From 7784e0cfefebaab91122f9d4df837de7418086fc Mon Sep 17 00:00:00 2001 From: Matt Nadareski Date: Mon, 8 Sep 2025 19:38:53 -0400 Subject: [PATCH] Add Zylom Wrapper detection --- BinaryObjectScanner/Packer/ZylomWrapper.cs | 22 ++++++++++++++++++++++ README.md | 1 + 2 files changed, 23 insertions(+) create mode 100644 BinaryObjectScanner/Packer/ZylomWrapper.cs diff --git a/BinaryObjectScanner/Packer/ZylomWrapper.cs b/BinaryObjectScanner/Packer/ZylomWrapper.cs new file mode 100644 index 00000000..9b2f9b1d --- /dev/null +++ b/BinaryObjectScanner/Packer/ZylomWrapper.cs @@ -0,0 +1,22 @@ +using BinaryObjectScanner.Interfaces; +using SabreTools.Serialization.Wrappers; + +namespace BinaryObjectScanner.Packer +{ + /// + /// Zylom Wrapper + /// + public class ZylomWrapper : IExecutableCheck + { + /// + public string? CheckExecutable(string file, PortableExecutable exe, bool includeDebug) + { + // Get the .zylmix section, if it exists + // Found in "f126309095_Zylom_Games" + if (exe.ContainsSection(".zylmix", exact: true)) + return "Zylom Wrapper"; + + return null; + } + } +} diff --git a/README.md b/README.md index d5d17b4b..02bcf97c 100644 --- a/README.md +++ b/README.md @@ -180,6 +180,7 @@ Below is a list of executable packers detected by BinaryObjectScanner. The three | WinRAR SFX | Yes | No | Yes | | | WinZip SFX | Yes | No | Yes | | | WISE Installer | Yes | No | Yes | | +| Zylom Wrapper | Yes | No | No | | ## Game Engines Detected