introvirt::windows::advapi32::CryptDecrypt Class Reference

Handler for advapi32!CryptDecrypt. More...

#include <CryptDecrypt.hh>

Inheritance diagram for introvirt::windows::advapi32::CryptDecrypt:

Collaboration diagram for introvirt::windows::advapi32::CryptDecrypt:

Public Member Functions
HCRYPTKEY	hKey () const
void	hKey (HCRYPTKEY hKey)
HCRYPTHASH	hHash () const
void	hHash (HCRYPTHASH hHash)
bool	Final () const
void	Final (bool Final)
uint32_t	dwFlags () const
void	dwFlags (uint32_t dwFlags)
guest_ptr< uint8_t[]>	pbData () const
void	pbData (const guest_ptr< uint8_t[]> &pbData)
guest_ptr< uint32_t >	pdwDataLen () const
void	pdwDataLen (const guest_ptr< uint32_t > &pdwDataLen)
const std::string &	function_name () const override
	Get the function name.
const std::string &	library_name () const override
	Get the name of the library this call is for.
void	write (std::ostream &os=std::cout) const override
	Write out a textual representation of the function for display.
Json::Value	json () const override
	Get the function as Json.
bool	result () const
void	result (bool result)
	CryptDecrypt (Event &event)
	~CryptDecrypt () override
Public Member Functions inherited from introvirt::windows::WindowsFunctionCall
guest_ptr< void >	return_address () const override
	Get the return address for this function call.
void	return_address (const guest_ptr< void > &value) override
	Set the return address for this function call.
bool	is_return_event (Event &event) const override
	Check if the given event is a return event for this function call.
void	handle_return (Event &event) override
	Handle the return event.
bool	returned () const override
	Check if the call has returned.
bool	x64 () const
	Check if the call is from x64 mode.hh>
virtual	~WindowsFunctionCall ()
Public Member Functions inherited from introvirt::FunctionCall
bool	hook_return () const
	Check if the user is requesting that the return be intercepted.
void	hook_return (bool val)
	Configure if the return should be intercepted.
void	data (const std::string &key, const std::shared_ptr< void > &value)
	Store arbitrary data with the FunctionCall.
void	data (const std::string &key, std::shared_ptr< void > &&value)
	Store arbitrary data with the FunctionCall.
std::shared_ptr< void >	data (const std::string &key)
	Retrieve arbitrary data stored with the FunctionCall.
std::shared_ptr< const void >	data (const std::string &key) const
	Retrieve arbitrary data stored with the FunctionCall.
virtual	~FunctionCall ()=default

Static Public Member Functions
static bool	inject (HCRYPTKEY hKey, HCRYPTHASH hHash, bool Final, uint32_t dwFlags, const guest_ptr< uint8_t[]> &pbData, const guest_ptr< uint32_t > &pdwDataLen)

Static Public Attributes
static constexpr int	ArgumentCount = 6
static const std::string	LibraryName = "advapi32"
static const std::string	FunctionName = "CryptDecrypt"

Additional Inherited Members
Protected Member Functions inherited from introvirt::windows::WindowsFunctionCall
uint64_t	raw_return_value () const
void	raw_return_value (uint64_t value)
uint64_t	get_argument (unsigned int index) const
void	set_argument (unsigned int index, uint64_t value)
guest_ptr< void >	get_address_argument (unsigned int index) const
void	set_address_argument (unsigned int index, const guest_ptr< void > &address)
Vcpu &	vcpu ()
const Vcpu &	vcpu () const
	WindowsFunctionCall (Event &event, unsigned int argument_count, WindowsCallType type=WindowsCallType::AUTO)

Detailed Description

Handler for advapi32!CryptDecrypt.

