/* * This file is part of the Astral-PE project. * Copyright (c) 2025 DosX. All rights reserved. * * Permission is hereby granted, free of charge, to any person obtaining a copy * of this software and associated documentation files (the "Software"), to deal * in the Software without restriction, including without limitation the rights * to use, copy, modify, merge, publish, distribute, sublicense, and/or sell * copies of the Software, and to permit persons to whom the Software is * furnished to do so, subject to the following conditions: * * The above copyright notice and this permission notice shall be included in all * copies or substantial portions of the Software. * * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, * FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE * AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, * OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE * SOFTWARE. * * Astral-PE is a low-level post-compilation PE header mutator (obfuscator) for native * Windows x86/x64 binaries. It modifies structural metadata while preserving execution integrity. * * For source code, updates, and documentation, visit: * https://github.com/DosX/Astral-PE */ using PeNet; namespace AstralPE.Obfuscator.Modules { public interface IAstralPeModule { /// /// Applies the obfuscation (mutation) to the given PE file's raw bytes. /// This method is called to modify the raw byte array of the PE file by applying specific mutations, /// such as randomizing imports, modifying headers, or altering sections. /// /// The raw byte array of the PE file that will be mutated. /// The parsed PE file, providing access to the header, sections, imports, and other elements. /// The offset to the IMAGE_NT_HEADERS. /// The start offset of the Optional Header in the PE file. /// The offset to the section table in the PE file. /// A random number generator used for randomization in some mutation processes. void Apply(ref byte[] raw, PeFile pe, int e_lfanew, int optStart, int sectionTableOffset, Random rnd); } }