Example #1
0
        public static CorDynamicInfoHook Hook(ICorJitInfo *comp)
        {
            ICorDynamicInfo *dynInfo  = ICorJitInfo.ICorDynamicInfo(comp);
            IntPtr *         vfTbl    = dynInfo->vfptr;
            const int        SLOT_NUM = 0x27;
            IntPtr *         newVfTbl = (IntPtr *)Marshal.AllocHGlobal(SLOT_NUM * IntPtr.Size);

            for (int i = 0; i < SLOT_NUM; i++)
            {
                newVfTbl[i] = vfTbl[i];
            }
            if (ctNum == -1)
            {
                for (int i = 0; i < SLOT_NUM; i++)
                {
                    bool overrided = true;
                    for (byte *func = (byte *)vfTbl[i]; *func != 0xe9; func++)
                    {
                        if (IntPtr.Size == 8 ?
                            (*func == 0x48 && *(func + 1) == 0x81 && *(func + 2) == 0xe9) :
                            (*func == 0x83 && *(func + 1) == 0xe9))
                        {
                            overrided = false;
                            break;
                        }
                    }
                    if (overrided)
                    {
                        ctNum = i + 8;
                        break;
                    }
                }
            }

            CorDynamicInfoHook ret = new CorDynamicInfoHook()
            {
                info     = dynInfo,
                comp     = comp,
                newVfTbl = newVfTbl,
                oriVfTbl = vfTbl
            };

            ret.n_constructStringLiteral = new constructStringLiteral(ret.hookConstructStr);
            ret.o_constructStringLiteral = Marshal.GetDelegateForFunctionPointer(vfTbl[ctNum], typeof(constructStringLiteral)) as constructStringLiteral;
            newVfTbl[ctNum] = Marshal.GetFunctionPointerForDelegate(ret.n_constructStringLiteral);

            dynInfo->vfptr = newVfTbl;
            return(ret);
        }
Example #2
0
        public static CorDynamicInfoHook Hook(ICorJitInfo* comp)
        {
            ICorDynamicInfo* dynInfo = ICorJitInfo.ICorDynamicInfo(comp);
            IntPtr* vfTbl = dynInfo->vfptr;
            const int SLOT_NUM = 0x27;
            IntPtr* newVfTbl = (IntPtr*)Marshal.AllocHGlobal(SLOT_NUM * IntPtr.Size);
            for (int i = 0; i < SLOT_NUM; i++)
                newVfTbl[i] = vfTbl[i];
            if (ctNum == -1)
                for (int i = 0; i < SLOT_NUM; i++)
                {
                    bool overrided = true;
                    for (byte* func = (byte*)vfTbl[i]; *func != 0xe9; func++)
                        if (IntPtr.Size == 8 ?
                            (*func == 0x48 && *(func + 1) == 0x81 && *(func + 2) == 0xe9) :
                             (*func == 0x83 && *(func + 1) == 0xe9))
                        {
                            overrided = false;
                            break;
                        }
                    if (overrided)
                    {
                        ctNum = i + 8;
                        break;
                    }
                }

            CorDynamicInfoHook ret = new CorDynamicInfoHook()
            {
                info = dynInfo,
                comp = comp,
                newVfTbl = newVfTbl,
                oriVfTbl = vfTbl
            };

            ret.n_constructStringLiteral = new constructStringLiteral(ret.hookConstructStr);
            ret.o_constructStringLiteral = Marshal.GetDelegateForFunctionPointer(vfTbl[ctNum], typeof(constructStringLiteral)) as constructStringLiteral;
            newVfTbl[ctNum] = Marshal.GetFunctionPointerForDelegate(ret.n_constructStringLiteral);

