Exemple #1
0
        public void encryptNativeMethods(MetadataBuilder builder)
        {
            if (methodToNativeMethod.Count == 0)
            {
                return;
            }

            Log.v("Encrypting native methods");

            var stream = new MemoryStream();
            var writer = new BinaryWriter(stream);

            writer.Write((uint)0);              // patch count
            writer.Write((uint)0);              // mode
            writer.Write(methodToNativeMethod.Count);

            int index      = 0;
            var codeWriter = builder.CodeWriter;

            foreach (var pair in methodToNativeMethod)
            {
                var method = pair.Key;
                if (method.DeclaringType == null)
                {
                    continue;                           // Method was removed
                }
                if (method.DeclaringType.Module == null)
                {
                    continue;                           // method.DeclaringType was removed
                }
                var code = pair.Value;

                uint codeRva = builder.GetMethodBodyRva((int)method.MetadataToken.RID - 1);
                if ((codeWriter.ReadByteAtRva(codeRva) & 3) == 2)
                {
                    codeRva++;
                }
                else
                {
                    codeRva += 4 * (uint)(codeWriter.ReadByteAtRva(codeRva + 1) >> 4);
                }

                Log.v("Native method {0:X8}, code RVA {1:X8}", method.MetadataToken.ToInt32(), codeRva);

                writer.Write(codeRva);
                writer.Write(0x70000000 + index++);
                writer.Write(code.Length);
                writer.Write(code);
            }

            if (index != 0)
            {
                Log.n("Re-encrypted {0}/{1} native methods", index, totalEncryptedNativeMethods);
            }

            var encryptedData = stream.ToArray();

            xorEncrypt(encryptedData);
            encryptedResource.updateResource(encryptedResource.encrypt(encryptedData));
        }