mirror of
https://github.com/d35ha/CallObfuscator
synced 2026-06-08 13:42:37 +00:00
d35ha
272 lines
29 KiB
HTML
272 lines
29 KiB
HTML
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "https://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
|
|
<html xmlns="http://www.w3.org/1999/xhtml">
|
|
<head>
|
|
<meta http-equiv="Content-Type" content="text/xhtml;charset=UTF-8"/>
|
|
<meta http-equiv="X-UA-Compatible" content="IE=9"/>
|
|
<meta name="generator" content="Doxygen 1.8.20"/>
|
|
<meta name="viewport" content="width=device-width, initial-scale=1"/>
|
|
<title>cobf: include/shellcode.hpp Source File</title>
|
|
<link href="tabs.css" rel="stylesheet" type="text/css"/>
|
|
<script type="text/javascript" src="jquery.js"></script>
|
|
<script type="text/javascript" src="dynsections.js"></script>
|
|
<link href="navtree.css" rel="stylesheet" type="text/css"/>
|
|
<script type="text/javascript" src="resize.js"></script>
|
|
<script type="text/javascript" src="navtreedata.js"></script>
|
|
<script type="text/javascript" src="navtree.js"></script>
|
|
<link href="search/search.css" rel="stylesheet" type="text/css"/>
|
|
<script type="text/javascript" src="search/searchdata.js"></script>
|
|
<script type="text/javascript" src="search/search.js"></script>
|
|
<link href="doxygen.css" rel="stylesheet" type="text/css" />
|
|
</head>
|
|
<body>
|
|
<div id="top"><!-- do not remove this div, it is closed by doxygen! -->
|
|
<div id="titlearea">
|
|
<table cellspacing="0" cellpadding="0">
|
|
<tbody>
|
|
<tr style="height: 56px;">
|
|
<td id="projectalign" style="padding-left: 0.5em;">
|
|
<div id="projectname">cobf
|
|
</div>
|
|
<div id="projectbrief">PE imports obfuscator</div>
|
|
</td>
|
|
</tr>
|
|
</tbody>
|
|
</table>
|
|
</div>
|
|
<!-- end header part -->
|
|
<!-- Generated by Doxygen 1.8.20 -->
|
|
<script type="text/javascript">
|
|
/* @license magnet:?xt=urn:btih:cf05388f2679ee054f2beb29a391d25f4e673ac3&dn=gpl-2.0.txt GPL-v2 */
|
|
var searchBox = new SearchBox("searchBox", "search",false,'Search');
|
|
/* @license-end */
|
|
</script>
|
|
<script type="text/javascript" src="menudata.js"></script>
|
|
<script type="text/javascript" src="menu.js"></script>
|
|
<script type="text/javascript">
|
|
/* @license magnet:?xt=urn:btih:cf05388f2679ee054f2beb29a391d25f4e673ac3&dn=gpl-2.0.txt GPL-v2 */
|
|
$(function() {
|
|
initMenu('',true,false,'search.php','Search');
|
|
$(document).ready(function() { init_search(); });
|
|
});
|
|
/* @license-end */</script>
|
|
<div id="main-nav"></div>
|
|
</div><!-- top -->
|
|
<div id="side-nav" class="ui-resizable side-nav-resizable">
|
|
<div id="nav-tree">
|
|
<div id="nav-tree-contents">
|
|
<div id="nav-sync" class="sync"></div>
|
|
</div>
|
|
</div>
|
|
<div id="splitbar" style="-moz-user-select:none;"
|
|
class="ui-resizable-handle">
|
|
</div>
|
|
</div>
|
|
<script type="text/javascript">
|
|
/* @license magnet:?xt=urn:btih:cf05388f2679ee054f2beb29a391d25f4e673ac3&dn=gpl-2.0.txt GPL-v2 */
|
|
$(document).ready(function(){initNavTree('shellcode_8hpp_source.html',''); initResizable(); });
|
|
/* @license-end */
|
|
</script>
|
|
<div id="doc-content">
|
|
<!-- window showing the filter options -->
|
|
<div id="MSearchSelectWindow"
|
|
onmouseover="return searchBox.OnSearchSelectShow()"
|
|
onmouseout="return searchBox.OnSearchSelectHide()"
|
|
onkeydown="return searchBox.OnSearchSelectKey(event)">
|
|
</div>
|
|
|
|
<!-- iframe showing the search results (closed by default) -->
|
|
<div id="MSearchResultsWindow">
|
|
<iframe src="javascript:void(0)" frameborder="0"
|
|
name="MSearchResults" id="MSearchResults">
