|
libintrovirt v0.57.4
IntroVirt introspection library
|
Handler class for the NtAddAtom system call. More...
#include <NtAddAtom.hh>


Static Public Member Functions | |
| static NTSTATUS | inject (const WStr &AtomName, uint32_t AtomNameLength, uint16_t *Atom) |
Static Public Member Functions inherited from introvirt::windows::nt::NtFindAtom | |
| static NTSTATUS | inject (const WStr &AtomName, uint32_t AtomNameLength, uint16_t *Atom) |
Additional Inherited Members | |
Public Member Functions inherited from introvirt::windows::nt::NtFindAtom | |
| virtual guest_ptr< void > | AtomNamePtr () const =0 |
| Getter for AtomNamePtr. | |
| virtual uint32_t | AtomNameLength () const =0 |
| Getter for AtomNameLength. | |
| virtual guest_ptr< void > | AtomPtr () const =0 |
| Getter for AtomPtr. | |
| virtual void | AtomNamePtr (const guest_ptr< void > &pAtomName)=0 |
| Setter for AtomNamePtr. | |
| virtual void | AtomNameLength (uint32_t AtomNameLength)=0 |
| Setter for AtomNameLength. | |
| virtual void | AtomPtr (const guest_ptr< void > &pAtom)=0 |
| Setter for AtomPtr. | |
| virtual const WStr * | AtomName () const =0 |
| virtual WStr * | AtomName ()=0 |
| virtual uint16_t | Atom () const =0 |
| virtual void | Atom (uint16_t Atom)=0 |
Public Member Functions inherited from introvirt::windows::nt::NtSystemCall | |
| virtual NTSTATUS | result () const =0 |
| Get the result code. | |
| virtual void | result (NTSTATUS_CODE code)=0 |
| Set the result code. | |
Public Member Functions inherited from introvirt::windows::WindowsSystemCall | |
| virtual SystemCallIndex | index () const =0 |
| Get the system call number. | |
Public Member Functions inherited from introvirt::SystemCall | |
| virtual const std::string & | name () const =0 |
| Get the name of the system call. | |
| virtual void | write (std::ostream &os=std::cout) const =0 |
| Write a human-readable description of this system call. | |
| virtual Json::Value | json () const =0 |
| virtual bool | will_return () const =0 |
| virtual void | data (const std::string &key, const std::shared_ptr< void > &value)=0 |
| Store arbitrary data with the SystemCall. | |
| virtual void | data (const std::string &key, std::shared_ptr< void > &&value)=0 |
| Store arbitrary data with the SystemCall. | |
| virtual std::shared_ptr< void > | data (const std::string &key)=0 |
| Retrieve arbitrary data stored with the SystemCall. | |
| virtual std::shared_ptr< const void > | data (const std::string &key) const =0 |
| Retrieve arbitrary data stored with the SystemCall. | |
| virtual bool | supported () const =0 |
| Check if this system call is supported by a more specific handler. | |
| virtual void | handle_return_event (Event &event)=0 |
| Handle a system call return event. | |
| virtual | ~SystemCall ()=default |
| Destroy the instance. | |
Handler class for the NtAddAtom system call.
|
static |