|
libintrovirt v0.57.4
IntroVirt introspection library
|
Handler for crypt32!CryptDecodeObjectEx. More...
#include <CryptDecodeObjectEx.hh>


Public Member Functions | |
| uint32_t | dwCertEncodingType () const |
| void | dwCertEncodingType (uint32_t dwCertEncodingType) |
| guest_ptr< char[]> | pszStructType () const |
| CryptStructType | StructType () const |
| void | pszStructType (const guest_ptr< char[]> &pszStructType) |
| void | StructType (CryptStructType StructType) |
| guest_ptr< uint8_t[]> | pbEncoded () const |
| void | pbEncoded (const guest_ptr< uint8_t[]> &pbEncoded) |
| uint32_t | cbEncoded () const |
| void | cbEncoded (uint32_t cbEncoded) |
| uint32_t | dwFlags () const |
| void | dwFlags (uint32_t dwFlags) |
| guest_ptr< void > | pDecodePara () const |
| void | pDecodePara (const guest_ptr< void > &pDecodePara) |
| std::shared_ptr< CRYPT_DECODE_PARA > | DecodePara () |
| guest_ptr< void > | pvStructInfo () const |
| void | pvStructInfo (const guest_ptr< void > &pvStructInfo) |
| guest_ptr< uint32_t > | pcbStructInfo () const |
| void | pcbStructInfo (const guest_ptr< uint32_t > &pcbStructInfo) |
| const std::string & | function_name () const override |
| Get the function name. | |
| const std::string & | library_name () const override |
| Get the name of the library this call is for. | |
| void | write (std::ostream &os=std::cout) const override |
| Write out a textual representation of the function for display. | |
| Json::Value | json () const override |
| Get the function as Json. | |
| bool | result () const |
| void | result (bool result) |
| CryptDecodeObjectEx (Event &event) | |
| ~CryptDecodeObjectEx () override | |
Public Member Functions inherited from introvirt::windows::WindowsFunctionCall | |
| guest_ptr< void > | return_address () const override |
| Get the return address for this function call. | |
| void | return_address (const guest_ptr< void > &value) override |
| Set the return address for this function call. | |
| bool | is_return_event (Event &event) const override |
| Check if the given event is a return event for this function call. | |
| void | handle_return (Event &event) override |
| Handle the return event. | |
| bool | returned () const override |
| Check if the call has returned. | |
| bool | x64 () const |
| Check if the call is from x64 mode.hh> | |
| virtual | ~WindowsFunctionCall () |
Public Member Functions inherited from introvirt::FunctionCall | |
| bool | hook_return () const |
| Check if the user is requesting that the return be intercepted. | |
| void | hook_return (bool val) |
| Configure if the return should be intercepted. | |
| void | data (const std::string &key, const std::shared_ptr< void > &value) |
| Store arbitrary data with the FunctionCall. | |
| void | data (const std::string &key, std::shared_ptr< void > &&value) |
| Store arbitrary data with the FunctionCall. | |
| std::shared_ptr< void > | data (const std::string &key) |
| Retrieve arbitrary data stored with the FunctionCall. | |
| std::shared_ptr< const void > | data (const std::string &key) const |
| Retrieve arbitrary data stored with the FunctionCall. | |
| virtual | ~FunctionCall ()=default |
Static Public Member Functions | |
| static bool | inject (uint32_t dwCertEncodingType, const guest_ptr< char[]> &pszStructType, const guest_ptr< uint8_t[]> &pbEncoded, uint32_t cbEncoded, uint32_t dwFlags, const guest_ptr< void > &pDecodePara, const guest_ptr< void > &pvStructInfo, const guest_ptr< uint32_t > &pcbStructInfo) |
Static Public Attributes | |
| static constexpr int | ArgumentCount = 8 |
| static const std::string | LibraryName = "crypt32" |
| static const std::string | FunctionName = "CryptDecodeObjectEx" |
Additional Inherited Members | |
Protected Member Functions inherited from introvirt::windows::WindowsFunctionCall | |
| uint64_t | raw_return_value () const |
| void | raw_return_value (uint64_t value) |
| uint64_t | get_argument (unsigned int index) const |
| void | set_argument (unsigned int index, uint64_t value) |
| guest_ptr< void > | get_address_argument (unsigned int index) const |
| void | set_address_argument (unsigned int index, const guest_ptr< void > &address) |
| Vcpu & | vcpu () |
| const Vcpu & | vcpu () const |
| WindowsFunctionCall (Event &event, unsigned int argument_count, WindowsCallType type=WindowsCallType::AUTO) | |
Handler for crypt32!CryptDecodeObjectEx.
