diff --git a/BurnOutSharp/ProtectionType/Tages.cs b/BurnOutSharp/ProtectionType/Tages.cs index 7969cbaa..b752abbc 100644 --- a/BurnOutSharp/ProtectionType/Tages.cs +++ b/BurnOutSharp/ProtectionType/Tages.cs @@ -3,38 +3,14 @@ using System.Collections.Concurrent; using System.Collections.Generic; using System.IO; using System.Linq; -using BurnOutSharp.ExecutableType.Microsoft.NE; using BurnOutSharp.ExecutableType.Microsoft.PE; using BurnOutSharp.Matching; using BurnOutSharp.Tools; namespace BurnOutSharp.ProtectionType { - public class TAGES : IContentCheck, IPEContentCheck, IPathCheck + public class TAGES : IPEContentCheck, IPathCheck { - /// - public string CheckContents(string file, byte[] fileContent, bool includeDebug, PortableExecutable pex, NewExecutable nex) - { - // TODO: Obtain a sample to find where this string is in a typical executable - if (includeDebug) - { - var contentMatchSets = new List - { - // protected-tages-runtime.exe - new ContentMatchSet(new byte?[] - { - 0x70, 0x72, 0x6F, 0x74, 0x65, 0x63, 0x74, 0x65, - 0x64, 0x2D, 0x74, 0x61, 0x67, 0x65, 0x73, 0x2D, - 0x72, 0x75, 0x6E, 0x74, 0x69, 0x6D, 0x65, 0x2E, - 0x65, 0x78, 0x65 - }, Utilities.GetFileVersion, "TAGES [DEBUG]"), - }; - return MatchUtil.GetFirstMatch(file, fileContent, contentMatchSets, includeDebug); - } - - return null; - } - /// public string CheckPEContents(string file, PortableExecutable pex, bool includeDebug) {