|
|
</iframe>
|
|
</div>
|
|
|
|
<div class="header">
|
|
<div class="headertitle">
|
|
<div class="title">shellcode.hpp</div> </div>
|
|
</div><!--header-->
|
|
<div class="contents">
|
|
<a href="shellcode_8hpp.html">Go to the documentation of this file.</a><div class="fragment"><div class="line"><a name="l00001"></a><span class="lineno"> 1</span>  </div>
|
|
<div class="line"><a name="l00009"></a><span class="lineno"> 9</span> <span class="preprocessor">#ifndef SHELLCODE_HPP</span></div>
|
|
<div class="line"><a name="l00010"></a><span class="lineno"> 10</span> <span class="preprocessor">#define SHELLCODE_HPP</span></div>
|
|
<div class="line"><a name="l00011"></a><span class="lineno"> 11</span>  </div>
|
|
<div class="line"><a name="l00012"></a><span class="lineno"> 12</span> <span class="comment">// The includes.</span></div>
|
|
<div class="line"><a name="l00013"></a><span class="lineno"> 13</span> <span class="preprocessor">#include <Windows.h></span></div>
|
|
<div class="line"><a name="l00014"></a><span class="lineno"> 14</span> <span class="preprocessor">#include <winternl.h></span></div>
|
|
<div class="line"><a name="l00015"></a><span class="lineno"> 15</span> <span class="preprocessor">#include <intrin.h></span></div>
|
|
<div class="line"><a name="l00016"></a><span class="lineno"> 16</span>  </div>
|
|
<div class="line"><a name="l00017"></a><span class="lineno"> 17</span> <span class="comment">// No inline macros.</span></div>
|
|
<div class="line"><a name="l00018"></a><span class="lineno"> 18</span> <span class="preprocessor">#ifdef _MSC_VER</span></div>
|
|
<div class="line"><a name="l00019"></a><span class="lineno"> 19</span> <span class="preprocessor">#define no_inline __declspec(noinline)</span></div>
|
|
<div class="line"><a name="l00020"></a><span class="lineno"> 20</span> <span class="preprocessor">#else</span></div>
|
|
<div class="line"><a name="l00021"></a><span class="lineno"><a class="line" href="shellcode_8hpp.html#a920e1ee483880024048aca3880427e1c"> 21</a></span> <span class="preprocessor">#define no_inline __attribute__((noinline))</span></div>
|
|
<div class="line"><a name="l00022"></a><span class="lineno"> 22</span> <span class="preprocessor">#endif</span></div>
|
|
<div class="line"><a name="l00023"></a><span class="lineno"> 23</span>  </div>
|
|
<div class="line"><a name="l00024"></a><span class="lineno"> 24</span> <span class="comment">// Resolving a function internally.</span></div>
|
|
<div class="line"><a name="l00025"></a><span class="lineno"><a class="line" href="shellcode_8hpp.html#a0b990d3b5c511aeb8899c7c40c7371bb"> 25</a></span> <span class="preprocessor">#define sh_resolve(base, funs, fun) (decltype(fun)*)((PBYTE)base + \</span></div>
|
|
<div class="line"><a name="l00026"></a><span class="lineno"> 26</span> <span class="preprocessor"> funs[shellcode_fun_##fun])</span></div>
|
|
<div class="line"><a name="l00027"></a><span class="lineno"> 27</span>  </div>
|
|
<div class="line"><a name="l00028"></a><span class="lineno"> 28</span> <span class="comment">// Utility class represents the shellcode builder.</span></div>
|
|
<div class="line"><a name="l00029"></a><span class="lineno"><a class="line" href="classshellcode.html"> 29</a></span> <span class="keyword">class </span><a class="code" href="classshellcode.html">shellcode</a></div>
|
|
<div class="line"><a name="l00030"></a><span class="lineno"> 30</span> {</div>
|
|
<div class="line"><a name="l00031"></a><span class="lineno"> 31</span>  <span class="comment">// To access the internals.</span></div>
|
|
