libintrovirt v0.57.4
IntroVirt introspection library
Loading...
Searching...
No Matches
Public Member Functions | Static Public Member Functions | Static Public Attributes | List of all members
introvirt::windows::crypt32::CryptDecodeMessage Class Referencefinal

Handler for crypt32!CryptDecodeMessage. More...

#include <CryptDecodeMessage.hh>

Inheritance diagram for introvirt::windows::crypt32::CryptDecodeMessage:
Inheritance graph
[legend]
Collaboration diagram for introvirt::windows::crypt32::CryptDecodeMessage:
Collaboration graph
[legend]

Public Member Functions

uint32_t dwMsgTypeFlags () const
 
void dwMsgTypeFlags (uint32_t dwMsgTypeFlags)
 
guest_ptr< void > pDecryptPara () const
 
void pDecryptPara (const guest_ptr< void > &pDecryptPara)
 
std::shared_ptr< CRYPT_DECRYPT_MESSAGE_PARA > DecryptPara ()
 
guest_ptr< void > pVerifyPara () const
 
void pVerifyPara (const guest_ptr< void > &pVerifyPara)
 
std::shared_ptr< CRYPT_VERIFY_MESSAGE_PARA > VerifyPara ()
 
uint32_t dwSignerIndex () const
 
void dwSignerIndex (uint32_t dwSignerIndex)
 
guest_ptr< uint8_t[]> pbEncodedBlob () const
 
void pbEncodedBlob (const guest_ptr< uint8_t[]> &pbEncodedBlob)
 
uint32_t cbEncodedBlob () const
 
void cbEncodedBlob (uint32_t cbEncodedBlob)
 
uint32_t dwPrevInnerContentType () const
 
void dwPrevInnerContentType (uint32_t dwPrevInnerContentType)
 
guest_ptr< uint32_t > pdwMsgType () const
 
void pdwMsgType (const guest_ptr< uint32_t > &pdwMsgType)
 
guest_ptr< uint32_t > pdwInnerContentType () const
 
void pdwInnerContentType (const guest_ptr< uint32_t > &pdwInnerContentType)
 
guest_ptr< uint8_t[]> pbDecoded () const
 
void pbDecoded (const guest_ptr< uint8_t[]> &pbDecoded)
 
guest_ptr< uint32_t > pcbDecoded () const
 
void pcbDecoded (const guest_ptr< uint32_t > &pcbDecoded)
 
guest_ptr< void *, guest_ptr_t > ppXchgCert () const
 
void ppXchgCert (const guest_ptr< void > &ppXchgCert)
 
std::shared_ptr< CERT_CONTEXT > XchgCert ()
 
guest_ptr< void *, guest_ptr_t > ppSignerCert () const
 
void ppSignerCert (const guest_ptr< void > &ppSignerCert)
 
std::shared_ptr< CERT_CONTEXT > SignerCert ()
 
const std::string & function_name () const override
 Get the function name.
 
const std::string & library_name () const override
 Get the name of the library this call is for.
 
void write (std::ostream &os=std::cout) const override
 Write out a textual representation of the function for display.
 
Json::Value json () const override
 Get the function as Json.
 
bool result () const
 
void result (bool result)
 
 CryptDecodeMessage (Event &event)
 
 ~CryptDecodeMessage () override
 
- Public Member Functions inherited from introvirt::windows::WindowsFunctionCall
guest_ptr< void > return_address () const override
 Get the return address for this function call.
 
void return_address (const guest_ptr< void > &value) override
 Set the return address for this function call.
 
bool is_return_event (Event &event) const override
 Check if the given event is a return event for this function call.
 
void handle_return (Event &event) override
 Handle the return event.
 
bool returned () const override
 Check if the call has returned.
 
bool x64 () const
 Check if the call is from x64 mode.hh>
 
virtual ~WindowsFunctionCall ()
 
- Public Member Functions inherited from introvirt::FunctionCall
bool hook_return () const
 Check if the user is requesting that the return be intercepted.
 
void hook_return (bool val)
 Configure if the return should be intercepted.
 
void data (const std::string &key, const std::shared_ptr< void > &value)
 Store arbitrary data with the FunctionCall.
 
void data (const std::string &key, std::shared_ptr< void > &&value)
 Store arbitrary data with the FunctionCall.
 
std::shared_ptr< void > data (const std::string &key)
 Retrieve arbitrary data stored with the FunctionCall.
 
std::shared_ptr< const void > data (const std::string &key) const
 Retrieve arbitrary data stored with the FunctionCall.
 
