mirror of
https://github.com/SabreTools/BinaryObjectScanner.git
synced 2026-07-08 18:06:34 +00:00
Rename Cucko and cleanup misc
This commit is contained in:
@@ -118,11 +118,6 @@ namespace BurnOutSharp.FileType
|
||||
if (!string.IsNullOrWhiteSpace(protection))
|
||||
protections.Add(protection);
|
||||
|
||||
// Cucko (EA Custom)
|
||||
protection = Cucko.CheckContents(fileContent, includePosition);
|
||||
if (!string.IsNullOrWhiteSpace(protection))
|
||||
protections.Add(protection);
|
||||
|
||||
// dotFuscator
|
||||
protection = dotFuscator.CheckContents(fileContent, includePosition);
|
||||
if (!string.IsNullOrWhiteSpace(protection))
|
||||
@@ -138,6 +133,11 @@ namespace BurnOutSharp.FileType
|
||||
if (!string.IsNullOrWhiteSpace(protection))
|
||||
protections.Add(protection);
|
||||
|
||||
// EA Protections
|
||||
protection = ElectronicArts.CheckContents(fileContent, includePosition);
|
||||
if (!string.IsNullOrWhiteSpace(protection))
|
||||
protections.Add(protection);
|
||||
|
||||
// EXE Stealth
|
||||
protection = EXEStealth.CheckContents(fileContent, includePosition);
|
||||
if (!string.IsNullOrWhiteSpace(protection))
|
||||
|
||||
@@ -1,11 +1,11 @@
|
||||
namespace BurnOutSharp.ProtectionType
|
||||
{
|
||||
public class Cucko
|
||||
public class ElectronicArts
|
||||
{
|
||||
// TODO: Verify this doesn't over-match
|
||||
public static string CheckContents(byte[] fileContent, bool includePosition = false)
|
||||
{
|
||||
// "EASTL"
|
||||
// EASTL
|
||||
byte[] check = new byte[] { 0x45, 0x41, 0x53, 0x54, 0x4C };
|
||||
if (fileContent.Contains(check, out int position))
|
||||
return "Cucko (EA Custom)" + (includePosition ? $" (Index {position})" : string.Empty);
|
||||
@@ -9,7 +9,7 @@ namespace BurnOutSharp.ProtectionType
|
||||
{
|
||||
public static string CheckContents(byte[] fileContent, bool includePosition = false)
|
||||
{
|
||||
// "BITARTS"
|
||||
// BITARTS
|
||||
byte[] check = new byte[] { 0x42, 0x49, 0x54, 0x41, 0x52, 0x54, 0x53 };
|
||||
if (fileContent.Contains(check, out int position))
|
||||
return "SmartE" + (includePosition ? $" (Index {position})" : string.Empty);
|
||||
|
||||
Reference in New Issue
Block a user