From 86bfcc15f9345f5296cd0a6fb66fe578cd79b097 Mon Sep 17 00:00:00 2001 From: Matt Nadareski Date: Thu, 8 Dec 2022 15:37:11 -0800 Subject: [PATCH] Add note to JoWooD --- BurnOutSharp/ProtectionType/JoWood.cs | 7 +++++++ 1 file changed, 7 insertions(+) diff --git a/BurnOutSharp/ProtectionType/JoWood.cs b/BurnOutSharp/ProtectionType/JoWood.cs index fe343024..876a67ae 100644 --- a/BurnOutSharp/ProtectionType/JoWood.cs +++ b/BurnOutSharp/ProtectionType/JoWood.cs @@ -27,6 +27,13 @@ namespace BurnOutSharp.ProtectionType // Get the .dcrtext section, if it exists if (pex.ContainsSection(".dcrtext")) { + // TODO: This can't work yet because the version is embedded after the hint/name table + //if ((pex.ImportTable?.ImportDirectoryTable?.Any(idte => idte.Name == "kernel32.dll") ?? false) + // && (pex.ImportHintNameTable?.Any(s => s == "VirtualProtect") ?? false)) + //{ + // return $"JoWood X-Prot {GetVersion(pex)}" + //} + var matchers = new List { // kernel32.dll + (char)0x00 + (char)0x00 + (char)0x00 + VirtualProtect