introvirt::windows::crypt32::CryptProtectData Class Reference

Handler for crypt32!CryptProtectData. More...

#include <CryptProtectData.hh>

Inheritance diagram for introvirt::windows::crypt32::CryptProtectData:

Collaboration diagram for introvirt::windows::crypt32::CryptProtectData:

Public Member Functions
guest_ptr< void >	pDataIn () const
void	pDataIn (const guest_ptr< void > &pDataIn)
std::shared_ptr< CRYPTOAPI_BLOB >	DataIn ()
guest_ptr< char[]>	pszDataDescr () const
void	pszDataDescr (const guest_ptr< char[]> &pszDataDescr)
guest_ptr< void >	pOptionalEntropy () const
void	pOptionalEntropy (const guest_ptr< void > &pOptionalEntropy)
std::shared_ptr< CRYPTOAPI_BLOB >	OptionalEntropy ()
guest_ptr< void >	pvReserved () const
void	pvReserved (const guest_ptr< void > &pvReserved)
guest_ptr< void >	pPromptStruct () const
void	pPromptStruct (const guest_ptr< void > &pPromptStruct)
std::shared_ptr< CRYPTPROTECT_PROMPTSTRUCT >	PromptStruct ()
uint32_t	dwFlags () const
void	dwFlags (uint32_t dwFlags)
guest_ptr< void >	pDataOut () const
void	pDataOut (const guest_ptr< void > &pDataOut)
std::shared_ptr< CRYPTOAPI_BLOB >	DataOut ()
const std::string &	function_name () const override
	Get the function name.
const std::string &	library_name () const override
	Get the name of the library this call is for.
void	write (std::ostream &os=std::cout) const override
	Write out a textual representation of the function for display.
Json::Value	json () const override
	Get the function as Json.
bool	result () const
void	result (bool result)
	CryptProtectData (Event &event)
	~CryptProtectData () override
Public Member Functions inherited from introvirt::windows::WindowsFunctionCall
guest_ptr< void >	return_address () const override
	Get the return address for this function call.
void	return_address (const guest_ptr< void > &value) override
	Set the return address for this function call.
bool	is_return_event (Event &event) const override
	Check if the given event is a return event for this function call.
void	handle_return (Event &event) override
	Handle the return event.
bool	returned () const override
	Check if the call has returned.
bool	x64 () const
	Check if the call is from x64 mode.hh>
virtual	~WindowsFunctionCall ()
Public Member Functions inherited from introvirt::FunctionCall
bool	hook_return () const
	Check if the user is requesting that the return be intercepted.
void	hook_return (bool val)
	Configure if the return should be intercepted.
void	data (const std::string &key, const std::shared_ptr< void > &value)
	Store arbitrary data with the FunctionCall.
void	data (const std::string &key, std::shared_ptr< void > &&value)
	Store arbitrary data with the FunctionCall.
std::shared_ptr< void >	data (const std::string &key)
	Retrieve arbitrary data stored with the FunctionCall.
std::shared_ptr< const void >	data (const std::string &key) const
	Retrieve arbitrary data stored with the FunctionCall.
virtual	~FunctionCall ()=default

Static Public Member Functions
static bool	inject (const guest_ptr< void > &pDataIn, const guest_ptr< char[]> &pszDataDescr, const guest_ptr< void > &pOptionalEntropy, const guest_ptr< void > &pvReserved, const guest_ptr< void > &pPromptStruct, uint32_t dwFlags, const guest_ptr< void > &pDataOut)

Static Public Attributes
static constexpr int	ArgumentCount = 7
static const std::string	LibraryName = "crypt32"
static const std::string	FunctionName = "CryptProtectData"

Additional Inherited Members
Protected Member Functions inherited from introvirt::windows::WindowsFunctionCall
uint64_t	raw_return_value () const
void	raw_return_value (uint64_t value)
uint64_t	get_argument (unsigned int index) const
void	set_argument (unsigned int index, uint64_t value)
guest_ptr< void >	get_address_argument (unsigned int index) const
void	set_address_argument (unsigned int index, const guest_ptr< void > &address)
Vcpu &	vcpu ()
const Vcpu &	vcpu () const
	WindowsFunctionCall (Event &event, unsigned int argument_count, WindowsCallType type=WindowsCallType::AUTO)

Detailed Description

Handler for crypt32!CryptProtectData.

