SabreTools/BinaryObjectScanner
1
0
Fork 0
mirror of https://github.com/SabreTools/BinaryObjectScanner.git synced 2026-07-16 05:45:03 +00:00
Code Issues 295 Packages Projects Releases 20 Wiki Activity

Add missing checks for ActiveMARK

Browse Source
This commit is contained in:
Matt Nadareski
2022-06-22 09:42:52 -07:00
parent 35c15d0ff8
commit 614413ab76
1 changed files with 32 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

32
BurnOutSharp/ProtectionType/ActiveMARK.cs
View File

@@ -39,6 +39,38 @@ namespace BurnOutSharp.ProtectionType
if (sections == null)
return null;
// Get the entry point data, if it exists
if (pex.EntryPointRaw != null)
{
var matchers = new List<ContentMatchSet>
{
// (char)0x89 + (char)0x25 + * + * + * + * + * + * + * + * + (char)0xEB
new ContentMatchSet(new byte?[]
{
0x89, 0x25, null, null, null, null, null, null,
null, null, 0xEB,
}, "ActiveMARK"),
};
string match = MatchUtil.GetFirstMatch(file, pex.EntryPointRaw, matchers, includeDebug);
if (!string.IsNullOrWhiteSpace(match))
return match;
}
// Get the overlay data, if it exists
if (pex.OverlayRaw != null)
{
var matchers = new List<ContentMatchSet>
{
// (char)0x00 + TMSAMVOH
new ContentMatchSet(new byte?[] { 0x00, 0x54, 0x4D, 0x53, 0x41, 0x4D, 0x56, 0x4F, 0x48, }, "ActiveMARK"),
};
string match = MatchUtil.GetFirstMatch(file, pex.OverlayRaw, matchers, includeDebug);
if (!string.IsNullOrWhiteSpace(match))
return match;
}
// Get the last .bss section, if it exists
var bssSectionRaw = pex.ReadRawSection(".bss", first: false);
if (bssSectionRaw != null)