/* Copyright (C) 2011-2014 de4dot@gmail.com This file is part of de4dot. de4dot is free software: you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation, either version 3 of the License, or (at your option) any later version. de4dot is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with de4dot. If not, see . */ using dnlib.DotNet; using dnlib.DotNet.Emit; using de4dot.blocks; namespace de4dot.code.deobfuscators.SmartAssembly { class ResourceResolverInfo : ResolverInfoBase { EmbeddedAssemblyInfo resourceInfo; AssemblyResolverInfo assemblyResolverInfo; public EmbeddedAssemblyInfo ResourceInfo { get { return resourceInfo; } } public ResourceResolverInfo(ModuleDefMD module, ISimpleDeobfuscator simpleDeobfuscator, IDeobfuscator deob, AssemblyResolverInfo assemblyResolverInfo) : base(module, simpleDeobfuscator, deob) { this.assemblyResolverInfo = assemblyResolverInfo; } protected override bool CheckResolverType(TypeDef type) { return DotNetUtils.FindFieldType(type, "System.Reflection.Assembly", true) != null; } protected override bool CheckHandlerMethod(MethodDef method) { if (!method.IsStatic || !method.HasBody) return false; EmbeddedAssemblyInfo info = null; var instructions = method.Body.Instructions; for (int i = 0; i < instructions.Count; i++) { var instrs = DotNetUtils.GetInstructions(instructions, i, OpCodes.Ldstr, OpCodes.Call); if (instrs == null) continue; var s = instrs[0].Operand as string; var calledMethod = instrs[1].Operand as IMethod; if (s == null || calledMethod == null) continue; info = assemblyResolverInfo.Find(Utils.GetAssemblySimpleName(s)); if (info != null) break; } if (info == null) return false; resourceInfo = info; Logger.v("Found embedded assemblies resource {0}", Utils.ToCsharpString(info.resourceName)); return true; } } }