You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
105 lines
14 KiB
105 lines
14 KiB
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "https://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
|
|
<html xmlns="http://www.w3.org/1999/xhtml">
|
|
<head>
|
|
<meta http-equiv="Content-Type" content="text/xhtml;charset=UTF-8"/>
|
|
<meta http-equiv="X-UA-Compatible" content="IE=11"/>
|
|
<meta name="generator" content="Doxygen 1.9.3"/>
|
|
<meta name="viewport" content="width=device-width, initial-scale=1"/>
|
|
<title>Theodosius: Data Structures</title>
|
|
<link href="tabs.css" rel="stylesheet" type="text/css"/>
|
|
<script type="text/javascript" src="jquery.js"></script>
|
|
<script type="text/javascript" src="dynsections.js"></script>
|
|
<link href="search/search.css" rel="stylesheet" type="text/css"/>
|
|
<script type="text/javascript" src="search/searchdata.js"></script>
|
|
<script type="text/javascript" src="search/search.js"></script>
|
|
<link href="doxygen.css" rel="stylesheet" type="text/css" />
|
|
</head>
|
|
<body>
|
|
<div id="top"><!-- do not remove this div, it is closed by doxygen! -->
|
|
<div id="titlearea">
|
|
<table cellspacing="0" cellpadding="0">
|
|
<tbody>
|
|
<tr id="projectrow">
|
|
<td id="projectlogo"><img alt="Logo" src="icon.png"/></td>
|
|
<td id="projectalign">
|
|
<div id="projectname">Theodosius<span id="projectnumber"> v3.0</span>
|
|
</div>
|
|
<div id="projectbrief">Jit linker, symbol mapper, and obfuscator</div>
|
|
</td>
|
|
</tr>
|
|
</tbody>
|
|
</table>
|
|
</div>
|
|
<!-- end header part -->
|
|
<!-- Generated by Doxygen 1.9.3 -->
|
|
<script type="text/javascript">
|
|
/* @license magnet:?xt=urn:btih:d3d9a9a6595521f9666a5e94cc830dab83b65699&dn=expat.txt MIT */
|
|
var searchBox = new SearchBox("searchBox", "search",'Search','.html');
|
|
/* @license-end */
|
|
</script>
|
|
<script type="text/javascript" src="menudata.js"></script>
|
|
<script type="text/javascript" src="menu.js"></script>
|
|
<script type="text/javascript">
|
|
/* @license magnet:?xt=urn:btih:d3d9a9a6595521f9666a5e94cc830dab83b65699&dn=expat.txt MIT */
|
|
$(function() {
|
|
initMenu('',true,false,'search.php','Search');
|
|
$(document).ready(function() { init_search(); });
|
|
});
|
|
/* @license-end */
|
|
</script>
|
|
<div id="main-nav"></div>
|
|
</div><!-- top -->
|
|
<!-- window showing the filter options -->
|
|
<div id="MSearchSelectWindow"
|
|
onmouseover="return searchBox.OnSearchSelectShow()"
|
|
onmouseout="return searchBox.OnSearchSelectHide()"
|
|
onkeydown="return searchBox.OnSearchSelectKey(event)">
|
|
</div>
|
|
|
|
<!-- iframe showing the search results (closed by default) -->
|
|
<div id="MSearchResultsWindow">
|
|
<iframe src="javascript:void(0)" frameborder="0"
|
|
name="MSearchResults" id="MSearchResults">
|
|
</iframe>
|
|
</div>
|
|
|
|
<div class="header">
|
|
<div class="headertitle"><div class="title">Data Structures</div></div>
|
|
</div><!--header-->
|
|
<div class="contents">
|
|
<div class="textblock">Here are the data structures with brief descriptions:</div><div class="directory">
|
|
<div class="levels">[detail level <span onclick="javascript:toggleLevel(1);">1</span><span onclick="javascript:toggleLevel(2);">2</span><span onclick="javascript:toggleLevel(3);">3</span><span onclick="javascript:toggleLevel(4);">4</span>]</div><table class="directory">
|
|
<tr id="row_0_" class="even"><td class="entry"><span style="width:0px;display:inline-block;"> </span><span id="arr_0_" class="arrow" onclick="toggleFolder('0_')">▼</span><span class="icona"><span class="icon">N</span></span><a class="el" href="da/de6/namespacetheo.html" target="_self">theo</a></td><td class="desc">The outer most encompassing namespace of this project. </td></tr>
