From e3804a85d18250d2ba96cda69e80ee65c4063bf7 Mon Sep 17 00:00:00 2001 From: smx-smx Date: Fri, 5 Apr 2024 22:46:02 +0000 Subject: [PATCH] =?UTF-8?q?Deploying=20to=20gh-pages=20from=20@=20smx-smx/?= =?UTF-8?q?xzre@75f4f250207251f3d8c7edf009230d081f2d70d0=20=F0=9F=9A=80?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- annotated.html | 13 +- classes.html | 22 +- functions.html | 165 ++++++- functions_func.html | 75 +++ functions_vars.html | 162 +++++- globals.html | 3 - globals_func.html | 3 - menudata.js | 29 +- search/all_0.js | 8 +- search/all_1.js | 9 +- search/all_2.js | 11 +- search/all_3.js | 21 +- search/all_4.js | 10 +- search/all_5.js | 10 +- search/all_6.js | 7 +- search/all_7.js | 8 +- search/all_8.html | 37 ++ search/all_8.js | 7 + search/all_9.html | 37 ++ search/all_9.js | 5 + search/all_a.html | 37 ++ search/all_a.js | 12 + search/all_b.html | 37 ++ search/all_b.js | 5 + search/all_c.html | 37 ++ search/all_c.js | 6 + search/classes_0.js | 4 +- search/classes_1.html | 37 ++ search/classes_1.js | 4 + search/classes_2.html | 37 ++ search/classes_2.js | 6 + search/classes_3.html | 37 ++ search/classes_3.js | 4 + search/classes_4.html | 37 ++ search/classes_4.js | 4 + search/classes_5.html | 37 ++ search/classes_5.js | 4 + search/classes_6.html | 37 ++ search/classes_6.js | 5 + search/files_0.js | 2 +- search/functions_0.js | 2 +- search/functions_1.js | 9 +- search/functions_2.js | 16 +- search/functions_3.js | 9 +- search/functions_4.js | 2 +- search/functions_5.js | 4 +- search/functions_6.js | 2 +- search/pages_0.js | 2 +- search/searchdata.js | 8 +- search/variables_0.js | 5 +- search/variables_1.js | 7 +- search/variables_2.html | 37 ++ search/variables_2.js | 5 + search/variables_3.html | 37 ++ search/variables_3.js | 5 + search/variables_4.html | 37 ++ search/variables_4.js | 4 + search/variables_5.html | 37 ++ search/variables_5.js | 10 + search/variables_6.html | 37 ++ search/variables_6.js | 6 + search/variables_7.html | 37 ++ search/variables_7.js | 8 + search/variables_8.html | 37 ++ search/variables_8.js | 6 + search/variables_9.html | 37 ++ search/variables_9.js | 5 + search/variables_a.html | 37 ++ search/variables_a.js | 8 + search/variables_b.html | 37 ++ search/variables_b.js | 5 + structbackdoor__data__t.html | 165 +++++++ structbackdoor__setup__params__t.html | 99 ++++ structbackdoor__shared__globals__t.html | 93 ++++ structdasm__ctx__t.html | 159 ++++++ structelf__entry__ctx__t.html | 107 ++++ structelf__info.html | 208 ++++++++ structelf__lib__info__t.html | 89 ++++ structglobal__context.html | 120 +++++ structimported__funcs__t.html | 198 ++++++++ structlibc__imports.html | 99 ++++ structsystem__imports__t.html | 126 +++++ xzre_8h.html | 440 +++++++---------- xzre_8h_source.html | 626 +++++++++++++----------- 84 files changed, 3441 insertions(+), 617 deletions(-) create mode 100644 functions_func.html create mode 100644 search/all_8.html create mode 100644 search/all_8.js create mode 100644 search/all_9.html create mode 100644 search/all_9.js create mode 100644 search/all_a.html create mode 100644 search/all_a.js create mode 100644 search/all_b.html create mode 100644 search/all_b.js create mode 100644 search/all_c.html create mode 100644 search/all_c.js create mode 100644 search/classes_1.html create mode 100644 search/classes_1.js create mode 100644 search/classes_2.html create mode 100644 search/classes_2.js create mode 100644 search/classes_3.html create mode 100644 search/classes_3.js create mode 100644 search/classes_4.html create mode 100644 search/classes_4.js create mode 100644 search/classes_5.html create mode 100644 search/classes_5.js create mode 100644 search/classes_6.html create mode 100644 search/classes_6.js create mode 100644 search/variables_2.html create mode 100644 search/variables_2.js create mode 100644 search/variables_3.html create mode 100644 search/variables_3.js create mode 100644 search/variables_4.html create mode 100644 search/variables_4.js create mode 100644 search/variables_5.html create mode 100644 search/variables_5.js create mode 100644 search/variables_6.html create mode 100644 search/variables_6.js create mode 100644 search/variables_7.html create mode 100644 search/variables_7.js create mode 100644 search/variables_8.html create mode 100644 search/variables_8.js create mode 100644 search/variables_9.html create mode 100644 search/variables_9.js create mode 100644 search/variables_a.html create mode 100644 search/variables_a.js create mode 100644 search/variables_b.html create mode 100644 search/variables_b.js create mode 100644 structbackdoor__data__t.html create mode 100644 structbackdoor__setup__params__t.html create mode 100644 structbackdoor__shared__globals__t.html create mode 100644 structdasm__ctx__t.html create mode 100644 structelf__entry__ctx__t.html create mode 100644 structelf__info.html create mode 100644 structelf__lib__info__t.html create mode 100644 structglobal__context.html create mode 100644 structimported__funcs__t.html create mode 100644 structlibc__imports.html create mode 100644 structsystem__imports__t.html diff --git a/annotated.html b/annotated.html index e722fb7..8237c8b 100644 --- a/annotated.html +++ b/annotated.html @@ -67,7 +67,18 @@
Here are the data structures with brief descriptions:
- + + + + + + + + + + + +
 Csecret_data_shift_cursorShift register, which will shift a '1' into the secret data array. the low 3 bits represent the bit index, while the rest represents the byte index this is convenient, since a simple increment will increment the buffer position correctly
 Cbackdoor_data_tThis structure is used to hold most of the backdoor information. it's used as a local variable in function backdoor_setup
 Cbackdoor_setup_params_t
 Cbackdoor_shared_globals_t
 Cdasm_ctx_t
 Celf_entry_ctx_t
 Celf_info
 Celf_lib_info_t
 Cglobal_context
 Cimported_funcs_t
 Clibc_imports
 Csecret_data_shift_cursorShift register, which will shift a '1' into the secret data array. the low 3 bits represent the bit index, while the rest represents the byte index this is convenient, since a simple increment will increment the buffer position correctly
 Csystem_imports_t
diff --git a/classes.html b/classes.html index 843b062..1120f43 100644 --- a/classes.html +++ b/classes.html @@ -65,11 +65,29 @@
Data Structure Index
-
S
+
B | D | E | G | I | L | S
+
B
+
backdoor_data_t
backdoor_setup_params_t
backdoor_shared_globals_t
+
+
D
+
dasm_ctx_t
+
+
E
+
elf_entry_ctx_t
elf_info
elf_lib_info_t
+
+
G
+
global_context
+
+
I
+
imported_funcs_t
+
+
L
+
libc_imports
+
S
-
secret_data_shift_cursor
+
secret_data_shift_cursor
system_imports_t
diff --git a/functions.html b/functions.html index e66abc9..0211808 100644 --- a/functions.html +++ b/functions.html @@ -61,17 +61,180 @@
-
Here is a list of all documented struct and union fields with links to the struct/union documentation for each field:
diff --git a/functions_func.html b/functions_func.html new file mode 100644 index 0000000..bafca0f --- /dev/null +++ b/functions_func.html @@ -0,0 +1,75 @@ + + + + + + + +xzre: Data Fields - Functions + + + + + + + + + +
+
+ + + + + + +
+
xzre +
+
+
+ + + + + + + +
+ +
+
+ + +
+ +
+ +
+  +
+ +
+Generated by doxygen 1.9.1 +
+ + diff --git a/functions_vars.html b/functions_vars.html index 278b053..59f8650 100644 --- a/functions_vars.html +++ b/functions_vars.html @@ -61,17 +61,177 @@
- 
diff --git a/globals.html b/globals.html index b711f9c..4a713da 100644 --- a/globals.html +++ b/globals.html @@ -62,9 +62,6 @@
Here is a list of all documented functions, variables, defines, enums, and typedefs with links to the documentation:
    -
  • __attribute__() -: xzre.h -
  • backdoor_setup() : xzre.h
    • diff --git a/globals_func.html b/globals_func.html index 25e174c..b8a5e8f 100644 --- a/globals_func.html +++ b/globals_func.html @@ -62,9 +62,6 @@
     
