Files
2021-02-21 13:58:50 +02:00

274 lines
14 KiB
HTML

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "https://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<meta http-equiv="Content-Type" content="text/xhtml;charset=UTF-8"/>
<meta http-equiv="X-UA-Compatible" content="IE=9"/>
<meta name="generator" content="Doxygen 1.8.20"/>
<meta name="viewport" content="width=device-width, initial-scale=1"/>
<title>cobf: shellcode Class Reference</title>
<link href="tabs.css" rel="stylesheet" type="text/css"/>
<script type="text/javascript" src="jquery.js"></script>
<script type="text/javascript" src="dynsections.js"></script>
<link href="navtree.css" rel="stylesheet" type="text/css"/>
<script type="text/javascript" src="resize.js"></script>
<script type="text/javascript" src="navtreedata.js"></script>
<script type="text/javascript" src="navtree.js"></script>
<link href="search/search.css" rel="stylesheet" type="text/css"/>
<script type="text/javascript" src="search/searchdata.js"></script>
<script type="text/javascript" src="search/search.js"></script>
<link href="doxygen.css" rel="stylesheet" type="text/css" />
</head>
<body>
<div id="top"><!-- do not remove this div, it is closed by doxygen! -->
<div id="titlearea">
<table cellspacing="0" cellpadding="0">
<tbody>
<tr style="height: 56px;">
<td id="projectalign" style="padding-left: 0.5em;">
<div id="projectname">cobf
</div>
<div id="projectbrief">PE imports obfuscator</div>
</td>
</tr>
</tbody>
</table>
</div>
<!-- end header part -->
<!-- Generated by Doxygen 1.8.20 -->
<script type="text/javascript">
/* @license magnet:?xt=urn:btih:cf05388f2679ee054f2beb29a391d25f4e673ac3&amp;dn=gpl-2.0.txt GPL-v2 */
var searchBox = new SearchBox("searchBox", "search",false,'Search');
/* @license-end */
</script>
<script type="text/javascript" src="menudata.js"></script>
<script type="text/javascript" src="menu.js"></script>
<script type="text/javascript">
/* @license magnet:?xt=urn:btih:cf05388f2679ee054f2beb29a391d25f4e673ac3&amp;dn=gpl-2.0.txt GPL-v2 */
$(function() {
initMenu('',true,false,'search.php','Search');
$(document).ready(function() { init_search(); });
});
/* @license-end */</script>
<div id="main-nav"></div>
</div><!-- top -->
<div id="side-nav" class="ui-resizable side-nav-resizable">
<div id="nav-tree">
<div id="nav-tree-contents">
<div id="nav-sync" class="sync"></div>
</div>
</div>
<div id="splitbar" style="-moz-user-select:none;"
class="ui-resizable-handle">
</div>
</div>
<script type="text/javascript">
/* @license magnet:?xt=urn:btih:cf05388f2679ee054f2beb29a391d25f4e673ac3&amp;dn=gpl-2.0.txt GPL-v2 */
$(document).ready(function(){initNavTree('classshellcode.html',''); initResizable(); });
/* @license-end */
</script>
<div id="doc-content">
<!-- window showing the filter options -->
<div id="MSearchSelectWindow"
onmouseover="return searchBox.OnSearchSelectShow()"
onmouseout="return searchBox.OnSearchSelectHide()"
onkeydown="return searchBox.OnSearchSelectKey(event)">
</div>
<!-- iframe showing the search results (closed by default) -->
<div id="MSearchResultsWindow">
<iframe src="javascript:void(0)" frameborder="0"
name="MSearchResults" id="MSearchResults">
</iframe>
</div>
<div class="header">
<div class="summary">
<a href="#nested-classes">Classes</a> &#124;
<a href="#pub-static-attribs">Static Public Attributes</a> &#124;
<a href="#friends">Friends</a> &#124;
<a href="classshellcode-members.html">List of all members</a> </div>
<div class="headertitle">
<div class="title">shellcode Class Reference</div> </div>
