Method ScanFile

Source/Client/NM_Engine/IFileScanner.cpp:663–706

}

bool IScanner::ScanFile(const std::string & szFileName, EFileScanTypes fileType)
{
	std::lock_guard <std::recursive_mutex> __lock(m_Mutex);

	SCANNER_LOG(LL_SYS, "File scanner has been started! Target file: %s", szFileName.c_str());

	if (IsScannedFile(szFileName))
	{
		SCANNER_LOG(LL_SYS, "File already scanned!");
		return false;
	}

	// Add to checked list
	m_vScannedFileNames.push_back(szFileName);

	// Scan routine

	/// 1
	// Exist check
	auto bRet = CheckFileExist(szFileName);
	SCANNER_LOG(bRet ? LL_SYS : LL_ERR, "File exist scan completed! Result: %d", bRet);

	/// 2
	// File name + file size + Entropy + Hash
	bRet = CheckFileBasicInformations(szFileName);
	SCANNER_LOG(bRet ? LL_SYS : LL_ERR, "File basic information scan completed! Result: %d", bRet);

	/// 3
	// nFileIndexLow, nFileIndexHigh, dwVolumeSerialNumber
	bRet = CheckFileInformations(szFileName);
	SCANNER_LOG(bRet ? LL_SYS : LL_ERR, "File information scan completed! Result: %d", bRet);

	/// 4
	// PE Informations
	bRet = CheckFilePEInformations(szFileName);
	SCANNER_LOG(bRet ? LL_SYS : LL_ERR, "File PE information scan completed! Result: %d", bRet);

	/// 4
	// Region hash Informations
	bRet = CheckFileRegionHashes(szFileName);
	SCANNER_LOG(bRet ? LL_SYS : LL_ERR, "File PE information scan completed! Result: %d", bRet);

	return true;
}

bool IScanner::ScanFile(HANDLE hProcess, EFileScanTypes fileType)
{