introvirt::windows::secur32::DecryptMessage Class Reference

Handler for secur32!DecryptMessage. More...

#include <DecryptMessage.hh>

Inheritance diagram for introvirt::windows::secur32::DecryptMessage:

Collaboration diagram for introvirt::windows::secur32::DecryptMessage:

Public Member Functions
guest_ptr< void >	phContext () const
void	phContext (const guest_ptr< void > &phContext)
guest_ptr< void >	pMessage () const
void	pMessage (const guest_ptr< void > &pMessage)
std::shared_ptr< SecBufferDesc >	Message ()
uint32_t	MessageSeqNo () const
void	MessageSeqNo (uint32_t MessageSeqNo)
guest_ptr< uint32_t >	pfQOP () const
void	pfQOP (const guest_ptr< uint32_t > &pfQOP)
const std::string &	function_name () const override
	Get the function name.
const std::string &	library_name () const override
	Get the name of the library this call is for.
void	write (std::ostream &os=std::cout) const override
	Write out a textual representation of the function for display.
Json::Value	json () const override
	Get the function as Json.
SECURITY_STATUS	result () const
void	result (SECURITY_STATUS result)
	DecryptMessage (Event &event)
	~DecryptMessage () override
Public Member Functions inherited from introvirt::windows::WindowsFunctionCall
guest_ptr< void >	return_address () const override
	Get the return address for this function call.
void	return_address (const guest_ptr< void > &value) override
	Set the return address for this function call.
bool	is_return_event (Event &event) const override
	Check if the given event is a return event for this function call.
void	handle_return (Event &event) override
	Handle the return event.
bool	returned () const override
	Check if the call has returned.
bool	x64 () const
	Check if the call is from x64 mode.hh>
virtual	~WindowsFunctionCall ()
Public Member Functions inherited from introvirt::FunctionCall
bool	hook_return () const
	Check if the user is requesting that the return be intercepted.
void	hook_return (bool val)
	Configure if the return should be intercepted.
void	data (const std::string &key, const std::shared_ptr< void > &value)
	Store arbitrary data with the FunctionCall.
void	data (const std::string &key, std::shared_ptr< void > &&value)
	Store arbitrary data with the FunctionCall.
std::shared_ptr< void >	data (const std::string &key)
	Retrieve arbitrary data stored with the FunctionCall.
std::shared_ptr< const void >	data (const std::string &key) const
	Retrieve arbitrary data stored with the FunctionCall.
virtual	~FunctionCall ()=default

Static Public Member Functions
static SECURITY_STATUS	inject (const guest_ptr< void > &phContext, const guest_ptr< void > &pMessage, uint32_t MessageSeqNo, const guest_ptr< uint32_t > &pfQOP)

Static Public Attributes
static constexpr int	ArgumentCount = 4
static const std::string	LibraryName = "secur32"
static const std::string	FunctionName = "DecryptMessage"

Additional Inherited Members
Protected Member Functions inherited from introvirt::windows::WindowsFunctionCall
uint64_t	raw_return_value () const
void	raw_return_value (uint64_t value)
uint64_t	get_argument (unsigned int index) const
void	set_argument (unsigned int index, uint64_t value)
guest_ptr< void >	get_address_argument (unsigned int index) const
void	set_address_argument (unsigned int index, const guest_ptr< void > &address)
Vcpu &	vcpu ()
const Vcpu &	vcpu () const
	WindowsFunctionCall (Event &event, unsigned int argument_count, WindowsCallType type=WindowsCallType::AUTO)

Detailed Description

Handler for secur32!DecryptMessage.

See also

https://docs.microsoft.com/en-us/windows/win32/secauthn/DecryptMessage–schannel

Constructor & Destructor Documentation

DecryptMessage()

introvirt::windows::secur32::DecryptMessage::DecryptMessage

(

Event &

event

)

~DecryptMessage()

introvirt::windows::secur32::DecryptMessage::~DecryptMessage ( )

override

Member Function Documentation

function_name()

const std::string & introvirt::windows::secur32::DecryptMessage::function_name ( ) const

overridevirtual

Get the function name.

Returns

const std::string&

Implements introvirt::FunctionCall.

inject()

static SECURITY_STATUS introvirt::windows::secur32::DecryptMessage::inject ( const guest_ptr< void > &  phContext, const guest_ptr< void > &  pMessage, uint32_t  MessageSeqNo, const guest_ptr< uint32_t > &  pfQOP  )

static

json()

Json::Value introvirt::windows::secur32::DecryptMessage::json ( ) const

overridevirtual

Get the function as Json.

Returns

Json::Value

Implements introvirt::FunctionCall.

library_name()

const std::string & introvirt::windows::secur32::DecryptMessage::library_name ( ) const

overridevirtual

Get the name of the library this call is for.

Returns

const std::string&

Implements introvirt::FunctionCall.

Message()

std::shared_ptr< SecBufferDesc > introvirt::windows::secur32::DecryptMessage::Message

(

)

MessageSeqNo() [1/2]

uint32_t introvirt::windows::secur32::DecryptMessage::MessageSeqNo

(

)

const

MessageSeqNo() [2/2]

void introvirt::windows::secur32::DecryptMessage::MessageSeqNo

(

uint32_t

MessageSeqNo

)

pfQOP() [1/2]

guest_ptr< uint32_t > introvirt::windows::secur32::DecryptMessage::pfQOP

(

)

const

pfQOP() [2/2]

void introvirt::windows::secur32::DecryptMessage::pfQOP

(

const guest_ptr< uint32_t > &

pfQOP

)

phContext() [1/2]

guest_ptr< void > introvirt::windows::secur32::DecryptMessage::phContext

(

)

const

phContext() [2/2]

void introvirt::windows::secur32::DecryptMessage::phContext

(

const guest_ptr< void > &

phContext

)

pMessage() [1/2]

guest_ptr< void > introvirt::windows::secur32::DecryptMessage::pMessage

(

)

const

pMessage() [2/2]

void introvirt::windows::secur32::DecryptMessage::pMessage

(

const guest_ptr< void > &

pMessage

)

result() [1/2]

SECURITY_STATUS introvirt::windows::secur32::DecryptMessage::result

(

)

const

result() [2/2]

void introvirt::windows::secur32::DecryptMessage::result

(

SECURITY_STATUS

result

)

write()

void introvirt::windows::secur32::DecryptMessage::write ( std::ostream &  os = std::cout ) const

overridevirtual

Write out a textual representation of the function for display.

Parameters

os

Implements introvirt::FunctionCall.

Member Data Documentation

ArgumentCount

constexpr int introvirt::windows::secur32::DecryptMessage::ArgumentCount = 4

staticconstexpr

FunctionName

const std::string introvirt::windows::secur32::DecryptMessage::FunctionName = "DecryptMessage"

inlinestatic

LibraryName

const std::string introvirt::windows::secur32::DecryptMessage::LibraryName = "secur32"

inlinestatic

---

The documentation for this class was generated from the following file:

• /home/runner/work/IntroVirt/IntroVirt/include/introvirt/windows/libraries/secur32/functions/DecryptMessage.hh