</div><!--header-->
<div class="contents">
<p><code>#include &lt;<a class="el" href="shellcode_8hpp_source.html">shellcode.hpp</a>&gt;</code></p>
<table class="memberdecls">
<tr class="heading"><td colspan="2"><h2 class="groupheader"><a name="pub-static-attribs"></a>
Static Public Attributes</h2></td></tr>
<tr class="memitem:a57220d662e7f75e3aefa71eaa144d243"><td class="memItemLeft" align="right" valign="top">static PVOID&#160;</td><td class="memItemRight" valign="bottom"><a class="el" href="classshellcode.html#a57220d662e7f75e3aefa71eaa144d243">shellcode_start</a> = exit</td></tr>
<tr class="separator:a57220d662e7f75e3aefa71eaa144d243"><td class="memSeparator" colspan="2">&#160;</td></tr>
<tr class="memitem:aaa82db40cd8ad288803b70bbb278bff4"><td class="memItemLeft" align="right" valign="top">static DWORD&#160;</td><td class="memItemRight" valign="bottom"><a class="el" href="classshellcode.html#aaa82db40cd8ad288803b70bbb278bff4">shellcode_entry</a> = (DWORD)((PBYTE)load_syms - (PBYTE)<a class="el" href="classshellcode.html#a57220d662e7f75e3aefa71eaa144d243">shellcode_start</a>)</td></tr>
<tr class="separator:aaa82db40cd8ad288803b70bbb278bff4"><td class="memSeparator" colspan="2">&#160;</td></tr>
<tr class="memitem:a724cccee30273c81a1a865b3ca20c829"><td class="memItemLeft" align="right" valign="top">static DWORD&#160;</td><td class="memItemRight" valign="bottom"><a class="el" href="classshellcode.html#a724cccee30273c81a1a865b3ca20c829">shellcode_size</a> = (DWORD)((PBYTE)funs_end - (PBYTE)<a class="el" href="classshellcode.html#a57220d662e7f75e3aefa71eaa144d243">shellcode_start</a>)</td></tr>
<tr class="separator:a724cccee30273c81a1a865b3ca20c829"><td class="memSeparator" colspan="2">&#160;</td></tr>
<tr class="memitem:af54e7ad1b1d215703f5487389040d687"><td class="memItemLeft" align="right" valign="top">static DWORD&#160;</td><td class="memItemRight" valign="bottom"><a class="el" href="classshellcode.html#af54e7ad1b1d215703f5487389040d687">shellcodes_funs</a> [shellcode_number_of_functions]</td></tr>
<tr class="separator:af54e7ad1b1d215703f5487389040d687"><td class="memSeparator" colspan="2">&#160;</td></tr>
</table><table class="memberdecls">
<tr class="heading"><td colspan="2"><h2 class="groupheader"><a name="friends"></a>
Friends</h2></td></tr>
<tr class="memitem:a023e17da8df54ca82ec0ba5514bbbd51"><td class="memItemLeft" align="right" valign="top">class&#160;</td><td class="memItemRight" valign="bottom"><a class="el" href="classshellcode.html#a023e17da8df54ca82ec0ba5514bbbd51">cobf</a></td></tr>
<tr class="separator:a023e17da8df54ca82ec0ba5514bbbd51"><td class="memSeparator" colspan="2">&#160;</td></tr>
</table>
<a name="details" id="details"></a><h2 class="groupheader">Detailed Description</h2>
<div class="textblock">
<p class="definition">Definition at line <a class="el" href="shellcode_8hpp_source.html#l00029">29</a> of file <a class="el" href="shellcode_8hpp_source.html">shellcode.hpp</a>.</p>
</div><h2 class="groupheader">Friends And Related Function Documentation</h2>
<a id="a023e17da8df54ca82ec0ba5514bbbd51"></a>
<h2 class="memtitle"><span class="permalink"><a href="#a023e17da8df54ca82ec0ba5514bbbd51">&#9670;&nbsp;</a></span>cobf</h2>
<div class="memitem">
<div class="memproto">
<table class="mlabels">
<tr>
<td class="mlabels-left">
<table class="memname">
<tr>
<td class="memname">friend class <a class="el" href="classcobf.html">cobf</a></td>
</tr>
</table>
</td>
<td class="mlabels-right">
<span class="mlabels"><span class="mlabel">friend</span></span> </td>
</tr>
