SabreTools/BinaryObjectScanner
1
0
Fork 0
mirror of https://github.com/SabreTools/BinaryObjectScanner.git synced 2026-04-27 00:30:44 +00:00
Code Issues 295 Packages Projects Releases 20 Wiki Activity

Partially convert ActiveMARK to string finding

Browse Source
This commit is contained in:
Matt Nadareski
2022-12-09 21:37:33 -08:00
parent 88049affb5
commit 84a65e998f
1 changed files with 5 additions and 12 deletions
Download Patch File Download Diff File Expand all files Collapse all files

17
BurnOutSharp/ProtectionType/ActiveMARK.cs
View File

@@ -68,19 +68,12 @@ namespace BurnOutSharp.ProtectionType
return match;
}
// Get the last .bss section, if it exists
var bssSectionRaw = pex.GetLastSectionData(".bss");
if (bssSectionRaw != null)
// Get the last .bss section strings, if they exist
List<string> strs = pex.GetLastSectionStrings(".bss");
if (strs != null)
{
var matchers = new List<ContentMatchSet>
{
// TMSAMVOF
new ContentMatchSet(new byte?[] { 0x54, 0x4D, 0x53, 0x41, 0x4D, 0x56, 0x4F, 0x46 }, "ActiveMARK"),
};
string match = MatchUtil.GetFirstMatch(file, bssSectionRaw, matchers, includeDebug);
if (!string.IsNullOrWhiteSpace(match))
return match;
if (strs.Any(s => s.Contains("TMSAMVOF")))
return "ActiveMARK";
}
return null;