SabreTools/BinaryObjectScanner
1
0
Fork 0
mirror of https://github.com/SabreTools/BinaryObjectScanner.git synced 2026-09-22 14:54:56 +00:00
Code Issues 295 Packages Projects Releases 20 Wiki Activity

Disable possibly overly-broad CD Check check

Browse Source
This commit is contained in:
Matt Nadareski
2021-09-13 23:43:24 -07:00
parent 57499002d2
commit 4aa3ba0545
1 changed files with 9 additions and 14 deletions
Download Patch File Download Diff File Expand all files Collapse all files

23
BurnOutSharp/ProtectionType/CDCheck.cs
View File

@@ -7,19 +7,6 @@ namespace BurnOutSharp.ProtectionType
{
public class CDCheck : IContentCheck
{
/// <inheritdoc/>
private List<ContentMatchSet> GetContentMatchSets()
{
// TODO: Obtain a sample to find where this string is in a typical executable
// TODO: Is this too broad in general? It _does_ indicate a CD check, but there's no real
// way of knowing how consistent it is
return new List<ContentMatchSet>
{
// CDCheck
new ContentMatchSet(new byte?[] { 0x43, 0x44, 0x43, 0x68, 0x65, 0x63, 0x6B }, "Executable-Based CD Check"),
};
}
/// <inheritdoc/>
public string CheckContents(string file, byte[] fileContent, bool includeDebug, PortableExecutable pex, NewExecutable nex)
{
@@ -46,7 +33,15 @@ namespace BurnOutSharp.ProtectionType
return match;
}
var contentMatchSets = GetContentMatchSets();
// TODO: Obtain a sample to find where this string is in a typical executable
// TODO: Is this too broad in general? It _does_ indicate a CD check, but there's no real
// way of knowing how consistent it is
var contentMatchSets = new List<ContentMatchSet>
{
// // CDCheck
// new ContentMatchSet(new byte?[] { 0x43, 0x44, 0x43, 0x68, 0x65, 0x63, 0x6B }, "Executable-Based CD Check"),
};
if (contentMatchSets != null && contentMatchSets.Any())
return MatchUtil.GetFirstMatch(file, fileContent, contentMatchSets, includeDebug);