</table>
</div><div class="memdoc">
<p class="definition">Definition at line <a class="el" href="shellcode_8hpp_source.html#l00032">32</a> of file <a class="el" href="shellcode_8hpp_source.html">shellcode.hpp</a>.</p>
</div>
</div>
<h2 class="groupheader">Member Data Documentation</h2>
<a id="aaa82db40cd8ad288803b70bbb278bff4"></a>
<h2 class="memtitle"><span class="permalink"><a href="#aaa82db40cd8ad288803b70bbb278bff4">&#9670;&nbsp;</a></span>shellcode_entry</h2>
<div class="memitem">
<div class="memproto">
<table class="mlabels">
<tr>
<td class="mlabels-left">
<table class="memname">
<tr>
<td class="memname">DWORD shellcode::shellcode_entry = (DWORD)((PBYTE)load_syms - (PBYTE)<a class="el" href="classshellcode.html#a57220d662e7f75e3aefa71eaa144d243">shellcode_start</a>)</td>
</tr>
</table>
</td>
<td class="mlabels-right">
<span class="mlabels"><span class="mlabel">static</span></span> </td>
</tr>
</table>
</div><div class="memdoc">
<p>Offset from the start for the entry of the shellcode. </p>
<p class="definition">Definition at line <a class="el" href="shellcode_8hpp_source.html#l00249">249</a> of file <a class="el" href="shellcode_8hpp_source.html">shellcode.hpp</a>.</p>
</div>
</div>
<a id="a724cccee30273c81a1a865b3ca20c829"></a>
<h2 class="memtitle"><span class="permalink"><a href="#a724cccee30273c81a1a865b3ca20c829">&#9670;&nbsp;</a></span>shellcode_size</h2>
<div class="memitem">
<div class="memproto">
<table class="mlabels">
<tr>
<td class="mlabels-left">
<table class="memname">
<tr>
<td class="memname">DWORD shellcode::shellcode_size = (DWORD)((PBYTE)funs_end - (PBYTE)<a class="el" href="classshellcode.html#a57220d662e7f75e3aefa71eaa144d243">shellcode_start</a>)</td>
</tr>
</table>
</td>
<td class="mlabels-right">
<span class="mlabels"><span class="mlabel">static</span></span> </td>
</tr>
</table>
</div><div class="memdoc">
<p>Size of the shellcode. Table holding the offsets of the shellcode functions. </p>
<p class="definition">Definition at line <a class="el" href="shellcode_8hpp_source.html#l00250">250</a> of file <a class="el" href="shellcode_8hpp_source.html">shellcode.hpp</a>.</p>
</div>
</div>
<a id="a57220d662e7f75e3aefa71eaa144d243"></a>
<h2 class="memtitle"><span class="permalink"><a href="#a57220d662e7f75e3aefa71eaa144d243">&#9670;&nbsp;</a></span>shellcode_start</h2>
<div class="memitem">
<div class="memproto">
<table class="mlabels">
<tr>
<td class="mlabels-left">
<table class="memname">
<tr>
<td class="memname">PVOID shellcode::shellcode_start = exit</td>
</tr>
</table>
</td>
<td class="mlabels-right">
<span class="mlabels"><span class="mlabel">static</span></span> </td>
</tr>
</table>
</div><div class="memdoc">
<p>Start of the raw shellcode to be copied. </p>
<p class="definition">Definition at line <a class="el" href="shellcode_8hpp_source.html#l00248">248</a> of file <a class="el" href="shellcode_8hpp_source.html">shellcode.hpp</a>.</p>
</div>
</div>
<a id="af54e7ad1b1d215703f5487389040d687"></a>
<h2 class="memtitle"><span class="permalink"><a href="#af54e7ad1b1d215703f5487389040d687">&#9670;&nbsp;</a></span>shellcodes_funs</h2>
<div class="memitem">
<div class="memproto">
<table class="mlabels">
<tr>
<td class="mlabels-left">
<table class="memname">
<tr>
<td class="memname">DWORD shellcode::shellcodes_funs</td>
</tr>
</table>
</td>
<td class="mlabels-right">
<span class="mlabels"><span class="mlabel">static</span></span> </td>
</tr>
</table>
</div><div class="memdoc">
<b>Initial value:</b><div class="fragment"><div class="line">=</div>
