monocul.us/de4dot-cex
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Update detection of CSVM asm ref

Browse Source
This commit is contained in:
de4dot 2012-11-08 07:07:02 +01:00
parent f699017197
commit 4393df31d9
1 changed files with 8 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

9
de4dot.code/deobfuscators/Agile_NET/vm/Csvm.cs
View File

@ -63,7 +63,14 @@ namespace de4dot.code.deobfuscators.Agile_NET.vm {
AssemblyRef findVmAssemblyReference() {
foreach (var memberRef in module.GetMemberRefs()) {
if (!memberRef.IsMethodRef)
var sig = memberRef.MethodSig;
if (sig == null)
continue;
if (sig.RetType.GetElementType() != ElementType.Object)
continue;
if (sig.Params.Count != 2)
continue;
if (memberRef.Name != "RunMethod")
continue;
if (memberRef.FullName == "System.Object VMRuntime.Libraries.CSVMRuntime::RunMethod(System.String,System.Object[])")
return memberRef.DeclaringType.Scope as AssemblyRef;