public void BwReg_00121()
{
var d0 = m.Reg32("d0", 0);
var d3 = m.Reg32("d3", 3);
var a5 = m.Reg32("a5", 5);
var v38 = m.Temp(PrimitiveType.Word16, "v38");
var v39 = m.Temp(PrimitiveType.Byte, "v39");
var v40 = m.Temp(PrimitiveType.Word16, "v40");
var VZN = m.Flags("VZN");
var ZN = m.Flags("ZN");
var C = m.Flags("C");
var V = m.Flags("V");
var CVZN = m.Flags("CVZN");
var CVZNX = m.Flags("CVZNX");
m.Assign(d0, d3);
m.Assign(CVZN, m.Cond(d0));
m.Assign(v38, m.And(m.Cast(PrimitiveType.Word16, d0), 0xF0));
m.Assign(d0, m.Dpb(d0, v38, 0));
m.Assign(ZN, m.Cond(v38));
m.Assign(C, false);
m.Assign(V, false);
m.Assign(v39, m.Shl(m.Cast(PrimitiveType.Byte, d0), 2));
m.Assign(d0, m.Dpb(d0, v39, 0));
m.Assign(CVZNX, m.Cond(v39));
m.Assign(v40, m.ISub(m.Cast(PrimitiveType.Word16, d0), 44));
m.Assign(CVZN, m.Cond(v40));
m.BranchIf(m.Test(ConditionCode.GT, VZN), "lDefault");
m.Assign(a5, m.LoadDw(m.IAdd(Address.Ptr32(0x0000C046), d0)));
var xfer = new RtlCall(a5, 4, RtlClass.Transfer);
var bw = new Backwalker(host, xfer, expSimp);
Assert.IsTrue(bw.CanBackwalk());
Assert.AreEqual("a5", bw.Index.Name);
bw.BackWalk(m.Block);
Assert.AreEqual("v40", bw.IndexExpression.ToString());
}
public bool ProcessIndirectControlTransfer(Address addrSwitch, RtlTransfer xfer)
{
List <Address> vector;
ImageMapVectorTable imgVector;
Expression swExp;
UserIndirectJump indJump;
var listener = scanner.Services.RequireService <DecompilerEventListener>();
if (program.User.IndirectJumps.TryGetValue(addrSwitch, out indJump))
{
vector = indJump.Table.Addresses;
swExp = this.frame.EnsureIdentifier(indJump.IndexRegister);
imgVector = indJump.Table;
}
else
{
var bw = new Backwalker <Block, Instruction>(new BackwalkerHost(this), xfer, eval);
if (!bw.CanBackwalk())
{
return(false);
}
var bwops = bw.BackWalk(blockCur);
if (bwops == null || bwops.Count == 0)
{
return(false); //$REVIEW: warn?
}
Identifier idIndex = bw.Index != null
? blockCur.Procedure.Frame.EnsureRegister(bw.Index)
: null;
VectorBuilder builder = new VectorBuilder(scanner.Services, program, new DirectedGraphImpl <object>());
if (bw.VectorAddress == null)
{
return(false);
}
vector = builder.BuildAux(bw, addrSwitch, state);
if (vector.Count == 0)
{
var rdr = program.CreateImageReader(bw.VectorAddress);
if (!rdr.IsValid)
{
return(false);
}
// Can't determine the size of the table, but surely it has one entry?
var addrEntry = arch.ReadCodeAddress(bw.Stride, rdr, state);
string msg;
if (this.program.SegmentMap.IsValidAddress(addrEntry))
{
vector.Add(addrEntry);
msg = "Can't determine size of jump vector; probing only one entry.";
}
else
{
// Nope, not even that.