      -
    • __attribute__() -: xzre.h -
    • backdoor_setup() : xzre.h
      • diff --git a/menudata.js b/menudata.js index 130405f..1f75896 100644 --- a/menudata.js +++ b/menudata.js @@ -29,8 +29,33 @@ var menudata={children:[ {text:"Data Structures",url:"annotated.html"}, {text:"Data Structure Index",url:"classes.html"}, {text:"Data Fields",url:"functions.html",children:[ -{text:"All",url:"functions.html"}, -{text:"Variables",url:"functions_vars.html"}]}]}, +{text:"All",url:"functions.html",children:[ +{text:"b",url:"functions.html#index_b"}, +{text:"c",url:"functions.html#index_c"}, +{text:"d",url:"functions.html#index_d"}, +{text:"e",url:"functions.html#index_e"}, +{text:"f",url:"functions.html#index_f"}, +{text:"g",url:"functions.html#index_g"}, +{text:"i",url:"functions.html#index_i"}, +{text:"l",url:"functions.html#index_l"}, +{text:"p",url:"functions.html#index_p"}, +{text:"r",url:"functions.html#index_r"}, +{text:"s",url:"functions.html#index_s"}, +{text:"v",url:"functions.html#index_v"}]}, +{text:"Functions",url:"functions_func.html"}, +{text:"Variables",url:"functions_vars.html",children:[ +{text:"b",url:"functions_vars.html#index_b"}, +{text:"c",url:"functions_vars.html#index_c"}, +{text:"d",url:"functions_vars.html#index_d"}, +{text:"e",url:"functions_vars.html#index_e"}, +{text:"f",url:"functions_vars.html#index_f"}, +{text:"g",url:"functions_vars.html#index_g"}, +{text:"i",url:"functions_vars.html#index_i"}, +{text:"l",url:"functions_vars.html#index_l"}, +{text:"p",url:"functions_vars.html#index_p"}, +{text:"r",url:"functions_vars.html#index_r"}, +{text:"s",url:"functions_vars.html#index_s"}, +{text:"v",url:"functions_vars.html#index_v"}]}]}]}, {text:"Files",url:"files.html",children:[ {text:"File List",url:"files.html"}, {text:"Globals",url:"globals.html",children:[ diff --git a/search/all_0.js b/search/all_0.js index f3c635e..0cba7c1 100644 --- a/search/all_0.js +++ b/search/all_0.js @@ -1,4 +1,10 @@ var searchData= [ - ['_5f_5fattribute_5f_5f_0',['__attribute__',['../xzre_8h.html#af1ebad6aef2db9942e46865bbe1134bd',1,'xzre.h']]] + ['backdoor_5fdata_0',['backdoor_data',['../structbackdoor__data__t.html#a85f04164ae3b5ad5d4c92c0026951e98',1,'backdoor_data_t']]], + ['backdoor_5fdata_5ft_1',['backdoor_data_t',['../structbackdoor__data__t.html',1,'']]], + ['backdoor_5fsetup_2',['backdoor_setup',['../xzre_8h.html#a229ee0bd4111363061bc4230bc1f6423',1,'xzre.h']]], + ['backdoor_5fsetup_5fparams_5ft_3',['backdoor_setup_params_t',['../structbackdoor__setup__params__t.html',1,'']]], + ['backdoor_5fshared_5fglobals_5ft_4',['backdoor_shared_globals_t',['../structbackdoor__shared__globals__t.html',1,'']]], + ['bit_5findex_5',['bit_index',['../unionsecret__data__shift__cursor.html#ab2196dad3c7284cb18383a894058d144',1,'secret_data_shift_cursor']]], + ['byte_5findex_6',['byte_index',['../unionsecret__data__shift__cursor.html#abc6b87bb67fca21d9db17a1dfd4ddd31',1,'secret_data_shift_cursor']]] ]; diff --git a/search/all_1.js b/search/all_1.js index cb4ffbe..3d4d047 100644 --- a/search/all_1.js +++ b/search/all_1.js @@ -1,6 +1,9 @@ var searchData= [ - ['backdoor_5fsetup_1',['backdoor_setup',['../xzre_8h.html#a229ee0bd4111363061bc4230bc1f6423',1,'xzre.h']]], - ['bit_5findex_2',['bit_index',['../unionsecret__data__shift__cursor.html#ab2196dad3c7284cb18383a894058d144',1,'secret_data_shift_cursor']]], - ['byte_5findex_3',['byte_index',['../unionsecret__data__shift__cursor.html#abc6b87bb67fca21d9db17a1dfd4ddd31',1,'secret_data_shift_cursor']]] + ['caller_5flocals_7',['caller_locals',['../structelf__entry__ctx__t.html#aee297fb7264ac1c888d6a8a3e7e5b5ba',1,'elf_entry_ctx_t']]], + ['code_5frange_5fend_8',['code_range_end',['../structglobal__context.html#a7b19808b1df8a3d875126261db187217',1,'global_context']]], + ['code_5frange_5fstart_9',['code_range_start',['../structglobal__context.html#a717a926b3e4ac408c768b121fcf7d614',1,'global_context']]], + ['code_5fsegment_5fsize_10',['code_segment_size',['../structelf__info.html#a01041699b43bde54280aa03f2e8b52a0',1,'elf_info']]], + ['code_5fsegment_5fstart_11',['code_segment_start',['../structelf__info.html#a6caeca689d53da9142b735070a008df8',1,'elf_info']]], + ['cpuid_5ffn_12',['cpuid_fn',['../structelf__entry__ctx__t.html#a85a0fbf801aa8ab7ab1d2f0906dc3971',1,'elf_entry_ctx_t']]] ]; diff --git a/search/all_2.js b/search/all_2.js index 7553652..09fd784 100644 --- a/search/all_2.js +++ b/search/all_2.js @@ -1,11 +1,6 @@ var searchData= [ - ['elf_5fcontains_5fvaddr_4',['elf_contains_vaddr',['../xzre_8h.html#a2a09d15b1c506e0f29ee9433771ad8db',1,'xzre.h']]], - ['elf_5fget_5fcode_5fsegment_5',['elf_get_code_segment',['../xzre_8h.html#af3f0d23e5fece210bdf4945c65e3a10a',1,'xzre.h']]], - ['elf_5fget_5fgot_5fsymbol_6',['elf_get_got_symbol',['../xzre_8h.html#a3a822ab2e33cbfe16f1d3c5fb3c3300b',1,'xzre.h']]], - ['elf_5fget_5fplt_5fsymbol_7',['elf_get_plt_symbol',['../xzre_8h.html#a78a68fd2158f572304562e6e7c5d0bf6',1,'xzre.h']]], - ['elf_5fget_5freloc_5fsymbol_8',['elf_get_reloc_symbol',['../xzre_8h.html#acbf91a56fdd3e3f20df2182d8aa19cb1',1,'xzre.h']]], - ['elf_5fparse_9',['elf_parse',['../xzre_8h.html#a049328971f4e99ce954d5e0346fee6d7',1,'xzre.h']]], - ['elf_5fsymbol_5fget_10',['elf_symbol_get',['../xzre_8h.html#ac0a43ada7f303cb88b9c4b48a17b5154',1,'xzre.h']]], - ['elf_5fsymbol_5fget_5faddr_11',['elf_symbol_get_addr',['../xzre_8h.html#a20700a81cc5921ecba31766edd9c3f4f',1,'xzre.h']]] + ['dasm_5fctx_5ft_13',['dasm_ctx_t',['../structdasm__ctx__t.html',1,'']]], + ['dyn_14',['dyn',['../structelf__info.html#a3c3f1487932a753b2908a26ebb52e0c0',1,'elf_info']]], + ['dyn_5fnum_5fentries_15',['dyn_num_entries',['../structelf__info.html#aad068cf90f065cfa166ee1bfaf56432e',1,'elf_info']]] ]; diff --git a/search/all_3.js b/search/all_3.js index 98623e5..78ece7b 100644 --- a/search/all_3.js +++ b/search/all_3.js @@ -1,11 +1,16 @@ var searchData= [ - ['find_5fcall_5finstruction_12',['find_call_instruction',['../xzre_8h.html#a41fada894916f4c67d59090ff57aead1',1,'xzre.h']]], - ['find_5ffunction_5fprologue_13',['find_function_prologue',['../xzre_8h.html#a81a6f3d01ea6057c942052321b92c533',1,'xzre.h']]], - ['find_5ffunction_5fprologue_5fex_14',['find_function_prologue_ex',['../xzre_8h.html#a5b09699385091684d71bf8a278e0372d',1,'xzre.h']]], - ['find_5finstruction_5fwith_5fmem_5foperand_15',['find_instruction_with_mem_operand',['../xzre_8h.html#a60c226501adb1a2d3213484f651ff23b',1,'xzre.h']]], - ['find_5finstruction_5fwith_5fmem_5foperand_5fex_16',['find_instruction_with_mem_operand_ex',['../xzre_8h.html#a1c8a36d89bf4e57077a56611e9aeb470',1,'xzre.h']]], - ['find_5flea_5finstruction_17',['find_lea_instruction',['../xzre_8h.html#aea85a14166f11bb956c7862c2a66571e',1,'xzre.h']]], - ['find_5flea_5finstruction_5fwith_5fmem_5foperand_18',['find_lea_instruction_with_mem_operand',['../xzre_8h.html#a6e76946a37fb256974942a542373e421',1,'xzre.h']]], - ['find_5freg2reg_5finstruction_19',['find_reg2reg_instruction',['../xzre_8h.html#aed0391d07e4413f5a13e1ec2940c94ea',1,'xzre.h']]] + ['e_5fphnum_16',['e_phnum',['../structelf__info.html#a58ce2573274e2ad8e97b839ed3e17e3e',1,'elf_info']]], + ['elf_5fcontains_5fvaddr_17',['elf_contains_vaddr',['../xzre_8h.html#a2a09d15b1c506e0f29ee9433771ad8db',1,'xzre.h']]], + ['elf_5fentry_5fctx_5ft_18',['elf_entry_ctx_t',['../structelf__entry__ctx__t.html',1,'']]], + ['elf_5fget_5fcode_5fsegment_19',['elf_get_code_segment',['../xzre_8h.html#af3f0d23e5fece210bdf4945c65e3a10a',1,'xzre.h']]], + ['elf_5fget_5fgot_5fsymbol_20',['elf_get_got_symbol',['../xzre_8h.html#a3a822ab2e33cbfe16f1d3c5fb3c3300b',1,'xzre.h']]], + ['elf_5fget_5fplt_5fsymbol_21',['elf_get_plt_symbol',['../xzre_8h.html#a78a68fd2158f572304562e6e7c5d0bf6',1,'xzre.h']]], + ['elf_5fget_5freloc_5fsymbol_22',['elf_get_reloc_symbol',['../xzre_8h.html#acbf91a56fdd3e3f20df2182d8aa19cb1',1,'xzre.h']]], + ['elf_5finfo_23',['elf_info',['../structelf__info.html',1,'']]], + ['elf_5flib_5finfo_5ft_24',['elf_lib_info_t',['../structelf__lib__info__t.html',1,'']]], + ['elf_5fparse_25',['elf_parse',['../xzre_8h.html#a049328971f4e99ce954d5e0346fee6d7',1,'xzre.h']]], + ['elf_5fsymbol_5fget_26',['elf_symbol_get',['../xzre_8h.html#ac0a43ada7f303cb88b9c4b48a17b5154',1,'xzre.h']]], + ['elf_5fsymbol_5fget_5faddr_27',['elf_symbol_get_addr',['../xzre_8h.html#a20700a81cc5921ecba31766edd9c3f4f',1,'xzre.h']]], + ['elfbase_28',['elfbase',['../structelf__info.html#a583c4dd181c2f8b831e56c0d12acd660',1,'elf_info']]] ]; diff --git a/search/all_4.js b/search/all_4.js index 9bc3a63..bd1ee0d 100644 --- a/search/all_4.js +++ b/search/all_4.js @@ -1,4 +1,12 @@ var searchData= [ - ['get_5flzma_5fallocator_20',['get_lzma_allocator',['../xzre_8h.html#abc618a02e31b94194ce03b0c4a2b3597',1,'xzre.h']]] + ['find_5fcall_5finstruction_29',['find_call_instruction',['../xzre_8h.html#a41fada894916f4c67d59090ff57aead1',1,'xzre.h']]], + ['find_5ffunction_5fprologue_30',['find_function_prologue',['../xzre_8h.html#a81a6f3d01ea6057c942052321b92c533',1,'xzre.h']]], + ['find_5ffunction_5fprologue_5fex_31',['find_function_prologue_ex',['../xzre_8h.html#a5b09699385091684d71bf8a278e0372d',1,'xzre.h']]], + ['find_5finstruction_5fwith_5fmem_5foperand_32',['find_instruction_with_mem_operand',['../xzre_8h.html#a60c226501adb1a2d3213484f651ff23b',1,'xzre.h']]], + ['find_5finstruction_5fwith_5fmem_5foperand_5fex_33',['find_instruction_with_mem_operand_ex',['../xzre_8h.html#a1c8a36d89bf4e57077a56611e9aeb470',1,'xzre.h']]], + ['find_5flea_5finstruction_34',['find_lea_instruction',['../xzre_8h.html#aea85a14166f11bb956c7862c2a66571e',1,'xzre.h']]], + ['find_5flea_5finstruction_5fwith_5fmem_5foperand_35',['find_lea_instruction_with_mem_operand',['../xzre_8h.html#a6e76946a37fb256974942a542373e421',1,'xzre.h']]], + ['find_5freg2reg_5finstruction_36',['find_reg2reg_instruction',['../xzre_8h.html#aed0391d07e4413f5a13e1ec2940c94ea',1,'xzre.h']]], + ['first_5fvaddr_37',['first_vaddr',['../structelf__info.html#a04ca46ae688dfda82b39e720268a4316',1,'elf_info']]] ]; diff --git a/search/all_5.js b/search/all_5.js index 5b42f8c..31978fe 100644 --- a/search/all_5.js +++ b/search/all_5.js @@ -1,4 +1,12 @@ var searchData= [ - ['index_21',['index',['../unionsecret__data__shift__cursor.html#a9b139f7265c8349205b28aa6f8d894e0',1,'secret_data_shift_cursor']]] + ['get_5flzma_5fallocator_38',['get_lzma_allocator',['../xzre_8h.html#abc618a02e31b94194ce03b0c4a2b3597',1,'xzre.h']]], + ['global_5fcontext_39',['global_context',['../structglobal__context.html',1,'']]], + ['gnu_5fhash_5flast_5fbloom_40',['gnu_hash_last_bloom',['../structelf__info.html#a3a1a5acb2d22a9bc1ae2df30fa121a33',1,'elf_info']]], + ['gnu_5fhash_5fnbuckets_41',['gnu_hash_nbuckets',['../structelf__info.html#a575df843cb133e2a75e6b8027eb75659',1,'elf_info']]], + ['gnurelro_5ffound_42',['gnurelro_found',['../structelf__info.html#a66d75bbde3aa44519fd136a848e051da',1,'elf_info']]], + ['gnurelro_5fmemsize_43',['gnurelro_memsize',['../structelf__info.html#a1783b21f972415e71d5cb7d8531de5e5',1,'elf_info']]], + ['gnurelro_5fvaddr_44',['gnurelro_vaddr',['../structelf__info.html#a8500b4de03a9b9d44989375921b27f70',1,'elf_info']]], + ['got_5foffset_45',['got_offset',['../structelf__entry__ctx__t.html#a87ee4931628f8caffef417b6c7a9e897',1,'elf_entry_ctx_t']]], + ['got_5fptr_46',['got_ptr',['../structelf__entry__ctx__t.html#a981d9d100fcb877d5c77a16059bd47ac',1,'elf_entry_ctx_t']]] ]; diff --git a/search/all_6.js b/search/all_6.js index fea6df2..fb92e73 100644 --- a/search/all_6.js +++ b/search/all_6.js @@ -1,6 +1,7 @@ var searchData= [ - ['secret_5fdata_5fappend_5fif_5fflags_22',['secret_data_append_if_flags',['../xzre_8h.html#ad21c1f0b4b9127ea1234d46dbadc3e8b',1,'xzre.h']]], - ['secret_5fdata_5fappend_5fsingleton_23',['secret_data_append_singleton',['../xzre_8h.html#a36a945c9790681a50af0a1a0cd72a269',1,'xzre.h']]], - ['secret_5fdata_5fshift_5fcursor_24',['secret_data_shift_cursor',['../unionsecret__data__shift__cursor.html',1,'']]] + ['import_5fresolver_47',['import_resolver',['../structbackdoor__data__t.html#a242188e1a0f31908ae0d0be6a4eef749',1,'backdoor_data_t']]], + ['imported_5ffuncs_48',['imported_funcs',['../structglobal__context.html#a5dccd92d1dd861220b290896bd7ba487',1,'global_context']]], + ['imported_5ffuncs_5ft_49',['imported_funcs_t',['../structimported__funcs__t.html',1,'']]], + ['index_50',['index',['../unionsecret__data__shift__cursor.html#a9b139f7265c8349205b28aa6f8d894e0',1,'secret_data_shift_cursor']]] ]; diff --git a/search/all_7.js b/search/all_7.js index fad55cd..8e0491d 100644 --- a/search/all_7.js +++ b/search/all_7.js @@ -1,6 +1,8 @@ var searchData= [ - ['x86_5fdasm_25',['x86_dasm',['../xzre_8h.html#a52d510f0bbb31de19d8d20bf1acaeb5f',1,'xzre.h']]], - ['xzre_26',['xzre',['../md_README.html',1,'']]], - ['xzre_2eh_27',['xzre.h',['../xzre_8h.html',1,'']]] + ['libc_51',['libc',['../structbackdoor__data__t.html#a22234d8d48ec0cbc076e8ba334f36400',1,'backdoor_data_t']]], + ['libc_5fimports_52',['libc_imports',['../structlibc__imports.html',1,'libc_imports'],['../structbackdoor__data__t.html#a2db55bdd55d551c9b193357a5d533f3a',1,'backdoor_data_t::libc_imports()']]], + ['libc_5finfo_53',['libc_info',['../structbackdoor__data__t.html#a99e48fdb9e85f5f5cd7d37786d78eab0',1,'backdoor_data_t']]], + ['libcrypto_54',['libcrypto',['../structbackdoor__data__t.html#a7c8160e998522ea8cad2156c3ada1eb0',1,'backdoor_data_t']]], + ['libcrypto_5finfo_55',['libcrypto_info',['../structbackdoor__data__t.html#a1729f7578790ffabfb83b9597696fe4e',1,'backdoor_data_t']]] ]; diff --git a/search/all_8.html b/search/all_8.html new file mode 100644 index 0000000..83c55ae --- /dev/null +++ b/search/all_8.html @@ -0,0 +1,37 @@ + + + + + + + + + + +
      +
      Loading...
      +
      + +
      Searching...
      +
      No Matches
      + +
      + + diff --git a/search/all_8.js b/search/all_8.js new file mode 100644 index 0000000..93d221a --- /dev/null +++ b/search/all_8.js @@ -0,0 +1,7 @@ +var searchData= +[ + ['padding_56',['PADDING',['../structbackdoor__data__t.html#ae871a5250fb726fc4d09bfbf61473a87',1,'backdoor_data_t']]], + ['phdrs_57',['phdrs',['../structelf__info.html#a46b6bb90c2dccef9e76c09ea014048ae',1,'elf_info']]], + ['plt_5frelocs_58',['plt_relocs',['../structelf__info.html#a5d272c3d46d0b9254b9ba62ad38ef2b5',1,'elf_info']]], + ['plt_5frelocs_5fnum_59',['plt_relocs_num',['../structelf__info.html#ad4c0ec1374213c0f36d73ddcb3bbfd08',1,'elf_info']]] +]; diff --git a/search/all_9.html b/search/all_9.html new file mode 100644 index 0000000..1e263c1 --- /dev/null +++ b/search/all_9.html @@ -0,0 +1,37 @@ + + + + + + + + + + +
      +
      Loading...
      +
      + +
      Searching...
      +
      No Matches
      + +
      + + diff --git a/search/all_9.js b/search/all_9.js new file mode 100644 index 0000000..6a497c8 --- /dev/null +++ b/search/all_9.js @@ -0,0 +1,5 @@ +var searchData= +[ + ['reg2reg_5finstructions_5fcount_60',['reg2reg_instructions_count',['../structglobal__context.html#af51be9b60b5752b7213ba167f361d0b2',1,'global_context']]], + ['return_5faddress_61',['return_address',['../structelf__entry__ctx__t.html#a4c8fa5a990b954b868f03f9304631606',1,'elf_entry_ctx_t']]] +]; diff --git a/search/all_a.html b/search/all_a.html new file mode 100644 index 0000000..3a6cac1 --- /dev/null +++ b/search/all_a.html @@ -0,0 +1,37 @@ + + + + + + + + + + +
      +
      Loading...
      +
      + +
      Searching...
      +
      No Matches
      + +
      + + diff --git a/search/all_a.js b/search/all_a.js new file mode 100644 index 0000000..23b11d1 --- /dev/null +++ b/search/all_a.js @@ -0,0 +1,12 @@ +var searchData= +[ + ['secret_5fdata_62',['secret_data',['../structglobal__context.html#a03c3a777913affcd9720836e76888e09',1,'global_context']]], + ['secret_5fdata_5fappend_5fif_5fflags_63',['secret_data_append_if_flags',['../xzre_8h.html#ad21c1f0b4b9127ea1234d46dbadc3e8b',1,'xzre.h']]], + ['secret_5fdata_5fappend_5fsingleton_64',['secret_data_append_singleton',['../xzre_8h.html#a36a945c9790681a50af0a1a0cd72a269',1,'xzre.h']]], + ['secret_5fdata_5fshift_5fcursor_65',['secret_data_shift_cursor',['../unionsecret__data__shift__cursor.html',1,'']]], + ['shift_5foperations_66',['shift_operations',['../structglobal__context.html#a6f197e9f7782db222c1a54ed0f59fd58',1,'global_context']]], + ['strtab_67',['strtab',['../structelf__info.html#a4234e0dcece021d3bb5d64723180da9a',1,'elf_info']]], + ['symbol_5fptr_68',['symbol_ptr',['../structelf__entry__ctx__t.html#ad01fe86502a221ee8a55703ca7875f58',1,'elf_entry_ctx_t']]], + ['symtab_69',['symtab',['../structelf__info.html#aa34e0002d511de06b931d7c7b7579dc0',1,'elf_info']]], + ['system_5fimports_5ft_70',['system_imports_t',['../structsystem__imports__t.html',1,'']]] +]; diff --git a/search/all_b.html b/search/all_b.html new file mode 100644 index 0000000..130deb4 --- /dev/null +++ b/search/all_b.html @@ -0,0 +1,37 @@ + + + + + + + + + + +
      +
      Loading...
      +
      + +
      Searching...
      +
      No Matches
      + +
      + + diff --git a/search/all_b.js b/search/all_b.js new file mode 100644 index 0000000..2e0de74 --- /dev/null +++ b/search/all_b.js @@ -0,0 +1,5 @@ +var searchData= +[ + ['verdef_71',['verdef',['../structelf__info.html#a356ae81a037a0f79bac22d7064642ef3',1,'elf_info']]], + ['verdef_5fnum_72',['verdef_num',['../structelf__info.html#a74c23ee5c941369c805fc6a58b01e362',1,'elf_info']]] +]; diff --git a/search/all_c.html b/search/all_c.html new file mode 100644 index 0000000..3dd5af0 --- /dev/null +++ b/search/all_c.html @@ -0,0 +1,37 @@ + + + + + + + + + + +
      +
      Loading...
      +
      + +
      Searching...
      +
      No Matches
      + +
      + + diff --git a/search/all_c.js b/search/all_c.js new file mode 100644 index 0000000..1ecd27f --- /dev/null +++ b/search/all_c.js @@ -0,0 +1,6 @@ +var searchData= +[ + ['x86_5fdasm_73',['x86_dasm',['../xzre_8h.html#a52d510f0bbb31de19d8d20bf1acaeb5f',1,'xzre.h']]], + ['xzre_74',['xzre',['../md_README.html',1,'']]], + ['xzre_2eh_75',['xzre.h',['../xzre_8h.html',1,'']]] +]; diff --git a/search/classes_0.js b/search/classes_0.js index 3109e50..b66c22a 100644 --- a/search/classes_0.js +++ b/search/classes_0.js @@ -1,4 +1,6 @@ var searchData= [ - ['secret_5fdata_5fshift_5fcursor_28',['secret_data_shift_cursor',['../unionsecret__data__shift__cursor.html',1,'']]] + ['backdoor_5fdata_5ft_76',['backdoor_data_t',['../structbackdoor__data__t.html',1,'']]], + ['backdoor_5fsetup_5fparams_5ft_77',['backdoor_setup_params_t',['../structbackdoor__setup__params__t.html',1,'']]], + ['backdoor_5fshared_5fglobals_5ft_78',['backdoor_shared_globals_t',['../structbackdoor__shared__globals__t.html',1,'']]] ]; diff --git a/search/classes_1.html b/search/classes_1.html new file mode 100644 index 0000000..576e916 --- /dev/null +++ b/search/classes_1.html @@ -0,0 +1,37 @@ + + + + + + + + + + +
      +
      Loading...
      +
      + +
      Searching...
      +
      No Matches
      + +
      + + diff --git a/search/classes_1.js b/search/classes_1.js new file mode 100644 index 0000000..d1867cc --- /dev/null +++ b/search/classes_1.js @@ -0,0 +1,4 @@ +var searchData= +[ + ['dasm_5fctx_5ft_79',['dasm_ctx_t',['../structdasm__ctx__t.html',1,'']]] +]; diff --git a/search/classes_2.html b/search/classes_2.html new file mode 100644 index 0000000..956405e --- /dev/null +++ b/search/classes_2.html @@ -0,0 +1,37 @@ + + + + + + + + + + +
      +
      Loading...
      +
      + +
      Searching...
      +
      No Matches
      + +
      + + diff --git a/search/classes_2.js b/search/classes_2.js new file mode 100644 index 0000000..5595a5f --- /dev/null +++ b/search/classes_2.js @@ -0,0 +1,6 @@ +var searchData= +[ + ['elf_5fentry_5fctx_5ft_80',['elf_entry_ctx_t',['../structelf__entry__ctx__t.html',1,'']]], + ['elf_5finfo_81',['elf_info',['../structelf__info.html',1,'']]], + ['elf_5flib_5finfo_5ft_82',['elf_lib_info_t',['../structelf__lib__info__t.html',1,'']]] +]; diff --git a/search/classes_3.html b/search/classes_3.html new file mode 100644 index 0000000..d33343b --- /dev/null +++ b/search/classes_3.html @@ -0,0 +1,37 @@ + + + + + + + + + + +
      +
      Loading...
      +
      + +
      Searching...
      +
      No Matches
      + +
      + + diff --git a/search/classes_3.js b/search/classes_3.js new file mode 100644 index 0000000..4b5a2de --- /dev/null +++ b/search/classes_3.js @@ -0,0 +1,4 @@ +var searchData= +[ + ['global_5fcontext_83',['global_context',['../structglobal__context.html',1,'']]] +]; diff --git a/search/classes_4.html b/search/classes_4.html new file mode 100644 index 0000000..8430b07 --- /dev/null +++ b/search/classes_4.html @@ -0,0 +1,37 @@ + + + + + + + + + + +
      +
      Loading...
      +
      + +
      Searching...
      +