<div class="line"><a name="l00032"></a><span class="lineno"><a class="line" href="classshellcode.html#a023e17da8df54ca82ec0ba5514bbbd51"> 32</a></span>  <span class="keyword">friend</span> <span class="keyword">class </span><a class="code" href="classcobf.html">cobf</a>;</div>
|
|
<div class="line"><a name="l00033"></a><span class="lineno"> 33</span> <span class="keyword">private</span>:</div>
|
|
<div class="line"><a name="l00034"></a><span class="lineno"> 34</span>  </div>
|
|
<div class="line"><a name="l00035"></a><span class="lineno"> 35</span>  <span class="comment">// Union of the symbol hash and ordinal.</span></div>
|
|
<div class="line"><a name="l00036"></a><span class="lineno"> 36</span>  <span class="keyword">typedef</span> <span class="keyword">union </span>{</div>
|
|
<div class="line"><a name="l00037"></a><span class="lineno"> 37</span>  DWORD sym_hash; </div>
|
|
<div class="line"><a name="l00038"></a><span class="lineno"> 38</span>  WORD sym_ord; </div>
|
|
<div class="line"><a name="l00039"></a><span class="lineno"> 39</span>  } u_sym_info;</div>
|
|
<div class="line"><a name="l00040"></a><span class="lineno"> 40</span>  </div>
|
|
<div class="line"><a name="l00041"></a><span class="lineno"> 41</span>  <span class="comment">// Struct of an obfuscated API.</span></div>
|
|
<div class="line"><a name="l00042"></a><span class="lineno"> 42</span>  <span class="keyword">typedef</span> <span class="keyword">struct </span>{</div>
|
|
<div class="line"><a name="l00043"></a><span class="lineno"> 43</span>  DWORD dll_name; </div>
|
|
<div class="line"><a name="l00044"></a><span class="lineno"> 44</span>  BOOL by_name; </div>
|
|
<div class="line"><a name="l00045"></a><span class="lineno"> 45</span>  u_sym_info sym_info; </div>
|
|
<div class="line"><a name="l00046"></a><span class="lineno"> 46</span>  DWORD sym_thnk; </div>
|
|
<div class="line"><a name="l00047"></a><span class="lineno"> 47</span>  } obfuscated_sym, * p_obfuscated_sym;</div>
|
|
<div class="line"><a name="l00048"></a><span class="lineno"> 48</span>  </div>
|
|
<div class="line"><a name="l00049"></a><span class="lineno"> 49</span>  <span class="comment">// Api set schema version 3.</span></div>
|
|
<div class="line"><a name="l00050"></a><span class="lineno"> 50</span>  <span class="keyword">typedef</span> <span class="keyword">struct </span>_ApiSetHeader63 {</div>
|
|
<div class="line"><a name="l00051"></a><span class="lineno"> 51</span>  DWORD Version; </div>
|
|
<div class="line"><a name="l00052"></a><span class="lineno"> 52</span>  DWORD Size; </div>
|
|
<div class="line"><a name="l00053"></a><span class="lineno"> 53</span>  DWORD Sealed; </div>
|
|
<div class="line"><a name="l00054"></a><span class="lineno"> 54</span>  DWORD NumberOfApisets; </div>
|
|
<div class="line"><a name="l00055"></a><span class="lineno"> 55</span>  DWORD NamesOffset; </div>
|
|
<div class="line"><a name="l00056"></a><span class="lineno"> 56</span>  DWORD TableOffset; </div>
|
|
<div class="line"><a name="l00057"></a><span class="lineno"> 57</span>  DWORD Multiplier; </div>
|
|
<div class="line"><a name="l00058"></a><span class="lineno"> 58</span>  } ApiSetHeader63, * PApiSetHeader63;</div>
|
|
<div class="line"><a name="l00059"></a><span class="lineno"> 59</span>  </div>
|
|
<div class="line"><a name="l00060"></a><span class="lineno"> 60</span>  <span class="comment">// Api set schema name entry.</span></div>
|
|
<div class="line"><a name="l00061"></a><span class="lineno"> 61</span>  <span class="keyword">typedef</span> <span class="keyword">struct </span>_ApisetNameEntry {</div>
|
|
<div class="line"><a name="l00062"></a><span class="lineno"> 62</span>  DWORD Sealed; </div>