virtual ~FunctionCall ()=default
 

Static Public Member Functions

static bool inject (uint32_t dwMsgTypeFlags, const guest_ptr< void > &pDecryptPara, const guest_ptr< void > &pVerifyPara, uint32_t dwSignerIndex, const guest_ptr< uint8_t[]> &pbEncodedBlob, uint32_t cbEncodedBlob, uint32_t dwPrevInnerContentType, const guest_ptr< uint32_t > &pdwMsgType, const guest_ptr< uint32_t > &pdwInnerContentType, const guest_ptr< uint8_t[]> &pbDecoded, const guest_ptr< uint32_t > &pcbDecoded, const guest_ptr< void *, guest_ptr_t > &ppXchgCert, const guest_ptr< void *, guest_ptr_t > &ppSignerCert)
 

Static Public Attributes

static constexpr int ArgumentCount = 13
 
static const std::string LibraryName = "crypt32"
 
static const std::string FunctionName = "CryptDecodeMessage"
 

Additional Inherited Members

- Protected Member Functions inherited from introvirt::windows::WindowsFunctionCall
uint64_t raw_return_value () const
 
void raw_return_value (uint64_t value)
 
uint64_t get_argument (unsigned int index) const
 
void set_argument (unsigned int index, uint64_t value)
 
guest_ptr< void > get_address_argument (unsigned int index) const
 
void set_address_argument (unsigned int index, const guest_ptr< void > &address)
 
Vcpu & vcpu ()
 
const Vcpu & vcpu () const
 
 WindowsFunctionCall (Event &event, unsigned int argument_count, WindowsCallType type=WindowsCallType::AUTO)
 

Detailed Description

Handler for crypt32!CryptDecodeMessage.

See also
https://docs.microsoft.com/en-us/windows/win32/api/wincrypt/nf-wincrypt-cryptdecodemessage

Constructor & Destructor Documentation

◆ CryptDecodeMessage()

introvirt::windows::crypt32::CryptDecodeMessage::CryptDecodeMessage ( Event &  event)

◆ ~CryptDecodeMessage()

introvirt::windows::crypt32::CryptDecodeMessage::~CryptDecodeMessage ( )
override

Member Function Documentation

◆ cbEncodedBlob() [1/2]

uint32_t introvirt::windows::crypt32::CryptDecodeMessage::cbEncodedBlob ( ) const

◆ cbEncodedBlob() [2/2]

void introvirt::windows::crypt32::CryptDecodeMessage::cbEncodedBlob ( uint32_t  cbEncodedBlob)

◆ DecryptPara()

std::shared_ptr< CRYPT_DECRYPT_MESSAGE_PARA > introvirt::windows::crypt32::CryptDecodeMessage::DecryptPara ( )

◆ dwMsgTypeFlags() [1/2]

uint32_t introvirt::windows::crypt32::CryptDecodeMessage::dwMsgTypeFlags ( ) const

◆ dwMsgTypeFlags() [2/2]

void introvirt::windows::crypt32::CryptDecodeMessage::dwMsgTypeFlags ( uint32_t  dwMsgTypeFlags)

◆ dwPrevInnerContentType() [1/2]

uint32_t introvirt::windows::crypt32::CryptDecodeMessage::dwPrevInnerContentType ( ) const

◆ dwPrevInnerContentType() [2/2]

void introvirt::windows::crypt32::CryptDecodeMessage::dwPrevInnerContentType ( uint32_t  dwPrevInnerContentType)

◆ dwSignerIndex() [1/2]

uint32_t introvirt::windows::crypt32::CryptDecodeMessage::dwSignerIndex ( ) const

◆ dwSignerIndex() [2/2]

void introvirt::windows::crypt32::CryptDecodeMessage::dwSignerIndex ( uint32_t  dwSignerIndex)

◆ function_name()

const std::string & introvirt::windows::crypt32::CryptDecodeMessage::function_name ( ) const
overridevirtual

Get the function name.

Returns
const std::string&

Implements introvirt::FunctionCall.

◆ inject()

static bool introvirt::windows::crypt32::CryptDecodeMessage::inject ( uint32_t  dwMsgTypeFlags,
const guest_ptr< void > &  pDecryptPara,
const guest_ptr< void > &  pVerifyPara,
uint32_t  dwSignerIndex,
const guest_ptr< uint8_t[]> &  pbEncodedBlob,
uint32_t  cbEncodedBlob,
uint32_t  dwPrevInnerContentType,
const guest_ptr< uint32_t > &  pdwMsgType,
const guest_ptr< uint32_t > &  pdwInnerContentType,
const guest_ptr< uint8_t[]> &  pbDecoded,
const guest_ptr< uint32_t > &  pcbDecoded,
const guest_ptr< void *, guest_ptr_t > &  ppXchgCert,
const guest_ptr< void *, guest_ptr_t > &  ppSignerCert 
)
static

◆ json()

Json::Value introvirt::windows::crypt32::CryptDecodeMessage::json ( ) const
overridevirtual

Get the function as Json.

Returns
Json::Value

Implements introvirt::FunctionCall.

◆ library_name()

const std::string & introvirt::windows::crypt32::CryptDecodeMessage::library_name ( ) const
overridevirtual

Get the name of the library this call is for.

