Struct WindowsProcessParametersBase 

pub struct WindowsProcessParametersBase<'a, Driver, Layout>
where
    Driver: VmiRead,
    Driver::Architecture: ArchAdapter<Driver>,
    Layout: StructLayout,
    RtlUserProcessParametersLayout: RtlUserProcessParameters<Layout>,
{ /* private fields */ }

Process parameters accessor with a compile-time pointer width.

Implementation Details

Corresponds to _RTL_USER_PROCESS_PARAMETERS.

Implementations

impl<'a, Driver, Layout> WindowsProcessParametersBase<'a, Driver, Layout>

where Driver: VmiRead, Driver::Architecture: ArchAdapter<Driver>, Layout: StructLayout, RtlUserProcessParametersLayout: RtlUserProcessParameters<Layout>, CurDirLayout: CurDir<Layout>,

pub fn new(vmi: VmiState<'a, WindowsOs<Driver>>, va: Va, root: Pa) -> Self

Creates a new process parameters accessor.

pub fn current_directory(&self) -> Result<String, VmiError>

Returns the current directory.

Implementation Details

Corresponds to _RTL_USER_PROCESS_PARAMETERS.CurrentDirectory.DosPath.

pub fn dll_path(&self) -> Result<String, VmiError>

Returns the DLL search path.

Implementation Details

Corresponds to _RTL_USER_PROCESS_PARAMETERS.DllPath.

pub fn image_path_name(&self) -> Result<String, VmiError>

Returns the full path of the executable image.

Implementation Details

Corresponds to _RTL_USER_PROCESS_PARAMETERS.ImagePathName.

pub fn command_line(&self) -> Result<String, VmiError>

Returns the command line used to launch the process.

Implementation Details

Corresponds to _RTL_USER_PROCESS_PARAMETERS.CommandLine.

Trait Implementations

impl<'a, Driver> From<WindowsProcessParametersBase<'a, Driver, StructLayout32>> for WindowsProcessParameters<'a, Driver>

where Driver: VmiRead, Driver::Architecture: ArchAdapter<Driver>,

fn from(value: WindowsProcessParametersBase<'a, Driver, StructLayout32>) -> Self

Converts to this type from the input type.

impl<'a, Driver> From<WindowsProcessParametersBase<'a, Driver, StructLayout64>> for WindowsProcessParameters<'a, Driver>

where Driver: VmiRead, Driver::Architecture: ArchAdapter<Driver>,

fn from(value: WindowsProcessParametersBase<'a, Driver, StructLayout64>) -> Self

Converts to this type from the input type.