This commit is contained in:
yck1509 2014-07-05 13:56:23 +08:00
Родитель f1df614d03
Коммит bacf24bbde
2 изменённых файлов: 16 добавлений и 7 удалений

Просмотреть файл

@ -47,9 +47,9 @@ namespace Confuser.Protections.AntiTamper {
deriver.Init(context, random); deriver.Init(context, random);
var rt = context.Registry.GetService<IRuntimeService>(); var rt = context.Registry.GetService<IRuntimeService>();
MethodDef initMethod = rt.GetRuntimeType("Confuser.Runtime.AntiTamperNormal").FindMethod("Initialize"); TypeDef initType = rt.GetRuntimeType("Confuser.Runtime.AntiTamperNormal");
initMethod = InjectHelper.Inject(initMethod, context.CurrentModule); IEnumerable<IDnlibDef> members = InjectHelper.Inject(initType, context.CurrentModule.GlobalType, context.CurrentModule);
context.CurrentModule.GlobalType.Methods.Add(initMethod); var initMethod = (MethodDef)members.Single(m => m.Name == "Initialize");
initMethod.Body.SimplifyMacros(initMethod.Parameters); initMethod.Body.SimplifyMacros(initMethod.Parameters);
List<Instruction> instrs = initMethod.Body.Instructions.ToList(); List<Instruction> instrs = initMethod.Body.Instructions.ToList();
@ -81,13 +81,16 @@ namespace Confuser.Protections.AntiTamper {
var name = context.Registry.GetService<INameService>(); var name = context.Registry.GetService<INameService>();
var marker = context.Registry.GetService<IMarkerService>(); var marker = context.Registry.GetService<IMarkerService>();
name.MarkHelper(initMethod, marker); foreach (IDnlibDef def in members) {
name.MarkHelper(def, marker);
if (def is MethodDef)
parent.ExcludeMethod(context, (MethodDef)def);
}
MethodDef cctor = context.CurrentModule.GlobalType.FindStaticConstructor(); MethodDef cctor = context.CurrentModule.GlobalType.FindStaticConstructor();
cctor.Body.Instructions.Insert(0, Instruction.Create(OpCodes.Call, initMethod)); cctor.Body.Instructions.Insert(0, Instruction.Create(OpCodes.Call, initMethod));
parent.ExcludeMethod(context, cctor); parent.ExcludeMethod(context, cctor);
parent.ExcludeMethod(context, initMethod);
} }
public void HandleMD(AntiTamperProtection parent, ConfuserContext context, ProtectionParameters parameters) { public void HandleMD(AntiTamperProtection parent, ConfuserContext context, ProtectionParameters parameters) {

Просмотреть файл

@ -3,9 +3,12 @@ using System.Reflection;
using System.Runtime.InteropServices; using System.Runtime.InteropServices;
namespace Confuser.Runtime { namespace Confuser.Runtime {
internal class AntiTamperNormal { internal static class AntiTamperNormal {
[DllImport("kernel32.dll")]
private static extern bool VirtualProtect(IntPtr lpAddress, uint dwSize, uint flNewProtect, out uint lpflOldProtect);
private static unsafe void Initialize() { private static unsafe void Initialize() {
Module m = typeof (AntiTamperNormal).Module; Module m = typeof(AntiTamperNormal).Module;
string n = m.FullyQualifiedName; string n = m.FullyQualifiedName;
bool f = n.Length > 0 && n[0] == '<'; bool f = n.Length > 0 && n[0] == '<';
var b = (byte*)Marshal.GetHINSTANCE(m); var b = (byte*)Marshal.GetHINSTANCE(m);
@ -47,6 +50,9 @@ namespace Confuser.Runtime {
} }
Mutation.Crypt(y, d); Mutation.Crypt(y, d);
uint w = 0x40;
VirtualProtect((IntPtr)e, l << 2, w, out w);
uint h = 0; uint h = 0;
for (uint i = 0; i < l; i++) { for (uint i = 0; i < l; i++) {
*e ^= y[h & 0xf]; *e ^= y[h & 0xf];