[CFG] Debug logging enabled
[IO] File size: 60615680 bytes
[IO] Mapped view @ 000001FBD4760000 size=60615680 bytes
[PE] ImageBase=0x140000000
[PE] Section count: 8
[SECT] .text RVA=0x1000 size=0x2b3004c
[SECT] .rdata RVA=0x2b32000 size=0xbc138c
[SECT] .data RVA=0x36f4000 size=0x2aafb4
[GodotVer] Scanning .rdata for 'Godot Engine' (12325888 bytes)
[GodotVer] Occurrence 1: Godot Engine running with display/window/energy_saving/keep_screen_on = true
[GodotVer] Skipping - not a version string
[GodotVer] Occurrence 2: Godot Engine
[GodotVer] Occurrence 3: Godot Engine contributors. (c) 2007-present Juan Linietsky, Ariel Manzur.
[GodotVer] Skipping - not a version string
[GodotVer] Occurrence 4: Godot Engine v4.3.stable.custom_build
[GodotVer] Parsed version (with v): 4.3.stable.custom_build
[GodotVer] Found preferred version: 4.3.stable.custom_build
Godot Engine version: 4.3.stable.custom_build
[ANCHOR] Searching for: 'Can't open encrypted pack directory.'
[ANCHOR] Hits: 1
[ANCHOR] RVA=0x32465a0 VA=0x1432465a0
[find_lea] target_va=0x1432465a0
[find_lea] Found LEA at VA=0x14253f450
[LEA] Site=0x14253f450
[EDX_SEARCH] Starting search near LEA at 0x14253f450 radius=0x2000
[EDX_SEARCH] Searching in text range [0x14253d450-0x142541450)
[EDX_SEARCH] Found 'mov edx, 20h' at VA=0x14253f469
[is_va_in_section] VA=0x14370c070 section=.data range=[0x1436f4000, 0x14399efb4) -> true
[SCAN] Instruction is LEA, target VA is the pointer.
[READ] Final Blob pointer VA=0x14370c070
[is_va_in_section] VA=0x14370c070 section=.rdata range=[0x142b32000, 0x1436f338c) -> false
[is_va_in_section] VA=0x14370c070 section=.data range=[0x1436f4000, 0x14399efb4) -> true
[SECT] Blob VA is in section '.data'.
Anchor : Can't open encrypted pack directory.
String VA00000000: 0x1432465A0
LEA at00000000000: 0x14253F450
off_* qword VA000: 0x14370C070
Blob VA0000000000: 0x14370C070
32-byte (hex) : 1C652F7FE1E72499CE0CC25A485F36482A0453F246B83E9F4538B0C705C9501A
Demo is 200 mb, easy enough to grab from steam (tested with gdre_tools)