|
|
<div class="line"><a name="l00063"></a><span class="lineno"> 63</span>  DWORD Offset; </div>
|
|
<div class="line"><a name="l00064"></a><span class="lineno"> 64</span>  DWORD Ignored; </div>
|
|
<div class="line"><a name="l00065"></a><span class="lineno"> 65</span>  DWORD Size; </div>
|
|
<div class="line"><a name="l00066"></a><span class="lineno"> 66</span>  DWORD HostOffset; </div>
|
|
<div class="line"><a name="l00067"></a><span class="lineno"> 67</span>  DWORD NumberOfHosts; </div>
|
|
<div class="line"><a name="l00068"></a><span class="lineno"> 68</span>  } ApisetNameEntry, * PApisetNameEntry;</div>
|
|
<div class="line"><a name="l00069"></a><span class="lineno"> 69</span>  </div>
|
|
<div class="line"><a name="l00070"></a><span class="lineno"> 70</span>  <span class="comment">// Api set schema value entry.</span></div>
|
|
<div class="line"><a name="l00071"></a><span class="lineno"> 71</span>  <span class="keyword">typedef</span> <span class="keyword">struct </span>_ApisetValueEntry {</div>
|
|
<div class="line"><a name="l00072"></a><span class="lineno"> 72</span>  DWORD Ignored; </div>
|
|
<div class="line"><a name="l00073"></a><span class="lineno"> 73</span>  DWORD NameOffset; </div>
|
|
<div class="line"><a name="l00074"></a><span class="lineno"> 74</span>  DWORD NameLength; </div>
|
|
<div class="line"><a name="l00075"></a><span class="lineno"> 75</span>  DWORD ValueOffset; </div>
|
|
<div class="line"><a name="l00076"></a><span class="lineno"> 76</span>  DWORD ValueLength; </div>
|
|
<div class="line"><a name="l00077"></a><span class="lineno"> 77</span>  } ApisetValueEntry, * PApisetValueEntry;</div>
|
|
<div class="line"><a name="l00078"></a><span class="lineno"> 78</span>  </div>
|
|
<div class="line"><a name="l00079"></a><span class="lineno"> 79</span>  <span class="comment">// Api set schema version 6.</span></div>
|
|
<div class="line"><a name="l00080"></a><span class="lineno"> 80</span>  <span class="keyword">typedef</span> <span class="keyword">struct </span>_ApiSetHeader6 {</div>
|
|
<div class="line"><a name="l00081"></a><span class="lineno"> 81</span>  DWORD Version; </div>
|
|
<div class="line"><a name="l00082"></a><span class="lineno"> 82</span>  DWORD Count; </div>
|
|
<div class="line"><a name="l00083"></a><span class="lineno"> 83</span>  } ApiSetHeader6, * PApiSetHeader6;</div>
|
|
<div class="line"><a name="l00084"></a><span class="lineno"> 84</span>  </div>
|
|
<div class="line"><a name="l00085"></a><span class="lineno"> 85</span>  <span class="comment">// Api set schema another version name entry.</span></div>
|
|
<div class="line"><a name="l00086"></a><span class="lineno"> 86</span>  <span class="keyword">typedef</span> <span class="keyword">struct </span>_ApisetNameEntry2 {</div>
|
|
<div class="line"><a name="l00087"></a><span class="lineno"> 87</span>  DWORD NameOffset; </div>
|
|
<div class="line"><a name="l00088"></a><span class="lineno"> 88</span>  DWORD NameLength; </div>
|
|
<div class="line"><a name="l00089"></a><span class="lineno"> 89</span>  DWORD DataOffset; </div>
|
|
<div class="line"><a name="l00090"></a><span class="lineno"> 90</span>  } ApisetNameEntry2, * PApisetNameEntry2;</div>
|
|
<div class="line"><a name="l00091"></a><span class="lineno"> 91</span>  </div>
|
|
<div class="line"><a name="l00092"></a><span class="lineno"> 92</span>  <span class="comment">// Api set schema another version value entry.</span></div>
|
|
<div class="line"><a name="l00093"></a><span class="lineno"> 93</span>  <span class="keyword">typedef</span> <span class="keyword">struct </span>_ValuesArray2 {</div>
