introvirt::windows::ncrypt::Ssl3GenerateKeyMaterial Class Reference

Handler for ncrypt!Ssl3GenerateKeyMaterial. More...

#include <Ssl3GenerateKeyMaterial.hh>

Inheritance diagram for introvirt::windows::ncrypt::Ssl3GenerateKeyMaterial:

Collaboration diagram for introvirt::windows::ncrypt::Ssl3GenerateKeyMaterial:

Public Member Functions
guest_ptr< uint32_t >	punknown1 () const
void	punknown1 (const guest_ptr< uint32_t > &punknown1)
guest_ptr< uint8_t[]>	pbSecret () const
void	pbSecret (const guest_ptr< uint8_t[]> &pbSecret)
uint32_t	dwSecretLength () const
void	dwSecretLength (uint32_t dwSecretLength)
guest_ptr< uint8_t[]>	pbSeed () const
void	pbSeed (const guest_ptr< uint8_t[]> &pbSeed)
uint32_t	dwSeedLength () const
void	dwSeedLength (uint32_t dwSeedLength)
guest_ptr< void >	punknown2 () const
void	punknown2 (const guest_ptr< void > &punknown2)
guest_ptr< uint32_t >	punknown3 () const
void	punknown3 (const guest_ptr< uint32_t > &punknown3)
const std::string &	function_name () const override
	Get the function name.
const std::string &	library_name () const override
	Get the name of the library this call is for.
void	write (std::ostream &os=std::cout) const override
	Write out a textual representation of the function for display.
Json::Value	json () const override
	Get the function as Json.
nt::NTSTATUS	result () const
void	result (nt::NTSTATUS result)
	Ssl3GenerateKeyMaterial (Event &event)
	~Ssl3GenerateKeyMaterial () override
Public Member Functions inherited from introvirt::windows::WindowsFunctionCall
guest_ptr< void >	return_address () const override
	Get the return address for this function call.
void	return_address (const guest_ptr< void > &value) override
	Set the return address for this function call.
bool	is_return_event (Event &event) const override
	Check if the given event is a return event for this function call.
void	handle_return (Event &event) override
	Handle the return event.
bool	returned () const override
	Check if the call has returned.
bool	x64 () const
	Check if the call is from x64 mode.hh>
virtual	~WindowsFunctionCall ()
Public Member Functions inherited from introvirt::FunctionCall
bool	hook_return () const
	Check if the user is requesting that the return be intercepted.
void	hook_return (bool val)
	Configure if the return should be intercepted.
void	data (const std::string &key, const std::shared_ptr< void > &value)
	Store arbitrary data with the FunctionCall.
void	data (const std::string &key, std::shared_ptr< void > &&value)
	Store arbitrary data with the FunctionCall.
std::shared_ptr< void >	data (const std::string &key)
	Retrieve arbitrary data stored with the FunctionCall.
std::shared_ptr< const void >	data (const std::string &key) const
	Retrieve arbitrary data stored with the FunctionCall.
virtual	~FunctionCall ()=default

Static Public Member Functions
static nt::NTSTATUS	inject (const guest_ptr< uint32_t > &punknown1, const guest_ptr< uint8_t[]> &pbSecret, uint32_t dwSecretLength, const guest_ptr< uint8_t[]> &pbSeed, uint32_t dwSeedLength, const guest_ptr< void > &punknown2, const guest_ptr< uint32_t > &punknown3)

Static Public Attributes
static constexpr int	ArgumentCount = 7
static const std::string	LibraryName = "ncrypt"
static const std::string	FunctionName = "Ssl3GenerateKeyMaterial"

Additional Inherited Members
Protected Member Functions inherited from introvirt::windows::WindowsFunctionCall
uint64_t	raw_return_value () const
void	raw_return_value (uint64_t value)
uint64_t	get_argument (unsigned int index) const
void	set_argument (unsigned int index, uint64_t value)
guest_ptr< void >	get_address_argument (unsigned int index) const
void	set_address_argument (unsigned int index, const guest_ptr< void > &address)
Vcpu &	vcpu ()
const Vcpu &	vcpu () const
	WindowsFunctionCall (Event &event, unsigned int argument_count, WindowsCallType type=WindowsCallType::AUTO)

Detailed Description

Handler for ncrypt!Ssl3GenerateKeyMaterial.