|
|
<tr id="row_0_0_"><td class="entry"><span style="width:16px;display:inline-block;"> </span><span id="arr_0_0_" class="arrow" onclick="toggleFolder('0_0_')">▼</span><span class="icona"><span class="icon">N</span></span><a class="el" href="d9/dbd/namespacetheo_1_1decomp.html" target="_self">decomp</a></td><td class="desc">the namespace that contains all of the decomposition related code. </td></tr>
|
|
<tr id="row_0_0_0_" class="even"><td class="entry"><span style="width:48px;display:inline-block;"> </span><span class="icona"><span class="icon">C</span></span><a class="el" href="d6/d0e/classtheo_1_1decomp_1_1decomp__t.html" target="_self">decomp_t</a></td><td class="desc">the main decomposition class which is responsible for breaking down lib file into coff files, and extracted used symbols from the coff files. </td></tr>
|
|
<tr id="row_0_0_1_"><td class="entry"><span style="width:48px;display:inline-block;"> </span><span class="icona"><span class="icon">C</span></span><a class="el" href="df/db4/classtheo_1_1decomp_1_1routine__t.html" target="_self">routine_t</a></td><td class="desc">the routine class which is responsible for creating symbols for routines. if the routine is located inside a section with the name ".split" it will break functions into instruction symbols. </td></tr>
|
|
<tr id="row_0_0_2_" class="even"><td class="entry"><span style="width:48px;display:inline-block;"> </span><span class="icona"><span class="icon">C</span></span><a class="el" href="d9/dd5/classtheo_1_1decomp_1_1symbol__t.html" target="_self">symbol_t</a></td><td class="desc"><a class="el" href="d9/dd5/classtheo_1_1decomp_1_1symbol__t.html" title="symbol_t is an abstraction upon the coff symbol. this allows for easier manipulation of the symbol....">symbol_t</a> is an abstraction upon the coff symbol. this allows for easier manipulation of the symbol. symbols can be different things, sections, functions, and even instructions (when functions are broken down) </td></tr>
|
|
<tr id="row_0_1_"><td class="entry"><span style="width:16px;display:inline-block;"> </span><span id="arr_0_1_" class="arrow" onclick="toggleFolder('0_1_')">▼</span><span class="icona"><span class="icon">N</span></span><a class="el" href="d5/da8/namespacetheo_1_1obf.html" target="_self">obf</a></td><td class="desc">this is the main namespace for obfuscation related things. </td></tr>
|
|
<tr id="row_0_1_0_" class="even"><td class="entry"><span style="width:32px;display:inline-block;"> </span><span id="arr_0_1_0_" class="arrow" onclick="toggleFolder('0_1_0_')">▼</span><span class="icona"><span class="icon">N</span></span><a class="el" href="d8/d82/namespacetheo_1_1obf_1_1transform.html" target="_self">transform</a></td><td class="desc">this namespace encompasses the code for transforming relocations. </td></tr>
|
|
<tr id="row_0_1_0_0_"><td class="entry"><span style="width:64px;display:inline-block;"> </span><span class="icona"><span class="icon">C</span></span><a class="el" href="d5/d9f/classtheo_1_1obf_1_1transform_1_1add__op__t.html" target="_self">add_op_t</a></td><td class="desc"></td></tr>
|
|