|
|
<div class="line"><a name="l00094"></a><span class="lineno"> 94</span>  DWORD Count; </div>
|
|
<div class="line"><a name="l00095"></a><span class="lineno"> 95</span>  DWORD NameLength; </div>
|
|
<div class="line"><a name="l00096"></a><span class="lineno"> 96</span>  DWORD DataOffset; </div>
|
|
<div class="line"><a name="l00097"></a><span class="lineno"> 97</span>  } ValuesArray2, * PValuesArray2;</div>
|
|
<div class="line"><a name="l00098"></a><span class="lineno"> 98</span>  </div>
|
|
<div class="line"><a name="l00099"></a><span class="lineno"> 99</span>  <span class="comment">// Api set schema another version values entry.</span></div>
|
|
<div class="line"><a name="l00100"></a><span class="lineno"> 100</span>  <span class="keyword">typedef</span> <span class="keyword">struct </span>_ValuesEntry2 {</div>
|
|
<div class="line"><a name="l00101"></a><span class="lineno"> 101</span>  DWORD NameOffset; </div>
|
|
<div class="line"><a name="l00102"></a><span class="lineno"> 102</span>  DWORD NameLength; </div>
|
|
<div class="line"><a name="l00103"></a><span class="lineno"> 103</span>  DWORD ValueOffset; </div>
|
|
<div class="line"><a name="l00104"></a><span class="lineno"> 104</span>  DWORD ValueLength; </div>
|
|
<div class="line"><a name="l00105"></a><span class="lineno"> 105</span>  } ValuesEntry2, * PValuesEntry2;</div>
|
|
<div class="line"><a name="l00106"></a><span class="lineno"> 106</span>  </div>
|
|
<div class="line"><a name="l00107"></a><span class="lineno"> 107</span>  <span class="comment">// For LdrLoadDll.</span></div>
|
|
<div class="line"><a name="l00108"></a><span class="lineno"> 108</span>  <span class="keyword">typedef</span> NTSTATUS (WINAPI* pLdrLoadDll)(</div>
|
|
<div class="line"><a name="l00109"></a><span class="lineno"> 109</span>  PCWSTR PathToFile, </div>
|
|
<div class="line"><a name="l00110"></a><span class="lineno"> 110</span>  DWORD Flags, </div>
|
|
<div class="line"><a name="l00111"></a><span class="lineno"> 111</span>  PUNICODE_STRING ModuleFileName, </div>
|
|
<div class="line"><a name="l00112"></a><span class="lineno"> 112</span>  PVOID* ModuleHandle); </div>
|
|
<div class="line"><a name="l00117"></a><span class="lineno"> 117</span>  <span class="keyword">static</span> <a class="code" href="shellcode_8hpp.html#a920e1ee483880024048aca3880427e1c">no_inline</a> VOID exit();</div>
|
|
<div class="line"><a name="l00118"></a><span class="lineno"> 118</span>  </div>
|
|
<div class="line"><a name="l00124"></a><span class="lineno"> 124</span>  <span class="keyword">static</span> <a class="code" href="shellcode_8hpp.html#a920e1ee483880024048aca3880427e1c">no_inline</a> <span class="keywordtype">size_t</span> wstr_len(PWSTR str);</div>
|
|
<div class="line"><a name="l00125"></a><span class="lineno"> 125</span>  </div>
|
|
<div class="line"><a name="l00131"></a><span class="lineno"> 131</span>  <span class="keyword">static</span> <a class="code" href="shellcode_8hpp.html#a920e1ee483880024048aca3880427e1c">no_inline</a> DWORD hash_string(PCHAR str);</div>
|
|
<div class="line"><a name="l00132"></a><span class="lineno"> 132</span>  </div>
|
|
<div class="line"><a name="l00138"></a><span class="lineno"> 138</span>  <span class="keyword">static</span> <a class="code" href="shellcode_8hpp.html#a920e1ee483880024048aca3880427e1c">no_inline</a> VOID str_cpy(PCHAR out, PSTR in);</div>
|
|
<div class="line"><a name="l00139"></a><span class="lineno"> 139</span>  </div>
|
|
<div class="line"><a name="l00145"></a><span class="lineno"> 145</span>  <span class="keyword">static</span> <a class="code" href="shellcode_8hpp.html#a920e1ee483880024048aca3880427e1c">no_inline</a> DWORD str_toi(PSTR str);</div>
