public void encryptNativeMethods(MetadataBuilder builder) { if (methodToNativeMethod.Count == 0) { return; } Log.v("Encrypting native methods"); var stream = new MemoryStream(); var writer = new BinaryWriter(stream); writer.Write((uint)0); // patch count writer.Write((uint)0); // mode writer.Write(methodToNativeMethod.Count); int index = 0; var codeWriter = builder.CodeWriter; foreach (var pair in methodToNativeMethod) { var method = pair.Key; if (method.DeclaringType == null) { continue; // Method was removed } if (method.DeclaringType.Module == null) { continue; // method.DeclaringType was removed } var code = pair.Value; uint codeRva = builder.GetMethodBodyRva((int)method.MetadataToken.RID - 1); if ((codeWriter.ReadByteAtRva(codeRva) & 3) == 2) { codeRva++; } else { codeRva += 4 * (uint)(codeWriter.ReadByteAtRva(codeRva + 1) >> 4); } Log.v("Native method {0:X8}, code RVA {1:X8}", method.MetadataToken.ToInt32(), codeRva); writer.Write(codeRva); writer.Write(0x70000000 + index++); writer.Write(code.Length); writer.Write(code); } if (index != 0) { Log.n("Re-encrypted {0}/{1} native methods", index, totalEncryptedNativeMethods); } var encryptedData = stream.ToArray(); xorEncrypt(encryptedData); encryptedResource.updateResource(encryptedResource.encrypt(encryptedData)); }