Closed mizaru closed 6 years ago
I only had one executable to try it with, the unpacking went smoothly, though.
Thanks again for your pull request. I received a handful of 64bit files with this variant and was able to build a pattern for it. The patterns I use are based on full instruction bytes vs. doing mid-instruction alignment like yours is setup for. Either way, thanks again for your contribution towards the project! :)
Thanks for the pull request! At the moment I'm super busy with some other stuff but will get to checking on this soon. I have some new 64bit files sent from a few people that are supposedly a new version of the DRM that may use this signature that I can verify with as well.