monocul.us/de4dot-cex
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Print some info about the encrypted native methods

Browse Source
This commit is contained in:
de4dot 2011-11-25 15:33:13 +01:00
parent 51892f62a2
commit 0ce27f8a2d
1 changed files with 8 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
de4dot.code/deobfuscators/dotNET_Reactor/MethodsDecrypter.cs
View File

@ -309,6 +309,8 @@ namespace de4dot.deobfuscators.dotNET_Reactor {
if (tokenToNativeMethod.Count == 0)
return;
Log.v("Encrypting native methods");
var stream = new MemoryStream();
var writer = new BinaryWriter(stream);
writer.Write((uint)0); // patch count
@ -330,12 +332,18 @@ namespace de4dot.deobfuscators.dotNET_Reactor {
codeRva++;
else
codeRva += 4 * (uint)(codeWriter.ReadByteAtRva(codeRva + 1) >> 4);
Log.v("Native method {0:X8}, code RVA {1:X8}", method.MetadataToken.ToInt32(), codeRva);
writer.Write(codeRva);
writer.Write(0x70000000 + index++);
writer.Write(code.Length);
writer.Write(code);
}
if (index != 0)
Log.n("Re-encrypted {0} native methods", index);
var encryptedData = stream.ToArray();
xorEncrypt(encryptedData);
encryptedResource.updateResource(encryptedResource.encrypt(encryptedData));