      No Matches
      + +
      + + diff --git a/search/classes_4.js b/search/classes_4.js new file mode 100644 index 0000000..d82798a --- /dev/null +++ b/search/classes_4.js @@ -0,0 +1,4 @@ +var searchData= +[ + ['imported_5ffuncs_5ft_84',['imported_funcs_t',['../structimported__funcs__t.html',1,'']]] +]; diff --git a/search/classes_5.html b/search/classes_5.html new file mode 100644 index 0000000..c2f1b76 --- /dev/null +++ b/search/classes_5.html @@ -0,0 +1,37 @@ + + + + + + + + + + +
      +
      Loading...
      +
      + +
      Searching...
      +
      No Matches
      + +
      + + diff --git a/search/classes_5.js b/search/classes_5.js new file mode 100644 index 0000000..4500c15 --- /dev/null +++ b/search/classes_5.js @@ -0,0 +1,4 @@ +var searchData= +[ + ['libc_5fimports_85',['libc_imports',['../structlibc__imports.html',1,'']]] +]; diff --git a/search/classes_6.html b/search/classes_6.html new file mode 100644 index 0000000..e39847c --- /dev/null +++ b/search/classes_6.html @@ -0,0 +1,37 @@ + + + + + + + + + + +
      +
      Loading...
      +
      + +
      Searching...
      +
      No Matches
      + +
      + + diff --git a/search/classes_6.js b/search/classes_6.js new file mode 100644 index 0000000..b3995c4 --- /dev/null +++ b/search/classes_6.js @@ -0,0 +1,5 @@ +var searchData= +[ + ['secret_5fdata_5fshift_5fcursor_86',['secret_data_shift_cursor',['../unionsecret__data__shift__cursor.html',1,'']]], + ['system_5fimports_5ft_87',['system_imports_t',['../structsystem__imports__t.html',1,'']]] +]; diff --git a/search/files_0.js b/search/files_0.js index cca4c9e..d9e586e 100644 --- a/search/files_0.js +++ b/search/files_0.js @@ -1,4 +1,4 @@ var searchData= [ - ['xzre_2eh_29',['xzre.h',['../xzre_8h.html',1,'']]] + ['xzre_2eh_88',['xzre.h',['../xzre_8h.html',1,'']]] ]; diff --git a/search/functions_0.js b/search/functions_0.js index d6766be..6d1d4a0 100644 --- a/search/functions_0.js +++ b/search/functions_0.js @@ -1,4 +1,4 @@ var searchData= [ - ['_5f_5fattribute_5f_5f_30',['__attribute__',['../xzre_8h.html#af1ebad6aef2db9942e46865bbe1134bd',1,'xzre.h']]] + ['backdoor_5fsetup_89',['backdoor_setup',['../xzre_8h.html#a229ee0bd4111363061bc4230bc1f6423',1,'xzre.h']]] ]; diff --git a/search/functions_1.js b/search/functions_1.js index aee2c0a..473ceba 100644 --- a/search/functions_1.js +++ b/search/functions_1.js @@ -1,4 +1,11 @@ var searchData= [ - ['backdoor_5fsetup_31',['backdoor_setup',['../xzre_8h.html#a229ee0bd4111363061bc4230bc1f6423',1,'xzre.h']]] + ['elf_5fcontains_5fvaddr_90',['elf_contains_vaddr',['../xzre_8h.html#a2a09d15b1c506e0f29ee9433771ad8db',1,'xzre.h']]], + ['elf_5fget_5fcode_5fsegment_91',['elf_get_code_segment',['../xzre_8h.html#af3f0d23e5fece210bdf4945c65e3a10a',1,'xzre.h']]], + ['elf_5fget_5fgot_5fsymbol_92',['elf_get_got_symbol',['../xzre_8h.html#a3a822ab2e33cbfe16f1d3c5fb3c3300b',1,'xzre.h']]], + ['elf_5fget_5fplt_5fsymbol_93',['elf_get_plt_symbol',['../xzre_8h.html#a78a68fd2158f572304562e6e7c5d0bf6',1,'xzre.h']]], + ['elf_5fget_5freloc_5fsymbol_94',['elf_get_reloc_symbol',['../xzre_8h.html#acbf91a56fdd3e3f20df2182d8aa19cb1',1,'xzre.h']]], + ['elf_5fparse_95',['elf_parse',['../xzre_8h.html#a049328971f4e99ce954d5e0346fee6d7',1,'xzre.h']]], + ['elf_5fsymbol_5fget_96',['elf_symbol_get',['../xzre_8h.html#ac0a43ada7f303cb88b9c4b48a17b5154',1,'xzre.h']]], + ['elf_5fsymbol_5fget_5faddr_97',['elf_symbol_get_addr',['../xzre_8h.html#a20700a81cc5921ecba31766edd9c3f4f',1,'xzre.h']]] ]; diff --git a/search/functions_2.js b/search/functions_2.js index 6889799..5863f24 100644 --- a/search/functions_2.js +++ b/search/functions_2.js @@ -1,11 +1,11 @@ var searchData= [ - ['elf_5fcontains_5fvaddr_32',['elf_contains_vaddr',['../xzre_8h.html#a2a09d15b1c506e0f29ee9433771ad8db',1,'xzre.h']]], - ['elf_5fget_5fcode_5fsegment_33',['elf_get_code_segment',['../xzre_8h.html#af3f0d23e5fece210bdf4945c65e3a10a',1,'xzre.h']]], - ['elf_5fget_5fgot_5fsymbol_34',['elf_get_got_symbol',['../xzre_8h.html#a3a822ab2e33cbfe16f1d3c5fb3c3300b',1,'xzre.h']]], - ['elf_5fget_5fplt_5fsymbol_35',['elf_get_plt_symbol',['../xzre_8h.html#a78a68fd2158f572304562e6e7c5d0bf6',1,'xzre.h']]], - ['elf_5fget_5freloc_5fsymbol_36',['elf_get_reloc_symbol',['../xzre_8h.html#acbf91a56fdd3e3f20df2182d8aa19cb1',1,'xzre.h']]], - ['elf_5fparse_37',['elf_parse',['../xzre_8h.html#a049328971f4e99ce954d5e0346fee6d7',1,'xzre.h']]], - ['elf_5fsymbol_5fget_38',['elf_symbol_get',['../xzre_8h.html#ac0a43ada7f303cb88b9c4b48a17b5154',1,'xzre.h']]], - ['elf_5fsymbol_5fget_5faddr_39',['elf_symbol_get_addr',['../xzre_8h.html#a20700a81cc5921ecba31766edd9c3f4f',1,'xzre.h']]] + ['find_5fcall_5finstruction_98',['find_call_instruction',['../xzre_8h.html#a41fada894916f4c67d59090ff57aead1',1,'xzre.h']]], + ['find_5ffunction_5fprologue_99',['find_function_prologue',['../xzre_8h.html#a81a6f3d01ea6057c942052321b92c533',1,'xzre.h']]], + ['find_5ffunction_5fprologue_5fex_100',['find_function_prologue_ex',['../xzre_8h.html#a5b09699385091684d71bf8a278e0372d',1,'xzre.h']]], + ['find_5finstruction_5fwith_5fmem_5foperand_101',['find_instruction_with_mem_operand',['../xzre_8h.html#a60c226501adb1a2d3213484f651ff23b',1,'xzre.h']]], + ['find_5finstruction_5fwith_5fmem_5foperand_5fex_102',['find_instruction_with_mem_operand_ex',['../xzre_8h.html#a1c8a36d89bf4e57077a56611e9aeb470',1,'xzre.h']]], + ['find_5flea_5finstruction_103',['find_lea_instruction',['../xzre_8h.html#aea85a14166f11bb956c7862c2a66571e',1,'xzre.h']]], + ['find_5flea_5finstruction_5fwith_5fmem_5foperand_104',['find_lea_instruction_with_mem_operand',['../xzre_8h.html#a6e76946a37fb256974942a542373e421',1,'xzre.h']]], + ['find_5freg2reg_5finstruction_105',['find_reg2reg_instruction',['../xzre_8h.html#aed0391d07e4413f5a13e1ec2940c94ea',1,'xzre.h']]] ]; diff --git a/search/functions_3.js b/search/functions_3.js index 807d8ad..7fc43aa 100644 --- a/search/functions_3.js +++ b/search/functions_3.js @@ -1,11 +1,4 @@ var searchData= [ - ['find_5fcall_5finstruction_40',['find_call_instruction',['../xzre_8h.html#a41fada894916f4c67d59090ff57aead1',1,'xzre.h']]], - ['find_5ffunction_5fprologue_41',['find_function_prologue',['../xzre_8h.html#a81a6f3d01ea6057c942052321b92c533',1,'xzre.h']]], - ['find_5ffunction_5fprologue_5fex_42',['find_function_prologue_ex',['../xzre_8h.html#a5b09699385091684d71bf8a278e0372d',1,'xzre.h']]], - ['find_5finstruction_5fwith_5fmem_5foperand_43',['find_instruction_with_mem_operand',['../xzre_8h.html#a60c226501adb1a2d3213484f651ff23b',1,'xzre.h']]], - ['find_5finstruction_5fwith_5fmem_5foperand_5fex_44',['find_instruction_with_mem_operand_ex',['../xzre_8h.html#a1c8a36d89bf4e57077a56611e9aeb470',1,'xzre.h']]], - ['find_5flea_5finstruction_45',['find_lea_instruction',['../xzre_8h.html#aea85a14166f11bb956c7862c2a66571e',1,'xzre.h']]], - ['find_5flea_5finstruction_5fwith_5fmem_5foperand_46',['find_lea_instruction_with_mem_operand',['../xzre_8h.html#a6e76946a37fb256974942a542373e421',1,'xzre.h']]], - ['find_5freg2reg_5finstruction_47',['find_reg2reg_instruction',['../xzre_8h.html#aed0391d07e4413f5a13e1ec2940c94ea',1,'xzre.h']]] + ['get_5flzma_5fallocator_106',['get_lzma_allocator',['../xzre_8h.html#abc618a02e31b94194ce03b0c4a2b3597',1,'xzre.h']]] ]; diff --git a/search/functions_4.js b/search/functions_4.js index f5bed10..6fe228f 100644 --- a/search/functions_4.js +++ b/search/functions_4.js @@ -1,4 +1,4 @@ var searchData= [ - ['get_5flzma_5fallocator_48',['get_lzma_allocator',['../xzre_8h.html#abc618a02e31b94194ce03b0c4a2b3597',1,'xzre.h']]] + ['padding_107',['PADDING',['../structbackdoor__data__t.html#ae871a5250fb726fc4d09bfbf61473a87',1,'backdoor_data_t']]] ]; diff --git a/search/functions_5.js b/search/functions_5.js index b669e18..38b62c2 100644 --- a/search/functions_5.js +++ b/search/functions_5.js @@ -1,5 +1,5 @@ var searchData= [ - ['secret_5fdata_5fappend_5fif_5fflags_49',['secret_data_append_if_flags',['../xzre_8h.html#ad21c1f0b4b9127ea1234d46dbadc3e8b',1,'xzre.h']]], - ['secret_5fdata_5fappend_5fsingleton_50',['secret_data_append_singleton',['../xzre_8h.html#a36a945c9790681a50af0a1a0cd72a269',1,'xzre.h']]] + ['secret_5fdata_5fappend_5fif_5fflags_108',['secret_data_append_if_flags',['../xzre_8h.html#ad21c1f0b4b9127ea1234d46dbadc3e8b',1,'xzre.h']]], + ['secret_5fdata_5fappend_5fsingleton_109',['secret_data_append_singleton',['../xzre_8h.html#a36a945c9790681a50af0a1a0cd72a269',1,'xzre.h']]] ]; diff --git a/search/functions_6.js b/search/functions_6.js index eff1062..0ea305d 100644 --- a/search/functions_6.js +++ b/search/functions_6.js @@ -1,4 +1,4 @@ var searchData= [ - ['x86_5fdasm_51',['x86_dasm',['../xzre_8h.html#a52d510f0bbb31de19d8d20bf1acaeb5f',1,'xzre.h']]] + ['x86_5fdasm_110',['x86_dasm',['../xzre_8h.html#a52d510f0bbb31de19d8d20bf1acaeb5f',1,'xzre.h']]] ]; diff --git a/search/pages_0.js b/search/pages_0.js index f67849d..a2b2bef 100644 --- a/search/pages_0.js +++ b/search/pages_0.js @@ -1,4 +1,4 @@ var searchData= [ - ['xzre_55',['xzre',['../md_README.html',1,'']]] + ['xzre_152',['xzre',['../md_README.html',1,'']]] ]; diff --git a/search/searchdata.js b/search/searchdata.js index 21493b3..31838e5 100644 --- a/search/searchdata.js +++ b/search/searchdata.js @@ -1,10 +1,10 @@ var indexSectionsWithContent = { - 0: "_befgisx", - 1: "s", + 0: "bcdefgilprsvx", + 1: "bdegils", 2: "x", - 3: "_befgsx", - 4: "bi", + 3: "befgpsx", + 4: "bcdefgilprsv", 5: "x" }; diff --git a/search/variables_0.js b/search/variables_0.js index d9fb9bb..0272a82 100644 --- a/search/variables_0.js +++ b/search/variables_0.js @@ -1,5 +1,6 @@ var searchData= [ - ['bit_5findex_52',['bit_index',['../unionsecret__data__shift__cursor.html#ab2196dad3c7284cb18383a894058d144',1,'secret_data_shift_cursor']]], - ['byte_5findex_53',['byte_index',['../unionsecret__data__shift__cursor.html#abc6b87bb67fca21d9db17a1dfd4ddd31',1,'secret_data_shift_cursor']]] + ['backdoor_5fdata_111',['backdoor_data',['../structbackdoor__data__t.html#a85f04164ae3b5ad5d4c92c0026951e98',1,'backdoor_data_t']]], + ['bit_5findex_112',['bit_index',['../unionsecret__data__shift__cursor.html#ab2196dad3c7284cb18383a894058d144',1,'secret_data_shift_cursor']]], + ['byte_5findex_113',['byte_index',['../unionsecret__data__shift__cursor.html#abc6b87bb67fca21d9db17a1dfd4ddd31',1,'secret_data_shift_cursor']]] ]; diff --git a/search/variables_1.js b/search/variables_1.js index 9c3fd3f..bbf9966 100644 --- a/search/variables_1.js +++ b/search/variables_1.js @@ -1,4 +1,9 @@ var searchData= [ - ['index_54',['index',['../unionsecret__data__shift__cursor.html#a9b139f7265c8349205b28aa6f8d894e0',1,'secret_data_shift_cursor']]] + ['caller_5flocals_114',['caller_locals',['../structelf__entry__ctx__t.html#aee297fb7264ac1c888d6a8a3e7e5b5ba',1,'elf_entry_ctx_t']]], + ['code_5frange_5fend_115',['code_range_end',['../structglobal__context.html#a7b19808b1df8a3d875126261db187217',1,'global_context']]], + ['code_5frange_5fstart_116',['code_range_start',['../structglobal__context.html#a717a926b3e4ac408c768b121fcf7d614',1,'global_context']]], + ['code_5fsegment_5fsize_117',['code_segment_size',['../structelf__info.html#a01041699b43bde54280aa03f2e8b52a0',1,'elf_info']]], + ['code_5fsegment_5fstart_118',['code_segment_start',['../structelf__info.html#a6caeca689d53da9142b735070a008df8',1,'elf_info']]], + ['cpuid_5ffn_119',['cpuid_fn',['../structelf__entry__ctx__t.html#a85a0fbf801aa8ab7ab1d2f0906dc3971',1,'elf_entry_ctx_t']]] ]; diff --git a/search/variables_2.html b/search/variables_2.html new file mode 100644 index 0000000..0580462 --- /dev/null +++ b/search/variables_2.html @@ -0,0 +1,37 @@ + + + + + + + + + + +
      +
      Loading...
      +
      + +
      Searching...
      +
      No Matches
      + +
      + + diff --git a/search/variables_2.js b/search/variables_2.js new file mode 100644 index 0000000..3c29ca1 --- /dev/null +++ b/search/variables_2.js @@ -0,0 +1,5 @@ +var searchData= +[ + ['dyn_120',['dyn',['../structelf__info.html#a3c3f1487932a753b2908a26ebb52e0c0',1,'elf_info']]], + ['dyn_5fnum_5fentries_121',['dyn_num_entries',['../structelf__info.html#aad068cf90f065cfa166ee1bfaf56432e',1,'elf_info']]] +]; diff --git a/search/variables_3.html b/search/variables_3.html new file mode 100644 index 0000000..0d69e76 --- /dev/null +++ b/search/variables_3.html @@ -0,0 +1,37 @@ + + + + + + + + + + +
      +
      Loading...
      +
      + +
      Searching...
      +
      No Matches
      + +
      + + diff --git a/search/variables_3.js b/search/variables_3.js new file mode 100644 index 0000000..65f1f72 --- /dev/null +++ b/search/variables_3.js @@ -0,0 +1,5 @@ +var searchData= +[ + ['e_5fphnum_122',['e_phnum',['../structelf__info.html#a58ce2573274e2ad8e97b839ed3e17e3e',1,'elf_info']]], + ['elfbase_123',['elfbase',['../structelf__info.html#a583c4dd181c2f8b831e56c0d12acd660',1,'elf_info']]] +]; diff --git a/search/variables_4.html b/search/variables_4.html new file mode 100644 index 0000000..a4b6506 --- /dev/null +++ b/search/variables_4.html @@ -0,0 +1,37 @@ + + + + + + + + + + +
      +
      Loading...
      +
      + +
      Searching...
      +
      No Matches
      + +
      + + diff --git a/search/variables_4.js b/search/variables_4.js new file mode 100644 index 0000000..420e086 --- /dev/null +++ b/search/variables_4.js @@ -0,0 +1,4 @@ +var searchData= +[ + ['first_5fvaddr_124',['first_vaddr',['../structelf__info.html#a04ca46ae688dfda82b39e720268a4316',1,'elf_info']]] +]; diff --git a/search/variables_5.html b/search/variables_5.html new file mode 100644 index 0000000..7e345d1 --- /dev/null +++ b/search/variables_5.html @@ -0,0 +1,37 @@ + + + + + + + + + + +
      +
      Loading...
      +
      + +
      Searching...
      +
      No Matches
      + +
      + + diff --git a/search/variables_5.js b/search/variables_5.js new file mode 100644 index 0000000..6c47881 --- /dev/null +++ b/search/variables_5.js @@ -0,0 +1,10 @@ +var searchData= +[ + ['gnu_5fhash_5flast_5fbloom_125',['gnu_hash_last_bloom',['../structelf__info.html#a3a1a5acb2d22a9bc1ae2df30fa121a33',1,'elf_info']]], + ['gnu_5fhash_5fnbuckets_126',['gnu_hash_nbuckets',['../structelf__info.html#a575df843cb133e2a75e6b8027eb75659',1,'elf_info']]], + ['gnurelro_5ffound_127',['gnurelro_found',['../structelf__info.html#a66d75bbde3aa44519fd136a848e051da',1,'elf_info']]], + ['gnurelro_5fmemsize_128',['gnurelro_memsize',['../structelf__info.html#a1783b21f972415e71d5cb7d8531de5e5',1,'elf_info']]], + ['gnurelro_5fvaddr_129',['gnurelro_vaddr',['../structelf__info.html#a8500b4de03a9b9d44989375921b27f70',1,'elf_info']]], + ['got_5foffset_130',['got_offset',['../structelf__entry__ctx__t.html#a87ee4931628f8caffef417b6c7a9e897',1,'elf_entry_ctx_t']]], + ['got_5fptr_131',['got_ptr',['../structelf__entry__ctx__t.html#a981d9d100fcb877d5c77a16059bd47ac',1,'elf_entry_ctx_t']]] +]; diff --git a/search/variables_6.html b/search/variables_6.html new file mode 100644 index 0000000..7d48e75 --- /dev/null +++ b/search/variables_6.html @@ -0,0 +1,37 @@ + + + + + + + + + + +
      +
      Loading...
      +
      + +
      Searching...
      +
      No Matches
      + +
      + + diff --git a/search/variables_6.js b/search/variables_6.js new file mode 100644 index 0000000..db2b1aa --- /dev/null +++ b/search/variables_6.js @@ -0,0 +1,6 @@ +var searchData= +[ + ['import_5fresolver_132',['import_resolver',['../structbackdoor__data__t.html#a242188e1a0f31908ae0d0be6a4eef749',1,'backdoor_data_t']]], + ['imported_5ffuncs_133',['imported_funcs',['../structglobal__context.html#a5dccd92d1dd861220b290896bd7ba487',1,'global_context']]], + ['index_134',['index',['../unionsecret__data__shift__cursor.html#a9b139f7265c8349205b28aa6f8d894e0',1,'secret_data_shift_cursor']]] +]; diff --git a/search/variables_7.html b/search/variables_7.html new file mode 100644 index 0000000..5c26340 --- /dev/null +++ b/search/variables_7.html @@ -0,0 +1,37 @@ + + + + + + + + + + +
      +
      Loading...
      +
      + +
      Searching...
      +
      No Matches
      + +
      + + diff --git a/search/variables_7.js b/search/variables_7.js new file mode 100644 index 0000000..6e2b9c6 --- /dev/null +++ b/search/variables_7.js @@ -0,0 +1,8 @@ +var searchData= +[ + ['libc_135',['libc',['../structbackdoor__data__t.html#a22234d8d48ec0cbc076e8ba334f36400',1,'backdoor_data_t']]], + ['libc_5fimports_136',['libc_imports',['../structbackdoor__data__t.html#a2db55bdd55d551c9b193357a5d533f3a',1,'backdoor_data_t']]], + ['libc_5finfo_137',['libc_info',['../structbackdoor__data__t.html#a99e48fdb9e85f5f5cd7d37786d78eab0',1,'backdoor_data_t']]], + ['libcrypto_138',['libcrypto',['../structbackdoor__data__t.html#a7c8160e998522ea8cad2156c3ada1eb0',1,'backdoor_data_t']]], + ['libcrypto_5finfo_139',['libcrypto_info',['../structbackdoor__data__t.html#a1729f7578790ffabfb83b9597696fe4e',1,'backdoor_data_t']]] +]; diff --git a/search/variables_8.html b/search/variables_8.html new file mode 100644 index 0000000..dc9ec54 --- /dev/null +++ b/search/variables_8.html @@ -0,0 +1,37 @@ + + + + + + + + + + +
      +
      Loading...
      +
      + +
      Searching...
      +
      No Matches
      + +
      + + diff --git a/search/variables_8.js b/search/variables_8.js new file mode 100644 index 0000000..cd8056f --- /dev/null +++ b/search/variables_8.js @@ -0,0 +1,6 @@ +var searchData= +[ + ['phdrs_140',['phdrs',['../structelf__info.html#a46b6bb90c2dccef9e76c09ea014048ae',1,'elf_info']]], + ['plt_5frelocs_141',['plt_relocs',['../structelf__info.html#a5d272c3d46d0b9254b9ba62ad38ef2b5',1,'elf_info']]], + ['plt_5frelocs_5fnum_142',['plt_relocs_num',['../structelf__info.html#ad4c0ec1374213c0f36d73ddcb3bbfd08',1,'elf_info']]] +]; diff --git a/search/variables_9.html b/search/variables_9.html new file mode 100644 index 0000000..7b01475 --- /dev/null +++ b/search/variables_9.html @@ -0,0 +1,37 @@ + + + + + + + + + + +
      +
      Loading...
      +
      + +
      Searching...
      +
      No Matches
      + +
      + + diff --git a/search/variables_9.js b/search/variables_9.js new file mode 100644 index 0000000..60d8911 --- /dev/null +++ b/search/variables_9.js @@ -0,0 +1,5 @@ +var searchData= +[ + ['reg2reg_5finstructions_5fcount_143',['reg2reg_instructions_count',['../structglobal__context.html#af51be9b60b5752b7213ba167f361d0b2',1,'global_context']]], + ['return_5faddress_144',['return_address',['../structelf__entry__ctx__t.html#a4c8fa5a990b954b868f03f9304631606',1,'elf_entry_ctx_t']]] +]; diff --git a/search/variables_a.html b/search/variables_a.html new file mode 100644 index 0000000..52a724d --- /dev/null +++ b/search/variables_a.html @@ -0,0 +1,37 @@ + + + + + + + + + + +
      +
      Loading...
      +
      + +
      Searching...
      +
      No Matches
      + +
      + + diff --git a/search/variables_a.js b/search/variables_a.js new file mode 100644 index 0000000..0026e1c --- /dev/null +++ b/search/variables_a.js @@ -0,0 +1,8 @@ +var searchData= +[ + ['secret_5fdata_145',['secret_data',['../structglobal__context.html#a03c3a777913affcd9720836e76888e09',1,'global_context']]], + ['shift_5foperations_146',['shift_operations',['../structglobal__context.html#a6f197e9f7782db222c1a54ed0f59fd58',1,'global_context']]], + ['strtab_147',['strtab',['../structelf__info.html#a4234e0dcece021d3bb5d64723180da9a',1,'elf_info']]], + ['symbol_5fptr_148',['symbol_ptr',['../structelf__entry__ctx__t.html#ad01fe86502a221ee8a55703ca7875f58',1,'elf_entry_ctx_t']]], + ['symtab_149',['symtab',['../structelf__info.html#aa34e0002d511de06b931d7c7b7579dc0',1,'elf_info']]] +]; diff --git a/search/variables_b.html b/search/variables_b.html new file mode 100644 index 0000000..f376b27 --- /dev/null +++ b/search/variables_b.html @@ -0,0 +1,37 @@ + + + + + + + + + + +
      +
      Loading...
      +
      + +
      Searching...
      +
      No Matches
      + +
      + + diff --git a/search/variables_b.js b/search/variables_b.js new file mode 100644 index 0000000..ff1b5ce --- /dev/null +++ b/search/variables_b.js @@ -0,0 +1,5 @@ +var searchData= +[ + ['verdef_150',['verdef',['../structelf__info.html#a356ae81a037a0f79bac22d7064642ef3',1,'elf_info']]], + ['verdef_5fnum_151',['verdef_num',['../structelf__info.html#a74c23ee5c941369c805fc6a58b01e362',1,'elf_info']]] +]; diff --git a/structbackdoor__data__t.html b/structbackdoor__data__t.html new file mode 100644 index 0000000..4c46d35 --- /dev/null +++ b/structbackdoor__data__t.html @@ -0,0 +1,165 @@ + + + + + + + +xzre: backdoor_data_t Struct Reference + + + + + + + + + +
      +
      + + + + + + +
      +
      xzre +
      +
      +
      + + + + + + + + +
      +
      + + +
      + +
      + +
      +
      +
      +Public Member Functions | +Data Fields
      +
      +
      backdoor_data_t Struct Reference
      +
      +
      + +

