libintrovirt v0.57.4
IntroVirt introspection library
Loading...
Searching...
No Matches
introvirt::windows::nt::NtSetValueKey Class Referenceabstract

Handler class for the NtSetValueKey system call. More...

#include <NtSetValueKey.hh>

Inheritance diagram for introvirt::windows::nt::NtSetValueKey:
Collaboration diagram for introvirt::windows::nt::NtSetValueKey:

Public Member Functions

virtual uint64_t KeyHandle () const =0
 Getter for KeyHandle.
 
virtual guest_ptr< void > ValueNamePtr () const =0
 Getter for ValueNamePtr.
 
virtual uint32_t TitleIndex () const =0
 Getter for TitleIndex.
 
virtual REG_TYPE Type () const =0
 Getter for Type.
 
virtual guest_ptr< void > DataPtr () const =0
 Getter for DataPtr.
 
virtual uint32_t DataSize () const =0
 Getter for DataSize.
 
virtual void KeyHandle (uint64_t KeyHandle)=0
 Setter for KeyHandle.
 
virtual void ValueNamePtr (const guest_ptr< void > &pValueName)=0
 Setter for ValueNamePtr.
 
virtual void TitleIndex (uint32_t TitleIndex)=0
 Setter for TitleIndex.
 
virtual void Type (REG_TYPE Type)=0
 Setter for Type.
 
virtual void DataPtr (const guest_ptr< void > &pData)=0
 Setter for DataPtr.
 
virtual void DataSize (uint32_t DataSize)=0
 Setter for DataSize.
 
virtual const UNICODE_STRINGValueName () const =0
 
virtual UNICODE_STRINGValueName ()=0
 
virtual const KEY_VALUEData () const =0
 
virtual KEY_VALUEData ()=0
 
- Public Member Functions inherited from introvirt::windows::nt::NtSystemCall
virtual NTSTATUS result () const =0
 Get the result code.
 
virtual void result (NTSTATUS_CODE code)=0
 Set the result code.
 
- Public Member Functions inherited from introvirt::windows::WindowsSystemCall
virtual SystemCallIndex index () const =0
 Get the system call number.
 
- Public Member Functions inherited from introvirt::SystemCall
virtual const std::string & name () const =0
 Get the name of the system call.
 
virtual void write (std::ostream &os=std::cout) const =0
 Write a human-readable description of this system call.
 
virtual Json::Value json () const =0
 
virtual bool will_return () const =0
 
virtual void data (const std::string &key, const std::shared_ptr< void > &value)=0
 Store arbitrary data with the SystemCall.
 
virtual void data (const std::string &key, std::shared_ptr< void > &&value)=0
 Store arbitrary data with the SystemCall.
 
virtual std::shared_ptr< void > data (const std::string &key)=0
 Retrieve arbitrary data stored with the SystemCall.
 
virtual std::shared_ptr< const void > data (const std::string &key) const =0
 Retrieve arbitrary data stored with the SystemCall.
 
virtual bool supported () const =0
 Check if this system call is supported by a more specific handler.
 
virtual void handle_return_event (Event &event)=0
 Handle a system call return event.
 
virtual ~SystemCall ()=default
 Destroy the instance.
 

Static Public Member Functions

static NTSTATUS inject (uint64_t KeyHandle, const UNICODE_STRING &ValueName, uint32_t TitleIndex, REG_TYPE Type, const KEY_VALUE &Data, uint32_t DataSize)
 

Detailed Description

Handler class for the NtSetValueKey system call.

Member Function Documentation

◆ Data() [1/2]

virtual const KEY_VALUE * introvirt::windows::nt::NtSetValueKey::Data ( ) const
pure virtual

◆ Data() [2/2]

virtual KEY_VALUE * introvirt::windows::nt::NtSetValueKey::Data ( )
pure virtual

◆ DataPtr() [1/2]

virtual guest_ptr< void > introvirt::windows::nt::NtSetValueKey::DataPtr ( ) const
pure virtual

Getter for DataPtr.

Returns
The address pointed to by the the DataPtr parameter

◆ DataPtr() [2/2]

virtual void introvirt::windows::nt::NtSetValueKey::DataPtr ( const guest_ptr< void > &  pData)
pure virtual

Setter for DataPtr.

Parameters
pDataThe address to set for the DataPtr parameter

◆ DataSize() [1/2]

virtual uint32_t introvirt::windows::nt::NtSetValueKey::DataSize ( ) const
pure virtual

Getter for DataSize.

Returns
The value of the DataSize parameter

◆ DataSize() [2/2]

virtual void introvirt::windows::nt::NtSetValueKey::DataSize ( uint32_t  DataSize)
pure virtual

Setter for DataSize.

Parameters
DataSizeThe value to set for the DataSize parameter

◆ inject()

static NTSTATUS introvirt::windows::nt::NtSetValueKey::inject ( uint64_t  KeyHandle,
const UNICODE_STRING ValueName,
uint32_t  TitleIndex,
REG_TYPE  Type,
const KEY_VALUE Data,
uint32_t  DataSize 
)
static

◆ KeyHandle() [1/2]

virtual uint64_t introvirt::windows::nt::NtSetValueKey::KeyHandle ( ) const
pure virtual

Getter for KeyHandle.

Returns
The value of the KeyHandle parameter

◆ KeyHandle() [2/2]

virtual void introvirt::windows::nt::NtSetValueKey::KeyHandle ( uint64_t  KeyHandle)
pure virtual

Setter for KeyHandle.

Parameters
KeyHandleThe value to set for the KeyHandle parameter

◆ TitleIndex() [1/2]

virtual uint32_t introvirt::windows::nt::NtSetValueKey::TitleIndex ( ) const
pure virtual

Getter for TitleIndex.

Returns
The value of the TitleIndex parameter

◆ TitleIndex() [2/2]

virtual void introvirt::windows::nt::NtSetValueKey::TitleIndex ( uint32_t  TitleIndex)
pure virtual

Setter for TitleIndex.

Parameters
TitleIndexThe value to set for the TitleIndex parameter

◆ Type() [1/2]

virtual REG_TYPE introvirt::windows::nt::NtSetValueKey::Type ( ) const
pure virtual

Getter for Type.

Returns
The value of the Type parameter

◆ Type() [2/2]

virtual void introvirt::windows::nt::NtSetValueKey::Type ( REG_TYPE  Type)
pure virtual

Setter for Type.

Parameters
TypeThe value to set for the Type parameter

◆ ValueName() [1/2]

virtual const UNICODE_STRING * introvirt::windows::nt::NtSetValueKey::ValueName ( ) const
pure virtual

◆ ValueName() [2/2]

virtual UNICODE_STRING * introvirt::windows::nt::NtSetValueKey::ValueName ( )
pure virtual

◆ ValueNamePtr() [1/2]

virtual guest_ptr< void > introvirt::windows::nt::NtSetValueKey::ValueNamePtr ( ) const
pure virtual

Getter for ValueNamePtr.

Returns
The address pointed to by the the ValueNamePtr parameter

◆ ValueNamePtr() [2/2]

virtual void introvirt::windows::nt::NtSetValueKey::ValueNamePtr ( const guest_ptr< void > &  pValueName)
pure virtual

Setter for ValueNamePtr.

Parameters
pValueNameThe address to set for the ValueNamePtr parameter

The documentation for this class was generated from the following file: