Files
BinaryObjectScanner/BurnOutSharp/ProtectionType/SVKP.cs
2022-05-01 17:41:50 -07:00

24 lines
765 B
C#

using BurnOutSharp.ExecutableType.Microsoft.PE;
using BurnOutSharp.Interfaces;
namespace BurnOutSharp.ProtectionType
{
// TODO: Figure out how versions/version ranges work for this protection
public class SVKProtector : IPortableExecutableCheck
{
/// <inheritdoc/>
public string CheckPortableExecutable(string file, PortableExecutable pex, bool includeDebug)
{
// Get the image file header from the executable, if possible
if (pex?.ImageFileHeader == null)
return null;
// 0x504B5653 is "SVKP"
if (pex.ImageFileHeader.PointerToSymbolTable == 0x504B5653)
return "SVKP (Slovak Protector)";
return null;
}
}
}