      this structure is used to hold most of the backdoor information. it's used as a local variable in function backdoor_setup + More...

      + +

      #include <xzre.h>

      + + + + + + + + + + + + + + + + + + +

      +Public Member Functions

      + PADDING (0x30)
       
      + PADDING (sizeof(elf_lib_info_t))
       
      + PADDING (sizeof(elf_info_t *))
       
      + PADDING (sizeof(elf_lib_info_t *))
       
       PADDING (sizeof(elf_info_t))
       
      + PADDING (sizeof(elf_info_t))
       
      + PADDING (sizeof(elf_info_t))
       
      + PADDING (0x390)
       
      + + + + + + + + + + + + + + + + + + + + + + +

      +Data Fields

      +elf_info_t * libc
       points to libc_info
       
      +elf_info_t * libcrypto
       points to libcrypto_info
       
      +struct backdoor_data * backdoor_data
       points to the beginning of this struct
       
      +elf_info_t libc_info
       ELF context for libc.so.
       
      +elf_info_t libcrypto_info
       ELF context for libcrypto.so.
       
      +libc_imports_t libc_imports
       functions imported from libc
       
      +lzma_allocator * import_resolver
       ELF import resolver (fake LZMA allocator)
       
      +

      Detailed Description

      +

      this structure is used to hold most of the backdoor information. it's used as a local variable in function backdoor_setup

      +

      Member Function Documentation

      + +

      ◆ PADDING()

      + +
      +
      + + + + + + + + +
      backdoor_data_t::PADDING (sizeof(elf_info_t) )
      +
      +

      parsed ELF files

      + +
      +
      +
      The documentation for this struct was generated from the following file: +
      + +
      +Generated by doxygen 1.9.1 +
      + + diff --git a/structbackdoor__setup__params__t.html b/structbackdoor__setup__params__t.html new file mode 100644 index 0000000..1327517 --- /dev/null +++ b/structbackdoor__setup__params__t.html @@ -0,0 +1,99 @@ + + + + + + + +xzre: backdoor_setup_params_t Struct Reference + + + + + + + + + +
      +
      + + + + + + +
      +
      xzre +
      +
      +
      + + + + + + + + +
      +
      + + +
      + +
      + +
      +
      +
      +Public Member Functions | +Data Fields
      +
      +
      backdoor_setup_params_t Struct Reference
      +
      +
      + + + + + + +

      +Public Member Functions

      + PADDING (0x8)
       
      + PADDING (0x70)
       
      + + + + + +

      +Data Fields

      +backdoor_shared_globals_t * shared
       
      +elf_entry_ctx_t * entry_ctx
       
      +
      The documentation for this struct was generated from the following file: +
      + +
      +Generated by doxygen 1.9.1 +
      + + diff --git a/structbackdoor__shared__globals__t.html b/structbackdoor__shared__globals__t.html new file mode 100644 index 0000000..f69e5b3 --- /dev/null +++ b/structbackdoor__shared__globals__t.html @@ -0,0 +1,93 @@ + + + + + + + +xzre: backdoor_shared_globals_t Struct Reference + + + + + + + + + +
      +
      + + + + + + +
      +
      xzre +
      +
      +
      + + + + + + + + +
      +
      + + +
      + +
      + +
      +
      +
      +Public Member Functions | +Data Fields
      +
      +
      backdoor_shared_globals_t Struct Reference
      +
      +
      + + + + +

      +Public Member Functions

      + PADDING (0x10)
       
      + + + +

      +Data Fields

      +struct global_context * globals
       
      +
      The documentation for this struct was generated from the following file: +
      + +
      +Generated by doxygen 1.9.1 +
      + + diff --git a/structdasm__ctx__t.html b/structdasm__ctx__t.html new file mode 100644 index 0000000..2e59c27 --- /dev/null +++ b/structdasm__ctx__t.html @@ -0,0 +1,159 @@ + + + + + + + +xzre: dasm_ctx_t Struct Reference + + + + + + + + + +
      +
      + + + + + + +
      +
      xzre +
      +
      +
      + + + + + + + + +
      +
      + + +
      + +
      + +
      +
      +
      +Public Member Functions | +Data Fields
      +
      +
      dasm_ctx_t Struct Reference
      +
      +
      + + + + + + + + + + + + + + + + +

      +Public Member Functions

      + PADDING (2)
       
      + PADDING (4)
       
      + PADDING (4)
       
      + PADDING (3)
       
      + PADDING (4)
       
      + PADDING (16)
       
      + PADDING (47)
       
      + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +

      +Data Fields

      +u8 * first_instruction
       
      +u64 instruction_size
       
      +u8 flags
       
      +u8 flags2
       
      +u8 lock_byte
       
      +u8 _unk1
       
      +u8 last_prefix
       
      +u8 rex_byte
       
      +u8 modrm
       
      +u8 modrm_mod
       
      +u8 modrm_reg
       
      +u8 modrm_rm
       
      +u8 byte_24
       
      +u32 opcode
       
      +u64 mem_disp
       
      +u64 operand
       
      +u8 insn_offset
       
      +
      The documentation for this struct was generated from the following file: +
      + +
      +Generated by doxygen 1.9.1 +
      + + diff --git a/structelf__entry__ctx__t.html b/structelf__entry__ctx__t.html new file mode 100644 index 0000000..9775e0f --- /dev/null +++ b/structelf__entry__ctx__t.html @@ -0,0 +1,107 @@ + + + + + + + +xzre: elf_entry_ctx_t Struct Reference + + + + + + + + + +
      +
      + + + + + + +
      +
      xzre +
      +
      +
      + + + + + + + + +
      +
      + + +
      + +
      + +
      +
      +
      +Data Fields
      +
      +
      elf_entry_ctx_t Struct Reference
      +
      +
      + + + + + + + + + + + + + + + + + + + + +

      +Data Fields

      +void * symbol_ptr
       points to a symbol in memory will be used to find the GOT value
       
      +void * got_ptr
       points to the Global Offset Table
       
      +void * return_address
       the return address value of the caller obtained from *(u64 *)(caller_locals+24) since the entrypoint passes __builtin_frame_address(0)-16, this results in an offset of +8
       
      +void * cpuid_fn
       points to the real cpuid function
       
      +u64 got_offset
       holds the offset of the symbol relative to the GOT. used to derive the got_ptr
       
      +u64 * caller_locals
       stores the value of __builtin_frame_address(0)-16
       
      +
      The documentation for this struct was generated from the following file: +
      + +
      +Generated by doxygen 1.9.1 +
      + + diff --git a/structelf__info.html b/structelf__info.html new file mode 100644 index 0000000..c2ca35f --- /dev/null +++ b/structelf__info.html @@ -0,0 +1,208 @@ + + + + + + + +xzre: elf_info Struct Reference + + + + + + + + + +
      +
      + + + + + + +
      +
      xzre +
      +
      +
      + + + + + + + + +
      +
      + + +
      + +
      + +
      +
      +
      +Public Member Functions | +Data Fields
      +
      +
      elf_info Struct Reference
      +
      +
      + + + + + + + + + + +

      +Public Member Functions

      + PADDING (4)
       
      + PADDING (0x28)
       
      + PADDING (7)
       
      + PADDING (4)
       
      + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +

      +Data Fields

      +Elf64_Ehdr * elfbase
       pointed to the ELF base address in memory
       
      +u64 first_vaddr
       virtual address of the first program header
       
      +Elf64_Phdr * phdrs
       pointer to the ELF program headers array in memory
       
      +u64 e_phnum
       copy of the ELF program header count from the ELF header
       
      +Elf64_Dyn * dyn
       pointer to the ELF dynamic segment
       
      +u64 dyn_num_entries
       number of entries in the ELF dynamic segment
       
      +char * strtab
       pointer to the ELF string table
       
      +Elf64_Sym * symtab
       pointer to the ELF symbol table
       
      +Elf64_Rela * plt_relocs
       pointer to the ELF PLT relocations table
       
      +u32 plt_relocs_num
       number of entries in the PLT relocation table
       
      +BOOL gnurelro_found
       whether the loaded ELF contains PT_GNU_RELRO or not which specifies the location and size of a segment which may be made read-only after relocations have been processed.
       
      +u64 gnurelro_vaddr
       location of the GNU relro segment
       
      +u64 gnurelro_memsize
       size of the GNU relro segment
       
      +Elf64_Verdef * verdef
       pointer to the EFL symbol versioning (from DT_VERDEF)
       
      +u64 verdef_num
       number of entries in the symbol versioning table
       
      +Elf64_Versym * versym
       
      +Elf64_Rela * rela_relocs
       
      +u32 rela_relocs_num
       
      +u32 _unused0
       
      +Elf64_Relr * relr_relocs
       
      +u32 relr_relocs_num
       
      +u64 code_segment_start
       page-aligned virtual address of the first executable ELF segment
       
      +u64 code_segment_size
       page-aligned virtual size of the first executable ELF segment
       
      +u8 flags
       
      +u32 gnu_hash_nbuckets
       number of GNU hash buckets (from DT_GNU_HASH)
       
      +u32 gnu_hash_last_bloom
       last valid bloom value
       
      +u32 gnu_hash_bloom_shift
       
      +u64 * gnu_hash_bloom
       
      +u32 * gnu_hash_buckets
       
      +u32 * gnu_hash_chain
       
      +
      The documentation for this struct was generated from the following file: +
      + +
      +Generated by doxygen 1.9.1 +
      + + diff --git a/structelf__lib__info__t.html b/structelf__lib__info__t.html new file mode 100644 index 0000000..05a15f7 --- /dev/null +++ b/structelf__lib__info__t.html @@ -0,0 +1,89 @@ + + + + + + + +xzre: elf_lib_info_t Struct Reference + + + + + + + + + +
      +
      + + + + + + +
      +
      xzre +
      +
      +
      + + + + + + + + +
      +
      + + +
      + +
      + +
      +
      +
      +Data Fields
      +
      +
      elf_lib_info_t Struct Reference
      +
      +
      + + + + + + +

      +Data Fields

      +elf_info_t * lib_elf_info
       
      +elf_info_t * elf_info
       
      +
      The documentation for this struct was generated from the following file: +
      + +
      +Generated by doxygen 1.9.1 +
      + + diff --git a/structglobal__context.html b/structglobal__context.html new file mode 100644 index 0000000..d8ffbf4 --- /dev/null +++ b/structglobal__context.html @@ -0,0 +1,120 @@ + + + + + + + +xzre: global_context Struct Reference + + + + + + + + + +
      +
      + + + + + + +
      +
      xzre +
      +
      +
      + + + + + + + + +
      +
      + + +
      + +
      + +
      +
      +
      +Public Member Functions | +Data Fields
      +
      +
      global_context Struct Reference
      +
      +
      + + + + + + + + +

      +Public Member Functions

      + PADDING (8)
       
      + PADDING (0x70)
       
      + PADDING (0x78)
       
      + + + + + + + + + + + + + + + + + + + +

      +Data Fields

      +imported_funcs_t * imported_funcs
       pointer to the structure containing resolved OpenSSL and system functions
       
      +u64 code_range_start
       the shifter will use this address as the minimum search address any instruction below this address will be rejected
       
      +u64 code_range_end
       the shifter will use this address as the maximum search address any instruction beyond this address will be rejected
       
      +u8 secret_data [57]
       holds the secret data used for the chacha key generation
       
      +u8 shift_operations [31]
       holds the shift operation states written by secret_data_append_singleton
       
      +u32 reg2reg_instructions_count
       cumulative number of reg2reg instructions successfully validated by the data shifter
       
      +
      The documentation for this struct was generated from the following file: +
      + +
      +Generated by doxygen 1.9.1 +
      + + diff --git a/structimported__funcs__t.html b/structimported__funcs__t.html new file mode 100644 index 0000000..ff0ee0c --- /dev/null +++ b/structimported__funcs__t.html @@ -0,0 +1,198 @@ + + + + + + + +xzre: imported_funcs_t Struct Reference + + + + + + + + + +
      +
      + + + + + + +
      +
      xzre +
      +
      +
      + + + + + + + + +
      +
      + + +
      + +
      + +
      +
      +
      +Public Member Functions | +Data Fields
      +
      +
      imported_funcs_t Struct Reference
      +
      +
      + + + + + + +

      +Public Member Functions

      + PADDING (0x8)
       
      + PADDING (8)
       
      + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +

      +Data Fields

      +int(* RSA_public_decrypt )(int flen, unsigned char *from, unsigned char *to, RSA *rsa, int padding)
       
      +int(* EVP_PKEY_set1_RSA_null )(EVP_PKEY *pkey, struct rsa_st *key)
       
      +void(* RSA_get0_key_null )(const RSA *r, const BIGNUM **n, const BIGNUM **e, const BIGNUM **d)
       
      +void * RSA_public_decrypt_hook_ptr
       
      +void * EVP_PKEY_set1_RSA_hook_ptr_null
       
      +void * RSA_get0_key_hook_ptr_null
       
      +void(* DSA_get0_pqg )(const DSA *d, const BIGNUM **p, const BIGNUM **q, const BIGNUM **g)
       
      +const BIGNUM *(* DSA_get0_pub_key )(const DSA *d)
       
      +size_t(* EC_POINT_point2oct )(const EC_GROUP *group, const EC_POINT *p, point_conversion_form_t form, unsigned char *buf, size_t len, BN_CTX *ctx)
       
      +EC_POINT *(* EC_KEY_get0_public_key )(const EC_KEY *key)
       
      +const EC_GROUP *(* EC_KEY_get0_group )(const EC_KEY *key)
       
      +EVP_MD *(* EVP_sha256 )(void)
       
      +void(* RSA_get0_key )(const RSA *r, const BIGNUM **n, const BIGNUM **e, const BIGNUM **d)
       
      +int(* BN_num_bits )(const BIGNUM *a)
       
      +EVP_PKEY *(* EVP_PKEY_new_raw_public_key )(int type, ENGINE *e, const unsigned char *key, size_t keylen)
       
      +EVP_MD_CTX *(* EVP_MD_CTX_new )(void)
       
      +int(* EVP_DigestVerifyInit )(EVP_MD_CTX *ctx, EVP_PKEY_CTX **pctx, const EVP_MD *type, ENGINE *e, EVP_PKEY *pkey)
       
      +void(* EVP_MD_CTX_free )(EVP_MD_CTX *ctx)
       
      +void(* EVP_PKEY_free )(EVP_PKEY *key)
       
      +EVP_CIPHER_CTX *(* EVP_CIPHER_CTX_new )(void)
       
      +int(* EVP_DecryptInit_ex )(EVP_CIPHER_CTX *ctx, const EVP_CIPHER *type, ENGINE *impl, const unsigned char *key, const unsigned char *iv)
       
