From 0c3793263131eaf4f51458478cd1712b6cbef1c8 Mon Sep 17 00:00:00 2001 From: Matt Nadareski Date: Tue, 20 Dec 2022 11:26:22 -0800 Subject: [PATCH] Cleanup and notes for 3P-Lock --- BurnOutSharp/ProtectionType/ThreePLock.cs | 13 ++++++++----- 1 file changed, 8 insertions(+), 5 deletions(-) diff --git a/BurnOutSharp/ProtectionType/ThreePLock.cs b/BurnOutSharp/ProtectionType/ThreePLock.cs index 95e06e57..35874e86 100644 --- a/BurnOutSharp/ProtectionType/ThreePLock.cs +++ b/BurnOutSharp/ProtectionType/ThreePLock.cs @@ -3,6 +3,11 @@ using BurnOutSharp.Wrappers; namespace BurnOutSharp.ProtectionType { + /// + /// PiD only looks for the `.ldr` section, from testing + /// There don't seem to be any other signs that this is 3P-Lock anywhere in the example files + /// No website has been found for 3P-Lock yet + /// public class ThreePLock : IPortableExecutableCheck { /// @@ -16,11 +21,9 @@ namespace BurnOutSharp.ProtectionType //This produced false positives in some DirectX 9.0c installer files //"Y" + (char)0xC3 + "U" + (char)0x8B + (char)0xEC + (char)0x83 + (char)0xEC + "0SVW" - // Get the .ldr and .ldt sections, if they exist -- TODO: Confirm if both are needed or either/or is fine - bool cmsdSection = pex.ContainsSection(".ldr", exact: true); - bool cmstSection = pex.ContainsSection(".ldt", exact: true); - if (cmsdSection || cmstSection) - return $"3PLock"; + // Get the .ldr and .ldt sections, if they exist + if (pex.ContainsSection(".ldr", exact: true) && pex.ContainsSection(".ldt", exact: true)) + return $"3P-Lock Copy Protection"; return null; }