|
|
<div class="line"><a name="l00146"></a><span class="lineno"> 146</span>  </div>
|
|
<div class="line"><a name="l00153"></a><span class="lineno"> 153</span>  <span class="keyword">static</span> <a class="code" href="shellcode_8hpp.html#a920e1ee483880024048aca3880427e1c">no_inline</a> PCHAR str_chr(PSTR str, CHAR chr);</div>
|
|
<div class="line"><a name="l00154"></a><span class="lineno"> 154</span>  </div>
|
|
<div class="line"><a name="l00161"></a><span class="lineno"> 161</span>  <span class="keyword">static</span> <a class="code" href="shellcode_8hpp.html#a920e1ee483880024048aca3880427e1c">no_inline</a> VOID ansi_to_wide(PCHAR str, PWCHAR out, <span class="keywordtype">size_t</span> size);</div>
|
|
<div class="line"><a name="l00162"></a><span class="lineno"> 162</span>  </div>
|
|
<div class="line"><a name="l00169"></a><span class="lineno"> 169</span>  <span class="keyword">static</span> <a class="code" href="shellcode_8hpp.html#a920e1ee483880024048aca3880427e1c">no_inline</a> VOID wstr_cpy(PWSTR str1, PCWSTR str2, <span class="keywordtype">size_t</span> length);</div>
|
|
<div class="line"><a name="l00170"></a><span class="lineno"> 170</span>  </div>
|
|
<div class="line"><a name="l00178"></a><span class="lineno"> 178</span>  <span class="keyword">static</span> <a class="code" href="shellcode_8hpp.html#a920e1ee483880024048aca3880427e1c">no_inline</a> INT wstr_i_cmp(PWSTR str1, PCWSTR str2, <span class="keywordtype">size_t</span> length);</div>
|
|
<div class="line"><a name="l00179"></a><span class="lineno"> 179</span>  </div>
|
|
<div class="line"><a name="l00185"></a><span class="lineno"> 185</span>  <span class="keyword">static</span> <a class="code" href="shellcode_8hpp.html#a920e1ee483880024048aca3880427e1c">no_inline</a> HANDLE get_dll_handle(HANDLE pe_base, PDWORD sh_funs, PWSTR dll_name);</div>
|
|
<div class="line"><a name="l00186"></a><span class="lineno"> 186</span>  </div>
|
|
<div class="line"><a name="l00192"></a><span class="lineno"> 192</span>  <span class="keyword">static</span> <a class="code" href="shellcode_8hpp.html#a920e1ee483880024048aca3880427e1c">no_inline</a> HANDLE load_dll(HANDLE pe_base, PDWORD sh_funs, PCHAR dll_name);</div>
|
|
<div class="line"><a name="l00193"></a><span class="lineno"> 193</span>  </div>
|
|
<div class="line"><a name="l00201"></a><span class="lineno"> 201</span>  <span class="keyword">static</span> <a class="code" href="shellcode_8hpp.html#a920e1ee483880024048aca3880427e1c">no_inline</a> BOOL resolve_api_set(HANDLE pe_base, PDWORD sh_funs, PVOID schema_map,</div>
|
|
<div class="line"><a name="l00202"></a><span class="lineno"> 202</span>  PCWSTR virtual_dll, PWCHAR real_dll);</div>
|
|
<div class="line"><a name="l00203"></a><span class="lineno"> 203</span>  </div>
|
|
<div class="line"><a name="l00211"></a><span class="lineno"> 211</span>  <span class="keyword">static</span> <a class="code" href="shellcode_8hpp.html#a920e1ee483880024048aca3880427e1c">no_inline</a> PVOID get_symbol_ptr(HANDLE pe_base, PDWORD sh_funs, HANDLE dll_handle,</div>
|
|
<div class="line"><a name="l00212"></a><span class="lineno"> 212</span>  u_sym_info sym_info, BOOL by_name);</div>
|
|
<div class="line"><a name="l00213"></a><span class="lineno"> 213</span>  </div>
|
|
<div class="line"><a name="l00220"></a><span class="lineno"> 220</span>  <span class="keyword">static</span> <a class="code" href="shellcode_8hpp.html#a920e1ee483880024048aca3880427e1c">no_inline</a> VOID WINAPI load_syms(HANDLE pe_base, DWORD sh_funs_rva, DWORD syms_rva);</div>