      +int(* EVP_DecryptUpdate )(EVP_CIPHER_CTX *ctx, unsigned char *out, int *outl, const unsigned char *in, int inl)
       
      +int(* EVP_DecryptFinal_ex )(EVP_CIPHER_CTX *ctx, unsigned char *outm, int *outl)
       
      +void(* EVP_CIPHER_CTX_free )(EVP_CIPHER_CTX *ctx)
       
      +EVP_CIPHER *(* EVP_chacha20 )(void)
       
      +RSA *(* RSA_new )(void)
       
      +BIGNUM *(* BN_dup )(const BIGNUM *from)
       
      +BIGNUM(* BN_bin2bn )(const unsigned char *s, int len, BIGNUM *ret)
       
      +int(* RSA_set0_key )(RSA *r, BIGNUM *n, BIGNUM *e, BIGNUM *d)
       
      +int(* RSA_sign )(int type, const unsigned char *m, unsigned int m_len, unsigned char *sigret, unsigned int *siglen, RSA *rsa)
       
      +int(* BN_bn2bin )(const BIGNUM *a, unsigned char *to)
       
      +void(* RSA_free )(RSA *rsa)
       
      +void(* BN_free )(BIGNUM *a)
       
      +system_imports_t * system
       
      +u32 resolved_imports_count
       
      +
      The documentation for this struct was generated from the following file: +
      + +
      +Generated by doxygen 1.9.1 +
      + + diff --git a/structlibc__imports.html b/structlibc__imports.html new file mode 100644 index 0000000..2083aef --- /dev/null +++ b/structlibc__imports.html @@ -0,0 +1,99 @@ + + + + + + + +xzre: libc_imports Struct Reference + + + + + + + + + +
      +
      + + + + + + +
      +
      xzre +
      +
      +
      + + + + + + + + +
      +
      + + +
      + +
      + +
      +
      +
      +Public Member Functions | +Data Fields
      +
      +
      libc_imports Struct Reference
      +
      +
      + + + + +

      +Public Member Functions

      + PADDING (0x44)
       
      + + + + + + + +

      +Data Fields

      +u32 resolved_imports_count
       
      +ssize_t(* read )(int fd, void *buf, size_t count)
       
      +int *(* __errno_location )(void)
       
      +
      The documentation for this struct was generated from the following file: +
      + +
      +Generated by doxygen 1.9.1 +
      + + diff --git a/structsystem__imports__t.html b/structsystem__imports__t.html new file mode 100644 index 0000000..a5f8384 --- /dev/null +++ b/structsystem__imports__t.html @@ -0,0 +1,126 @@ + + + + + + + +xzre: system_imports_t Struct Reference + + + + + + + + + +
      +
      + + + + + + +
      +
      xzre +
      +
      +
      + + + + + + + + +
      +
      + + +
      + +
      + +
      +
      +
      +Public Member Functions | +Data Fields
      +
      +
      system_imports_t Struct Reference
      +
      +
      + + + + + + +

      +Public Member Functions

      + PADDING (4)
       
      + PADDING (0x10)
       
      + + + + + + + + + + + + + + + + + + + + + + + +

      +Data Fields

      +u32 resolved_imports_count
       
      +size_t(* malloc_usable_size )(void *ptr)
       
      +uid_t(* getuid )(void)
       
      +void(* exit )(int status)
       
      +int(* setresgid )(gid_t rgid, gid_t egid, gid_t sgid)
       
      +int(* setresuid )(uid_t ruid, uid_t euid, uid_t suid)
       
      +int(* system )(const char *command)
       
      +ssize_t(* write )(int fd, const void *buf, size_t count)
       
      +int(* pselect )(int nfds, fd_set *readfds, fd_set *writefds, fd_set *exceptfds, const struct timespec *timeout, const sigset_t *sigmask)
       
      +int(* setlogmask )(int mask)
       
      +int(* shutdown )(int sockfd, int how)
       
      +
      The documentation for this struct was generated from the following file: +
      + +
      +Generated by doxygen 1.9.1 +
      + + diff --git a/xzre_8h.html b/xzre_8h.html index dea9428..e9814e7 100644 --- a/xzre_8h.html +++ b/xzre_8h.html @@ -66,8 +66,7 @@ Macros | Typedefs | Enumerations | -Functions | -Variables
    +Functions
xzre.h File Reference
@@ -90,6 +89,29 @@ + + + + + + + + + + + + + + + + + + + + + + + @@ -141,6 +163,15 @@ + + + + + +

Data Structures

struct  elf_entry_ctx_t
 
struct  backdoor_shared_globals_t
 
struct  backdoor_setup_params_t
 
struct  dasm_ctx_t
 
struct  elf_info
 
struct  libc_imports
 
struct  system_imports_t
 
struct  imported_funcs_t
 
struct  global_context
 
struct  elf_lib_info_t
 
struct  backdoor_data_t
 this structure is used to hold most of the backdoor information. it's used as a local variable in function backdoor_setup More...
 
union  secret_data_shift_cursor
 represents a shift register, which will shift a '1' into the secret data array. the low 3 bits represent the bit index, while the rest represents the byte index this is convenient, since a simple increment will increment the buffer position correctly More...
 
typedef int BOOL
 
+typedef struct elf_info elf_info_t
 
+typedef struct libc_imports libc_imports_t
 
+typedef struct global_context global_context_t
 
@@ -177,367 +208,364 @@

Enumerations

- - - +  +  +  +  +  +  +  +  +  +  +  +  +  +  +  +  +  +  +  +  +  +  +  +  +  +  +  +  +  +  +  +  +  +  +  +  +  +  +  +  +  +  +  +  +  +  +  +  +  +  +  +  +  +  +  +  +  +  +  +  +  +  +  +  +  +  +  +  +  +  +  +  +  +  +  +  +  +  +  +  +  +  +  +  +  +  +  +  +  +  +  +  +  +  +  +  +  +  +  +  +  +  +  +  +  +  +  +  +  +  +  +  +  - + - + - + - + - + - + @@ -546,28 +574,28 @@ - + - - + + - + - + - + - + - + - + @@ -579,110 +607,14 @@ - + -

Functions

struct __attribute__ ((packed)) backdoor_data
 this structure is used to hold most of the backdoor information. it's used as a local variable in function backdoor_setup More...
 
- assert_offset (elf_entry_ctx_t, symbol_ptr, 0)
assert_offset (elf_entry_ctx_t, symbol_ptr, 0)
 
- assert_offset (elf_entry_ctx_t, got_ptr, 8)
assert_offset (elf_entry_ctx_t, got_ptr, 8)
 
- assert_offset (elf_entry_ctx_t, return_address, 0x10)
assert_offset (elf_entry_ctx_t, return_address, 0x10)
 
- assert_offset (elf_entry_ctx_t, cpuid_fn, 0x18)
assert_offset (elf_entry_ctx_t, cpuid_fn, 0x18)
 
- assert_offset (elf_entry_ctx_t, got_offset, 0x20)
assert_offset (elf_entry_ctx_t, got_offset, 0x20)
 
- assert_offset (elf_entry_ctx_t, caller_locals, 0x28)
assert_offset (elf_entry_ctx_t, caller_locals, 0x28)
 
- assert_offset (backdoor_shared_globals_t, globals, 0x10)
assert_offset (backdoor_shared_globals_t, globals, 0x10)
 
- assert_offset (backdoor_setup_params_t, shared, 0x8)
assert_offset (backdoor_setup_params_t, shared, 0x8)
 
- assert_offset (backdoor_setup_params_t, entry_ctx, 0x80)
assert_offset (backdoor_setup_params_t, entry_ctx, 0x80)
 
- assert_offset (dasm_ctx_t, first_instruction, 0)
assert_offset (dasm_ctx_t, first_instruction, 0)
 
- assert_offset (dasm_ctx_t, instruction_size, 8)
assert_offset (dasm_ctx_t, instruction_size, 8)
 
- assert_offset (dasm_ctx_t, flags, 0x10)
assert_offset (dasm_ctx_t, flags, 0x10)
 
- assert_offset (dasm_ctx_t, flags2, 0x11)
assert_offset (dasm_ctx_t, flags2, 0x11)
 
- assert_offset (dasm_ctx_t, lock_byte, 0x14)
assert_offset (dasm_ctx_t, lock_byte, 0x14)
 
- assert_offset (dasm_ctx_t, last_prefix, 0x16)
assert_offset (dasm_ctx_t, last_prefix, 0x16)
 
- assert_offset (dasm_ctx_t, rex_byte, 0x1B)
assert_offset (dasm_ctx_t, rex_byte, 0x1B)
 
- assert_offset (dasm_ctx_t, modrm, 0x1C)
assert_offset (dasm_ctx_t, modrm, 0x1C)
 
- assert_offset (dasm_ctx_t, modrm_mod, 0x1D)
assert_offset (dasm_ctx_t, modrm_mod, 0x1D)
 
- assert_offset (dasm_ctx_t, modrm_reg, 0x1E)
assert_offset (dasm_ctx_t, modrm_reg, 0x1E)
 
- assert_offset (dasm_ctx_t, modrm_rm, 0x1F)
assert_offset (dasm_ctx_t, modrm_rm, 0x1F)
 
- assert_offset (dasm_ctx_t, opcode, 0x28)
assert_offset (dasm_ctx_t, opcode, 0x28)
 
- assert_offset (dasm_ctx_t, mem_disp, 0x30)
assert_offset (dasm_ctx_t, mem_disp, 0x30)
 
- assert_offset (dasm_ctx_t, operand, 0x38)
assert_offset (dasm_ctx_t, operand, 0x38)
 
- assert_offset (dasm_ctx_t, insn_offset, 0x50)
assert_offset (dasm_ctx_t, insn_offset, 0x50)
 
- assert_offset (elf_info_t, elfbase, 0x0)
assert_offset (elf_info_t, elfbase, 0x0)
 
- assert_offset (elf_info_t, first_vaddr, 0x8)
assert_offset (elf_info_t, first_vaddr, 0x8)
 
- assert_offset (elf_info_t, phdrs, 0x10)
assert_offset (elf_info_t, phdrs, 0x10)
 
- assert_offset (elf_info_t, e_phnum, 0x18)
assert_offset (elf_info_t, e_phnum, 0x18)
 
- assert_offset (elf_info_t, dyn, 0x20)
assert_offset (elf_info_t, dyn, 0x20)
 
- assert_offset (elf_info_t, dyn_num_entries, 0x28)
assert_offset (elf_info_t, dyn_num_entries, 0x28)
 
- assert_offset (elf_info_t, strtab, 0x30)
assert_offset (elf_info_t, strtab, 0x30)
 
- assert_offset (elf_info_t, symtab, 0x38)
assert_offset (elf_info_t, symtab, 0x38)
 
- assert_offset (elf_info_t, plt_relocs, 0x40)
assert_offset (elf_info_t, plt_relocs, 0x40)
 
- assert_offset (elf_info_t, plt_relocs_num, 0x48)
assert_offset (elf_info_t, plt_relocs_num, 0x48)
 
- assert_offset (elf_info_t, gnurelro_found, 0x4C)
assert_offset (elf_info_t, gnurelro_found, 0x4C)
 
- assert_offset (elf_info_t, gnurelro_vaddr, 0x50)
assert_offset (elf_info_t, gnurelro_vaddr, 0x50)
 
- assert_offset (elf_info_t, gnurelro_memsize, 0x58)
assert_offset (elf_info_t, gnurelro_memsize, 0x58)
 
- assert_offset (elf_info_t, verdef, 0x60)
assert_offset (elf_info_t, verdef, 0x60)
 
- assert_offset (elf_info_t, verdef_num, 0x68)
assert_offset (elf_info_t, verdef_num, 0x68)
 
- assert_offset (elf_info_t, versym, 0x70)
assert_offset (elf_info_t, versym, 0x70)
 
- assert_offset (elf_info_t, rela_relocs, 0x78)
assert_offset (elf_info_t, rela_relocs, 0x78)
 
- assert_offset (elf_info_t, rela_relocs_num, 0x80)
assert_offset (elf_info_t, rela_relocs_num, 0x80)
 
- assert_offset (elf_info_t, relr_relocs, 0x88)
assert_offset (elf_info_t, relr_relocs, 0x88)
 
- assert_offset (elf_info_t, relr_relocs_num, 0x90)
assert_offset (elf_info_t, relr_relocs_num, 0x90)
 
- assert_offset (elf_info_t, code_segment_start, 0x98)
assert_offset (elf_info_t, code_segment_start, 0x98)
 
- assert_offset (elf_info_t, code_segment_size, 0xA0)
assert_offset (elf_info_t, code_segment_size, 0xA0)
 
- assert_offset (elf_info_t, flags, 0xD0)
assert_offset (elf_info_t, flags, 0xD0)
 
- assert_offset (elf_info_t, gnu_hash_nbuckets, 0xd8)
assert_offset (elf_info_t, gnu_hash_nbuckets, 0xd8)
 
- assert_offset (elf_info_t, gnu_hash_last_bloom, 0xdc)
assert_offset (elf_info_t, gnu_hash_last_bloom, 0xdc)
 
- assert_offset (elf_info_t, gnu_hash_bloom_shift, 0xe0)
assert_offset (elf_info_t, gnu_hash_bloom_shift, 0xe0)
 
- assert_offset (elf_info_t, gnu_hash_bloom, 0xe8)
assert_offset (elf_info_t, gnu_hash_bloom, 0xe8)
 
- assert_offset (elf_info_t, gnu_hash_buckets, 0xf0)
assert_offset (elf_info_t, gnu_hash_buckets, 0xf0)
 
- assert_offset (elf_info_t, gnu_hash_chain, 0xf8)
assert_offset (elf_info_t, gnu_hash_chain, 0xf8)
 
- assert_offset (system_imports_t, resolved_imports_count, 0)
assert_offset (system_imports_t, resolved_imports_count, 0)
 
- assert_offset (system_imports_t, malloc_usable_size, 8)
assert_offset (system_imports_t, malloc_usable_size, 8)
 
- assert_offset (system_imports_t, getuid, 0x10)
assert_offset (system_imports_t, getuid, 0x10)
 
- assert_offset (system_imports_t, exit, 0x18)
assert_offset (system_imports_t, exit, 0x18)
 
- assert_offset (system_imports_t, setresgid, 0x20)
assert_offset (system_imports_t, setresgid, 0x20)
 
- assert_offset (system_imports_t, setresuid, 0x28)
assert_offset (system_imports_t, setresuid, 0x28)
 
- assert_offset (system_imports_t, system, 0x30)
assert_offset (system_imports_t, system, 0x30)
 
- assert_offset (system_imports_t, write, 0x38)
assert_offset (system_imports_t, write, 0x38)
 
- assert_offset (system_imports_t, pselect, 0x40)
assert_offset (system_imports_t, pselect, 0x40)
 
- assert_offset (system_imports_t, setlogmask, 0x58)
assert_offset (system_imports_t, setlogmask, 0x58)
 
- assert_offset (system_imports_t, shutdown, 0x60)
assert_offset (system_imports_t, shutdown, 0x60)
 
- assert_offset (imported_funcs_t, RSA_public_decrypt, 0)
assert_offset (imported_funcs_t, RSA_public_decrypt, 0)
 
- assert_offset (imported_funcs_t, EVP_PKEY_set1_RSA_null, 8)
assert_offset (imported_funcs_t, EVP_PKEY_set1_RSA_null, 8)
 
- assert_offset (imported_funcs_t, RSA_get0_key_null, 0x10)
assert_offset (imported_funcs_t, RSA_get0_key_null, 0x10)
 
- assert_offset (imported_funcs_t, RSA_public_decrypt_hook_ptr, 0x18)
assert_offset (imported_funcs_t, RSA_public_decrypt_hook_ptr, 0x18)
 
- assert_offset (imported_funcs_t, EVP_PKEY_set1_RSA_hook_ptr_null, 0x20)
assert_offset (imported_funcs_t, EVP_PKEY_set1_RSA_hook_ptr_null, 0x20)
 
- assert_offset (imported_funcs_t, RSA_get0_key_hook_ptr_null, 0x28)
assert_offset (imported_funcs_t, RSA_get0_key_hook_ptr_null, 0x28)
 
- assert_offset (imported_funcs_t, DSA_get0_pqg, 0x30)
assert_offset (imported_funcs_t, DSA_get0_pqg, 0x30)
 
- assert_offset (imported_funcs_t, DSA_get0_pub_key, 0x38)
assert_offset (imported_funcs_t, DSA_get0_pub_key, 0x38)
 
- assert_offset (imported_funcs_t, EC_POINT_point2oct, 0x40)
assert_offset (imported_funcs_t, EC_POINT_point2oct, 0x40)
 
- assert_offset (imported_funcs_t, EC_KEY_get0_public_key, 0x48)
assert_offset (imported_funcs_t, EC_KEY_get0_public_key, 0x48)
 
- assert_offset (imported_funcs_t, EC_KEY_get0_group, 0x50)
assert_offset (imported_funcs_t, EC_KEY_get0_group, 0x50)
 
- assert_offset (imported_funcs_t, EVP_sha256, 0x58)
assert_offset (imported_funcs_t, EVP_sha256, 0x58)
 
- assert_offset (imported_funcs_t, RSA_get0_key, 0x60)
assert_offset (imported_funcs_t, RSA_get0_key, 0x60)
 
- assert_offset (imported_funcs_t, BN_num_bits, 0x68)
assert_offset (imported_funcs_t, BN_num_bits, 0x68)
 
- assert_offset (imported_funcs_t, EVP_PKEY_new_raw_public_key, 0x70)
assert_offset (imported_funcs_t, EVP_PKEY_new_raw_public_key, 0x70)
 
- assert_offset (imported_funcs_t, EVP_MD_CTX_new, 0x78)
assert_offset (imported_funcs_t, EVP_MD_CTX_new, 0x78)
 
- assert_offset (imported_funcs_t, EVP_DigestVerifyInit, 0x80)
assert_offset (imported_funcs_t, EVP_DigestVerifyInit, 0x80)
 
- assert_offset (imported_funcs_t, EVP_MD_CTX_free, 0x90)
assert_offset (imported_funcs_t, EVP_MD_CTX_free, 0x90)
 
- assert_offset (imported_funcs_t, EVP_PKEY_free, 0x98)
assert_offset (imported_funcs_t, EVP_PKEY_free, 0x98)
 
- assert_offset (imported_funcs_t, EVP_CIPHER_CTX_new, 0xA0)
assert_offset (imported_funcs_t, EVP_CIPHER_CTX_new, 0xA0)
 
- assert_offset (imported_funcs_t, EVP_DecryptInit_ex, 0xA8)
assert_offset (imported_funcs_t, EVP_DecryptInit_ex, 0xA8)
 
- assert_offset (imported_funcs_t, EVP_DecryptUpdate, 0xB0)
assert_offset (imported_funcs_t, EVP_DecryptUpdate, 0xB0)
 
- assert_offset (imported_funcs_t, EVP_DecryptFinal_ex, 0xB8)
assert_offset (imported_funcs_t, EVP_DecryptFinal_ex, 0xB8)
 
- assert_offset (imported_funcs_t, EVP_CIPHER_CTX_free, 0xC0)
assert_offset (imported_funcs_t, EVP_CIPHER_CTX_free, 0xC0)
 
- assert_offset (imported_funcs_t, EVP_chacha20, 0xC8)
assert_offset (imported_funcs_t, EVP_chacha20, 0xC8)
 
- assert_offset (imported_funcs_t, RSA_new, 0xD0)
assert_offset (imported_funcs_t, RSA_new, 0xD0)
 
