libintrovirt v0.57.4
IntroVirt introspection library
Loading...
Searching...
No Matches
introvirt::windows::nt::NtOpenThreadToken Class Referenceabstract

Handler class for the NtOpenThreadToken system call. More...

#include <NtOpenThreadToken.hh>

Inheritance diagram for introvirt::windows::nt::NtOpenThreadToken:
Collaboration diagram for introvirt::windows::nt::NtOpenThreadToken:

Public Member Functions

virtual uint64_t ThreadHandle () const =0
 Getter for ThreadHandle.
 
virtual TOKEN_ACCESS_MASK DesiredAccess () const =0
 Getter for DesiredAccess.
 
virtual bool OpenAsSelf () const =0
 Getter for OpenAsSelf.
 
virtual guest_ptr< void > TokenHandlePtr () const =0
 Getter for TokenHandlePtr.
 
virtual void ThreadHandle (uint64_t ThreadHandle)=0
 Setter for ThreadHandle.
 
virtual void DesiredAccess (TOKEN_ACCESS_MASK DesiredAccess)=0
 Setter for DesiredAccess.
 
virtual void OpenAsSelf (bool OpenAsSelf)=0
 Setter for OpenAsSelf.
 
virtual void TokenHandlePtr (const guest_ptr< void > &pTokenHandle)=0
 Setter for TokenHandlePtr.
 
virtual uint64_t TokenHandle () const =0
 
virtual void TokenHandle (uint64_t TokenHandle)=0
 
- Public Member Functions inherited from introvirt::windows::nt::NtSystemCall
virtual NTSTATUS result () const =0
 Get the result code.
 
virtual void result (NTSTATUS_CODE code)=0
 Set the result code.
 
- Public Member Functions inherited from introvirt::windows::WindowsSystemCall
virtual SystemCallIndex index () const =0
 Get the system call number.
 
- Public Member Functions inherited from introvirt::SystemCall
virtual const std::string & name () const =0
 Get the name of the system call.
 
virtual void write (std::ostream &os=std::cout) const =0
 Write a human-readable description of this system call.
 
virtual Json::Value json () const =0
 
virtual bool will_return () const =0
 
virtual void data (const std::string &key, const std::shared_ptr< void > &value)=0
 Store arbitrary data with the SystemCall.
 
virtual void data (const std::string &key, std::shared_ptr< void > &&value)=0
 Store arbitrary data with the SystemCall.
 
virtual std::shared_ptr< void > data (const std::string &key)=0
 Retrieve arbitrary data stored with the SystemCall.
 
virtual std::shared_ptr< const void > data (const std::string &key) const =0
 Retrieve arbitrary data stored with the SystemCall.
 
virtual bool supported () const =0
 Check if this system call is supported by a more specific handler.
 
virtual void handle_return_event (Event &event)=0
 Handle a system call return event.
 
virtual ~SystemCall ()=default
 Destroy the instance.
 

Static Public Member Functions

static NTSTATUS inject (uint64_t ThreadHandle, TOKEN_ACCESS_MASK DesiredAccess, bool OpenAsSelf, uint64_t &TokenHandle)
 

Detailed Description

Handler class for the NtOpenThreadToken system call.

Member Function Documentation

◆ DesiredAccess() [1/2]

virtual TOKEN_ACCESS_MASK introvirt::windows::nt::NtOpenThreadToken::DesiredAccess ( ) const
pure virtual

Getter for DesiredAccess.

Returns
The value of the DesiredAccess parameter

◆ DesiredAccess() [2/2]

virtual void introvirt::windows::nt::NtOpenThreadToken::DesiredAccess ( TOKEN_ACCESS_MASK  DesiredAccess)
pure virtual

Setter for DesiredAccess.

Parameters
DesiredAccessThe value to set for the DesiredAccess parameter

◆ inject()

static NTSTATUS introvirt::windows::nt::NtOpenThreadToken::inject ( uint64_t  ThreadHandle,
TOKEN_ACCESS_MASK  DesiredAccess,
bool  OpenAsSelf,
uint64_t &  TokenHandle 
)
static

◆ OpenAsSelf() [1/2]

virtual bool introvirt::windows::nt::NtOpenThreadToken::OpenAsSelf ( ) const
pure virtual

Getter for OpenAsSelf.

Returns
The value of the OpenAsSelf parameter

◆ OpenAsSelf() [2/2]

virtual void introvirt::windows::nt::NtOpenThreadToken::OpenAsSelf ( bool  OpenAsSelf)
pure virtual

Setter for OpenAsSelf.

Parameters
OpenAsSelfThe value to set for the OpenAsSelf parameter

◆ ThreadHandle() [1/2]

virtual uint64_t introvirt::windows::nt::NtOpenThreadToken::ThreadHandle ( ) const
pure virtual

Getter for ThreadHandle.

Returns
The value of the ThreadHandle parameter

◆ ThreadHandle() [2/2]

virtual void introvirt::windows::nt::NtOpenThreadToken::ThreadHandle ( uint64_t  ThreadHandle)
pure virtual

Setter for ThreadHandle.

Parameters
ThreadHandleThe value to set for the ThreadHandle parameter

◆ TokenHandle() [1/2]

virtual uint64_t introvirt::windows::nt::NtOpenThreadToken::TokenHandle ( ) const
pure virtual

◆ TokenHandle() [2/2]

virtual void introvirt::windows::nt::NtOpenThreadToken::TokenHandle ( uint64_t  TokenHandle)
pure virtual

◆ TokenHandlePtr() [1/2]

virtual guest_ptr< void > introvirt::windows::nt::NtOpenThreadToken::TokenHandlePtr ( ) const
pure virtual

Getter for TokenHandlePtr.

Returns
The address pointed to by the the TokenHandlePtr parameter

◆ TokenHandlePtr() [2/2]

virtual void introvirt::windows::nt::NtOpenThreadToken::TokenHandlePtr ( const guest_ptr< void > &  pTokenHandle)
pure virtual

Setter for TokenHandlePtr.

Parameters
pTokenHandleThe address to set for the TokenHandlePtr parameter

The documentation for this class was generated from the following file: