Update detection of CSVM asm ref
This commit is contained in:
parent
f699017197
commit
4393df31d9
|
@ -63,7 +63,14 @@ namespace de4dot.code.deobfuscators.Agile_NET.vm {
|
||||||
|
|
||||||
AssemblyRef findVmAssemblyReference() {
|
AssemblyRef findVmAssemblyReference() {
|
||||||
foreach (var memberRef in module.GetMemberRefs()) {
|
foreach (var memberRef in module.GetMemberRefs()) {
|
||||||
if (!memberRef.IsMethodRef)
|
var sig = memberRef.MethodSig;
|
||||||
|
if (sig == null)
|
||||||
|
continue;
|
||||||
|
if (sig.RetType.GetElementType() != ElementType.Object)
|
||||||
|
continue;
|
||||||
|
if (sig.Params.Count != 2)
|
||||||
|
continue;
|
||||||
|
if (memberRef.Name != "RunMethod")
|
||||||
continue;
|
continue;
|
||||||
if (memberRef.FullName == "System.Object VMRuntime.Libraries.CSVMRuntime::RunMethod(System.String,System.Object[])")
|
if (memberRef.FullName == "System.Object VMRuntime.Libraries.CSVMRuntime::RunMethod(System.String,System.Object[])")
|
||||||
return memberRef.DeclaringType.Scope as AssemblyRef;
|
return memberRef.DeclaringType.Scope as AssemblyRef;
|
||||||
|
|
Loading…
Reference in New Issue
Block a user