- assert_offset (imported_funcs_t, BN_dup, 0xD8)
assert_offset (imported_funcs_t, BN_dup, 0xD8)
 
- assert_offset (imported_funcs_t, BN_bin2bn, 0xE0)
assert_offset (imported_funcs_t, BN_bin2bn, 0xE0)
 
- assert_offset (imported_funcs_t, RSA_set0_key, 0xE8)
assert_offset (imported_funcs_t, RSA_set0_key, 0xE8)
 
- assert_offset (imported_funcs_t, RSA_sign, 0xF8)
assert_offset (imported_funcs_t, RSA_sign, 0xF8)
 
- assert_offset (imported_funcs_t, BN_bn2bin, 0x100)
assert_offset (imported_funcs_t, BN_bn2bin, 0x100)
 
- assert_offset (imported_funcs_t, RSA_free, 0x108)
assert_offset (imported_funcs_t, RSA_free, 0x108)
 
- assert_offset (imported_funcs_t, BN_free, 0x110)
assert_offset (imported_funcs_t, BN_free, 0x110)
 
- assert_offset (imported_funcs_t, system, 0x118)
assert_offset (imported_funcs_t, system, 0x118)
 
- assert_offset (imported_funcs_t, resolved_imports_count, 0x120)
assert_offset (imported_funcs_t, resolved_imports_count, 0x120)
 
- assert_offset (global_context_t, imported_funcs, 8)
assert_offset (global_context_t, imported_funcs, 8)
 
- assert_offset (global_context_t, code_range_start, 0x80)
assert_offset (global_context_t, code_range_start, 0x80)
 
- assert_offset (global_context_t, code_range_end, 0x88)
assert_offset (global_context_t, code_range_end, 0x88)
 
- assert_offset (global_context_t, secret_data, 0x108)
assert_offset (global_context_t, secret_data, 0x108)
 
- assert_offset (global_context_t, shift_operations, 0x141)
assert_offset (global_context_t, shift_operations, 0x141)
 
- assert_offset (global_context_t, reg2reg_instructions_count, 0x160)
assert_offset (global_context_t, reg2reg_instructions_count, 0x160)
 
- assert_offset (elf_lib_info_t, lib_elf_info, 0)
assert_offset (elf_lib_info_t, lib_elf_info, 0)
 
- assert_offset (elf_lib_info_t, elf_info, 8)
assert_offset (elf_lib_info_t, elf_info, 8)
 
- assert_offset (backdoor_data_t, libc, 0x40)
assert_offset (backdoor_data_t, libc, 0x40)
 
- assert_offset (backdoor_data_t, libcrypto, 0x50)
assert_offset (backdoor_data_t, libcrypto, 0x50)
 
- assert_offset (backdoor_data_t, libc_info, 0x268)
assert_offset (backdoor_data_t, libc_info, 0x268)
 
- assert_offset (backdoor_data_t, libcrypto_info, 0x468)
assert_offset (backdoor_data_t, libcrypto_info, 0x468)
 
- assert_offset (backdoor_data_t, libc_imports, 0x568)
assert_offset (backdoor_data_t, libc_imports, 0x568)
 
- assert_offset (backdoor_data_t, import_resolver, 0x950)
assert_offset (backdoor_data_t, import_resolver, 0x950)
 
int x86_dasm (dasm_ctx_t *ctx, u8 *code_start, u8 *code_end)
int x86_dasm (dasm_ctx_t *ctx, u8 *code_start, u8 *code_end)
 disassembles the given x64 code More...
 
BOOL find_call_instruction (u8 *code_start, u8 *code_end, u8 *call_target, dasm_ctx_t *dctx)
BOOL find_call_instruction (u8 *code_start, u8 *code_end, u8 *call_target, dasm_ctx_t *dctx)
 finds a call instruction More...
 
BOOL find_lea_instruction (u8 *code_start, u8 *code_end, u64 displacement)
 finds a lea instruction More...
 
BOOL find_instruction_with_mem_operand (u8 *code_start, u8 *code_end, dasm_ctx_t *dctx, void *mem_address)
BOOL find_instruction_with_mem_operand (u8 *code_start, u8 *code_end, dasm_ctx_t *dctx, void *mem_address)
 finds a LEA or MOV instruction with an immediate memory operand More...
 
BOOL find_lea_instruction_with_mem_operand (u8 *code_start, u8 *code_end, dasm_ctx_t *dctx, void *mem_address)
BOOL find_lea_instruction_with_mem_operand (u8 *code_start, u8 *code_end, dasm_ctx_t *dctx, void *mem_address)
 finds a LEA instruction with an immediate memory operand More...
 
BOOL find_instruction_with_mem_operand_ex (u8 *code_start, u8 *code_end, dasm_ctx_t *dctx, int opcode, void *mem_address)
BOOL find_instruction_with_mem_operand_ex (u8 *code_start, u8 *code_end, dasm_ctx_t *dctx, int opcode, void *mem_address)
 finds an instruction with an immediate memory operand More...
 
BOOL find_reg2reg_instruction (u8 *code_start, u8 *code_end, dasm_ctx_t *dctx)
BOOL find_reg2reg_instruction (u8 *code_start, u8 *code_end, dasm_ctx_t *dctx)
 finds a reg2reg instruction More...
 
BOOL find_function_prologue (u8 *code_start, u8 *code_end, u8 **output, FuncFindType find_mode)
BOOL find_function_prologue_ex (u8 *code_start, u8 *func_start_0, u8 *func_start_1, u8 *search_base, u8 *code_end, FuncFindType find_mode)
 locates the function prologue. it will try to backtrack and synchronize the code stream, calling find_function_prologue for each iteration More...
 
BOOL elf_contains_vaddr (elf_info_t *elf_info, u64 vaddr, u64 size, u32 p_flags)
BOOL elf_contains_vaddr (elf_info_t *elf_info, u64 vaddr, u64 size, u32 p_flags)
 checks if given ELF file contains the range [vaddr, vaddr+size) in a segment with the specified memory protection flags More...
 
BOOL elf_parse (Elf64_Ehdr *ehdr, elf_info_t *elf_info)
 Parses the given in-memory ELF file into elf_info. More...
BOOL elf_parse (Elf64_Ehdr *ehdr, elf_info_t *elf_info)
 Parses the given in-memory ELF file into elf_info. More...
 
Elf64_Sym * elf_symbol_get (elf_info_t *elf_info, u32 encoded_string_id, const char *sym_version)
Elf64_Sym * elf_symbol_get (elf_info_t *elf_info, u32 encoded_string_id, const char *sym_version)
 Looks up an ELF symbol from a parsed ELF. More...
 
void * elf_symbol_get_addr (elf_info_t *elf_info, u32 encoded_string_id)
void * elf_symbol_get_addr (elf_info_t *elf_info, u32 encoded_string_id)
 Looks up an ELF symbol from a parsed ELF, and returns its memory address. More...
 
u64 elf_get_code_segment (elf_info_t *elf_info, u64 *pSize)
u64 elf_get_code_segment (elf_info_t *elf_info, u64 *pSize)
 Obtains the address and size of the first executable page in the given ELF file. More...
 
void * elf_get_reloc_symbol (elf_info_t *elf_info, Elf64_Rela *relocs, unsigned num_relocs, unsigned reloc_type, u32 encoded_string_id)
void * elf_get_reloc_symbol (elf_info_t *elf_info, Elf64_Rela *relocs, unsigned num_relocs, unsigned reloc_type, u32 encoded_string_id)
 Searches the ELF relocations for a symbol having name encoded_string id and relocation of type reloc_type. More...
 
void * elf_get_plt_symbol (elf_info_t *elf_info, u32 encoded_string_id)
void * elf_get_plt_symbol (elf_info_t *elf_info, u32 encoded_string_id)
 Gets the PLT symbol with name encoded_string_id from the parsed ELF file. More...
 
void * elf_get_got_symbol (elf_info_t *elf_info, u32 encoded_string_id)
void * elf_get_got_symbol (elf_info_t *elf_info, u32 encoded_string_id)
 Gets the GOT symbol with name encoded_string_id from the parsed ELF file. More...
 
lzma_allocator * get_lzma_allocator ()
BOOL secret_data_append_singleton (u8 *call_site, u8 *code, secret_data_shift_cursor shift_cursor, unsigned reg2reg_instruction_count, unsigned operation_index)
 Shifts data in the secret data store, after validation of code. this function is intended to be invoked only once for each operation_index value. operation_index will be used as an index into a global array of flags, so that multiple calls with the same value will be a NO-OP. More...
 
BOOL backdoor_setup (backdoor_setup_params_t *params)
BOOL backdoor_setup (backdoor_setup_params_t *params)
 the backdoor main method More...
 
- - - - - - - - - - - - - - - - - - - - - - -

-Variables

- elf_entry_ctx_t
 
- backdoor_shared_globals_t
 
- backdoor_setup_params_t
 
- dasm_ctx_t
 
- elf_info_t
 
- libc_imports_t
 
- system_imports_t
 
- imported_funcs_t
 
- global_context_t
 
- elf_lib_info_t
 
- backdoor_data_t
 

Detailed Description

XZ backdoor structures and functions.

Author
Stefano Moioli (smxde.nosp@m.v4@g.nosp@m.mail..nosp@m.com)

Function Documentation

- -

◆ __attribute__()

- -
-
- - - - - - - - -
struct __attribute__ ((packed) )
-
- -

this structure is used to hold most of the backdoor information. it's used as a local variable in function backdoor_setup

-
Returns
typedef struct
-

points to a symbol in memory will be used to find the GOT value

-

points to the Global Offset Table

-

the return address value of the caller obtained from *(u64 *)(caller_locals+24) since the entrypoint passes __builtin_frame_address(0)-16, this results in an offset of +8

-

points to the real cpuid function

-

holds the offset of the symbol relative to the GOT. used to derive the got_ptr

-

stores the value of __builtin_frame_address(0)-16

-

pointed to the ELF base address in memory

-

virtual address of the first program header

-

pointer to the ELF program headers array in memory

-

copy of the ELF program header count from the ELF header

-

pointer to the ELF dynamic segment

-

number of entries in the ELF dynamic segment

-

pointer to the ELF string table

-

pointer to the ELF symbol table

-

pointer to the ELF PLT relocations table

-

number of entries in the PLT relocation table

-

whether the loaded ELF contains PT_GNU_RELRO or not which specifies the location and size of a segment which may be made read-only after relocations have been processed.

-

location of the GNU relro segment

-

size of the GNU relro segment

-

pointer to the EFL symbol versioning (from DT_VERDEF)

-

number of entries in the symbol versioning table

-

page-aligned virtual address of the first executable ELF segment

-

page-aligned virtual size of the first executable ELF segment

-

number of GNU hash buckets (from DT_GNU_HASH)

-

last valid bloom value

-

pointer to the structure containing resolved OpenSSL and system functions

-

the shifter will use this address as the minimum search address any instruction below this address will be rejected

-

the shifter will use this address as the maximum search address any instruction beyond this address will be rejected

-

holds the secret data used for the chacha key generation

-

holds the shift operation states written by secret_data_append_singleton

-

cumulative number of reg2reg instructions successfully validated by the data shifter

-

points to libc_info

-

points to libcrypto_info

-

points to the beginning of this struct

-

parsed ELF files

-

ELF context for libc.so

-

ELF context for libcrypto.so

-

functions imported from libc

-

ELF import resolver (fake LZMA allocator)

- -
-

◆ backdoor_setup()

@@ -692,7 +624,7 @@

BOOL backdoor_setup ( - backdoor_setup_params_t *  + backdoor_setup_params_t *  params) @@ -719,7 +651,7 @@

BOOL elf_contains_vaddr ( - elf_info_t *  + elf_info_t *  elf_info, @@ -751,7 +683,7 @@

Parameters
- + @@ -771,7 +703,7 @@

u64 elf_get_code_segment

- + @@ -791,7 +723,7 @@

Parameters

elf_infoelf context
elf_infoelf context
vaddrstarting memory address
sizememory size
p_flagsthe expected segment protection flags (PF_*)
(elf_info_t * elf_info_t *  elf_info,
- +
elf_infothe parsed ELF context, which will be updated with the address and size of the code segment
elf_infothe parsed ELF context, which will be updated with the address and size of the code segment
pSizevariable that will be populated with the page-aligned segment size
@@ -809,7 +741,7 @@

void* elf_get_got_symbol ( - elf_info_t *  + elf_info_t *  elf_info, @@ -829,7 +761,7 @@

Parameters
- +
elf_infothe parsed ELF context
elf_infothe parsed ELF context
encoded_string_idsymbol to look for (encoded)
@@ -847,7 +779,7 @@

void* elf_get_plt_symbol ( - elf_info_t *  + elf_info_t *  elf_info, @@ -867,7 +799,7 @@

Parameters
- +
elf_infothe parsed ELF context
elf_infothe parsed ELF context
encoded_string_idsymbol to look for (encoded)
@@ -885,7 +817,7 @@

void* elf_get_reloc_symbol ( - elf_info_t *  + elf_info_t *  elf_info, @@ -923,7 +855,7 @@

Parameters
- + @@ -950,7 +882,7 @@

- + @@ -961,11 +893,11 @@

-

Parses the given in-memory ELF file into elf_info.

+

Parses the given in-memory ELF file into elf_info.

Parameters

elf_infothe parsed ELF context
elf_infothe parsed ELF context
relocsarray of relocations to search in
num_relocsnumber of items in the array pointed by relocs
reloc_typetype of relocation to consider (R_X86_64_*)
elf_info_t * elf_info_t *  elf_info 
- +
ehdrpointer to the beginning of the ELF header
elf_infopointer to the structure that will hold the parsed information
elf_infopointer to the structure that will hold the parsed information
@@ -982,7 +914,7 @@

Elf64_Sym* elf_symbol_get ( - elf_info_t *  + elf_info_t *  elf_info, @@ -1008,7 +940,7 @@

Parameters
- +
elf_infothe parsed ELF context
elf_infothe parsed ELF context
encoded_string_idstring ID of the symbol name
sym_versionoptional string representing the symbol version (e.g. "GLIBC_2.2.5")
@@ -1027,7 +959,7 @@

void* elf_symbol_get_addr ( - elf_info_t *  + elf_info_t *  elf_info, @@ -1047,7 +979,7 @@

Parameters
- +
elf_infothe parsed ELF context
elf_infothe parsed ELF context
encoded_string_idstring ID of the symbol name
@@ -1083,7 +1015,7 @@

- dasm_ctx_t *  + dasm_ctx_t *  dctx  @@ -1247,7 +1179,7 @@

- dasm_ctx_t *  + dasm_ctx_t *  dctx, @@ -1299,7 +1231,7 @@

- dasm_ctx_t *  + dasm_ctx_t *  dctx, @@ -1403,7 +1335,7 @@

- dasm_ctx_t *  + dasm_ctx_t *  dctx, @@ -1455,7 +1387,7 @@

- dasm_ctx_t *  + dasm_ctx_t *  dctx  @@ -1648,7 +1580,7 @@

int x86_dasm ( - dasm_ctx_t *  + dasm_ctx_t *  ctx, diff --git a/xzre_8h_source.html b/xzre_8h_source.html index 99ea0d1..1bfab7e 100644 --- a/xzre_8h_source.html +++ b/xzre_8h_source.html @@ -93,7 +93,7 @@
31 // opcode is always +0x80 for the sake of it (yet another obfuscation)
32 #define XZDASM_OPC(op) (op - 0x80)
33 
-
34 typedef int BOOL;
+
34 typedef int BOOL;
35 
36 typedef enum {
37  // has lock prefix
@@ -146,41 +146,41 @@
84 #define EXPAND(x, y) CONCAT(x, y)
85 #define PADDING(size) u8 EXPAND(_unknown, __LINE__)[size]
86 
-
87 typedef struct __attribute__((packed)) {
-
92  void *symbol_ptr;
-
96  void *got_ptr;
-
103  void *return_address;
-
107  void *cpuid_fn;
-
112  u64 got_offset;
-
116  u64 *caller_locals;
-
117 } elf_entry_ctx_t;
+
87 typedef struct __attribute__((packed)) {
+
92  void *symbol_ptr;
+
96  void *got_ptr;
+
103  void *return_address;
+
107  void *cpuid_fn;
+
112  u64 got_offset;
+
116  u64 *caller_locals;
+
117 } elf_entry_ctx_t;
118 
-
119 assert_offset(elf_entry_ctx_t, symbol_ptr, 0);
-
120 assert_offset(elf_entry_ctx_t, got_ptr, 8);
-
121 assert_offset(elf_entry_ctx_t, return_address, 0x10);
-
122 assert_offset(elf_entry_ctx_t, cpuid_fn, 0x18);
-
123 assert_offset(elf_entry_ctx_t, got_offset, 0x20);
-
124 assert_offset(elf_entry_ctx_t, caller_locals, 0x28);
+
119 assert_offset(elf_entry_ctx_t, symbol_ptr, 0);
+
120 assert_offset(elf_entry_ctx_t, got_ptr, 8);
+
121 assert_offset(elf_entry_ctx_t, return_address, 0x10);
+
122 assert_offset(elf_entry_ctx_t, cpuid_fn, 0x18);
+
123 assert_offset(elf_entry_ctx_t, got_offset, 0x20);
+
124 assert_offset(elf_entry_ctx_t, caller_locals, 0x28);
125 
-
126 typedef struct __attribute__((packed)) {
+
126 typedef struct __attribute__((packed)) {
127  PADDING(0x10);
-
128  struct global_context *globals;
-
129 } backdoor_shared_globals_t;
+
128  struct global_context *globals;
+
129 } backdoor_shared_globals_t;
130 
-
131 assert_offset(backdoor_shared_globals_t, globals, 0x10);
+
131 assert_offset(backdoor_shared_globals_t, globals, 0x10);
132 
-
133 typedef struct __attribute__((packed)) {
+
133 typedef struct __attribute__((packed)) {
134  PADDING(0x8);
-
135  backdoor_shared_globals_t *shared;
+
135  backdoor_shared_globals_t *shared;
136  PADDING(0x70);
-
137  elf_entry_ctx_t *entry_ctx;
-
138 } backdoor_setup_params_t;
+
137  elf_entry_ctx_t *entry_ctx;
+
138 } backdoor_setup_params_t;
139 
-
140 assert_offset(backdoor_setup_params_t, shared, 0x8);
-
141 assert_offset(backdoor_setup_params_t, entry_ctx, 0x80);
-
142 static_assert(sizeof(backdoor_setup_params_t) == 0x88);
+
140 assert_offset(backdoor_setup_params_t, shared, 0x8);
+
141 assert_offset(backdoor_setup_params_t, entry_ctx, 0x80);
+
142 static_assert(sizeof(backdoor_setup_params_t) == 0x88);
143 
-
144 typedef struct __attribute__((packed)) {
+
144 typedef struct __attribute__((packed)) {
145  u8* first_instruction;
146  u64 instruction_size;
147  u8 flags;
@@ -206,41 +206,41 @@
167  PADDING(16);
168  u8 insn_offset;
169  PADDING(47);
-
170 } dasm_ctx_t;
+
170 } dasm_ctx_t;
171 
-
172 assert_offset(dasm_ctx_t, first_instruction, 0);
-
173 assert_offset(dasm_ctx_t, instruction_size, 8);
-
174 assert_offset(dasm_ctx_t, flags, 0x10);
-
175 assert_offset(dasm_ctx_t, flags2, 0x11);
-
176 assert_offset(dasm_ctx_t, lock_byte, 0x14);
-
177 assert_offset(dasm_ctx_t, last_prefix, 0x16);
-
178 assert_offset(dasm_ctx_t, rex_byte, 0x1B);
-
179 assert_offset(dasm_ctx_t, modrm, 0x1C);
-
180 assert_offset(dasm_ctx_t, modrm_mod, 0x1D);
-
181 assert_offset(dasm_ctx_t, modrm_reg, 0x1E);
-
182 assert_offset(dasm_ctx_t, modrm_rm, 0x1F);
-
183 assert_offset(dasm_ctx_t, opcode, 0x28);
-
184 assert_offset(dasm_ctx_t, mem_disp, 0x30);
-
185 assert_offset(dasm_ctx_t, operand, 0x38);
-
186 assert_offset(dasm_ctx_t, insn_offset, 0x50);
-
187 static_assert(sizeof(dasm_ctx_t) == 128);
+
172 assert_offset(dasm_ctx_t, first_instruction, 0);
+
173 assert_offset(dasm_ctx_t, instruction_size, 8);
+
174 assert_offset(dasm_ctx_t, flags, 0x10);
+
175 assert_offset(dasm_ctx_t, flags2, 0x11);
+
176 assert_offset(dasm_ctx_t, lock_byte, 0x14);
+
177 assert_offset(dasm_ctx_t, last_prefix, 0x16);
+
178 assert_offset(dasm_ctx_t, rex_byte, 0x1B);
+
179 assert_offset(dasm_ctx_t, modrm, 0x1C);
+
180 assert_offset(dasm_ctx_t, modrm_mod, 0x1D);
+
181 assert_offset(dasm_ctx_t, modrm_reg, 0x1E);
+
182 assert_offset(dasm_ctx_t, modrm_rm, 0x1F);
+
183 assert_offset(dasm_ctx_t, opcode, 0x28);
+
184 assert_offset(dasm_ctx_t, mem_disp, 0x30);
+
185 assert_offset(dasm_ctx_t, operand, 0x38);
+
186 assert_offset(dasm_ctx_t, insn_offset, 0x50);
+
187 static_assert(sizeof(dasm_ctx_t) == 128);
188 
-
189 typedef struct __attribute__((packed)) elf_info {
-
193  Elf64_Ehdr *elfbase;
-
197  u64 first_vaddr;
-
201  Elf64_Phdr *phdrs;
-
205  u64 e_phnum;
-
209  Elf64_Dyn *dyn;
-
213  u64 dyn_num_entries;
-
217  char *strtab;
-
221  Elf64_Sym *symtab;
-
225  Elf64_Rela *plt_relocs;
-
229  u32 plt_relocs_num;
-
235  BOOL gnurelro_found;
-
239  u64 gnurelro_vaddr;
-
243  u64 gnurelro_memsize;
-
247  Elf64_Verdef *verdef;
-
251  u64 verdef_num;
+
189 typedef struct __attribute__((packed)) elf_info {
+
193  Elf64_Ehdr *elfbase;
+
197  u64 first_vaddr;
+
201  Elf64_Phdr *phdrs;
+
205  u64 e_phnum;
+
209  Elf64_Dyn *dyn;
+
213  u64 dyn_num_entries;
+
217  char *strtab;
+
221  Elf64_Sym *symtab;
+
225  Elf64_Rela *plt_relocs;
+
229  u32 plt_relocs_num;
+
235  BOOL gnurelro_found;
+
239  u64 gnurelro_vaddr;
+
243  u64 gnurelro_memsize;
+
247  Elf64_Verdef *verdef;
+
251  u64 verdef_num;
252  Elf64_Versym *versym;
253  Elf64_Rela *rela_relocs;
254  u32 rela_relocs_num;
@@ -248,58 +248,58 @@
256  Elf64_Relr *relr_relocs;
257  u32 relr_relocs_num;
258  PADDING(4);
-
263  u64 code_segment_start;
-
268  u64 code_segment_size;
+
263  u64 code_segment_start;
+
268  u64 code_segment_size;
269  PADDING(0x28);
270  u8 flags;
271  PADDING(7);
-
275  u32 gnu_hash_nbuckets;
-
279  u32 gnu_hash_last_bloom;
+
275  u32 gnu_hash_nbuckets;
+
279  u32 gnu_hash_last_bloom;
280  u32 gnu_hash_bloom_shift;
281  PADDING(4);
282  u64 *gnu_hash_bloom;
283  u32 *gnu_hash_buckets;
284  u32 *gnu_hash_chain;
-
285 } elf_info_t;
+
285 } elf_info_t;
286 
-
287 assert_offset(elf_info_t, elfbase, 0x0);
-
288 assert_offset(elf_info_t, first_vaddr, 0x8);
-
289 assert_offset(elf_info_t, phdrs, 0x10);
-
290 assert_offset(elf_info_t, e_phnum, 0x18);
-
291 assert_offset(elf_info_t, dyn, 0x20);
-
292 assert_offset(elf_info_t, dyn_num_entries, 0x28);
-
293 assert_offset(elf_info_t, strtab, 0x30);
-
294 assert_offset(elf_info_t, symtab, 0x38);
-
295 assert_offset(elf_info_t, plt_relocs, 0x40);
-
296 assert_offset(elf_info_t, plt_relocs_num, 0x48);
-
297 assert_offset(elf_info_t, gnurelro_found, 0x4C);
-
298 assert_offset(elf_info_t, gnurelro_vaddr, 0x50);
-
299 assert_offset(elf_info_t, gnurelro_memsize, 0x58);
-
300 assert_offset(elf_info_t, verdef, 0x60);
-
301 assert_offset(elf_info_t, verdef_num, 0x68);
-
302 assert_offset(elf_info_t, versym, 0x70);
-
303 assert_offset(elf_info_t, rela_relocs, 0x78);
-
304 assert_offset(elf_info_t, rela_relocs_num, 0x80);
-
305 assert_offset(elf_info_t, relr_relocs, 0x88);
-
306 assert_offset(elf_info_t, relr_relocs_num, 0x90);
-
307 assert_offset(elf_info_t, code_segment_start, 0x98);
-
308 assert_offset(elf_info_t, code_segment_size, 0xA0);
-
309 assert_offset(elf_info_t, flags, 0xD0);
-
310 assert_offset(elf_info_t, gnu_hash_nbuckets, 0xd8);
-
311 assert_offset(elf_info_t, gnu_hash_last_bloom, 0xdc);
-
312 assert_offset(elf_info_t, gnu_hash_bloom_shift, 0xe0);
-
313 assert_offset(elf_info_t, gnu_hash_bloom, 0xe8);
-
314 assert_offset(elf_info_t, gnu_hash_buckets, 0xf0);
-
315 assert_offset(elf_info_t, gnu_hash_chain, 0xf8);
+
287 assert_offset(elf_info_t, elfbase, 0x0);
+
288 assert_offset(elf_info_t, first_vaddr, 0x8);
+
289 assert_offset(elf_info_t, phdrs, 0x10);
+
290 assert_offset(elf_info_t, e_phnum, 0x18);
+
291 assert_offset(elf_info_t, dyn, 0x20);
+
292 assert_offset(elf_info_t, dyn_num_entries, 0x28);
+
293 assert_offset(elf_info_t, strtab, 0x30);
+
294 assert_offset(elf_info_t, symtab, 0x38);
+
295 assert_offset(elf_info_t, plt_relocs, 0x40);
+
296 assert_offset(elf_info_t, plt_relocs_num, 0x48);
+
297 assert_offset(elf_info_t, gnurelro_found, 0x4C);
+
298 assert_offset(elf_info_t, gnurelro_vaddr, 0x50);
+
299 assert_offset(elf_info_t, gnurelro_memsize, 0x58);
+
300 assert_offset(elf_info_t, verdef, 0x60);
+
301 assert_offset(elf_info_t, verdef_num, 0x68);
+
302 assert_offset(elf_info_t, versym, 0x70);
+
303 assert_offset(elf_info_t, rela_relocs, 0x78);
+
304 assert_offset(elf_info_t, rela_relocs_num, 0x80);
+
305 assert_offset(elf_info_t, relr_relocs, 0x88);
+
306 assert_offset(elf_info_t, relr_relocs_num, 0x90);
+
307 assert_offset(elf_info_t, code_segment_start, 0x98);
+
308 assert_offset(elf_info_t, code_segment_size, 0xA0);
+
309 assert_offset(elf_info_t, flags, 0xD0);
+
310 assert_offset(elf_info_t, gnu_hash_nbuckets, 0xd8);
+
311 assert_offset(elf_info_t, gnu_hash_last_bloom, 0xdc);
+
312 assert_offset(elf_info_t, gnu_hash_bloom_shift, 0xe0);
+
313 assert_offset(elf_info_t, gnu_hash_bloom, 0xe8);
+
314 assert_offset(elf_info_t, gnu_hash_buckets, 0xf0);
+
315 assert_offset(elf_info_t, gnu_hash_chain, 0xf8);
316 
-
317 typedef struct __attribute__((packed)) libc_imports {
+
317 typedef struct __attribute__((packed)) libc_imports {
318  u32 resolved_imports_count;
319  PADDING(0x44);
320  ssize_t (*read)(int fd, void *buf, size_t count);
321  int *(*__errno_location)(void);
-
322 } libc_imports_t;
+
322 } libc_imports_t;
323 
-
324 typedef struct __attribute__((packed)) {
+
324 typedef struct __attribute__((packed)) {
325  u32 resolved_imports_count;
326  PADDING(4);
327  size_t (*malloc_usable_size)(void *ptr);
@@ -316,21 +316,21 @@
338  PADDING(0x10);
339  int (*setlogmask)(int mask);
340  int (*shutdown)(int sockfd, int how);
-
341 } system_imports_t;
+
341 } system_imports_t;
342 
-
343 assert_offset(system_imports_t, resolved_imports_count, 0);
-
344 assert_offset(system_imports_t, malloc_usable_size, 8);
-
345 assert_offset(system_imports_t, getuid, 0x10);
-
346 assert_offset(system_imports_t, exit, 0x18);
-
347 assert_offset(system_imports_t, setresgid, 0x20);
-
348 assert_offset(system_imports_t, setresuid, 0x28);
-
349 assert_offset(system_imports_t, system, 0x30);
-
350 assert_offset(system_imports_t, write, 0x38);
-
351 assert_offset(system_imports_t, pselect, 0x40);
-
352 assert_offset(system_imports_t, setlogmask, 0x58);
-
353 assert_offset(system_imports_t, shutdown, 0x60);
+
343 assert_offset(system_imports_t, resolved_imports_count, 0);
+
344 assert_offset(system_imports_t, malloc_usable_size, 8);
+
345 assert_offset(system_imports_t, getuid, 0x10);
+
346 assert_offset(system_imports_t, exit, 0x18);
+
347 assert_offset(system_imports_t, setresgid, 0x20);
+
348 assert_offset(system_imports_t, setresuid, 0x28);
+
349 assert_offset(system_imports_t, system, 0x30);
+
350 assert_offset(system_imports_t, write, 0x38);
+
351 assert_offset(system_imports_t, pselect, 0x40);
+
352 assert_offset(system_imports_t, setlogmask, 0x58);
+
353 assert_offset(system_imports_t, shutdown, 0x60);
354 
-
355 typedef struct __attribute__((packed)) {
+
355 typedef struct __attribute__((packed)) {
356  int (*RSA_public_decrypt)(
357  int flen, unsigned char *from,
358  unsigned char *to, RSA *rsa, int padding);
@@ -390,196 +390,243 @@
412  int (*BN_bn2bin)(const BIGNUM *a, unsigned char *to);
413  void (*RSA_free)(RSA *rsa);
414  void (*BN_free)(BIGNUM *a);
-
415  system_imports_t *system;
+
415  system_imports_t *system;
416  u32 resolved_imports_count;
-
417 } imported_funcs_t;
+
417 } imported_funcs_t;
418 
-
419 assert_offset(imported_funcs_t, RSA_public_decrypt, 0);
-
420 assert_offset(imported_funcs_t, EVP_PKEY_set1_RSA_null, 8);
-
421 assert_offset(imported_funcs_t, RSA_get0_key_null, 0x10);
-
422 assert_offset(imported_funcs_t, RSA_public_decrypt_hook_ptr, 0x18);
-
423 assert_offset(imported_funcs_t, EVP_PKEY_set1_RSA_hook_ptr_null, 0x20);
-
424 assert_offset(imported_funcs_t, RSA_get0_key_hook_ptr_null, 0x28);
-
425 assert_offset(imported_funcs_t, DSA_get0_pqg, 0x30);
-
426 assert_offset(imported_funcs_t, DSA_get0_pub_key, 0x38);
-
427 assert_offset(imported_funcs_t, EC_POINT_point2oct, 0x40);
-
428 assert_offset(imported_funcs_t, EC_KEY_get0_public_key, 0x48);
-
429 assert_offset(imported_funcs_t, EC_KEY_get0_group, 0x50);
-
430 assert_offset(imported_funcs_t, EVP_sha256, 0x58);
-
431 assert_offset(imported_funcs_t, RSA_get0_key, 0x60);
-
432 assert_offset(imported_funcs_t, BN_num_bits, 0x68);
-
433 assert_offset(imported_funcs_t, EVP_PKEY_new_raw_public_key, 0x70);
-
434 assert_offset(imported_funcs_t, EVP_MD_CTX_new, 0x78);
-
435 assert_offset(imported_funcs_t, EVP_DigestVerifyInit, 0x80);
-
436 assert_offset(imported_funcs_t, EVP_MD_CTX_free, 0x90);
-
437 assert_offset(imported_funcs_t, EVP_PKEY_free, 0x98);
-
438 assert_offset(imported_funcs_t, EVP_CIPHER_CTX_new, 0xA0);
-
439 assert_offset(imported_funcs_t, EVP_DecryptInit_ex, 0xA8);
-
440 assert_offset(imported_funcs_t, EVP_DecryptUpdate, 0xB0);
-
441 assert_offset(imported_funcs_t, EVP_DecryptFinal_ex, 0xB8);
-
442 assert_offset(imported_funcs_t, EVP_CIPHER_CTX_free, 0xC0);
-
443 assert_offset(imported_funcs_t, EVP_chacha20, 0xC8);
-
444 assert_offset(imported_funcs_t, RSA_new, 0xD0);
-
445 assert_offset(imported_funcs_t, BN_dup, 0xD8);
-
446 assert_offset(imported_funcs_t, BN_bin2bn, 0xE0);
-
447 assert_offset(imported_funcs_t, RSA_set0_key, 0xE8);
-
448 assert_offset(imported_funcs_t, RSA_sign, 0xF8);
-
449 assert_offset(imported_funcs_t, BN_bn2bin, 0x100);
-
450 assert_offset(imported_funcs_t, RSA_free, 0x108);
-
451 assert_offset(imported_funcs_t, BN_free, 0x110);
-
452 assert_offset(imported_funcs_t, system, 0x118);
-
453 assert_offset(imported_funcs_t, resolved_imports_count, 0x120);
+
419 assert_offset(imported_funcs_t, RSA_public_decrypt, 0);
+
420 assert_offset(imported_funcs_t, EVP_PKEY_set1_RSA_null, 8);
+
421 assert_offset(imported_funcs_t, RSA_get0_key_null, 0x10);
+
422 assert_offset(imported_funcs_t, RSA_public_decrypt_hook_ptr, 0x18);
+
423 assert_offset(imported_funcs_t, EVP_PKEY_set1_RSA_hook_ptr_null, 0x20);
+
424 assert_offset(imported_funcs_t, RSA_get0_key_hook_ptr_null, 0x28);
+
425 assert_offset(imported_funcs_t, DSA_get0_pqg, 0x30);
+
426 assert_offset(imported_funcs_t, DSA_get0_pub_key, 0x38);
+
427 assert_offset(imported_funcs_t, EC_POINT_point2oct, 0x40);
+
428 assert_offset(imported_funcs_t, EC_KEY_get0_public_key, 0x48);
+
429 assert_offset(imported_funcs_t, EC_KEY_get0_group, 0x50);
+
430 assert_offset(imported_funcs_t, EVP_sha256, 0x58);
+
431 assert_offset(imported_funcs_t, RSA_get0_key, 0x60);
+
432 assert_offset(imported_funcs_t, BN_num_bits, 0x68);
+
433 assert_offset(imported_funcs_t, EVP_PKEY_new_raw_public_key, 0x70);
+
434 assert_offset(imported_funcs_t, EVP_MD_CTX_new, 0x78);
+
435 assert_offset(imported_funcs_t, EVP_DigestVerifyInit, 0x80);
+
436 assert_offset(imported_funcs_t, EVP_MD_CTX_free, 0x90);
+
437 assert_offset(imported_funcs_t, EVP_PKEY_free, 0x98);
+
438 assert_offset(imported_funcs_t, EVP_CIPHER_CTX_new, 0xA0);
+
439 assert_offset(imported_funcs_t, EVP_DecryptInit_ex, 0xA8);
+
440 assert_offset(imported_funcs_t, EVP_DecryptUpdate, 0xB0);
+
441 assert_offset(imported_funcs_t, EVP_DecryptFinal_ex, 0xB8);
+
442 assert_offset(imported_funcs_t, EVP_CIPHER_CTX_free, 0xC0);
+
443 assert_offset(imported_funcs_t, EVP_chacha20, 0xC8);
+
444 assert_offset(imported_funcs_t, RSA_new, 0xD0);
+
445 assert_offset(imported_funcs_t, BN_dup, 0xD8);
+
446 assert_offset(imported_funcs_t, BN_bin2bn, 0xE0);
+
447 assert_offset(imported_funcs_t, RSA_set0_key, 0xE8);
+
448 assert_offset(imported_funcs_t, RSA_sign, 0xF8);
+
449 assert_offset(imported_funcs_t, BN_bn2bin, 0x100);
+
450 assert_offset(imported_funcs_t, RSA_free, 0x108);
+
451 assert_offset(imported_funcs_t, BN_free, 0x110);
+
452 assert_offset(imported_funcs_t, system, 0x118);
+
453 assert_offset(imported_funcs_t, resolved_imports_count, 0x120);
454 
-
455 typedef struct __attribute__((packed)) global_context {
+
455 typedef struct __attribute__((packed)) global_context {
456  PADDING(8);
-
461  imported_funcs_t *imported_funcs;