See also

https://docs.microsoft.com/en-us/windows/win32/api/dpapi/nf-dpapi-cryptprotectdata

Constructor & Destructor Documentation

CryptProtectData()

introvirt::windows::crypt32::CryptProtectData::CryptProtectData

(

Event &

event

)

~CryptProtectData()

introvirt::windows::crypt32::CryptProtectData::~CryptProtectData ( )

override

Member Function Documentation

DataIn()

std::shared_ptr< CRYPTOAPI_BLOB > introvirt::windows::crypt32::CryptProtectData::DataIn

(

)

DataOut()

std::shared_ptr< CRYPTOAPI_BLOB > introvirt::windows::crypt32::CryptProtectData::DataOut

(

)

dwFlags() [1/2]

uint32_t introvirt::windows::crypt32::CryptProtectData::dwFlags

(

)

const

dwFlags() [2/2]

void introvirt::windows::crypt32::CryptProtectData::dwFlags

(

uint32_t

dwFlags

)

function_name()

const std::string & introvirt::windows::crypt32::CryptProtectData::function_name ( ) const

overridevirtual

Get the function name.

Returns

const std::string&

Implements introvirt::FunctionCall.

inject()

static bool introvirt::windows::crypt32::CryptProtectData::inject ( const guest_ptr< void > &  pDataIn, const guest_ptr< char[]> &  pszDataDescr, const guest_ptr< void > &  pOptionalEntropy, const guest_ptr< void > &  pvReserved, const guest_ptr< void > &  pPromptStruct, uint32_t  dwFlags, const guest_ptr< void > &  pDataOut  )

static

json()

Json::Value introvirt::windows::crypt32::CryptProtectData::json ( ) const

overridevirtual

Get the function as Json.

Returns

Json::Value

Implements introvirt::FunctionCall.

library_name()

const std::string & introvirt::windows::crypt32::CryptProtectData::library_name ( ) const

overridevirtual

Get the name of the library this call is for.

Returns

const std::string&

Implements introvirt::FunctionCall.

OptionalEntropy()

std::shared_ptr< CRYPTOAPI_BLOB > introvirt::windows::crypt32::CryptProtectData::OptionalEntropy

(

)

pDataIn() [1/2]

guest_ptr< void > introvirt::windows::crypt32::CryptProtectData::pDataIn

(

)

const

pDataIn() [2/2]

void introvirt::windows::crypt32::CryptProtectData::pDataIn

(

const guest_ptr< void > &

pDataIn

)

pDataOut() [1/2]

guest_ptr< void > introvirt::windows::crypt32::CryptProtectData::pDataOut

(

)

const

pDataOut() [2/2]

void introvirt::windows::crypt32::CryptProtectData::pDataOut

(

const guest_ptr< void > &

pDataOut

)

pOptionalEntropy() [1/2]

guest_ptr< void > introvirt::windows::crypt32::CryptProtectData::pOptionalEntropy

(

)

const

pOptionalEntropy() [2/2]

void introvirt::windows::crypt32::CryptProtectData::pOptionalEntropy

(

const guest_ptr< void > &

pOptionalEntropy

)

pPromptStruct() [1/2]

guest_ptr< void > introvirt::windows::crypt32::CryptProtectData::pPromptStruct

(

)

const

pPromptStruct() [2/2]

void introvirt::windows::crypt32::CryptProtectData::pPromptStruct

(

const guest_ptr< void > &

pPromptStruct

)

PromptStruct()

std::shared_ptr< CRYPTPROTECT_PROMPTSTRUCT > introvirt::windows::crypt32::CryptProtectData::PromptStruct

(

)

pszDataDescr() [1/2]

guest_ptr< char[]> introvirt::windows::crypt32::CryptProtectData::pszDataDescr

(

)

const

pszDataDescr() [2/2]

void introvirt::windows::crypt32::CryptProtectData::pszDataDescr

(

const guest_ptr< char[]> &

pszDataDescr

)

pvReserved() [1/2]

guest_ptr< void > introvirt::windows::crypt32::CryptProtectData::pvReserved

(

)

const

pvReserved() [2/2]

void introvirt::windows::crypt32::CryptProtectData::pvReserved

(

const guest_ptr< void > &

pvReserved

)

result() [1/2]

bool introvirt::windows::crypt32::CryptProtectData::result

(

)

const

result() [2/2]

void introvirt::windows::crypt32::CryptProtectData::result

(

bool

result

)

write()

void introvirt::windows::crypt32::CryptProtectData::write ( std::ostream &  os = std::cout ) const

overridevirtual

Write out a textual representation of the function for display.

Parameters

os

Implements introvirt::FunctionCall.

Member Data Documentation

ArgumentCount

constexpr int introvirt::windows::crypt32::CryptProtectData::ArgumentCount = 7

staticconstexpr

FunctionName

const std::string introvirt::windows::crypt32::CryptProtectData::FunctionName = "CryptProtectData"

inlinestatic

LibraryName

const std::string introvirt::windows::crypt32::CryptProtectData::LibraryName = "crypt32"

inlinestatic

---

The documentation for this class was generated from the following file:

• /home/runner/work/IntroVirt/IntroVirt/include/introvirt/windows/libraries/crypt32/functions/CryptProtectData.hh