|
|
<div class="line"><a name="l00221"></a><span class="lineno"> 221</span>  </div>
|
|
<div class="line"><a name="l00225"></a><span class="lineno"> 225</span>  <span class="keyword">static</span> <a class="code" href="shellcode_8hpp.html#a920e1ee483880024048aca3880427e1c">no_inline</a> VOID funs_end();</div>
|
|
<div class="line"><a name="l00226"></a><span class="lineno"> 226</span>  </div>
|
|
<div class="line"><a name="l00227"></a><span class="lineno"> 227</span>  <span class="comment">// Enum of the functions used at the shellcode.</span></div>
|
|
<div class="line"><a name="l00228"></a><span class="lineno"> 228</span>  <span class="keyword">typedef</span> <span class="keyword">enum</span> {</div>
|
|
<div class="line"><a name="l00229"></a><span class="lineno"> 229</span>  shellcode_fun_exit = 0, </div>
|
|
<div class="line"><a name="l00230"></a><span class="lineno"> 230</span>  shellcode_fun_wstr_len, </div>
|
|
<div class="line"><a name="l00231"></a><span class="lineno"> 231</span>  shellcode_fun_hash_string, </div>
|
|
<div class="line"><a name="l00232"></a><span class="lineno"> 232</span>  shellcode_fun_str_cpy, </div>
|
|
<div class="line"><a name="l00233"></a><span class="lineno"> 233</span>  shellcode_fun_str_toi, </div>
|
|
<div class="line"><a name="l00234"></a><span class="lineno"> 234</span>  shellcode_fun_str_chr, </div>
|
|
<div class="line"><a name="l00235"></a><span class="lineno"> 235</span>  shellcode_fun_ansi_to_wide, </div>
|
|
<div class="line"><a name="l00236"></a><span class="lineno"> 236</span>  shellcode_fun_wstr_cpy, </div>
|
|
<div class="line"><a name="l00237"></a><span class="lineno"> 237</span>  shellcode_fun_wstr_i_cmp, </div>
|
|
<div class="line"><a name="l00238"></a><span class="lineno"> 238</span>  shellcode_fun_get_dll_handle, </div>
|
|
<div class="line"><a name="l00239"></a><span class="lineno"> 239</span>  shellcode_fun_load_dll, </div>
|
|
<div class="line"><a name="l00240"></a><span class="lineno"> 240</span>  shellcode_fun_resolve_api_set, </div>
|
|
<div class="line"><a name="l00241"></a><span class="lineno"> 241</span>  shellcode_fun_get_symbol_ptr, </div>
|
|
<div class="line"><a name="l00242"></a><span class="lineno"> 242</span>  shellcode_fun_load_syms, </div>
|
|
<div class="line"><a name="l00243"></a><span class="lineno"> 243</span>  shellcode_number_of_functions </div>
|
|
<div class="line"><a name="l00244"></a><span class="lineno"> 244</span>  } t_shellcode_funs;</div>
|
|
<div class="line"><a name="l00245"></a><span class="lineno"> 245</span>  </div>
|
|
<div class="line"><a name="l00246"></a><span class="lineno"> 246</span> <span class="keyword">public</span>:</div>
|
|
<div class="line"><a name="l00247"></a><span class="lineno"> 247</span>  </div>
|
|
<div class="line"><a name="l00248"></a><span class="lineno"><a class="line" href="classshellcode.html#a57220d662e7f75e3aefa71eaa144d243"> 248</a></span>  <span class="keyword">static</span> PVOID <a class="code" href="classshellcode.html#a57220d662e7f75e3aefa71eaa144d243">shellcode_start</a>; </div>
|
|
<div class="line"><a name="l00249"></a><span class="lineno"><a class="line" href="classshellcode.html#aaa82db40cd8ad288803b70bbb278bff4"> 249</a></span>  <span class="keyword">static</span> DWORD <a class="code" href="classshellcode.html#aaa82db40cd8ad288803b70bbb278bff4">shellcode_entry</a>; </div>
|
|
<div class="line"><a name="l00250"></a><span class="lineno"><a class="line" href="classshellcode.html#a724cccee30273c81a1a865b3ca20c829"> 250</a></span>  <span class="keyword">static</span> DWORD <a class="code" href="classshellcode.html#a724cccee30273c81a1a865b3ca20c829">shellcode_size</a>; </div>
