monocul.us/de4dot-cex
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Support some more instrs

Browse Source
This commit is contained in:
de4dot 2012-04-06 22:07:52 +02:00
parent 52d6f73f5e
commit 11f992b0f2
1 changed files with 43 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

48
de4dot.code/deobfuscators/MethodStack.cs
View File

@ -166,6 +166,37 @@ namespace de4dot.code.deobfuscators {
type = method.Module.TypeSystem.String;
break;
case Code.Conv_I:
case Code.Conv_Ovf_I:
case Code.Conv_Ovf_I_Un:
type = method.Module.TypeSystem.IntPtr;
break;
case Code.Conv_U:
case Code.Conv_Ovf_U:
case Code.Conv_Ovf_U_Un:
type = method.Module.TypeSystem.UIntPtr;
break;
case Code.Conv_I8:
case Code.Conv_Ovf_I8:
case Code.Conv_Ovf_I8_Un:
type = method.Module.TypeSystem.Int64;
break;
case Code.Conv_U8:
case Code.Conv_Ovf_U8:
case Code.Conv_Ovf_U8_Un:
type = method.Module.TypeSystem.UInt64;
break;
case Code.Conv_R8:
case Code.Ldc_R8:
case Code.Ldelem_R8:
case Code.Ldind_R8:
type = method.Module.TypeSystem.Double;
break;
case Code.Call:
case Code.Calli:
case Code.Callvirt:
@ -194,6 +225,8 @@ namespace de4dot.code.deobfuscators {
case Code.Castclass:
case Code.Isinst:
case Code.Unbox_Any:
case Code.Ldelem_Any:
case Code.Ldobj:
type = pushInstr.Operand as TypeReference;
break;
@ -233,20 +266,25 @@ namespace de4dot.code.deobfuscators {
case Code.Ldfld:
case Code.Ldsfld:
var field = pushInstr.Operand as FieldReference;
if (field == null)
return null;
type = field.FieldType;
break;
case Code.Ldflda:
case Code.Ldsflda:
var field2 = pushInstr.Operand as FieldReference;
if (field2 == null)
return null;
type = field2.FieldType;
type = createByReferenceType(field2.FieldType);
break;
case Code.Ldelema:
case Code.Unbox:
type = createByReferenceType(pushInstr.Operand as TypeReference);
break;
case Code.Ldobj:
type = pushInstr.Operand as TypeReference;
break;
default:
return null;
}