obfuz/Editor/ObfusPasses/ConstObfus/DefaultConstObfuscator.cs

151 lines
7.5 KiB
C#
Raw Normal View History

2025-05-07 22:55:07 +08:00
using dnlib.DotNet;
using dnlib.DotNet.Emit;
using Obfuz.Emit;
using Obfuz.Data;
using Obfuz.Utils;
using System;
using System.Collections.Generic;
using NUnit.Framework;
2025-05-08 08:54:18 +08:00
using System.Text;
2025-05-07 22:55:07 +08:00
namespace Obfuz.ObfusPasses.ConstObfus
{
public class DefaultConstObfuscator : IDataObfuscator
{
private readonly IRandom _random;
private readonly RvaDataAllocator _rvaDataAllocator;
private readonly ConstFieldAllocator _constFieldAllocator;
private readonly IEncryptor _encryptor;
public DefaultConstObfuscator()
{
_random = new RandomWithKey(new byte[] { 0x1, 0x2, 0x3, 0x4 }, 0x5);
_encryptor = new DefaultEncryptor(new byte[] { 0x1A, 0x2B, 0x3C, 0x4D });
_rvaDataAllocator = new RvaDataAllocator(_random, _encryptor);
2025-05-08 09:33:35 +08:00
_constFieldAllocator = new ConstFieldAllocator(_encryptor, _random, _rvaDataAllocator);
2025-05-07 22:55:07 +08:00
}
private int GenerateEncryptionOperations()
{
return _random.NextInt();
}
public int GenerateSalt()
{
return _random.NextInt();
}
private DefaultModuleMetadataImporter GetModuleMetadataImporter(MethodDef method)
{
return MetadataImporter.Instance.GetDefaultModuleMetadataImporter(method.Module);
}
public void ObfuscateInt(MethodDef method, int value, List<Instruction> obfuscatedInstructions)
{
int ops = GenerateEncryptionOperations();
int salt = GenerateSalt();
int encryptedValue = _encryptor.Encrypt(value, ops, salt);
RvaData rvaData = _rvaDataAllocator.Allocate(method.Module, encryptedValue);
DefaultModuleMetadataImporter importer = GetModuleMetadataImporter(method);
2025-05-08 08:54:18 +08:00
obfuscatedInstructions.Add(Instruction.Create(OpCodes.Ldsfld, rvaData.field));
obfuscatedInstructions.Add(Instruction.CreateLdcI4(rvaData.offset));
2025-05-07 22:55:07 +08:00
obfuscatedInstructions.Add(Instruction.CreateLdcI4(ops));
obfuscatedInstructions.Add(Instruction.CreateLdcI4(salt));
2025-05-08 08:54:18 +08:00
obfuscatedInstructions.Add(Instruction.Create(OpCodes.Call, importer.DecryptFromRvaInt));
2025-05-07 22:55:07 +08:00
}
public void ObfuscateLong(MethodDef method, long value, List<Instruction> obfuscatedInstructions)
{
int ops = GenerateEncryptionOperations();
int salt = GenerateSalt();
long encryptedValue = _encryptor.Encrypt(value, ops, salt);
2025-05-08 08:54:18 +08:00
RvaData rvaData = _rvaDataAllocator.Allocate(method.Module, encryptedValue);
2025-05-07 22:55:07 +08:00
DefaultModuleMetadataImporter importer = GetModuleMetadataImporter(method);
2025-05-08 08:54:18 +08:00
obfuscatedInstructions.Add(Instruction.Create(OpCodes.Ldsfld, rvaData.field));
obfuscatedInstructions.Add(Instruction.CreateLdcI4(rvaData.offset));
2025-05-07 22:55:07 +08:00
obfuscatedInstructions.Add(Instruction.CreateLdcI4(ops));
obfuscatedInstructions.Add(Instruction.CreateLdcI4(salt));
2025-05-08 08:54:18 +08:00
obfuscatedInstructions.Add(Instruction.Create(OpCodes.Call, importer.DecryptFromRvaLong));
2025-05-07 22:55:07 +08:00
}
public void ObfuscateFloat(MethodDef method, float value, List<Instruction> obfuscatedInstructions)
{
int ops = GenerateEncryptionOperations();
int salt = GenerateSalt();
float encryptedValue = _encryptor.Encrypt(value, ops, salt);
2025-05-08 08:54:18 +08:00
RvaData rvaData = _rvaDataAllocator.Allocate(method.Module, encryptedValue);
2025-05-07 22:55:07 +08:00
DefaultModuleMetadataImporter importer = GetModuleMetadataImporter(method);
2025-05-08 08:54:18 +08:00
obfuscatedInstructions.Add(Instruction.Create(OpCodes.Ldsfld, rvaData.field));
obfuscatedInstructions.Add(Instruction.CreateLdcI4(rvaData.offset));
2025-05-07 22:55:07 +08:00
obfuscatedInstructions.Add(Instruction.CreateLdcI4(ops));
obfuscatedInstructions.Add(Instruction.CreateLdcI4(salt));
2025-05-08 08:54:18 +08:00
obfuscatedInstructions.Add(Instruction.Create(OpCodes.Call, importer.DecryptFromRvaFloat));
2025-05-07 22:55:07 +08:00
}
public void ObfuscateDouble(MethodDef method, double value, List<Instruction> obfuscatedInstructions)
{
int ops = GenerateEncryptionOperations();
int salt = GenerateSalt();
double encryptedValue = _encryptor.Encrypt(value, ops, salt);
2025-05-08 08:54:18 +08:00
RvaData rvaData = _rvaDataAllocator.Allocate(method.Module, encryptedValue);
2025-05-07 22:55:07 +08:00
DefaultModuleMetadataImporter importer = GetModuleMetadataImporter(method);
2025-05-08 08:54:18 +08:00
obfuscatedInstructions.Add(Instruction.Create(OpCodes.Ldsfld, rvaData.field));
obfuscatedInstructions.Add(Instruction.CreateLdcI4(rvaData.offset));
2025-05-07 22:55:07 +08:00
obfuscatedInstructions.Add(Instruction.CreateLdcI4(ops));
obfuscatedInstructions.Add(Instruction.CreateLdcI4(salt));
2025-05-08 08:54:18 +08:00
obfuscatedInstructions.Add(Instruction.Create(OpCodes.Call, importer.DecryptFromRvaDouble));
2025-05-07 22:55:07 +08:00
}
public void ObfuscateBytes(MethodDef method, byte[] value, List<Instruction> obfuscatedInstructions)
{
int ops = GenerateEncryptionOperations();
int salt = GenerateSalt();
2025-05-08 08:54:18 +08:00
byte[] encryptedValue = _encryptor.Encrypt(value, 0, value.Length, ops, salt);
Assert.IsTrue(encryptedValue.Length % 4 == 0);
RvaData rvaData = _rvaDataAllocator.Allocate(method.Module, encryptedValue);
2025-05-07 22:55:07 +08:00
2025-05-08 08:54:18 +08:00
DefaultModuleMetadataImporter importer = GetModuleMetadataImporter(method);
obfuscatedInstructions.Add(Instruction.Create(OpCodes.Ldsfld, rvaData.field));
obfuscatedInstructions.Add(Instruction.CreateLdcI4(rvaData.offset));
// should use value.Length, can't use rvaData.size, because rvaData.size is align to 4, it's not the actual length.
obfuscatedInstructions.Add(Instruction.CreateLdcI4(value.Length));
obfuscatedInstructions.Add(Instruction.CreateLdcI4(ops));
obfuscatedInstructions.Add(Instruction.CreateLdcI4(salt));
obfuscatedInstructions.Add(Instruction.Create(OpCodes.Call, importer.DecryptFromRvaBytes));
2025-05-07 22:55:07 +08:00
}
public void ObfuscateString(MethodDef method, string value, List<Instruction> obfuscatedInstructions)
{
2025-05-08 09:33:35 +08:00
//int ops = GenerateEncryptionOperations();
//int salt = GenerateSalt();
//int stringByteLength = Encoding.UTF8.GetByteCount(value);
//byte[] encryptedValue = _encryptor.Encrypt(value, ops, salt);
//Assert.IsTrue(encryptedValue.Length % 4 == 0);
//RvaData rvaData = _rvaDataAllocator.Allocate(method.Module, encryptedValue);
//DefaultModuleMetadataImporter importer = GetModuleMetadataImporter(method);
//obfuscatedInstructions.Add(Instruction.Create(OpCodes.Ldsfld, rvaData.field));
//obfuscatedInstructions.Add(Instruction.CreateLdcI4(rvaData.offset));
//// should use stringByteLength, can't use rvaData.size, because rvaData.size is align to 4, it's not the actual length.
//obfuscatedInstructions.Add(Instruction.CreateLdcI4(stringByteLength));
//obfuscatedInstructions.Add(Instruction.CreateLdcI4(ops));
//obfuscatedInstructions.Add(Instruction.CreateLdcI4(salt));
//obfuscatedInstructions.Add(Instruction.Create(OpCodes.Call, importer.DecryptFromRvaString));
// to avoid gc, use a cached string
FieldDef cacheField = _constFieldAllocator.Allocate(method.Module, value);
obfuscatedInstructions.Add(Instruction.Create(OpCodes.Ldsfld, cacheField));
2025-05-07 22:55:07 +08:00
}
public void Done()
{
_rvaDataAllocator.Done();
_constFieldAllocator.Done();
}
}
}