introvirt::windows::nt::DBGKD_GET_VERSION64 Class Reference

#include <DBGKD_GET_VERSION64.hh>

Classes
class	DBGKD_VERS_FLAG
	Parser for the DBGKD_GET_VERSION64::Flags field. More...

Public Member Functions
virtual uint16_t	MajorVersion () const =0
virtual uint16_t	MinorVersion () const =0
virtual uint16_t	ProtocolVersion () const =0
virtual DBGKD_VERS_FLAG	Flags () const =0
	Get the Flags field.
virtual pe::MachineType	MachineType () const =0
virtual uint8_t	MaxPacketType () const =0
virtual uint8_t	MaxStateChange () const =0
virtual uint8_t	MaxManipulate () const =0
virtual uint8_t	Simulation () const =0
virtual uint64_t	KernelBase () const =0
virtual uint64_t	PsLoadedModuleList () const =0
virtual	~DBGKD_GET_VERSION64 ()=default
	Destroy the instance.

Detailed Description

See http://msdn.microsoft.com/en-us/library/windows/hardware/ff550918%28v=vs.85%29.aspx

Constructor & Destructor Documentation

~DBGKD_GET_VERSION64()

virtual introvirt::windows::nt::DBGKD_GET_VERSION64::~DBGKD_GET_VERSION64 ( )

virtualdefault

Destroy the instance.

Member Function Documentation

Flags()

virtual DBGKD_VERS_FLAG introvirt::windows::nt::DBGKD_GET_VERSION64::Flags ( ) const

pure virtual

Get the Flags field.

Returns

The wrapper around the Flags field

KernelBase()

virtual uint64_t introvirt::windows::nt::DBGKD_GET_VERSION64::KernelBase ( ) const

pure virtual

Returns

The base address of the kernel

MachineType()

virtual pe::MachineType introvirt::windows::nt::DBGKD_GET_VERSION64::MachineType ( ) const

pure virtual

Returns

The architecture of the machine

MajorVersion()

virtual uint16_t introvirt::windows::nt::DBGKD_GET_VERSION64::MajorVersion ( ) const

pure virtual

Should be 0xF for a free build, 0xC for a checked build

Returns

The MajorVersion field

MaxManipulate()

virtual uint8_t introvirt::windows::nt::DBGKD_GET_VERSION64::MaxManipulate ( ) const

pure virtual

Returns

one more that the highest number, recognized by the target, for a command to manipulate the target

MaxPacketType()

virtual uint8_t introvirt::windows::nt::DBGKD_GET_VERSION64::MaxPacketType ( ) const

pure virtual

Returns

one plus the highest number for a debugger packet type recognized by the target

MaxStateChange()

virtual uint8_t introvirt::windows::nt::DBGKD_GET_VERSION64::MaxStateChange ( ) const

pure virtual

Returns

one plus the highest number for a state change generated by the target

MinorVersion()

virtual uint16_t introvirt::windows::nt::DBGKD_GET_VERSION64::MinorVersion ( ) const

pure virtual

Returns

The operating system build number

ProtocolVersion()

virtual uint16_t introvirt::windows::nt::DBGKD_GET_VERSION64::ProtocolVersion ( ) const

pure virtual

Returns

The protocol version

PsLoadedModuleList()

virtual uint64_t introvirt::windows::nt::DBGKD_GET_VERSION64::PsLoadedModuleList ( ) const

pure virtual

Returns

The value of the kernel's PsLoadedModuleList

Simulation()

virtual uint8_t introvirt::windows::nt::DBGKD_GET_VERSION64::Simulation ( ) const

pure virtual

Returns

an indication if the target is in simulated execution

---

The documentation for this class was generated from the following file:

• /home/runner/work/IntroVirt/IntroVirt/include/introvirt/windows/kernel/nt/types/DBGKD_GET_VERSION64.hh