Fix string decryption for Eazfuscator.NET 5.1

PythEch · PythEch · commit 63607a667882 · 2016-01-23T17:09:01.000+02:00
v5.1 changes a few instructions in , other than it's almost the same
diff --git a/de4dot.code/deobfuscators/Eazfuscator_NET/StringDecrypter.cs b/de4dot.code/deobfuscators/Eazfuscator_NET/StringDecrypter.cs
@@ -47,6 +47,7 @@ class StringDecrypter : IDisposable {
 		EfConstantsReader stringMethodConsts;
 		bool isV32OrLater;
 		bool isV50OrLater;
+		bool isV51OrLater;
 		int? validStringDecrypterValue;
 		DynamicDynocodeIterator dynocode;
 		MethodDef realMethod;
@@ -429,11 +430,7 @@ static Local GetFlagsLocal(MethodDef method, int index) {
 				return null;
 			if (instrs[index++].OpCode.Code != Code.Ldc_I4_0)
 				return null;
-			if (instrs[index++].OpCode.Code != Code.Ceq)
-				return null;
-			if (instrs[index++].OpCode.Code != Code.Ldc_I4_0)
-				return null;
-			if (instrs[index++].OpCode.Code != Code.Ceq)
+			if (instrs[index++].OpCode.Code != Code.Cgt_Un)
 				return null;
 			var stloc = instrs[index++];
 			if (!stloc.IsStloc())
@@ -720,8 +717,8 @@ bool EmulateDynocode(InstructionEmulator emu, ref int index) {
 
 			if (index + 4 >= instrs.Count)
 				return false;
-			var ldloc = instrs[index + 3];
-			var stfld = instrs[index + 4];
+			var ldloc = instrs[index + 2];
+			var stfld = instrs[index + 3];
 			if (!ldloc.IsLdloc() || stfld.OpCode.Code != Code.Stfld)
 				return false;
 			var enumerableField = stfld.Operand as FieldDef;
