fix #61

Author: 0xlane

Cargo.toml

@@ -1,6 +1,6 @@
 [package]
 name = "wechat-dump-rs"
-version = "1.0.28"
+version = "1.0.29"
 edition = "2021"
 repository = "https://github.com/0xlane/wechat-dump-rs"
 

src/main.rs

@@ -4,7 +4,7 @@ fn cli() -> clap::Command {
     use clap::{arg, value_parser, Command};
 
     Command::new("wechat-dump-rs")
-        .version("1.0.28")
+        .version("1.0.29")
         .about("A wechat db dump tool")
         .author("REinject")
         .help_template("{name} ({version}) - {author}\n{about}\n{all-args}")

wxdump/Cargo.toml

@@ -1,6 +1,6 @@
 [package]
 name = "wxdump"
-version = "1.0.28"
+version = "1.0.29"
 edition = "2021"
 repository = "https://github.com/0xlane/wechat-dump-rs"
 

wxdump/src/lib.rs

@@ -69,7 +69,7 @@ const RULES_V4: &str = r#"
     rule GetUserInfoOffset
     {
         strings:
-            $a = /(.{16}[\x00-\x20]\x00{7}(\x0f|\x1f)\x00{7}){2}.{16}[\x01-\x20]\x00{7}(\x0f|\x1f)\x00{7}[0-9]{11}\x00{5}\x0b\x00{7}\x0f\x00{7}.{25}\x00{7}(\x2f|\x1f|\x0f)\x00{7}/s
+            $a = /(.{16}[\x00-\x20]\x00{7}(\x0f|\x1f)\x00{7}){2}.{16}[\x01-\x20]\x00{7}(\x0f|\x1f)\x00{7}[0-9]{11}\x00{5}\x0b\x00{7}\x0f\x00{7}.{25}\x00{7}(\x3f|\x2f|\x1f|\x0f)\x00{7}/s
         condition:
             $a
     }