libintrovirt v0.57.4
IntroVirt introspection library
Loading...
Searching...
No Matches
introvirt::windows::nt::NtOpenKeyTransacted Class Referenceabstract

Handler class for the NtOpenKeyTransacted system call. More...

#include <NtOpenKeyTransacted.hh>

Inheritance diagram for introvirt::windows::nt::NtOpenKeyTransacted:
Collaboration diagram for introvirt::windows::nt::NtOpenKeyTransacted:

Public Member Functions

virtual uint64_t TransactionHandle () const =0
 Getter for TransactionHandle.
 
virtual void TransactionHandle (uint64_t TransactionHandle)=0
 Setter for TransactionHandle.
 
- Public Member Functions inherited from introvirt::windows::nt::NtOpenKey
virtual guest_ptr< void > KeyHandlePtr () const =0
 Getter for KeyHandlePtr.
 
virtual KEY_ACCESS_MASK DesiredAccess () const =0
 Getter for DesiredAccess.
 
virtual guest_ptr< void > ObjectAttributesPtr () const =0
 Getter for ObjectAttributesPtr.
 
virtual void KeyHandlePtr (const guest_ptr< void > &pKeyHandle)=0
 Setter for KeyHandlePtr.
 
virtual void DesiredAccess (KEY_ACCESS_MASK DesiredAccess)=0
 Setter for DesiredAccess.
 
virtual void ObjectAttributesPtr (const guest_ptr< void > &pObjectAttributes)=0
 Setter for ObjectAttributesPtr.
 
virtual uint64_t KeyHandle () const =0
 
virtual void KeyHandle (uint64_t KeyHandle)=0
 
virtual const OBJECT_ATTRIBUTESObjectAttributes () const =0
 
virtual OBJECT_ATTRIBUTESObjectAttributes ()=0
 
- Public Member Functions inherited from introvirt::windows::nt::NtSystemCall
virtual NTSTATUS result () const =0
 Get the result code.
 
virtual void result (NTSTATUS_CODE code)=0
 Set the result code.
 
- Public Member Functions inherited from introvirt::windows::WindowsSystemCall
virtual SystemCallIndex index () const =0
 Get the system call number.
 
- Public Member Functions inherited from introvirt::SystemCall
virtual const std::string & name () const =0
 Get the name of the system call.
 
virtual void write (std::ostream &os=std::cout) const =0
 Write a human-readable description of this system call.
 
virtual Json::Value json () const =0
 
virtual bool will_return () const =0
 
virtual void data (const std::string &key, const std::shared_ptr< void > &value)=0
 Store arbitrary data with the SystemCall.
 
virtual void data (const std::string &key, std::shared_ptr< void > &&value)=0
 Store arbitrary data with the SystemCall.
 
virtual std::shared_ptr< void > data (const std::string &key)=0
 Retrieve arbitrary data stored with the SystemCall.
 
virtual std::shared_ptr< const void > data (const std::string &key) const =0
 Retrieve arbitrary data stored with the SystemCall.
 
virtual bool supported () const =0
 Check if this system call is supported by a more specific handler.
 
virtual void handle_return_event (Event &event)=0
 Handle a system call return event.
 
virtual ~SystemCall ()=default
 Destroy the instance.
 

Static Public Member Functions

static NTSTATUS inject (uint64_t &KeyHandle, KEY_ACCESS_MASK DesiredAccess, const guest_ptr< void > &pObjectAttributes, uint64_t TransactionHandle)
 
- Static Public Member Functions inherited from introvirt::windows::nt::NtOpenKey
static NTSTATUS inject (uint64_t &KeyHandle, KEY_ACCESS_MASK DesiredAccess, const guest_ptr< void > &pObjectAttributes)
 

Detailed Description

Handler class for the NtOpenKeyTransacted system call.

Member Function Documentation

◆ inject()

static NTSTATUS introvirt::windows::nt::NtOpenKeyTransacted::inject ( uint64_t &  KeyHandle,
KEY_ACCESS_MASK  DesiredAccess,
const guest_ptr< void > &  pObjectAttributes,
uint64_t  TransactionHandle 
)
static

◆ TransactionHandle() [1/2]

virtual uint64_t introvirt::windows::nt::NtOpenKeyTransacted::TransactionHandle ( ) const
pure virtual

Getter for TransactionHandle.

Returns
The value of the TransactionHandle parameter

◆ TransactionHandle() [2/2]

virtual void introvirt::windows::nt::NtOpenKeyTransacted::TransactionHandle ( uint64_t  TransactionHandle)
pure virtual

Setter for TransactionHandle.

Parameters
TransactionHandleThe value to set for the TransactionHandle parameter

The documentation for this class was generated from the following file: