From 9ddad4bb5a382b138ab2755661ed697ead090400 Mon Sep 17 00:00:00 2001 From: de4dot Date: Sun, 22 Sep 2013 17:04:45 +0200 Subject: [PATCH] Support Confuser 1.9 r78964 --- de4dot.code/deobfuscators/Confuser/ConstantsDecrypterV18.cs | 6 ++++-- de4dot.code/deobfuscators/Confuser/VersionDetector.cs | 2 +- 2 files changed, 5 insertions(+), 3 deletions(-) diff --git a/de4dot.code/deobfuscators/Confuser/ConstantsDecrypterV18.cs b/de4dot.code/deobfuscators/Confuser/ConstantsDecrypterV18.cs index e908d364..d7f2eb21 100644 --- a/de4dot.code/deobfuscators/Confuser/ConstantsDecrypterV18.cs +++ b/de4dot.code/deobfuscators/Confuser/ConstantsDecrypterV18.cs @@ -809,14 +809,16 @@ namespace de4dot.code.deobfuscators.Confuser { case ConfuserVersion.v19_r78056_dynamic: case ConfuserVersion.v19_r78056_native: minRev = 78056; - maxRev = 78342; + // r78964 removed code that made it impossible to differentiate it from this + // version. All we know is that it can't be r78363-r78963. + maxRev = int.MaxValue; return true; case ConfuserVersion.v19_r78363_normal: case ConfuserVersion.v19_r78363_dynamic: case ConfuserVersion.v19_r78363_native: minRev = 78363; - maxRev = int.MaxValue; + maxRev = 78963; return true; default: throw new ApplicationException("Invalid version"); diff --git a/de4dot.code/deobfuscators/Confuser/VersionDetector.cs b/de4dot.code/deobfuscators/Confuser/VersionDetector.cs index f40617b3..60a2b6e9 100644 --- a/de4dot.code/deobfuscators/Confuser/VersionDetector.cs +++ b/de4dot.code/deobfuscators/Confuser/VersionDetector.cs @@ -46,7 +46,7 @@ namespace de4dot.code.deobfuscators.Confuser { 76558, 76580, 76656, 76871, 76923, 76924, 76933, 76934, 76972, 76974, 77124, 77172, 77447, 77501, 78056, 78072, 78086, 78196, 78197, 78342, 78363, 78377, 78612, 78638, - 78642, 78730, 78731, 78962, 78963, + 78642, 78730, 78731, 78962, 78963, 78964, }; static Dictionary revToVersion = new Dictionary {