Returns
const std::string&

Implements introvirt::FunctionCall.

◆ pbDecoded() [1/2]

guest_ptr< uint8_t[]> introvirt::windows::crypt32::CryptDecodeMessage::pbDecoded ( ) const

◆ pbDecoded() [2/2]

void introvirt::windows::crypt32::CryptDecodeMessage::pbDecoded ( const guest_ptr< uint8_t[]> &  pbDecoded)

◆ pbEncodedBlob() [1/2]

guest_ptr< uint8_t[]> introvirt::windows::crypt32::CryptDecodeMessage::pbEncodedBlob ( ) const

◆ pbEncodedBlob() [2/2]

void introvirt::windows::crypt32::CryptDecodeMessage::pbEncodedBlob ( const guest_ptr< uint8_t[]> &  pbEncodedBlob)

◆ pcbDecoded() [1/2]

guest_ptr< uint32_t > introvirt::windows::crypt32::CryptDecodeMessage::pcbDecoded ( ) const

◆ pcbDecoded() [2/2]

void introvirt::windows::crypt32::CryptDecodeMessage::pcbDecoded ( const guest_ptr< uint32_t > &  pcbDecoded)

◆ pDecryptPara() [1/2]

guest_ptr< void > introvirt::windows::crypt32::CryptDecodeMessage::pDecryptPara ( ) const

◆ pDecryptPara() [2/2]

void introvirt::windows::crypt32::CryptDecodeMessage::pDecryptPara ( const guest_ptr< void > &  pDecryptPara)

◆ pdwInnerContentType() [1/2]

guest_ptr< uint32_t > introvirt::windows::crypt32::CryptDecodeMessage::pdwInnerContentType ( ) const

◆ pdwInnerContentType() [2/2]

void introvirt::windows::crypt32::CryptDecodeMessage::pdwInnerContentType ( const guest_ptr< uint32_t > &  pdwInnerContentType)

◆ pdwMsgType() [1/2]

guest_ptr< uint32_t > introvirt::windows::crypt32::CryptDecodeMessage::pdwMsgType ( ) const

◆ pdwMsgType() [2/2]

void introvirt::windows::crypt32::CryptDecodeMessage::pdwMsgType ( const guest_ptr< uint32_t > &  pdwMsgType)

◆ ppSignerCert() [1/2]

guest_ptr< void *, guest_ptr_t > introvirt::windows::crypt32::CryptDecodeMessage::ppSignerCert ( ) const

◆ ppSignerCert() [2/2]

void introvirt::windows::crypt32::CryptDecodeMessage::ppSignerCert ( const guest_ptr< void > &  ppSignerCert)

◆ ppXchgCert() [1/2]

guest_ptr< void *, guest_ptr_t > introvirt::windows::crypt32::CryptDecodeMessage::ppXchgCert ( ) const

◆ ppXchgCert() [2/2]

void introvirt::windows::crypt32::CryptDecodeMessage::ppXchgCert ( const guest_ptr< void > &  ppXchgCert)

◆ pVerifyPara() [1/2]

guest_ptr< void > introvirt::windows::crypt32::CryptDecodeMessage::pVerifyPara ( ) const

◆ pVerifyPara() [2/2]

void introvirt::windows::crypt32::CryptDecodeMessage::pVerifyPara ( const guest_ptr< void > &  pVerifyPara)

◆ result() [1/2]

bool introvirt::windows::crypt32::CryptDecodeMessage::result ( ) const

◆ result() [2/2]

void introvirt::windows::crypt32::CryptDecodeMessage::result ( bool  result)

◆ SignerCert()

std::shared_ptr< CERT_CONTEXT > introvirt::windows::crypt32::CryptDecodeMessage::SignerCert ( )

◆ VerifyPara()

std::shared_ptr< CRYPT_VERIFY_MESSAGE_PARA > introvirt::windows::crypt32::CryptDecodeMessage::VerifyPara ( )

◆ write()

void introvirt::windows::crypt32::CryptDecodeMessage::write ( std::ostream &  os = std::cout) const
overridevirtual

Write out a textual representation of the function for display.

Parameters
os

Implements introvirt::FunctionCall.

◆ XchgCert()

std::shared_ptr< CERT_CONTEXT > introvirt::windows::crypt32::CryptDecodeMessage::XchgCert ( )

Member Data Documentation

◆ ArgumentCount

constexpr int introvirt::windows::crypt32::CryptDecodeMessage::ArgumentCount = 13
staticconstexpr

◆ FunctionName

const std::string introvirt::windows::crypt32::CryptDecodeMessage::FunctionName = "CryptDecodeMessage"
inlinestatic

◆ LibraryName

const std::string introvirt::windows::crypt32::CryptDecodeMessage::LibraryName = "crypt32"
inlinestatic
The documentation for this class was generated from the following file: