diff --git a/de4dot.code/deobfuscators/Confuser/ConstantsDecrypterV18.cs b/de4dot.code/deobfuscators/Confuser/ConstantsDecrypterV18.cs index e908d364..d7f2eb21 100644 --- a/de4dot.code/deobfuscators/Confuser/ConstantsDecrypterV18.cs +++ b/de4dot.code/deobfuscators/Confuser/ConstantsDecrypterV18.cs @@ -809,14 +809,16 @@ namespace de4dot.code.deobfuscators.Confuser { case ConfuserVersion.v19_r78056_dynamic: case ConfuserVersion.v19_r78056_native: minRev = 78056; - maxRev = 78342; + // r78964 removed code that made it impossible to differentiate it from this + // version. All we know is that it can't be r78363-r78963. + maxRev = int.MaxValue; return true; case ConfuserVersion.v19_r78363_normal: case ConfuserVersion.v19_r78363_dynamic: case ConfuserVersion.v19_r78363_native: minRev = 78363; - maxRev = int.MaxValue; + maxRev = 78963; return true; default: throw new ApplicationException("Invalid version"); diff --git a/de4dot.code/deobfuscators/Confuser/VersionDetector.cs b/de4dot.code/deobfuscators/Confuser/VersionDetector.cs index f40617b3..60a2b6e9 100644 --- a/de4dot.code/deobfuscators/Confuser/VersionDetector.cs +++ b/de4dot.code/deobfuscators/Confuser/VersionDetector.cs @@ -46,7 +46,7 @@ namespace de4dot.code.deobfuscators.Confuser { 76558, 76580, 76656, 76871, 76923, 76924, 76933, 76934, 76972, 76974, 77124, 77172, 77447, 77501, 78056, 78072, 78086, 78196, 78197, 78342, 78363, 78377, 78612, 78638, - 78642, 78730, 78731, 78962, 78963, + 78642, 78730, 78731, 78962, 78963, 78964, }; static Dictionary revToVersion = new Dictionary {