            dynInfo->vfptr = newVfTbl;
            return ret;
        }
Example #3
0
    //static unsafe void Parse(byte* body, CORINFO_METHOD_INFO* info, ICorJitInfo* comp, out CORINFO_EH_CLAUSE[] ehs)
    //{
    //    //Refer to SSCLI
    //    if ((*body & 0x3) == 0x2)
    //    {
    //        if (ver)
    //        {
    //            *((uint*)(info + 1) + 0) = 8;   //maxstack
    //            *((uint*)(info + 1) + 1) = 0;   //ehcount
    //        }
    //        else
    //        {
    //            *((ushort*)(info + 1) + 0) = 8;
    //            *((ushort*)(info + 1) + 1) = 0;
    //        }
    //        info->ILCode = body + 1;
    //        info->ILCodeSize = (uint)(*body >> 2);
    //        ehs = null;
    //        return;
    //    }
    //    else
    //    {
    //        ushort flags = *(ushort*)body;
    //        if (ver)    //maxstack
    //            *((uint*)(info + 1) + 0) = *(ushort*)(body + 2);
    //        else
    //            *((ushort*)(info + 1) + 0) = *(ushort*)(body + 2);
    //        info->ILCodeSize = *(uint*)(body + 4);
    //        var localVarTok = *(uint*)(body + 8);
    //        if ((flags & 0x10) != 0)
    //        {
    //            if (ver)    //options
    //                *((uint*)(info + 1) + 2) |= (uint)CorInfoOptions.OPT_INIT_LOCALS;
    //            else
    //                *((uint*)(info + 1) + 1) |= (ushort)CorInfoOptions.OPT_INIT_LOCALS;
    //        }
    //        info->ILCode = body + 12;

    //        if (localVarTok != 0)
    //            ParseLocalVars(info, comp, localVarTok);

    //        if ((flags & 0x8) != 0)
    //        {
    //            body = body + 12 + info->ILCodeSize;
    //            var list = new ArrayList();
    //            byte f;
    //            do
    //            {
    //                body = (byte*)(((uint)body + 3) & ~3);
    //                f = *body;
    //                uint count;
    //                bool isSmall = (f & 0x40) == 0;
    //                if (isSmall)
    //                    count = *(body + 1) / 12u;
    //                else
    //                    count = (*(uint*)body >> 8) / 24;
    //                body += 4;

    //                for (int i = 0; i < count; i++)
    //                {
    //                    var clause = new CORINFO_EH_CLAUSE();
    //                    clause.Flags = (CORINFO_EH_CLAUSE_FLAGS)(*body & 0x7);
    //                    body += isSmall ? 2 : 4;

    //                    clause.TryOffset = isSmall ? *(ushort*)body : *(uint*)body;
    //                    body += isSmall ? 2 : 4;
    //                    clause.TryLength = isSmall ? *(byte*)body : *(uint*)body;
    //                    body += isSmall ? 1 : 4;

    //                    clause.HandlerOffset = isSmall ? *(ushort*)body : *(uint*)body;
    //                    body += isSmall ? 2 : 4;
    //                    clause.HandlerLength = isSmall ? *(byte*)body : *(uint*)body;
    //                    body += isSmall ? 1 : 4;

    //                    clause.ClassTokenOrFilterOffset = *(uint*)body;
    //                    body += 4;

    //                    if ((clause.ClassTokenOrFilterOffset & 0xff000000) == 0x1b000000)
    //                    {
    //                        if (ver)    //options
    //                            *((uint*)(info + 1) + 2) |= (uint)CorInfoOptions.GENERICS_CTXT_KEEP_ALIVE;
    //                        else
    //                            *((uint*)(info + 1) + 1) |= (ushort)CorInfoOptions.GENERICS_CTXT_KEEP_ALIVE;
    //                    }

