Пример #1
0
        public void Analyze(object param)
        {
            var asmDef = (param as AssemblyDefinition);

            foreach (var tDef in asmDef.MainModule.GetAllTypes())
            {
                foreach (var mDef in tDef.Methods.Where(x => x.HasBody))
                {
                    foreach (var instr in mDef.Body.Instructions)
                    {
                        if (instr.OpCode.OperandType == Mono.Cecil.Cil.OperandType.InlineMethod)
                        {
                            if (instr.Operand.ToString().Contains("System.Reflection"))
                            {
                                LocalValues.Add(true);
                                break;
                            }
                        }
                    }
                }
            }

            if (LocalValues.Count == 0)
            {
                LocalValues.Add(false);
            }

            Entry = new AnalysisEntry(LocalValues[0]);
        }
Пример #2
0
        public void Analyze(object param)
        {
            int size;
            var ico = NativeHelper.ExtractIcon(param as string, out size);

            LocalValues.Add(Tuple.Create(ico, size));
            Entry = new AnalysisEntry(LocalValues[0]);
        }
Пример #3
0
        public void Analyze(object param)
        {
            var asmDef        = (param as AssemblyDefinition);
            var targetRuntime = asmDef.MainModule.Runtime;

            LocalValues.Add(targetRuntime);

            Entry = new AnalysisEntry(LocalValues[0]);
        }
Пример #4
0
        public void Analyze(object param)
        {
            var asmDef = (param as AssemblyDefinition);
            var ep     = asmDef.EntryPoint;

            var @params = ep.Parameters;

            LocalValues.Add(@params);
            Entry = new AnalysisEntry(LocalValues[0]);
        }
        public void Analyze(object param)
        {
            _asmDef = (param as AssemblyDefinition);

            foreach (var @ref in RecursiveReferenceIdentifier())
            {
                LocalValues.Add(@ref);
            }

            Entry = new AnalysisEntry(LocalValues.ToArray());
        }
Пример #6
0
        public void Analyze(object param)
        {
            var asmDef = (param as AssemblyDefinition);
            var subSystem = asmDef.MainModule.Kind;

            if (subSystem == ModuleKind.Dll)
                throw new BadImageFormatException("Dll not supported");

            LocalValues.Add(subSystem);

            Entry = new AnalysisEntry(LocalValues[0]);
        }