Hi, I've found a tricky case in one assembly that lead to a strange exception
Short description of the issue:
Two methods out of all produces these errors:
1) HWISD._Call::EnUs0bE1y(Object, EventArgs): Void
I've found that this function is crashing on analysis of
{L1C59: 0028 _Call.M9aTxbyuJh(Object) : Void}
Expression stack is empty at offset 1C78.
2) HWISD.Installer1::Install(IDictionary): Void
issues on analysis of {L078C: 0028 Installer1.caDHEaccj(Object) : Void}
Expression stack is empty at offset 0793.
Probably it is a bug of .Net Reflector
For both methods, .Net Reflector says "Expression stack is empty" error for first instruction (a call) in exception handler, the methods called (_Call.M9aTxbyuJh(Object) and Installer1.caDHEaccj(Object) in this case) accept Exception as parameter.
The instructions should be ok but .Net Reflector just doesn't recognize this pattern.
here is a link for both assemblies - original and deobfuscated (the issue is on deobfuscated one)
http://www.multiupload.com/XJ4PVRJ9ST
Looking forward for you analysis
Thanks
Short description of the issue:
Two methods out of all produces these errors:
1) HWISD._Call::EnUs0bE1y(Object, EventArgs): Void
I've found that this function is crashing on analysis of
{L1C59: 0028 _Call.M9aTxbyuJh(Object) : Void}
Expression stack is empty at offset 1C78.
2) HWISD.Installer1::Install(IDictionary): Void
issues on analysis of {L078C: 0028 Installer1.caDHEaccj(Object) : Void}
Expression stack is empty at offset 0793.
Probably it is a bug of .Net Reflector
For both methods, .Net Reflector says "Expression stack is empty" error for first instruction (a call) in exception handler, the methods called (_Call.M9aTxbyuJh(Object) and Installer1.caDHEaccj(Object) in this case) accept Exception as parameter.
The instructions should be ok but .Net Reflector just doesn't recognize this pattern.
here is a link for both assemblies - original and deobfuscated (the issue is on deobfuscated one)
http://www.multiupload.com/XJ4PVRJ9ST
Looking forward for you analysis
Thanks