msg = "No valid entries could be found in jump vector.";
}
var nav = listener.CreateJumpTableNavigator(program, addrSwitch, bw.VectorAddress, bw.Stride);
listener.Warn(nav, msg);
if (vector.Count == 0)
{
return(false);
}
}
imgVector = new ImageMapVectorTable(
bw.VectorAddress,
vector.ToArray(),
builder.TableByteSize);
swExp = idIndex;
if (idIndex == null || idIndex.Name == "None")
{
swExp = bw.IndexExpression;
}
}
ScanVectorTargets(xfer, vector);
if (xfer is RtlGoto)
{
var blockSource = scanner.FindContainingBlock(ric.Address);
blockCur = blockSource;
foreach (Address addr in vector)
{
var dest = scanner.FindContainingBlock(addr);
Debug.Assert(dest != null, "The block at address " + addr + "should have been enqueued.");
blockSource.Procedure.ControlGraph.AddEdge(blockSource, dest);
}
if (swExp == null)
{
scanner.Warn(addrSwitch, "Unable to determine index variable for indirect jump.");
Emit(new ReturnInstruction());
blockSource.Procedure.ControlGraph.AddEdge(
blockSource,
blockSource.Procedure.ExitBlock);
}
else
{
Emit(new SwitchInstruction(swExp, blockCur.Procedure.ControlGraph.Successors(blockCur).ToArray()));
}
}
if (imgVector.Size > 0)
{
program.ImageMap.AddItemWithSize(imgVector.Address, imgVector);
}
else
{
program.ImageMap.AddItem(imgVector.Address, imgVector);
}
return(true);
}
public void BwUnresolveableIndirect()
{
var eax = m.Reg32("eax", 0);
var esi = m.Reg32("esi", 6);
var Z = m.Frame.EnsureFlagGroup(Registers.eflags, 1, "Z", PrimitiveType.Bool);
var xfer = new RtlCall(eax, 4, RtlClass.Transfer);
m.Assign(eax, m.LoadDw(esi));
m.Assign(Z, m.Cond(m.And(eax, eax)));
m.BranchIf(m.Test(ConditionCode.EQ, Z), "null_ptr");
m.Label("do_call");
var bw = new Backwalker(host, xfer, expSimp);
Assert.IsTrue(bw.CanBackwalk());
Assert.AreEqual("eax", bw.Index.Name);
bw.BackWalk(m.Block);
Assert.AreEqual("None", bw.Index.ToString());
}
public bool ProcessIndirectControlTransfer(Address addrSwitch, RtlTransfer xfer)
{
var bw = new Backwalker(new BackwalkerHost(this), xfer, eval);
if (!bw.CanBackwalk())
{
return(false);
}
var bwops = bw.BackWalk(blockCur);
if (bwops == null || bwops.Count == 0)
{
return(false); //$REVIEW: warn?
}
var idIndex = blockCur.Procedure.Frame.EnsureRegister(bw.Index);
VectorBuilder builder = new VectorBuilder(scanner, program, new DirectedGraphImpl <object>());
if (bw.VectorAddress == null)
{
return(false);
}
List <Address> vector = builder.BuildAux(bw, addrSwitch, state);
if (vector.Count == 0)
{
var addrNext = bw.VectorAddress + bw.Stride;
var rdr = scanner.CreateReader(bw.VectorAddress);
if (!rdr.IsValid)
{
return(false);
}
// Can't determine the size of the table, but surely it has one entry?
var addrEntry = arch.ReadCodeAddress(bw.Stride, rdr, state);
if (this.program.Image.IsValidAddress(addrEntry))
{
vector.Add(addrEntry);
scanner.Warn(addrSwitch, "Can't determine size of jump vector; probing only one entry.");
}
else
{
// Nope, not even that.
scanner.Warn(addrSwitch, "No valid entries could be found in jump vector.");
}
}
//$TODO: mark the vector
ScanVectorTargets(xfer, vector);
if (xfer is RtlGoto)
{
var blockSource = scanner.FindContainingBlock(ric.Address);
blockCur = blockSource;
foreach (Address addr in vector)
{
var dest = scanner.FindContainingBlock(addr);
Debug.Assert(dest != null, "The block at address " + addr + "should have been enqueued.");
blockSource.Procedure.ControlGraph.AddEdge(blockSource, dest);
}
Expression swExp = idIndex;
if (idIndex.Name == "None")
{
swExp = bw.IndexExpression;
}
if (swExp == null)
{
throw new NotImplementedException();
}
Emit(new SwitchInstruction(swExp, blockCur.Procedure.ControlGraph.Successors(blockCur).ToArray()));
}
//vectorUses[wi.addrFrom] = new VectorUse(wi.Address, builder.IndexRegister);
program.ImageMap.AddItem(bw.VectorAddress,
new ImageMapVectorTable(xfer is RtlCall, vector.ToArray(), builder.TableByteSize));
return(true);
}
