/* Copyright (C) 2011-2012 de4dot@gmail.com This file is part of de4dot. de4dot is free software: you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation, either version 3 of the License, or (at your option) any later version. de4dot is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with de4dot. If not, see . */ using System; using System.Collections.Generic; using Mono.Cecil; using Mono.Cecil.Cil; using de4dot.blocks; namespace de4dot.code.deobfuscators { abstract class ValueInlinerBase : MethodReturnValueInliner { MethodDefinitionAndDeclaringTypeDict> decrypterMethods = new MethodDefinitionAndDeclaringTypeDict>(); class MyCallResult : CallResult { public MethodReference methodReference; public GenericInstanceMethod gim; public MyCallResult(Block block, int callEndIndex, MethodReference method, GenericInstanceMethod gim) : base(block, callEndIndex) { this.methodReference = method; this.gim = gim; } } public override bool HasHandlers { get { return decrypterMethods.Count != 0; } } public IEnumerable Methods { get { return decrypterMethods.getKeys(); } } public void add(MethodDefinition method, Func handler) { if (method == null) return; if (decrypterMethods.find(method) != null) throw new ApplicationException(string.Format("Handler for method {0:X8} has already been added", method.MetadataToken.ToInt32())); if (method != null) decrypterMethods.add(method, handler); } protected override void inlineAllCalls() { foreach (var tmp in callResults) { var callResult = (MyCallResult)tmp; var handler = decrypterMethods.find(callResult.methodReference); callResult.returnValue = handler((MethodDefinition)callResult.methodReference, callResult.gim, callResult.args); } } protected override CallResult createCallResult(MethodReference method, GenericInstanceMethod gim, Block block, int callInstrIndex) { if (decrypterMethods.find(method) == null) return null; return new MyCallResult(block, callInstrIndex, method, gim); } } class BooleanValueInliner : ValueInlinerBase { protected override void inlineReturnValues(IList callResults) { foreach (var callResult in callResults) { var block = callResult.block; int num = callResult.callEndIndex - callResult.callStartIndex + 1; block.replace(callResult.callStartIndex, num, DotNetUtils.createLdci4((bool)callResult.returnValue ? 1 : 0)); Log.v("Decrypted boolean: {0}", callResult.returnValue); } } } class Int32ValueInliner : ValueInlinerBase { protected override void inlineReturnValues(IList callResults) { foreach (var callResult in callResults) { var block = callResult.block; int num = callResult.callEndIndex - callResult.callStartIndex + 1; block.replace(callResult.callStartIndex, num, DotNetUtils.createLdci4((int)callResult.returnValue)); Log.v("Decrypted int32: {0}", callResult.returnValue); } } } class Int64ValueInliner : ValueInlinerBase { protected override void inlineReturnValues(IList callResults) { foreach (var callResult in callResults) { var block = callResult.block; int num = callResult.callEndIndex - callResult.callStartIndex + 1; block.replace(callResult.callStartIndex, num, Instruction.Create(OpCodes.Ldc_I8, (long)callResult.returnValue)); Log.v("Decrypted int64: {0}", callResult.returnValue); } } } class SingleValueInliner : ValueInlinerBase { protected override void inlineReturnValues(IList callResults) { foreach (var callResult in callResults) { var block = callResult.block; int num = callResult.callEndIndex - callResult.callStartIndex + 1; block.replace(callResult.callStartIndex, num, Instruction.Create(OpCodes.Ldc_R4, (float)callResult.returnValue)); Log.v("Decrypted single: {0}", callResult.returnValue); } } } class DoubleValueInliner : ValueInlinerBase { protected override void inlineReturnValues(IList callResults) { foreach (var callResult in callResults) { var block = callResult.block; int num = callResult.callEndIndex - callResult.callStartIndex + 1; block.replace(callResult.callStartIndex, num, Instruction.Create(OpCodes.Ldc_R8, (double)callResult.returnValue)); Log.v("Decrypted double: {0}", callResult.returnValue); } } } }