<div class="line">{</div>
<div class="line"> (DWORD)((PBYTE)exit - (PBYTE)<a class="code" href="classshellcode.html#a57220d662e7f75e3aefa71eaa144d243">shellcode_start</a>),</div>
<div class="line"> (DWORD)((PBYTE)wstr_len - (PBYTE)<a class="code" href="classshellcode.html#a57220d662e7f75e3aefa71eaa144d243">shellcode_start</a>),</div>
<div class="line"> (DWORD)((PBYTE)hash_string - (PBYTE)<a class="code" href="classshellcode.html#a57220d662e7f75e3aefa71eaa144d243">shellcode_start</a>),</div>
<div class="line"> (DWORD)((PBYTE)str_cpy - (PBYTE)<a class="code" href="classshellcode.html#a57220d662e7f75e3aefa71eaa144d243">shellcode_start</a>),</div>
<div class="line"> (DWORD)((PBYTE)str_toi - (PBYTE)<a class="code" href="classshellcode.html#a57220d662e7f75e3aefa71eaa144d243">shellcode_start</a>),</div>
<div class="line"> (DWORD)((PBYTE)str_chr - (PBYTE)<a class="code" href="classshellcode.html#a57220d662e7f75e3aefa71eaa144d243">shellcode_start</a>),</div>
<div class="line"> (DWORD)((PBYTE)ansi_to_wide - (PBYTE)<a class="code" href="classshellcode.html#a57220d662e7f75e3aefa71eaa144d243">shellcode_start</a>),</div>
<div class="line"> (DWORD)((PBYTE)wstr_cpy - (PBYTE)<a class="code" href="classshellcode.html#a57220d662e7f75e3aefa71eaa144d243">shellcode_start</a>),</div>
<div class="line"> (DWORD)((PBYTE)wstr_i_cmp - (PBYTE)<a class="code" href="classshellcode.html#a57220d662e7f75e3aefa71eaa144d243">shellcode_start</a>),</div>
<div class="line"> (DWORD)((PBYTE)get_dll_handle - (PBYTE)<a class="code" href="classshellcode.html#a57220d662e7f75e3aefa71eaa144d243">shellcode_start</a>),</div>
<div class="line"> (DWORD)((PBYTE)load_dll - (PBYTE)<a class="code" href="classshellcode.html#a57220d662e7f75e3aefa71eaa144d243">shellcode_start</a>),</div>
<div class="line"> (DWORD)((PBYTE)resolve_api_set - (PBYTE)<a class="code" href="classshellcode.html#a57220d662e7f75e3aefa71eaa144d243">shellcode_start</a>),</div>
<div class="line"> (DWORD)((PBYTE)get_symbol_ptr - (PBYTE)<a class="code" href="classshellcode.html#a57220d662e7f75e3aefa71eaa144d243">shellcode_start</a>),</div>
<div class="line"> (DWORD)((PBYTE)load_syms - (PBYTE)<a class="code" href="classshellcode.html#a57220d662e7f75e3aefa71eaa144d243">shellcode_start</a>)</div>
<div class="line">}</div>
</div><!-- fragment -->
<p class="definition">Definition at line <a class="el" href="shellcode_8hpp_source.html#l00253">253</a> of file <a class="el" href="shellcode_8hpp_source.html">shellcode.hpp</a>.</p>
</div>
</div>
<hr/>The documentation for this class was generated from the following files:<ul>
<li>include/<a class="el" href="shellcode_8hpp_source.html">shellcode.hpp</a></li>
<li>src/<a class="el" href="shellcode_8cpp_source.html">shellcode.cpp</a></li>
</ul>
</div><!-- contents -->
</div><!-- doc-content -->
<div class="ttc" id="aclassshellcode_html_a57220d662e7f75e3aefa71eaa144d243"><div class="ttname"><a href="classshellcode.html#a57220d662e7f75e3aefa71eaa144d243">shellcode::shellcode_start</a></div><div class="ttdeci">static PVOID shellcode_start</div><div class="ttdef"><b>Definition:</b> <a href="shellcode_8hpp_source.html#l00248">shellcode.hpp:248</a></div></div>
<!-- start footer part -->
<div id="nav-path" class="navpath"><!-- id is needed for treeview function! -->
<ul>
<li class="navelem"><a class="el" href="classshellcode.html">shellcode</a></li>
<li class="footer">Generated by <a href="http://www.doxygen.org/index.html"><img class="footer" src="doxygen.svg" width="104" height="31" alt="doxygen"/></a> 1.8.20 </li>
</ul>
</div>
</body>
</html>