de4dot-cex/de4dot.blocks/cflow/BlockDeobfuscator.cs

56 lines
1.5 KiB
C#
Raw Normal View History

2012-01-11 11:38:02 +08:00
/*
2015-10-30 05:45:26 +08:00
Copyright (C) 2011-2015 de4dot@gmail.com
2012-01-11 11:38:02 +08:00
This file is part of de4dot.
de4dot is free software: you can redistribute it and/or modify
it under the terms of the GNU General Public License as published by
the Free Software Foundation, either version 3 of the License, or
(at your option) any later version.
de4dot is distributed in the hope that it will be useful,
but WITHOUT ANY WARRANTY; without even the implied warranty of
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
GNU General Public License for more details.
You should have received a copy of the GNU General Public License
along with de4dot. If not, see <http://www.gnu.org/licenses/>.
*/
using System;
using System.Collections.Generic;
2012-01-11 11:38:02 +08:00
namespace de4dot.blocks.cflow {
public abstract class BlockDeobfuscator : IBlocksDeobfuscator {
protected List<Block> allBlocks;
protected Blocks blocks;
2013-04-30 18:15:07 +08:00
public bool ExecuteIfNotModified { get; set; }
2013-01-19 20:03:57 +08:00
public virtual void DeobfuscateBegin(Blocks blocks) {
this.blocks = blocks;
}
2013-01-19 20:03:57 +08:00
public bool Deobfuscate(List<Block> allBlocks) {
Initialize(allBlocks);
2013-04-30 18:15:07 +08:00
bool modified = false;
foreach (var block in allBlocks) {
try {
2013-04-30 18:15:07 +08:00
modified |= Deobfuscate(block);
}
catch (NullReferenceException) {
// Here if eg. invalid metadata token in a call instruction (operand is null)
}
}
2013-04-30 18:15:07 +08:00
return modified;
2012-01-11 11:38:02 +08:00
}
2013-01-19 20:03:57 +08:00
protected virtual void Initialize(List<Block> allBlocks) {
this.allBlocks = allBlocks;
2012-01-11 11:38:02 +08:00
}
2013-01-19 20:03:57 +08:00
protected abstract bool Deobfuscate(Block block);
2012-01-11 11:38:02 +08:00
}
}