See also

https://docs.microsoft.com/en-us/windows/win32/api/wincrypt/nf-wincrypt-cryptdecrypt

Constructor & Destructor Documentation

CryptDecrypt()

introvirt::windows::advapi32::CryptDecrypt::CryptDecrypt

(

Event &

event

)

~CryptDecrypt()

introvirt::windows::advapi32::CryptDecrypt::~CryptDecrypt ( )

override

Member Function Documentation

dwFlags() [1/2]

uint32_t introvirt::windows::advapi32::CryptDecrypt::dwFlags

(

)

const

dwFlags() [2/2]

void introvirt::windows::advapi32::CryptDecrypt::dwFlags

(

uint32_t

dwFlags

)

Final() [1/2]

bool introvirt::windows::advapi32::CryptDecrypt::Final

(

)

const

Final() [2/2]

void introvirt::windows::advapi32::CryptDecrypt::Final

(

bool

Final

)

function_name()

const std::string & introvirt::windows::advapi32::CryptDecrypt::function_name ( ) const

overridevirtual

Get the function name.

Returns

const std::string&

Implements introvirt::FunctionCall.

hHash() [1/2]

HCRYPTHASH introvirt::windows::advapi32::CryptDecrypt::hHash

(

)

const

hHash() [2/2]

void introvirt::windows::advapi32::CryptDecrypt::hHash

(

HCRYPTHASH

hHash

)

hKey() [1/2]

HCRYPTKEY introvirt::windows::advapi32::CryptDecrypt::hKey

(

)

const

hKey() [2/2]

void introvirt::windows::advapi32::CryptDecrypt::hKey

(

HCRYPTKEY

hKey

)

inject()

static bool introvirt::windows::advapi32::CryptDecrypt::inject ( HCRYPTKEY  hKey, HCRYPTHASH  hHash, bool  Final, uint32_t  dwFlags, const guest_ptr< uint8_t[]> &  pbData, const guest_ptr< uint32_t > &  pdwDataLen  )

static

json()

Json::Value introvirt::windows::advapi32::CryptDecrypt::json ( ) const

overridevirtual

Get the function as Json.

Returns

Json::Value

Implements introvirt::FunctionCall.

library_name()

const std::string & introvirt::windows::advapi32::CryptDecrypt::library_name ( ) const

overridevirtual

Get the name of the library this call is for.

Returns

const std::string&

Implements introvirt::FunctionCall.

pbData() [1/2]

guest_ptr< uint8_t[]> introvirt::windows::advapi32::CryptDecrypt::pbData

(

)

const

pbData() [2/2]

void introvirt::windows::advapi32::CryptDecrypt::pbData

(

const guest_ptr< uint8_t[]> &

pbData

)

pdwDataLen() [1/2]

guest_ptr< uint32_t > introvirt::windows::advapi32::CryptDecrypt::pdwDataLen

(

)

const

pdwDataLen() [2/2]

void introvirt::windows::advapi32::CryptDecrypt::pdwDataLen

(

const guest_ptr< uint32_t > &

pdwDataLen

)

result() [1/2]

bool introvirt::windows::advapi32::CryptDecrypt::result

(

)

const

result() [2/2]

void introvirt::windows::advapi32::CryptDecrypt::result

(

bool

result

)

write()

void introvirt::windows::advapi32::CryptDecrypt::write ( std::ostream &  os = std::cout ) const

overridevirtual

Write out a textual representation of the function for display.

Parameters

os

Implements introvirt::FunctionCall.

Member Data Documentation

ArgumentCount

constexpr int introvirt::windows::advapi32::CryptDecrypt::ArgumentCount = 6

staticconstexpr

FunctionName

const std::string introvirt::windows::advapi32::CryptDecrypt::FunctionName = "CryptDecrypt"

inlinestatic

LibraryName

const std::string introvirt::windows::advapi32::CryptDecrypt::LibraryName = "advapi32"

inlinestatic

---

The documentation for this class was generated from the following file:

• /home/runner/work/IntroVirt/IntroVirt/include/introvirt/windows/libraries/advapi32/functions/CryptDecrypt.hh