+
461  imported_funcs_t *imported_funcs;
462  PADDING(0x70);
-
468  u64 code_range_start;
-
474  u64 code_range_end;
+
468  u64 code_range_start;
+
474  u64 code_range_end;
475  PADDING(0x78);
-
480  u8 secret_data[57];
-
486  u8 shift_operations[31];
-
492  u32 reg2reg_instructions_count;
-
493 } global_context_t;
+
480  u8 secret_data[57];
+
486  u8 shift_operations[31];
+
492  u32 reg2reg_instructions_count;
+
493 } global_context_t;
494 
-
495 assert_offset(global_context_t, imported_funcs, 8);
-
496 assert_offset(global_context_t, code_range_start, 0x80);
-
497 assert_offset(global_context_t, code_range_end, 0x88);
-
498 assert_offset(global_context_t, secret_data, 0x108);
-
499 assert_offset(global_context_t, shift_operations, 0x141);
-
500 assert_offset(global_context_t, reg2reg_instructions_count, 0x160);
+
495 assert_offset(global_context_t, imported_funcs, 8);
+
496 assert_offset(global_context_t, code_range_start, 0x80);
+
497 assert_offset(global_context_t, code_range_end, 0x88);
+
498 assert_offset(global_context_t, secret_data, 0x108);
+
499 assert_offset(global_context_t, shift_operations, 0x141);
+
500 assert_offset(global_context_t, reg2reg_instructions_count, 0x160);
501 
502 
-
503 typedef struct __attribute__((packed)) {
-
504  elf_info_t *lib_elf_info;
-
505  elf_info_t *elf_info;
-
506 } elf_lib_info_t;
+
503 typedef struct __attribute__((packed)) {
+
504  elf_info_t *lib_elf_info;
+
505  elf_info_t *elf_info;
+
506 } elf_lib_info_t;
507 
-
508 assert_offset(elf_lib_info_t, lib_elf_info, 0);
-
509 assert_offset(elf_lib_info_t, elf_info, 8);
+
508 assert_offset(elf_lib_info_t, lib_elf_info, 0);
+
509 assert_offset(elf_lib_info_t, elf_info, 8);
510 
-
517 typedef struct __attribute__((packed)) backdoor_data {
-
518  PADDING(0x30);
-
519  // elf_lib_info_t
-
520  PADDING(sizeof(elf_lib_info_t));
-
521 
-
525  elf_info_t *libc;
-
526  PADDING(sizeof(elf_info_t *));
-
530  elf_info_t *libcrypto;
-
531 
-
535  struct backdoor_data *backdoor_data;
-
536  PADDING(sizeof(elf_lib_info_t *));
-
537 
-
539  PADDING(sizeof(elf_info_t));
-
540  PADDING(sizeof(elf_info_t));
-
544  elf_info_t libc_info;
-
545  PADDING(sizeof(elf_info_t));
-
549  elf_info_t libcrypto_info;
-
550 
-
554  libc_imports_t libc_imports;
-
555 
-
556  PADDING(0x390);
-
560  lzma_allocator *import_resolver;
-
561 } backdoor_data_t;
-
562 
-
563 assert_offset(backdoor_data_t, libc, 0x40);
-
564 assert_offset(backdoor_data_t, libcrypto, 0x50);
-
565 assert_offset(backdoor_data_t, libc_info, 0x268);
-
566 assert_offset(backdoor_data_t, libcrypto_info, 0x468);
-
567 assert_offset(backdoor_data_t, libc_imports, 0x568);
-
568 assert_offset(backdoor_data_t, import_resolver, 0x950);
-
569 static_assert(sizeof(backdoor_data_t) == 0x958);
-
570 
-
577 typedef union {
-
579  u32 index;
-
580  struct {
-
582  u32 bit_index : 3;
-
584  u32 byte_index : 29;
-
585  };
-
586 } secret_data_shift_cursor;
-
587 
-
596 extern int x86_dasm(dasm_ctx_t *ctx, u8 *code_start, u8 *code_end);
-
597 
-
607 extern BOOL find_call_instruction(u8 *code_start, u8 *code_end, u8 *call_target, dasm_ctx_t *dctx);
-
608 
-
617 extern BOOL find_lea_instruction(u8 *code_start, u8 *code_end, u64 displacement);
-
618 
-
628 extern BOOL find_instruction_with_mem_operand(
-
629  u8 *code_start,
-
630  u8 *code_end,
-
631  dasm_ctx_t *dctx,
-
632  void *mem_address
-
633 );
-
634 
-
644 extern BOOL find_lea_instruction_with_mem_operand(
-
645  u8 *code_start,
-
646  u8 *code_end,
-
647  dasm_ctx_t *dctx,
-
648  void *mem_address
-
649 );
-
650 
-
661 extern BOOL find_instruction_with_mem_operand_ex(
-
662  u8 *code_start,
-
663  u8 *code_end,
-
664  dasm_ctx_t *dctx,
-
665  int opcode,
-
666  void *mem_address
-
667 );
-
668 
-
688 extern BOOL find_reg2reg_instruction(u8 *code_start, u8 *code_end, dasm_ctx_t *dctx);
-
689 
-
699 extern BOOL find_function_prologue(u8 *code_start, u8 *code_end, u8 **output, FuncFindType find_mode);
-
700 
-
714 extern BOOL find_function_prologue_ex(
-
715  u8 *code_start,
-
716  u8 *func_start_0,
-
717  u8 *func_start_1,
-
718  u8 *search_base,
-
719  u8 *code_end,
-
720  FuncFindType find_mode);
-
721 
-
732 extern BOOL elf_contains_vaddr(elf_info_t *elf_info, u64 vaddr, u64 size, u32 p_flags);
-
733 
-
741 extern BOOL elf_parse(Elf64_Ehdr *ehdr, elf_info_t *elf_info);
-
742 
-
751 extern Elf64_Sym *elf_symbol_get(elf_info_t *elf_info, u32 encoded_string_id, const char *sym_version);
-
752 
-
760 extern void *elf_symbol_get_addr(elf_info_t *elf_info, u32 encoded_string_id);
-
761 
-
769 extern u64 elf_get_code_segment(elf_info_t *elf_info, u64 *pSize);
-
770 
-
782 extern void *elf_get_reloc_symbol(
-
783  elf_info_t *elf_info,
-
784  Elf64_Rela *relocs,
-
785  unsigned num_relocs,
-
786  unsigned reloc_type,
-
787  u32 encoded_string_id);
-
788 
-
796 extern void *elf_get_plt_symbol(elf_info_t *elf_info, u32 encoded_string_id);
-
797 
-
805 extern void *elf_get_got_symbol(elf_info_t *elf_info, u32 encoded_string_id);
-
806 
-
813 extern lzma_allocator *get_lzma_allocator();
-
814 
-
825 extern BOOL secret_data_append_if_flags(
-
826  secret_data_shift_cursor shift_cursor,
-
827  unsigned operation_index,
-
828  unsigned reg2reg_instruction_count,
-
829  int flags, u8 *code);
-
830 
-
869 extern BOOL secret_data_append_singleton(
-
870  u8 *call_site, u8 *code,
-
871  secret_data_shift_cursor shift_cursor,
-
872  unsigned reg2reg_instruction_count, unsigned operation_index);
-
873 
-
880 extern BOOL backdoor_setup(backdoor_setup_params_t *params);
-
881 
-
882 #include "util.h"
-
883 #endif
-
secret_data_shift_cursor
represents a shift register, which will shift a '1' into the secret data array. the low 3 bits repres...
Definition: xzre.h:577
-
secret_data_shift_cursor::index
u32 index
Definition: xzre.h:579
-
secret_data_shift_cursor::bit_index
u32 bit_index
Definition: xzre.h:582
-
secret_data_shift_cursor::byte_index
u32 byte_index
Definition: xzre.h:584
+
515 typedef struct __attribute__((packed)) {
+
516  PADDING(0x30);
+
517  PADDING(sizeof(elf_lib_info_t));
+
518 
+
522  elf_info_t *libc;
+
523  PADDING(sizeof(elf_info_t *));
+
527  elf_info_t *libcrypto;
+
528 
+
532  struct backdoor_data *backdoor_data;
+
533  PADDING(sizeof(elf_lib_info_t *));
+
534 
+
536  PADDING(sizeof(elf_info_t));
+
537  PADDING(sizeof(elf_info_t));
+
541  elf_info_t libc_info;
+
542  PADDING(sizeof(elf_info_t));
+
546  elf_info_t libcrypto_info;
+
547 
+
551  libc_imports_t libc_imports;
+
552 
+
553  PADDING(0x390);
+
557  lzma_allocator *import_resolver;
+
558 } backdoor_data_t;
+
559 
+
560 assert_offset(backdoor_data_t, libc, 0x40);
+
561 assert_offset(backdoor_data_t, libcrypto, 0x50);
+
562 assert_offset(backdoor_data_t, libc_info, 0x268);
+
563 assert_offset(backdoor_data_t, libcrypto_info, 0x468);
+
564 assert_offset(backdoor_data_t, libc_imports, 0x568);
+
565 assert_offset(backdoor_data_t, import_resolver, 0x950);
+
566 static_assert(sizeof(backdoor_data_t) == 0x958);
+
567 
+
574 typedef union {
+
576  u32 index;
+
577  struct {
+
579  u32 bit_index : 3;
+
581  u32 byte_index : 29;
+
582  };
+
583 } secret_data_shift_cursor;
+
584 
+
593 extern int x86_dasm(dasm_ctx_t *ctx, u8 *code_start, u8 *code_end);
+
594 
+
604 extern BOOL find_call_instruction(u8 *code_start, u8 *code_end, u8 *call_target, dasm_ctx_t *dctx);
+
605 
+
614 extern BOOL find_lea_instruction(u8 *code_start, u8 *code_end, u64 displacement);
+
615 
+
625 extern BOOL find_instruction_with_mem_operand(
+
626  u8 *code_start,
+
627  u8 *code_end,
+
628  dasm_ctx_t *dctx,
+
629  void *mem_address
+
630 );
+
631 
+
641 extern BOOL find_lea_instruction_with_mem_operand(
+
642  u8 *code_start,
+
643  u8 *code_end,
+
644  dasm_ctx_t *dctx,
+
645  void *mem_address
+
646 );
+
647 
+
658 extern BOOL find_instruction_with_mem_operand_ex(
+
659  u8 *code_start,
+
660  u8 *code_end,
+
661  dasm_ctx_t *dctx,
+
662  int opcode,
+
663  void *mem_address
+
664 );
+
665 
+
685 extern BOOL find_reg2reg_instruction(u8 *code_start, u8 *code_end, dasm_ctx_t *dctx);
+
686 
+
696 extern BOOL find_function_prologue(u8 *code_start, u8 *code_end, u8 **output, FuncFindType find_mode);
+
697 
+
711 extern BOOL find_function_prologue_ex(
+
712  u8 *code_start,
+
713  u8 *func_start_0,
+
714  u8 *func_start_1,
+
715  u8 *search_base,
+
716  u8 *code_end,
+
717  FuncFindType find_mode);
+
718 
+
729 extern BOOL elf_contains_vaddr(elf_info_t *elf_info, u64 vaddr, u64 size, u32 p_flags);
+
730 
+
738 extern BOOL elf_parse(Elf64_Ehdr *ehdr, elf_info_t *elf_info);
+
739 
+
748 extern Elf64_Sym *elf_symbol_get(elf_info_t *elf_info, u32 encoded_string_id, const char *sym_version);
+
749 
+
757 extern void *elf_symbol_get_addr(elf_info_t *elf_info, u32 encoded_string_id);
+
758 
+
766 extern u64 elf_get_code_segment(elf_info_t *elf_info, u64 *pSize);
+
767 
+
779 extern void *elf_get_reloc_symbol(
+
780  elf_info_t *elf_info,
+
781  Elf64_Rela *relocs,
+
782  unsigned num_relocs,
+
783  unsigned reloc_type,
+
784  u32 encoded_string_id);
+
785 
+
793 extern void *elf_get_plt_symbol(elf_info_t *elf_info, u32 encoded_string_id);
+
794 
+
802 extern void *elf_get_got_symbol(elf_info_t *elf_info, u32 encoded_string_id);
+
803 
+
810 extern lzma_allocator *get_lzma_allocator();
+
811 
+
822 extern BOOL secret_data_append_if_flags(
+
823  secret_data_shift_cursor shift_cursor,
+
824  unsigned operation_index,
+
825  unsigned reg2reg_instruction_count,
+
826  int flags, u8 *code);
+
827 
+
866 extern BOOL secret_data_append_singleton(
+
867  u8 *call_site, u8 *code,
+
868  secret_data_shift_cursor shift_cursor,
+
869  unsigned reg2reg_instruction_count, unsigned operation_index);
+
870 
+
877 extern BOOL backdoor_setup(backdoor_setup_params_t *params);
+
878 
+
879 #include "util.h"
+
880 #endif
+
backdoor_data_t
this structure is used to hold most of the backdoor information. it's used as a local variable in fun...
Definition: xzre.h:515
+
backdoor_data_t::libcrypto_info
elf_info_t libcrypto_info
ELF context for libcrypto.so.
Definition: xzre.h:546
+
backdoor_data_t::libc
elf_info_t * libc
points to libc_info
Definition: xzre.h:522
+
backdoor_data_t::import_resolver
lzma_allocator * import_resolver
ELF import resolver (fake LZMA allocator)
Definition: xzre.h:557
+
backdoor_data_t::libc_imports
libc_imports_t libc_imports
functions imported from libc
Definition: xzre.h:551
+
backdoor_data_t::libcrypto
elf_info_t * libcrypto
points to libcrypto_info
Definition: xzre.h:527
+
backdoor_data_t::backdoor_data
struct backdoor_data * backdoor_data
points to the beginning of this struct
Definition: xzre.h:532
+
backdoor_data_t::libc_info
elf_info_t libc_info
ELF context for libc.so.
Definition: xzre.h:541
+
backdoor_data_t::PADDING
PADDING(sizeof(elf_info_t))
+
backdoor_setup_params_t
Definition: xzre.h:133
+
backdoor_shared_globals_t
Definition: xzre.h:126
+
dasm_ctx_t
Definition: xzre.h:144
+
elf_entry_ctx_t
Definition: xzre.h:87
+
elf_entry_ctx_t::return_address
void * return_address
the return address value of the caller obtained from *(u64 *)(caller_locals+24) since the entrypoint ...
Definition: xzre.h:103
+
elf_entry_ctx_t::cpuid_fn
void * cpuid_fn
points to the real cpuid function
Definition: xzre.h:107
+
elf_entry_ctx_t::got_offset
u64 got_offset
holds the offset of the symbol relative to the GOT. used to derive the got_ptr
Definition: xzre.h:112
+
elf_entry_ctx_t::got_ptr
void * got_ptr
points to the Global Offset Table
Definition: xzre.h:96
+
elf_entry_ctx_t::symbol_ptr
void * symbol_ptr
points to a symbol in memory will be used to find the GOT value
Definition: xzre.h:92
+
elf_entry_ctx_t::caller_locals
u64 * caller_locals
stores the value of __builtin_frame_address(0)-16
Definition: xzre.h:116
+
elf_info
Definition: xzre.h:189
+
elf_info::code_segment_size
u64 code_segment_size
page-aligned virtual size of the first executable ELF segment
Definition: xzre.h:268
+
elf_info::first_vaddr
u64 first_vaddr
virtual address of the first program header
Definition: xzre.h:197
+
elf_info::gnurelro_memsize
u64 gnurelro_memsize
size of the GNU relro segment
Definition: xzre.h:243
+
elf_info::verdef
Elf64_Verdef * verdef
pointer to the EFL symbol versioning (from DT_VERDEF)
Definition: xzre.h:247
+
elf_info::gnu_hash_last_bloom
u32 gnu_hash_last_bloom
last valid bloom value
Definition: xzre.h:279
+
elf_info::dyn
Elf64_Dyn * dyn
pointer to the ELF dynamic segment
Definition: xzre.h:209
+
elf_info::strtab
char * strtab
pointer to the ELF string table
Definition: xzre.h:217
+
elf_info::phdrs
Elf64_Phdr * phdrs
pointer to the ELF program headers array in memory
Definition: xzre.h:201
+
elf_info::gnu_hash_nbuckets
u32 gnu_hash_nbuckets
number of GNU hash buckets (from DT_GNU_HASH)
Definition: xzre.h:275
+
elf_info::elfbase
Elf64_Ehdr * elfbase
pointed to the ELF base address in memory
Definition: xzre.h:193
+
elf_info::e_phnum
u64 e_phnum
copy of the ELF program header count from the ELF header
Definition: xzre.h:205
+
elf_info::plt_relocs
Elf64_Rela * plt_relocs
pointer to the ELF PLT relocations table
Definition: xzre.h:225
+
elf_info::gnurelro_found
BOOL gnurelro_found
whether the loaded ELF contains PT_GNU_RELRO or not which specifies the location and size of a segmen...
Definition: xzre.h:235
+
elf_info::code_segment_start
u64 code_segment_start
page-aligned virtual address of the first executable ELF segment
Definition: xzre.h:263
+
elf_info::verdef_num
u64 verdef_num
number of entries in the symbol versioning table
Definition: xzre.h:251
+
elf_info::gnurelro_vaddr
u64 gnurelro_vaddr
location of the GNU relro segment
Definition: xzre.h:239
+
elf_info::symtab
Elf64_Sym * symtab
pointer to the ELF symbol table
Definition: xzre.h:221
+
elf_info::dyn_num_entries
u64 dyn_num_entries
number of entries in the ELF dynamic segment
Definition: xzre.h:213
+
elf_info::plt_relocs_num
u32 plt_relocs_num
number of entries in the PLT relocation table
Definition: xzre.h:229
+
elf_lib_info_t
Definition: xzre.h:503
+
global_context
Definition: xzre.h:455
+
global_context::imported_funcs
imported_funcs_t * imported_funcs
pointer to the structure containing resolved OpenSSL and system functions
Definition: xzre.h:461
+
global_context::code_range_start
u64 code_range_start
the shifter will use this address as the minimum search address any instruction below this address wi...
Definition: xzre.h:468
+
global_context::code_range_end
u64 code_range_end
the shifter will use this address as the maximum search address any instruction beyond this address w...
Definition: xzre.h:474
+
global_context::reg2reg_instructions_count
u32 reg2reg_instructions_count
cumulative number of reg2reg instructions successfully validated by the data shifter
Definition: xzre.h:492
+
imported_funcs_t
Definition: xzre.h:355
+
libc_imports
Definition: xzre.h:317
+
system_imports_t
Definition: xzre.h:324
+
secret_data_shift_cursor
represents a shift register, which will shift a '1' into the secret data array. the low 3 bits repres...
Definition: xzre.h:574
+
secret_data_shift_cursor::index
u32 index
Definition: xzre.h:576
+
secret_data_shift_cursor::bit_index
u32 bit_index
Definition: xzre.h:579
+
secret_data_shift_cursor::byte_index
u32 byte_index
Definition: xzre.h:581
elf_parse
BOOL elf_parse(Elf64_Ehdr *ehdr, elf_info_t *elf_info)
Parses the given in-memory ELF file into elf_info.
find_instruction_with_mem_operand_ex
BOOL find_instruction_with_mem_operand_ex(u8 *code_start, u8 *code_end, dasm_ctx_t *dctx, int opcode, void *mem_address)
finds an instruction with an immediate memory operand
elf_symbol_get_addr
void * elf_symbol_get_addr(elf_info_t *elf_info, u32 encoded_string_id)
Looks up an ELF symbol from a parsed ELF, and returns its memory address.
@@ -600,7 +647,6 @@
secret_data_append_if_flags
BOOL secret_data_append_if_flags(secret_data_shift_cursor shift_cursor, unsigned operation_index, unsigned reg2reg_instruction_count, int flags, u8 *code)
Calls secret_data_append_singleton, if flags are non-zero.
find_lea_instruction
BOOL find_lea_instruction(u8 *code_start, u8 *code_end, u64 displacement)
finds a lea instruction
find_reg2reg_instruction
BOOL find_reg2reg_instruction(u8 *code_start, u8 *code_end, dasm_ctx_t *dctx)
finds a reg2reg instruction
-
__attribute__
struct __attribute__((packed))
this structure is used to hold most of the backdoor information. it's used as a local variable in fun...
Definition: xzre.h:87
elf_get_code_segment
u64 elf_get_code_segment(elf_info_t *elf_info, u64 *pSize)
Obtains the address and size of the first executable page in the given ELF file.