Theodosius v3.0
Jit linker, symbol mapper, and obfuscator
routine.hpp
Go to the documentation of this file.
1// Copyright (c) 2022, _xeroxz
2// All rights reserved.
3//
4// Redistribution and use in source and binary forms, with or without
5// modification, are permitted provided that the following conditions are met:
6//
7// 1. Redistributions of source code must retain the above copyright notice,
8// this list of conditions and the following disclaimer.
9//
10// 2. Redistributions in binary form must reproduce the above copyright notice,
11// this list of conditions and the following disclaimer in the documentation
12// and/or other materials provided with the distribution.
13//
14// 3. Neither the name of the copyright holder nor the names of its
15// contributors may be used to endorse or promote products derived from
16// this software without specific prior written permission.
17//
18// THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS"
19// AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
20// IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
21// ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDER OR CONTRIBUTORS BE
22// LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
23// CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
24// SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS
25// INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN
26// CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
27// ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE
28// POSSIBILITY OF SUCH DAMAGE.
29//
30
31#pragma once
32#include <map>
33#include <string>
34#include <vector>
35
36#include <spdlog/spdlog.h>
37#include <decomp/symbol.hpp>
38
39#define XED_ENCODER
40extern "C" {
41#include <xed-decode.h>
42#include <xed-interface.h>
43}
44
45#define INSTR_SPLIT_SECTION_NAME ".obf"
46
47namespace theo::decomp {
48/// <summary>
49/// the routine class which is responsible for creating symbols for routines. if
50/// the routine is located inside a section with the name ".split" it will break
51/// functions into instruction symbols.
52/// </summary>
53class routine_t {
54 public:
55 /// <summary>
56 /// the explicit constructor for routine_t.
57 /// </summary>
58 /// <param name="sym">the coff symbol for the routine.</param>
59 /// <param name="img">the coff image which contains the symbol.</param>
60 /// <param name="scn">the section header of the section that contains the
61 /// symbol.</param>
62 /// <param name="fn">the data (bytes) of the function.</param>
63 /// <param name="dcmp_type">the type of decomp to do. if this is
64 /// sym_type_t::function then this class wont split the function up into
65 /// individual instructions.</param>
66 explicit routine_t(coff::symbol_t* sym,
67 coff::image_t* img,
68 coff::section_header_t* scn,
69 std::vector<std::uint8_t>& fn,
70 sym_type_t dcmp_type);
71
72 /// <summary>
73 /// decompose the function into symbol(s).
74 /// </summary>
75 /// <returns>symbol(s) of the function.</returns>
76 std::vector<decomp::symbol_t> decompose();
77
78 /// <summary>
79 /// gets the section header of the section in which the symbol is located in.
80 /// </summary>
81 /// <returns>the section header of the section in which the symbol is located
82 /// in.</returns>
83 coff::section_header_t* scn();
84
85 /// <summary>
86 /// gets the function bytes.
87 /// </summary>
88 /// <returns>the function bytes.</returns>
89 std::vector<std::uint8_t> data();
90
91 private:
92 coff::symbol_t* m_sym;
93 std::vector<std::uint8_t> m_data;
94 coff::image_t* m_img;
95 coff::section_header_t* m_scn;
96 sym_type_t m_dcmp_type;
97};
98} // namespace theo::decomp