY >	make_shared (const NtKernel &kernel, std::unique_ptr< OBJECT_HEADER > &&object_header)
Static Public Member Functions inherited from introvirt::windows::nt::OBJECT
static std::shared_ptr< OBJECT >	make_shared (const NtKernel &kernel, const guest_ptr< void > &ptr)
static std::shared_ptr< OBJECT >	make_shared (const NtKernel &kernel, std::unique_ptr< OBJECT_HEADER > &&object_header)

Detailed Description

Class for the CM_KEY_BODY NT Kernel structure.

This is a structure used for registry information

Constructor & Destructor Documentation

~CM_KEY_BODY()

virtual introvirt::windows::nt::CM_KEY_BODY::~CM_KEY_BODY ( )

virtualdefault

Member Function Documentation

full_key_path()

virtual const std::string & introvirt::windows::nt::CM_KEY_BODY::full_key_path ( ) const

pure virtual

Helper function for traversing the key back to the root.

Returns the full path of this key by traversing up the CM_KEY_CONTROL_BLOCK

Returns

The full path of this key

KeyControlBlock()

virtual const CM_KEY_CONTROL_BLOCK & introvirt::windows::nt::CM_KEY_BODY::KeyControlBlock ( ) const

pure virtual

Get the KeyControlBlock member of the structure.

Returns

The KeyControlBlock

make_shared() [1/2]

static std::shared_ptr< CM_KEY_BODY > introvirt::windows::nt::CM_KEY_BODY::make_shared ( const NtKernel &  kernel, const guest_ptr< void > &  ptr  )

static

make_shared() [2/2]

static std::shared_ptr< CM_KEY_BODY > introvirt::windows::nt::CM_KEY_BODY::make_shared ( const NtKernel &  kernel, std::unique_ptr< OBJECT_HEADER > &&  object_header  )

static

ProcessID()

virtual uint64_t introvirt::windows::nt::CM_KEY_BODY::ProcessID ( ) const

pure virtual

Returns

The process ID associated with this CM_KEY_BODY

---

The documentation for this class was generated from the following file:

• /home/runner/work/IntroVirt/IntroVirt/include/introvirt/windows/kernel/nt/types/objects/CM_KEY_BODY.hh