|
|
<div class="line"><a name="l00253"></a><span class="lineno"><a class="line" href="classshellcode.html#af54e7ad1b1d215703f5487389040d687"> 253</a></span>  <span class="keyword">static</span> DWORD <a class="code" href="classshellcode.html#af54e7ad1b1d215703f5487389040d687">shellcodes_funs</a>[shellcode_number_of_functions];</div>
|
|
<div class="line"><a name="l00254"></a><span class="lineno"> 254</span> };</div>
|
|
<div class="line"><a name="l00255"></a><span class="lineno"> 255</span>  </div>
|
|
<div class="line"><a name="l00256"></a><span class="lineno"> 256</span> <span class="preprocessor">#endif // !SHELLCODE_HPP.</span></div>
|
|
</div><!-- fragment --></div><!-- contents -->
|
|
</div><!-- doc-content -->
|
|
<div class="ttc" id="aclasscobf_html"><div class="ttname"><a href="classcobf.html">cobf</a></div><div class="ttdef"><b>Definition:</b> <a href="cobf_8hpp_source.html#l00025">cobf.hpp:26</a></div></div>
|
|
<div class="ttc" id="aclassshellcode_html_a724cccee30273c81a1a865b3ca20c829"><div class="ttname"><a href="classshellcode.html#a724cccee30273c81a1a865b3ca20c829">shellcode::shellcode_size</a></div><div class="ttdeci">static DWORD shellcode_size</div><div class="ttdef"><b>Definition:</b> <a href="shellcode_8hpp_source.html#l00250">shellcode.hpp:250</a></div></div>
|
|
<div class="ttc" id="ashellcode_8hpp_html_a920e1ee483880024048aca3880427e1c"><div class="ttname"><a href="shellcode_8hpp.html#a920e1ee483880024048aca3880427e1c">no_inline</a></div><div class="ttdeci">#define no_inline</div><div class="ttdef"><b>Definition:</b> <a href="shellcode_8hpp_source.html#l00021">shellcode.hpp:21</a></div></div>
|
|
<div class="ttc" id="aclassshellcode_html_a57220d662e7f75e3aefa71eaa144d243"><div class="ttname"><a href="classshellcode.html#a57220d662e7f75e3aefa71eaa144d243">shellcode::shellcode_start</a></div><div class="ttdeci">static PVOID shellcode_start</div><div class="ttdef"><b>Definition:</b> <a href="shellcode_8hpp_source.html#l00248">shellcode.hpp:248</a></div></div>
|
|
<div class="ttc" id="aclassshellcode_html_aaa82db40cd8ad288803b70bbb278bff4"><div class="ttname"><a href="classshellcode.html#aaa82db40cd8ad288803b70bbb278bff4">shellcode::shellcode_entry</a></div><div class="ttdeci">static DWORD shellcode_entry</div><div class="ttdef"><b>Definition:</b> <a href="shellcode_8hpp_source.html#l00249">shellcode.hpp:249</a></div></div>
|
|
<div class="ttc" id="aclassshellcode_html"><div class="ttname"><a href="classshellcode.html">shellcode</a></div><div class="ttdef"><b>Definition:</b> <a href="shellcode_8hpp_source.html#l00029">shellcode.hpp:30</a></div></div>
|
|
<div class="ttc" id="aclassshellcode_html_af54e7ad1b1d215703f5487389040d687"><div class="ttname"><a href="classshellcode.html#af54e7ad1b1d215703f5487389040d687">shellcode::shellcodes_funs</a></div><div class="ttdeci">static DWORD shellcodes_funs[shellcode_number_of_functions]</div><div class="ttdef"><b>Definition:</b> <a href="shellcode_8hpp_source.html#l00253">shellcode.hpp:253</a></div></div>
|
|
<!-- start footer part -->
|
|
<div id="nav-path" class="navpath"><!-- id is needed for treeview function! -->
|
|
<ul>
|
|
<li class="navelem"><a class="el" href="dir_d44c64559bbebec7f509842c48db8b23.html">include</a></li><li class="navelem"><a class="el" href="shellcode_8hpp.html">shellcode.hpp</a></li>
|
|
<li class="footer">Generated by <a href="http://www.doxygen.org/index.html"><img class="footer" src="doxygen.svg" width="104" height="31" alt="doxygen"/></a> 1.8.20 </li>
|
|
</ul>
|
|
</div>
|
|
</body>
|
|
</html>
|