monocul.us/de4dot-cex
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Support Confuser 1.7 r74021 JIT methods encrypter

Browse Source
This commit is contained in:
de4dot 2012-08-05 02:38:23 +02:00
parent f65715cac8
commit 926d53885e
1 changed files with 5 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
de4dot.code/deobfuscators/Confuser/JitMethodsDecrypter.cs
View File

@ -40,6 +40,7 @@ namespace de4dot.code.deobfuscators.Confuser {
v17_r73404,
v17_r73477,
v17_r73479,
v17_r74021,
vXX,
}
@ -79,6 +80,7 @@ namespace de4dot.code.deobfuscators.Confuser {
}
break;
case 39: theVersion = ConfuserVersion.v17_r74021; break;
case 27: theVersion = ConfuserVersion.vXX; break;
default: return false;
}
@ -167,6 +169,7 @@ namespace de4dot.code.deobfuscators.Confuser {
case ConfuserVersion.v17_r73404: return initializeKeys_v17_r73404();
case ConfuserVersion.v17_r73477: return initializeKeys_v17_r73404();
case ConfuserVersion.v17_r73479: return initializeKeys_v17_r73404();
case ConfuserVersion.v17_r74021: return initializeKeys_v17_r73404();
case ConfuserVersion.vXX: return initializeKeys_vXX();
default: throw new ApplicationException("Invalid version");
}
@ -268,6 +271,7 @@ namespace de4dot.code.deobfuscators.Confuser {
case ConfuserVersion.v17_r73404: return true;
case ConfuserVersion.v17_r73477: return initializeMethodDataIndexes_v17_r73477(compileMethod);
case ConfuserVersion.v17_r73479: return initializeMethodDataIndexes_v17_r73477(compileMethod);
case ConfuserVersion.v17_r74021: return initializeMethodDataIndexes_v17_r73477(compileMethod);
case ConfuserVersion.vXX: return initializeMethodDataIndexes_v17_r73477(compileMethod);
default: throw new ApplicationException("Invalid version");
}
@ -408,6 +412,7 @@ namespace de4dot.code.deobfuscators.Confuser {
case ConfuserVersion.v17_r73404: return decrypt_v17_r73404(peImage, fileData, ref dumpedMethods);
case ConfuserVersion.v17_r73477: return decrypt_v17_r73477(peImage, fileData, ref dumpedMethods);
case ConfuserVersion.v17_r73479: return decrypt_v17_r73479(peImage, fileData, ref dumpedMethods);
case ConfuserVersion.v17_r74021: return decrypt_v17_r73479(peImage, fileData, ref dumpedMethods);
case ConfuserVersion.vXX: return decrypt_vXX(peImage, fileData, ref dumpedMethods);
default: throw new ApplicationException("Unknown version");
}