<tr id="row_0_1_0_1_" class="even"><td class="entry"><span style="width:64px;display:inline-block;"> </span><span class="icona"><span class="icon">C</span></span><a class="el" href="d7/de2/classtheo_1_1obf_1_1transform_1_1operation__t.html" target="_self">operation_t</a></td><td class="desc"><a class="el" href="d7/de2/classtheo_1_1obf_1_1transform_1_1operation__t.html" title="operation_t is the base class for all types of transformations. classes that inherit this class are s...">operation_t</a> is the base class for all types of transformations. classes that inherit this class are singleton and simply call the super constructor (<a class="el" href="d7/de2/classtheo_1_1obf_1_1transform_1_1operation__t.html#a3876ca1c7904aed54940e1519fc9fdf4" title="explicit constructor for operation_t">operation_t::operation_t</a>). </td></tr>
|
|
<tr id="row_0_1_0_2_"><td class="entry"><span style="width:64px;display:inline-block;"> </span><span class="icona"><span class="icon">C</span></span><a class="el" href="d6/d52/classtheo_1_1obf_1_1transform_1_1rol__op__t.html" target="_self">rol_op_t</a></td><td class="desc"></td></tr>
|
|
<tr id="row_0_1_0_3_" class="even"><td class="entry"><span style="width:64px;display:inline-block;"> </span><span class="icona"><span class="icon">C</span></span><a class="el" href="db/d8f/classtheo_1_1obf_1_1transform_1_1ror__op__t.html" target="_self">ror_op_t</a></td><td class="desc"></td></tr>
|
|
<tr id="row_0_1_0_4_"><td class="entry"><span style="width:64px;display:inline-block;"> </span><span class="icona"><span class="icon">C</span></span><a class="el" href="d6/d52/classtheo_1_1obf_1_1transform_1_1sub__op__t.html" target="_self">sub_op_t</a></td><td class="desc"></td></tr>
|
|
<tr id="row_0_1_0_5_" class="even"><td class="entry"><span style="width:64px;display:inline-block;"> </span><span class="icona"><span class="icon">C</span></span><a class="el" href="da/db7/classtheo_1_1obf_1_1transform_1_1xor__op__t.html" target="_self">xor_op_t</a></td><td class="desc"></td></tr>
|
|
<tr id="row_0_1_1_"><td class="entry"><span style="width:48px;display:inline-block;"> </span><span class="icona"><span class="icon">C</span></span><a class="el" href="d9/d18/classtheo_1_1obf_1_1engine__t.html" target="_self">engine_t</a></td><td class="desc">singleton obfuscation engine class. this class is responsible for keeping track of the registered passes and the order in which to execute them. </td></tr>
|
|
<tr id="row_0_1_2_" class="even"><td class="entry"><span style="width:48px;display:inline-block;"> </span><span class="icona"><span class="icon">C</span></span><a class="el" href="d5/d6a/classtheo_1_1obf_1_1hello__world__pass__t.html" target="_self">hello_world_pass_t</a></td><td class="desc">hello world pass example of how to inherit <a class="el" href="d4/dad/classtheo_1_1obf_1_1pass__t.html" title="the pass_t class is a base clase for all passes made. you must override the pass_t::run virtual funct...">pass_t</a>. </td></tr>
|
|
<tr id="row_0_1_3_"><td class="entry"><span style="width:48px;display:inline-block;"> </span><span class="icona"><span class="icon">C</span></span><a class="el" href="d6/dc1/classtheo_1_1obf_1_1jcc__rewrite__pass__t.html" target="_self">jcc_rewrite_pass_t</a></td><td class="desc">jcc rewrite pass which rewrites rip relative jcc's so that they are position independent </td></tr>
|
|
<tr id="row_0_1_4_" class="even"><td class="entry"><span style="width:48px;display:inline-block;"> </span><span class="icona"><span class="icon">C</span></span><a class="el" href="d5/d08/classtheo_1_1obf_1_1next__inst__pass__t.html" target="_self">next_inst_pass_t</a></td><td class="desc">This pass is used to generate transformations and jmp code to change RIP to the next instruction </td></tr>
|
|
