libintrovirt v0.57.4
IntroVirt introspection library
Loading...
Searching...
No Matches
introvirt::windows::nt::NtTerminateThread Class Referenceabstract

Handler class for the NtTerminateThread system call. More...

#include <NtTerminateThread.hh>

Inheritance diagram for introvirt::windows::nt::NtTerminateThread:
Collaboration diagram for introvirt::windows::nt::NtTerminateThread:

Public Member Functions

virtual uint64_t ThreadHandle () const =0
 Getter for ThreadHandle.
 
virtual NTSTATUS ExitStatus () const =0
 Getter for ExitStatus.
 
virtual void ThreadHandle (uint64_t ThreadHandle)=0
 Setter for ThreadHandle.
 
virtual void ExitStatus (NTSTATUS ExitStatus)=0
 Setter for ExitStatus.
 
virtual uint64_t target_tid () const =0
 
- Public Member Functions inherited from introvirt::windows::nt::NtSystemCall
virtual NTSTATUS result () const =0
 Get the result code.
 
virtual void result (NTSTATUS_CODE code)=0
 Set the result code.
 
- Public Member Functions inherited from introvirt::windows::WindowsSystemCall
virtual SystemCallIndex index () const =0
 Get the system call number.
 
- Public Member Functions inherited from introvirt::SystemCall
virtual const std::string & name () const =0
 Get the name of the system call.
 
virtual void write (std::ostream &os=std::cout) const =0
 Write a human-readable description of this system call.
 
virtual Json::Value json () const =0
 
virtual bool will_return () const =0
 
virtual void data (const std::string &key, const std::shared_ptr< void > &value)=0
 Store arbitrary data with the SystemCall.
 
virtual void data (const std::string &key, std::shared_ptr< void > &&value)=0
 Store arbitrary data with the SystemCall.
 
virtual std::shared_ptr< void > data (const std::string &key)=0
 Retrieve arbitrary data stored with the SystemCall.
 
virtual std::shared_ptr< const void > data (const std::string &key) const =0
 Retrieve arbitrary data stored with the SystemCall.
 
virtual bool supported () const =0
 Check if this system call is supported by a more specific handler.
 
virtual void handle_return_event (Event &event)=0
 Handle a system call return event.
 
virtual ~SystemCall ()=default
 Destroy the instance.
 

Static Public Member Functions

static NTSTATUS inject (uint64_t ThreadHandle, NTSTATUS ExitStatus)
 

Detailed Description

Handler class for the NtTerminateThread system call.

Member Function Documentation

◆ ExitStatus() [1/2]

virtual NTSTATUS introvirt::windows::nt::NtTerminateThread::ExitStatus ( ) const
pure virtual

Getter for ExitStatus.

Returns
The value of the ExitStatus parameter

◆ ExitStatus() [2/2]

virtual void introvirt::windows::nt::NtTerminateThread::ExitStatus ( NTSTATUS  ExitStatus)
pure virtual

Setter for ExitStatus.

Parameters
ExitStatusThe value to set for the ExitStatus parameter

◆ inject()

static NTSTATUS introvirt::windows::nt::NtTerminateThread::inject ( uint64_t  ThreadHandle,
NTSTATUS  ExitStatus 
)
static

◆ target_tid()

virtual uint64_t introvirt::windows::nt::NtTerminateThread::target_tid ( ) const
pure virtual
Returns
The TID of the target process

◆ ThreadHandle() [1/2]

virtual uint64_t introvirt::windows::nt::NtTerminateThread::ThreadHandle ( ) const
pure virtual

Getter for ThreadHandle.

Returns
The value of the ThreadHandle parameter

◆ ThreadHandle() [2/2]

virtual void introvirt::windows::nt::NtTerminateThread::ThreadHandle ( uint64_t  ThreadHandle)
pure virtual

Setter for ThreadHandle.

Parameters
ThreadHandleThe value to set for the ThreadHandle parameter

The documentation for this class was generated from the following file: