libintrovirt v0.57.4
IntroVirt introspection library
Loading...
Searching...
No Matches
introvirt::windows::nt::FILE_OBJECT Class Referenceabstract

#include <FILE_OBJECT.hh>

Inheritance diagram for introvirt::windows::nt::FILE_OBJECT:
Collaboration diagram for introvirt::windows::nt::FILE_OBJECT:

Public Member Functions

virtual const DEVICE_OBJECTDeviceObject () const =0
 
virtual std::string FileName () const =0
 
virtual bool DeletePending () const =0
 
virtual void DeletePending (bool value)=0
 
virtual FileObjectFlags Flags () const =0
 
virtual void Flags (FileObjectFlags flags)=0
 
virtual bool DeleteAccess () const =0
 
virtual void DeleteAccess (bool value)=0
 
virtual bool SharedDelete () const =0
 
virtual void SharedDelete (bool value)=0
 
virtual std::string drive_letter () const =0
 Get the drive letter of the file object.
 
virtual std::string full_path () const =0
 Get the full path, drive letter included.
 
virtual ~FILE_OBJECT ()=default
 
- Public Member Functions inherited from introvirt::windows::nt::OBJECT
virtual const OBJECT_HEADERheader () const =0
 Get the OBJECT_HEADER for this object.
 
virtual guest_ptr< void > ptr () const =0
 
virtual ~OBJECT ()=default
 Destroy the instance.
 

Static Public Member Functions

static std::shared_ptr< FILE_OBJECTmake_shared (const NtKernel &kernel, const guest_ptr< void > &ptr)
 
static std::shared_ptr< FILE_OBJECTmake_shared (const NtKernel &kernel, std::unique_ptr< OBJECT_HEADER > &&object_header)
 
- Static Public Member Functions inherited from introvirt::windows::nt::OBJECT
static std::shared_ptr< OBJECTmake_shared (const NtKernel &kernel, const guest_ptr< void > &ptr)
 
static std::shared_ptr< OBJECTmake_shared (const NtKernel &kernel, std::unique_ptr< OBJECT_HEADER > &&object_header)
 

Detailed Description

Examples
ivprocinfo.cc.

Constructor & Destructor Documentation

◆ ~FILE_OBJECT()

virtual introvirt::windows::nt::FILE_OBJECT::~FILE_OBJECT ( )
virtualdefault

Member Function Documentation

◆ DeleteAccess() [1/2]

virtual bool introvirt::windows::nt::FILE_OBJECT::DeleteAccess ( ) const
pure virtual

◆ DeleteAccess() [2/2]

virtual void introvirt::windows::nt::FILE_OBJECT::DeleteAccess ( bool  value)
pure virtual

◆ DeletePending() [1/2]

virtual bool introvirt::windows::nt::FILE_OBJECT::DeletePending ( ) const
pure virtual

◆ DeletePending() [2/2]

virtual void introvirt::windows::nt::FILE_OBJECT::DeletePending ( bool  value)
pure virtual

◆ DeviceObject()

virtual const DEVICE_OBJECT * introvirt::windows::nt::FILE_OBJECT::DeviceObject ( ) const
pure virtual
Examples
ivprocinfo.cc.

◆ drive_letter()

virtual std::string introvirt::windows::nt::FILE_OBJECT::drive_letter ( ) const
pure virtual

Get the drive letter of the file object.

◆ FileName()

virtual std::string introvirt::windows::nt::FILE_OBJECT::FileName ( ) const
pure virtual
Examples
ivprocinfo.cc.

◆ Flags() [1/2]

virtual FileObjectFlags introvirt::windows::nt::FILE_OBJECT::Flags ( ) const
pure virtual

◆ Flags() [2/2]

virtual void introvirt::windows::nt::FILE_OBJECT::Flags ( FileObjectFlags  flags)
pure virtual

◆ full_path()

virtual std::string introvirt::windows::nt::FILE_OBJECT::full_path ( ) const
pure virtual

Get the full path, drive letter included.

◆ make_shared() [1/2]

static std::shared_ptr< FILE_OBJECT > introvirt::windows::nt::FILE_OBJECT::make_shared ( const NtKernel kernel,
const guest_ptr< void > &  ptr 
)
static

◆ make_shared() [2/2]

static std::shared_ptr< FILE_OBJECT > introvirt::windows::nt::FILE_OBJECT::make_shared ( const NtKernel kernel,
std::unique_ptr< OBJECT_HEADER > &&  object_header 
)
static

◆ SharedDelete() [1/2]

virtual bool introvirt::windows::nt::FILE_OBJECT::SharedDelete ( ) const
pure virtual

◆ SharedDelete() [2/2]

virtual void introvirt::windows::nt::FILE_OBJECT::SharedDelete ( bool  value)
pure virtual

The documentation for this class was generated from the following file: