// Decompiled with JetBrains decompiler
// Type: MindLated.Protection.Anti.AntiTamper
// Assembly: Server, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
// MVID: 33673F0A-7F43-4A2B-BC08-8E59A15CB7DA
// Assembly location: C:\Users\Admin\Desktop\Sheet RAT 2.5\Server.exe

using dnlib.DotNet;
using dnlib.DotNet.Emit;
using MindLated.Protection.Anti.Runtime;
using MindLated.Services;
using System;
using System.Windows.Forms;
using System.Collections.Generic;
using System.IO;
using System.Linq;
using System.Security.Cryptography;

//#nullable disable
namespace MindLated.Protection.Anti {

public static class AntiTamper
{
  public static void Sha256(string filePath)
  {
    byte[] hash = SHA256.Create().ComputeHash(File.ReadAllBytes(filePath));
    using (FileStream fileStream = new FileStream(filePath, FileMode.Append))
      fileStream.Write(hash, 0, hash.Length);
  }

  public static void Execute(ModuleDef module)
  {
    ModuleDefMD moduleDefMd = ModuleDefMD.Load(typeof (EofAntiTamper).Module);
    MethodDef staticConstructor = module.GlobalType.FindOrCreateStaticConstructor();
    int rid = (int) MDToken.ToRID(typeof (EofAntiTamper).MetadataToken);
    MethodDef methodDef = (MethodDef) InjectHelper.Inject(moduleDefMd.ResolveTypeDef((uint) rid), module.GlobalType, module).Single<IDnlibDef>((Func<IDnlibDef, bool>) (method => method.Name == "Initializer"));
    staticConstructor.Body.Instructions.Insert(0, Instruction.Create(OpCodes.Call, (IMethod) methodDef));
    foreach (MethodDef method in (IEnumerable<MethodDef>) module.GlobalType.Methods)
    {
      if (!(method.Name != ".ctor"))
      {
        module.GlobalType.Remove(method);
        break;
      }
    }
  }
}
}