You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
81 lines
1.9 KiB
81 lines
1.9 KiB
#ifndef _OBFUSCATOR_H
|
|
#define _OBFUSCATOR_H
|
|
|
|
#include <vector>
|
|
#include <string>
|
|
|
|
extern "C"
|
|
{
|
|
#include "xed/xed-interface.h"
|
|
}
|
|
|
|
#define CLFLAG_IS_LABEL (1<<0)
|
|
#define CLFLAG_IS_REL_JUMP (1<<1)
|
|
#define CLFLAG_IS_ABS_ADDR (1<<2)
|
|
|
|
typedef struct _code_link_t
|
|
{
|
|
_code_link_t* next;
|
|
_code_link_t* prev;
|
|
|
|
uint32_t flags;
|
|
int group;
|
|
std::string label_name;
|
|
|
|
xed_decoded_inst_t instruction;
|
|
unsigned char* raw_data;
|
|
unsigned int raw_data_size;
|
|
}code_link_t, * pcode_link_t;
|
|
|
|
typedef struct _code_group_t
|
|
{
|
|
uint64_t base_address;
|
|
pcode_link_t start;
|
|
int size_in_bytes;
|
|
}code_group_t, *pcode_group_t;
|
|
|
|
typedef struct _obfuscator_t
|
|
{
|
|
pcode_link_t code_start;
|
|
pcode_link_t code_end;
|
|
std::vector<code_group_t> groups;
|
|
int group_size;
|
|
int current_label_id;
|
|
xed_machine_mode_enum_t machine_mode;
|
|
xed_address_width_enum_t addr_width;
|
|
}obfuscator_t, *pobfuscator_t;
|
|
|
|
//snickers
|
|
void obf_one_time_please();
|
|
|
|
//duh
|
|
bool obf_init_from_buffer(pobfuscator_t obf, void* buffer, int buffer_size);
|
|
|
|
//creates the groups of instructions based on number of bytes
|
|
void obf_create_groups(pobfuscator_t obf, int group_size);
|
|
|
|
//replaces all relative jumps with the abs jump gadget
|
|
void obf_replace_rel_jmps(pobfuscator_t obf);
|
|
|
|
//replaces address in the abs jmp stub with the right address of the given label.
|
|
void obf_replace_abs_jmps(pobfuscator_t obf);
|
|
|
|
//return number of bytes needed to store given group
|
|
size_t obf_get_group_size(pobfuscator_t obf, int group_id);
|
|
|
|
//copy group to whever u want it to go
|
|
void obf_copy_group_to_buffer(pobfuscator_t obf, void* buffer, int group_id);
|
|
|
|
//generate all the labels after loaded from buffa
|
|
bool obf_gen_all_labels(pobfuscator_t obf);
|
|
|
|
//walk backwards or forwards until placing label
|
|
bool obf_gen_label(pobfuscator_t obf, pcode_link_t start, int32_t delta);
|
|
|
|
|
|
void obf_dbg_print_code(pobfuscator_t obf);
|
|
|
|
void obf_print_byte_array(void* arr, unsigned int size);
|
|
|
|
|
|
#endif |