Theodosius
v3.0
Jit linker, symbol mapper, and obfuscator
include
obf
passes
reloc_transform_pass.hpp
Go to the documentation of this file.
1
// Copyright (c) 2022, _xeroxz
2
// All rights reserved.
3
//
4
// Redistribution and use in source and binary forms, with or without
5
// modification, are permitted provided that the following conditions are met:
6
//
7
// 1. Redistributions of source code must retain the above copyright notice,
8
// this list of conditions and the following disclaimer.
9
//
10
// 2. Redistributions in binary form must reproduce the above copyright notice,
11
// this list of conditions and the following disclaimer in the documentation
12
// and/or other materials provided with the distribution.
13
//
14
// 3. Neither the name of the copyright holder nor the names of its
15
// contributors may be used to endorse or promote products derived from
16
// this software without specific prior written permission.
17
//
18
// THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS"
19
// AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
20
// IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
21
// ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDER OR CONTRIBUTORS BE
22
// LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
23
// CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
24
// SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS
25
// INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN
26
// CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
27
// ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE
28
// POSSIBILITY OF SUCH DAMAGE.
29
//
30
31
#pragma once
32
#include <
obf/pass.hpp
>
33
#include <
obf/transform/operation.hpp
>
34
#include <
obf/transform/transform.hpp
>
35
36
namespace
theo::obf
{
37
/// <summary>
38
/// this pass is like the next_inst_pass, however, relocations are encrypted
39
/// with transformations instead of the address of the next instruction. this
40
/// pass only runs at the instruction level and appends transformations into the
41
/// reloc_t object of the instruction symbol.
42
///
43
/// given the following code:
44
///
45
/// mov rax, &MessageBoxA
46
///
47
/// this pass will generate a random number of transformations to encrypt the
48
/// address of "MessageBoxA". These transformations will then be applied by
49
/// theodosius internally when resolving relocations.
50
///
51
/// mov rax, enc_MessageBoxA
52
/// xor rax, 0x389284324
53
/// add rax, 0x345332567
54
/// ror rax, 0x5353
55
/// </summary>
56
class
reloc_transform_pass_t
:
public
pass_t
{
57
explicit
reloc_transform_pass_t
() :
pass_t
(
decomp::sym_type_t::instruction
) {}
58
59
public
:
60
static
reloc_transform_pass_t
*
get
();
61
void
run
(
decomp::symbol_t
* sym);
62
63
private
:
64
std::optional<recomp::reloc_t*> has_legit_reloc(
decomp::symbol_t
* sym);
65
};
66
}
// namespace theo::obf
Generated by
1.9.3