<tr id="row_0_1_5_"><td class="entry"><span style="width:48px;display:inline-block;"> </span><span class="icona"><span class="icon">C</span></span><a class="el" href="d4/dad/classtheo_1_1obf_1_1pass__t.html" target="_self">pass_t</a></td><td class="desc">the <a class="el" href="d4/dad/classtheo_1_1obf_1_1pass__t.html" title="the pass_t class is a base clase for all passes made. you must override the pass_t::run virtual funct...">pass_t</a> class is a base clase for all passes made. you must override the <a class="el" href="d4/dad/classtheo_1_1obf_1_1pass__t.html#acfadc013ff0754d66a18baffdb1a61d1" title="virtual method which must be implimented by the pass that inherits this class.">pass_t::run</a> virtual function and declare the logic of your pass there </td></tr>
|
|
<tr id="row_0_1_6_" class="even"><td class="entry"><span style="width:48px;display:inline-block;"> </span><span class="icona"><span class="icon">C</span></span><a class="el" href="dc/d39/classtheo_1_1obf_1_1reloc__transform__pass__t.html" target="_self">reloc_transform_pass_t</a></td><td class="desc">this pass is like the next_inst_pass, however, relocations are encrypted with transformations instead of the address of the next instruction. this pass only runs at the instruction level and appends transformations into the reloc_t object of the instruction symbol </td></tr>
|
|
<tr id="row_0_2_"><td class="entry"><span style="width:16px;display:inline-block;"> </span><span id="arr_0_2_" class="arrow" onclick="toggleFolder('0_2_')">▼</span><span class="icona"><span class="icon">N</span></span><a class="el" href="da/dbd/namespacetheo_1_1recomp.html" target="_self">recomp</a></td><td class="desc">this namespace encompasses all recomposition related code. </td></tr>
|
|
<tr id="row_0_2_0_" class="even"><td class="entry"><span style="width:48px;display:inline-block;"> </span><span class="icona"><span class="icon">C</span></span><a class="el" href="d5/d05/classtheo_1_1recomp_1_1recomp__t.html" target="_self">recomp_t</a></td><td class="desc">the main class responsible for recomposition </td></tr>
|
|
<tr id="row_0_2_1_"><td class="entry"><span style="width:48px;display:inline-block;"> </span><span class="icona"><span class="icon">C</span></span><a class="el" href="dd/d37/classtheo_1_1recomp_1_1reloc__t.html" target="_self">reloc_t</a></td><td class="desc">meta data about a relocation for a symbol </td></tr>
|
|
<tr id="row_0_2_2_" class="even"><td class="entry"><span style="width:48px;display:inline-block;"> </span><span class="icona"><span class="icon">C</span></span><a class="el" href="db/d77/classtheo_1_1recomp_1_1symbol__table__t.html" target="_self">symbol_table_t</a></td><td class="desc">this class is a high level wrapper for a hashmap that contains <a class="el" href="d9/dd5/classtheo_1_1decomp_1_1symbol__t.html" title="symbol_t is an abstraction upon the coff symbol. this allows for easier manipulation of the symbol....">decomp::symbol_t</a> values. the symbol values are references by a hashcode. </td></tr>
|
|
<tr id="row_0_3_"><td class="entry"><span style="width:32px;display:inline-block;"> </span><span class="icona"><span class="icon">C</span></span><a class="el" href="d9/dbc/classtheo_1_1theo__t.html" target="_self">theo_t</a></td><td class="desc">the main class which encapsulates a symbol table, decomp, and recomp objects. This class is a bridge that connects all three: decomp, obf, recomp </td></tr>
|
|
</table>
|
|
</div><!-- directory -->
|
|
</div><!-- contents -->
|
|
<!-- start footer part -->
|
|
<hr class="footer"/><address class="footer"><small>
|
|
Generated by <a href="https://www.doxygen.org/index.html"><img class="footer" src="doxygen.svg" width="104" height="31" alt="doxygen"/></a> 1.9.3
|
|
</small></address>
|
|
</body>
|
|
</html>
|