public void findDelegateCreator(ModuleDefinition module)
{
var callCounter = new CallCounter();
foreach (var type in module.Types)
{
if (type.Namespace != "" || !DotNetUtils.derivesFromDelegate(type))
{
continue;
}
var cctor = DotNetUtils.getMethod(type, ".cctor");
if (cctor == null)
{
continue;
}
foreach (var method in DotNetUtils.getMethodCalls(cctor))
{
callCounter.add(method);
}
}
var mostCalls = callCounter.most();
if (mostCalls == null)
{
return;
}
setDelegateCreatorMethod(DotNetUtils.getMethod(module, mostCalls));
}
public void find() {
var additionalTypes = new string[] {
"System.IntPtr",
// "System.Reflection.Assembly", //TODO: Not in unknown DNR version with jitter support
};
var checkedMethods = new Dictionary<IMethod, bool>(MethodEqualityComparer.CompareDeclaringTypes);
var callCounter = new CallCounter();
int typesLeft = 30;
foreach (var type in module.GetTypes()) {
var cctor = type.FindStaticConstructor();
if (cctor == null || cctor.Body == null)
continue;
if (typesLeft-- <= 0)
break;
foreach (var method in DotNetUtils.getCalledMethods(module, cctor)) {
if (!checkedMethods.ContainsKey(method)) {
checkedMethods[method] = false;
if (method.DeclaringType.BaseType == null || method.DeclaringType.BaseType.FullName != "System.Object")
continue;
if (!DotNetUtils.isMethod(method, "System.Void", "()"))
continue;
if (!encryptedResource.couldBeResourceDecrypter(method, additionalTypes))
continue;
checkedMethods[method] = true;
}
else if (!checkedMethods[method])
continue;
callCounter.add(method);
}
}
encryptedResource.Method = (MethodDef)callCounter.most();
}
public void find()
{
var additionalTypes = new string[] {
"System.IntPtr",
// "System.Reflection.Assembly", //TODO: Not in unknown DNR version with jitter support
};
var checkedMethods = new Dictionary <MethodReferenceAndDeclaringTypeKey, bool>();
var callCounter = new CallCounter();
int typesLeft = 30;
foreach (var type in module.GetTypes())
{
var cctor = DotNetUtils.getMethod(type, ".cctor");
if (cctor == null || cctor.Body == null)
{
continue;
}
if (typesLeft-- <= 0)
{
break;
}
foreach (var method in DotNetUtils.getCalledMethods(module, cctor))
{
var key = new MethodReferenceAndDeclaringTypeKey(method);
if (!checkedMethods.ContainsKey(key))
{
checkedMethods[key] = false;
if (method.DeclaringType.BaseType == null || method.DeclaringType.BaseType.FullName != "System.Object")
{
continue;
}
if (!DotNetUtils.isMethod(method, "System.Void", "()"))
{
continue;
}
if (!encryptedResource.couldBeResourceDecrypter(method, additionalTypes))
{
continue;
}
checkedMethods[key] = true;
}
else if (!checkedMethods[key])
{
continue;
}
callCounter.add(method);
}
}
encryptedResource.Method = (MethodDefinition)callCounter.most();
}
void init()
{
var callCounter = new CallCounter();
int count = 0;
foreach (var type in module.GetTypes())
{
if (count >= 40)
{
break;
}
foreach (var method in type.Methods)
{
if (method.Name != ".ctor" && method.Name != ".cctor" && module.EntryPoint != method)
{
continue;
}
foreach (var calledMethod in DotNetUtils.getCalledMethods(module, method))
{
if (!calledMethod.IsStatic || calledMethod.Body == null)
{
continue;
}
if (!DotNetUtils.isMethod(calledMethod, "System.Void", "()"))
{
continue;
}
if (isEmptyClass(calledMethod))
{
callCounter.add(calledMethod);
count++;
}
}
}
}
int numCalls;
var theMethod = (MethodDef)callCounter.most(out numCalls);
if (numCalls >= 10)
{
emptyMethod = theMethod;
}
}
