Snoooopy/SpotX
1
0
Fork 0
mirror of https://github.com/SpotX-Official/SpotX.git synced 2026-04-11 17:37:21 +10:00
Code Issues Packages Projects Releases Wiki Activity

update x64 byte patterns for dll signing reset

Browse Source
This commit is contained in:
amd64fox
2025-11-29 03:06:00 +03:00
parent 50138858fa
commit b26febf64b
1 changed files with 15 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

18
run.ps1
View File

@@ -1691,7 +1691,13 @@ function Reset-Dll-Sign {
} }
# byte patterns for x64 arch # byte patterns for x64 arch
$searchPattern_x64 = '30 01 00 00 5B C3 CC CC 48 89 5C 24 18 55' # <= 1.2.77
$searchPattern_x64_old = '30 01 00 00 5B C3 CC CC 48 89 5C 24 18 55'
# >= 1.2.78
$searchPattern_x64_new = '4A 01 CC CC CC 48 8B C4 48 89 58'
# common replace pattern for x64
$replacePattern_x64 = 'B8 01 00 00 00 C3' $replacePattern_x64 = 'B8 01 00 00 00 C3'
$bytesToReplaceCount_x64 = 6 $bytesToReplaceCount_x64 = 6
@@ -1719,10 +1725,16 @@ function Reset-Dll-Sign {
Write-Verbose "Using ARM64 byte patterns" Write-Verbose "Using ARM64 byte patterns"
} }
else { else {
$searchPattern = ConvertTo-ByteArray $searchPattern_x64
$replacePattern = ConvertTo-ByteArray $replacePattern_x64 $replacePattern = ConvertTo-ByteArray $replacePattern_x64
$bytesToReplaceCount = $bytesToReplaceCount_x64 $bytesToReplaceCount = $bytesToReplaceCount_x64
Write-Verbose "Using x86/x64 byte patterns" if ([version]$offline -ge [version]'1.2.78.354') {
$searchPattern = ConvertTo-ByteArray $searchPattern_x64_new
Write-Verbose "Using new x64 byte patterns (>= 1.2.78)"
}
else {
$searchPattern = ConvertTo-ByteArray $searchPattern_x64_old
Write-Verbose "Using old x64 byte patterns (<= 1.2.77)"
}
} }
try { try {