| introvirt::windows::crypt32::CryptDecodeObjectEx::CryptDecodeObjectEx | ( | Event & | event | ) |
|
override |
| uint32_t introvirt::windows::crypt32::CryptDecodeObjectEx::cbEncoded | ( | ) | const |
| void introvirt::windows::crypt32::CryptDecodeObjectEx::cbEncoded | ( | uint32_t | cbEncoded | ) |
| std::shared_ptr< CRYPT_DECODE_PARA > introvirt::windows::crypt32::CryptDecodeObjectEx::DecodePara | ( | ) |
| uint32_t introvirt::windows::crypt32::CryptDecodeObjectEx::dwCertEncodingType | ( | ) | const |
| void introvirt::windows::crypt32::CryptDecodeObjectEx::dwCertEncodingType | ( | uint32_t | dwCertEncodingType | ) |
| uint32_t introvirt::windows::crypt32::CryptDecodeObjectEx::dwFlags | ( | ) | const |
| void introvirt::windows::crypt32::CryptDecodeObjectEx::dwFlags | ( | uint32_t | dwFlags | ) |
|
overridevirtual |
|
static |
|
overridevirtual |
|
overridevirtual |
Get the name of the library this call is for.
Implements introvirt::FunctionCall.
| guest_ptr< uint8_t[]> introvirt::windows::crypt32::CryptDecodeObjectEx::pbEncoded | ( | ) | const |
| void introvirt::windows::crypt32::CryptDecodeObjectEx::pbEncoded | ( | const guest_ptr< uint8_t[]> & | pbEncoded | ) |
| guest_ptr< uint32_t > introvirt::windows::crypt32::CryptDecodeObjectEx::pcbStructInfo | ( | ) | const |
| void introvirt::windows::crypt32::CryptDecodeObjectEx::pcbStructInfo | ( | const guest_ptr< uint32_t > & | pcbStructInfo | ) |
| guest_ptr< void > introvirt::windows::crypt32::CryptDecodeObjectEx::pDecodePara | ( | ) | const |
| void introvirt::windows::crypt32::CryptDecodeObjectEx::pDecodePara | ( | const guest_ptr< void > & | pDecodePara | ) |
| guest_ptr< char[]> introvirt::windows::crypt32::CryptDecodeObjectEx::pszStructType | ( | ) | const |
| void introvirt::windows::crypt32::CryptDecodeObjectEx::pszStructType | ( | const guest_ptr< char[]> & | pszStructType | ) |
| guest_ptr< void > introvirt::windows::crypt32::CryptDecodeObjectEx::pvStructInfo | ( | ) | const |
| void introvirt::windows::crypt32::CryptDecodeObjectEx::pvStructInfo | ( | const guest_ptr< void > & | pvStructInfo | ) |
| bool introvirt::windows::crypt32::CryptDecodeObjectEx::result | ( | ) | const |
| void introvirt::windows::crypt32::CryptDecodeObjectEx::result | ( | bool | result | ) |
| CryptStructType introvirt::windows::crypt32::CryptDecodeObjectEx::StructType | ( | ) | const |
| void introvirt::windows::crypt32::CryptDecodeObjectEx::StructType | ( | CryptStructType | StructType | ) |
|
overridevirtual |
Write out a textual representation of the function for display.
| os |
Implements introvirt::FunctionCall.
|
staticconstexpr |
|
inlinestatic |
|
inlinestatic |