See also

https://github.com/cuckoosandbox/monitor/blob/master/sigs/crypto.rst

Constructor & Destructor Documentation

Ssl3GenerateKeyMaterial()

introvirt::windows::ncrypt::Ssl3GenerateKeyMaterial::Ssl3GenerateKeyMaterial

(

Event &

event

)

~Ssl3GenerateKeyMaterial()

introvirt::windows::ncrypt::Ssl3GenerateKeyMaterial::~Ssl3GenerateKeyMaterial ( )

override

Member Function Documentation

dwSecretLength() [1/2]

uint32_t introvirt::windows::ncrypt::Ssl3GenerateKeyMaterial::dwSecretLength

(

)

const

dwSecretLength() [2/2]

void introvirt::windows::ncrypt::Ssl3GenerateKeyMaterial::dwSecretLength

(

uint32_t

dwSecretLength

)

dwSeedLength() [1/2]

uint32_t introvirt::windows::ncrypt::Ssl3GenerateKeyMaterial::dwSeedLength

(

)

const

dwSeedLength() [2/2]

void introvirt::windows::ncrypt::Ssl3GenerateKeyMaterial::dwSeedLength

(

uint32_t

dwSeedLength

)

function_name()

const std::string & introvirt::windows::ncrypt::Ssl3GenerateKeyMaterial::function_name ( ) const

overridevirtual

Get the function name.

Returns

const std::string&

Implements introvirt::FunctionCall.

inject()

static nt::NTSTATUS introvirt::windows::ncrypt::Ssl3GenerateKeyMaterial::inject ( const guest_ptr< uint32_t > &  punknown1, const guest_ptr< uint8_t[]> &  pbSecret, uint32_t  dwSecretLength, const guest_ptr< uint8_t[]> &  pbSeed, uint32_t  dwSeedLength, const guest_ptr< void > &  punknown2, const guest_ptr< uint32_t > &  punknown3  )

static

json()

Json::Value introvirt::windows::ncrypt::Ssl3GenerateKeyMaterial::json ( ) const

overridevirtual

Get the function as Json.

Returns

Json::Value

Implements introvirt::FunctionCall.

library_name()

const std::string & introvirt::windows::ncrypt::Ssl3GenerateKeyMaterial::library_name ( ) const

overridevirtual

Get the name of the library this call is for.

Returns

const std::string&

Implements introvirt::FunctionCall.

pbSecret() [1/2]

guest_ptr< uint8_t[]> introvirt::windows::ncrypt::Ssl3GenerateKeyMaterial::pbSecret

(

)

const

pbSecret() [2/2]

void introvirt::windows::ncrypt::Ssl3GenerateKeyMaterial::pbSecret

(

const guest_ptr< uint8_t[]> &

pbSecret

)

pbSeed() [1/2]

guest_ptr< uint8_t[]> introvirt::windows::ncrypt::Ssl3GenerateKeyMaterial::pbSeed

(

)

const

pbSeed() [2/2]

void introvirt::windows::ncrypt::Ssl3GenerateKeyMaterial::pbSeed

(

const guest_ptr< uint8_t[]> &

pbSeed

)

punknown1() [1/2]

guest_ptr< uint32_t > introvirt::windows::ncrypt::Ssl3GenerateKeyMaterial::punknown1

(

)

const

punknown1() [2/2]

void introvirt::windows::ncrypt::Ssl3GenerateKeyMaterial::punknown1

(

const guest_ptr< uint32_t > &

punknown1

)

punknown2() [1/2]

guest_ptr< void > introvirt::windows::ncrypt::Ssl3GenerateKeyMaterial::punknown2

(

)

const

punknown2() [2/2]

void introvirt::windows::ncrypt::Ssl3GenerateKeyMaterial::punknown2

(

const guest_ptr< void > &

punknown2

)

punknown3() [1/2]

guest_ptr< uint32_t > introvirt::windows::ncrypt::Ssl3GenerateKeyMaterial::punknown3

(

)

const

punknown3() [2/2]

void introvirt::windows::ncrypt::Ssl3GenerateKeyMaterial::punknown3

(

const guest_ptr< uint32_t > &

punknown3

)

result() [1/2]

nt::NTSTATUS introvirt::windows::ncrypt::Ssl3GenerateKeyMaterial::result

(

)

const

result() [2/2]

void introvirt::windows::ncrypt::Ssl3GenerateKeyMaterial::result

(

nt::NTSTATUS

result

)

write()

void introvirt::windows::ncrypt::Ssl3GenerateKeyMaterial::write ( std::ostream &  os = std::cout ) const

overridevirtual

Write out a textual representation of the function for display.

Parameters

os

Implements introvirt::FunctionCall.

Member Data Documentation

ArgumentCount

constexpr int introvirt::windows::ncrypt::Ssl3GenerateKeyMaterial::ArgumentCount = 7

staticconstexpr

FunctionName

const std::string introvirt::windows::ncrypt::Ssl3GenerateKeyMaterial::FunctionName = "Ssl3GenerateKeyMaterial"

inlinestatic

LibraryName

const std::string introvirt::windows::ncrypt::Ssl3GenerateKeyMaterial::LibraryName = "ncrypt"

inlinestatic

---

The documentation for this class was generated from the following file:

• /home/runner/work/IntroVirt/IntroVirt/include/introvirt/windows/libraries/ncrypt/functions/Ssl3GenerateKeyMaterial.hh