From 38d35d1991c26d8e54484bf1be61b65f76cc5cd8 Mon Sep 17 00:00:00 2001 From: Matt Nadareski Date: Tue, 14 Sep 2021 11:51:01 -0700 Subject: [PATCH] Convert remaining XCP full content check --- BurnOutSharp/ProtectionType/XCP.cs | 12 ++++-------- 1 file changed, 4 insertions(+), 8 deletions(-) diff --git a/BurnOutSharp/ProtectionType/XCP.cs b/BurnOutSharp/ProtectionType/XCP.cs index c06589e7..732ebf2a 100644 --- a/BurnOutSharp/ProtectionType/XCP.cs +++ b/BurnOutSharp/ProtectionType/XCP.cs @@ -28,6 +28,9 @@ namespace BurnOutSharp.ProtectionType // XCP.DAT new ContentMatchSet(new byte?[] { 0x58, 0x43, 0x50, 0x2E, 0x44, 0x41, 0x54 }, "XCP"), + // xcpdrive + new ContentMatchSet(new byte?[] { 0x78, 0x63, 0x70, 0x64, 0x72, 0x69, 0x76, 0x65 }, "XCP"), + // XCPPlugins.dll new ContentMatchSet(new byte?[] { @@ -48,14 +51,7 @@ namespace BurnOutSharp.ProtectionType return match; } - // TODO: Obtain a sample to find where this string is in a typical executable - var contentMatchSets = new List - { - // xcpdrive - new ContentMatchSet(new byte?[] { 0x78, 0x63, 0x70, 0x64, 0x72, 0x69, 0x76, 0x65 }, "XCP"), - }; - - return MatchUtil.GetFirstMatch(file, fileContent, contentMatchSets, includeDebug); + return null; } ///