Loading...
Searching...
No Matches
introvirt::windows::nt::NtLoadKey Class Referenceabstract
Handler class for the NtLoadKey system call. More...
#include <NtLoadKey.hh>
Inheritance diagram for introvirt::windows::nt::NtLoadKey:
Collaboration diagram for introvirt::windows::nt::NtLoadKey:
Public Member Functions | |
| virtual guest_ptr< void > | DestinationKeyNamePtr () const =0 |
| Getter for DestinationKeyNamePtr. | |
| virtual guest_ptr< void > | HiveFileNamePtr () const =0 |
| Getter for HiveFileNamePtr. | |
| virtual void | DestinationKeyNamePtr (const guest_ptr< void > &pDestinationKeyName)=0 |
| Setter for DestinationKeyNamePtr. | |
| virtual void | HiveFileNamePtr (const guest_ptr< void > &pHiveFileName)=0 |
| Setter for HiveFileNamePtr. | |
| virtual const OBJECT_ATTRIBUTES * | DestinationKeyName () const =0 |
| virtual OBJECT_ATTRIBUTES * | DestinationKeyName ()=0 |
| virtual const OBJECT_ATTRIBUTES * | HiveFileName () const =0 |
| virtual OBJECT_ATTRIBUTES * | HiveFileName ()=0 |
 Public Member Functions inherited from introvirt::windows::nt::NtSystemCall | |
| virtual NTSTATUS | result () const =0 |
| Get the result code. | |
| virtual void | result (NTSTATUS_CODE code)=0 |
| Set the result code. | |
| Public Member Functions inherited from introvirt::windows::WindowsSystemCall | |
| virtual SystemCallIndex | index () const =0 |
| Get the system call number. | |
| Public Member Functions inherited from introvirt::SystemCall | |
| virtual const std::string & | name () const =0 |
| Get the name of the system call. | |
| virtual void | write (std::ostream &os=std::cout) const =0 |
| Write a human-readable description of this system call. | |
| virtual Json::Value | json () const =0 |
| virtual bool | will_return () const =0 |
| virtual void | data (const std::string &key, const std::shared_ptr< void > &value)=0 |
| Store arbitrary data with the SystemCall. | |
| virtual void | data (const std::string &key, std::shared_ptr< void > &&value)=0 |
| Store arbitrary data with the SystemCall. | |
| virtual std::shared_ptr< void > | data (const std::string &key)=0 |
| Retrieve arbitrary data stored with the SystemCall. | |
| virtual std::shared_ptr< const void > | data (const std::string &key) const =0 |
| Retrieve arbitrary data stored with the SystemCall. | |
| virtual bool | supported () const =0 |
| Check if this system call is supported by a more specific handler. | |
| virtual void | handle_return_event (Event &event)=0 |
| Handle a system call return event. | |
| virtual | ~SystemCall ()=default |
| Destroy the instance. | |
Static Public Member Functions | |
| static NTSTATUS | inject (const guest_ptr< void > &pDestinationKeyName, const guest_ptr< void > &pHiveFileName) |
Detailed Description
Handler class for the NtLoadKey system call.
Member Function Documentation
◆ DestinationKeyName() [1/2]
|
pure virtual |
◆ DestinationKeyName() [2/2]
|
pure virtual |
◆ DestinationKeyNamePtr() [1/2]
|
pure virtual |
Getter for DestinationKeyNamePtr.
- Returns
- The address pointed to by the the DestinationKeyNamePtr parameter
◆ DestinationKeyNamePtr() [2/2]
|
pure virtual |
Setter for DestinationKeyNamePtr.
- Parameters
-
pDestinationKeyName The address to set for the DestinationKeyNamePtr parameter
◆ HiveFileName() [1/2]
|
pure virtual |
◆ HiveFileName() [2/2]
|
pure virtual |
◆ HiveFileNamePtr() [1/2]
|
pure virtual |
Getter for HiveFileNamePtr.
- Returns
- The address pointed to by the the HiveFileNamePtr parameter
◆ HiveFileNamePtr() [2/2]
|
pure virtual |
Setter for HiveFileNamePtr.
- Parameters
-
pHiveFileName The address to set for the HiveFileNamePtr parameter
◆ inject()
|
static |
The documentation for this class was generated from the following file:
- /home/runner/work/IntroVirt/IntroVirt/include/introvirt/windows/kernel/nt/syscall/NtLoadKey.hh