    //                    list.Add(clause);
    //                }
    //            }
    //            while ((f & 0x80) != 0);
    //            ehs = new CORINFO_EH_CLAUSE[list.Count];
    //            for (int i = 0; i < ehs.Length; i++)
    //                ehs[i] = (CORINFO_EH_CLAUSE)list[i];
    //            if (ver)    //ehcount
    //                *((uint*)(info + 1) + 1) = (ushort)ehs.Length;
    //            else
    //                *((ushort*)(info + 1) + 1) = (ushort)ehs.Length;
    //        }
    //        else
    //        {
    //            ehs = null;
    //            if (ver)    //ehcount
    //                *((uint*)(info + 1) + 1) = 0;
    //            else
    //                *((ushort*)(info + 1) + 1) = 0;
    //        }
    //    }
    //}
    static unsafe uint Interop(IntPtr self, ICorJitInfo *comp, CORINFO_METHOD_INFO *info, uint flags, byte **nativeEntry, uint *nativeSizeOfCode)
    {
        if (self == IntPtr.Zero)
        {
            return(0);
        }

        if (info != null &&
            (ulong)info->ILCode > s &&
            (ulong)info->ILCode < s + l &&
            info->ILCodeSize == 0x11 &&
            info->ILCode[0] == 0x21 &&
            info->ILCode[9] == 0x20 &&
            info->ILCode[14] == 0x26)
        {
            ulong num = *(ulong *)(info->ILCode + 1);
            uint  key = (uint)(num >> 32);
            uint  ptr = (uint)(num & 0xFFFFFFFF) ^ key;
            uint  len = ~*(uint *)(info->ILCode + 10) ^ key;

            byte[] buff = new byte[len];
            fixed(byte *arr = buff)
            {
                Marshal.Copy(data, (int)ptr, (IntPtr)arr, (int)len);

                uint k = key * (uint)Mutation.Key4I;

                for (uint i = 0; i < buff.Length; i++)
                {
                    arr[i] ^= (byte)(k & 0xff);
                    k       = (k * arr[i] + key) % 0xff;
                }

                MethodData *dat = (MethodData *)arr;

                info->ILCodeSize = dat->ILCodeSize;
                if (ver)
                {
                    *((uint *)(info + 1) + 0) = dat->MaxStack;
                    *((uint *)(info + 1) + 1) = dat->EHCount;
                    *((uint *)(info + 1) + 2) = dat->Options & 0xff;
                }
                else
                {
                    *((ushort *)(info + 1) + 0) = (ushort)dat->MaxStack;
                    *((ushort *)(info + 1) + 1) = (ushort)dat->EHCount;
                    *((uint *)(info + 1) + 1)   = dat->Options & 0xff;
                }
                if (dat->LocalVars != 0)
                {
                    ParseLocalVars(info, comp, dat->LocalVars);
                }

                CORINFO_EH_CLAUSE[] ehs;
                byte *body = (byte *)(dat + 1);

                if ((dat->Options >> 8) == 0)
                {
                    info->ILCode = body;
                    body        += info->ILCodeSize;
                    ehs          = new CORINFO_EH_CLAUSE[dat->EHCount];
                    CORINFO_EH_CLAUSE *ehPtr = (CORINFO_EH_CLAUSE *)body;
                    for (int i = 0; i < dat->EHCount; i++)
                    {
                        ehs[i] = *ehPtr;
                        *ehPtr = new CORINFO_EH_CLAUSE();
                        ehPtr++;
                    }
                }
                else
                {
                    ehs = new CORINFO_EH_CLAUSE[dat->EHCount];
                    CORINFO_EH_CLAUSE *ehPtr = (CORINFO_EH_CLAUSE *)body;
                    for (int i = 0; i < dat->EHCount; i++)
                    {
                        ehs[i] = *ehPtr;
                        *ehPtr = new CORINFO_EH_CLAUSE();
                        ehPtr++;
                    }
                    info->ILCode = (byte *)ehPtr;
                }

                *((ulong *)dat)     = 0;
                *((ulong *)dat + 1) = 0;
                *((uint *)dat + 4)  = 0;

                var  hook1 = CorMethodInfoHook.Hook(comp, info->ftn, ehs);
                var  hook2 = CorDynamicInfoHook.Hook(comp);
                uint ret   = originalDelegate(self, comp, info, flags, nativeEntry, nativeSizeOfCode);

                hook2.Dispose();
                hook1.Dispose();
                return(ret);
            }
        }
        else
        {
            return(originalDelegate(self, comp, info, flags, nativeEntry, nativeSizeOfCode));
        }
    }