SabreTools/BinaryObjectScanner
1
0
Fork 0
mirror of https://github.com/SabreTools/BinaryObjectScanner.git synced 2026-04-23 06:34:03 +00:00
Code Issues 295 Packages Projects Releases 20 Wiki Activity

Be smarter about SecuROM v4

Browse Source
This commit is contained in:
Matt Nadareski
2025-09-08 18:38:12 -04:00
parent 9af871c0ff
commit d316edf8d0
1 changed files with 11 additions and 8 deletions
Download Patch File Download Diff File Expand all files Collapse all files

19
BinaryObjectScanner/Protection/SecuROM.cs
View File

@@ -41,11 +41,9 @@ namespace BinaryObjectScanner.Protection
return $"SecuROM SLL Protected (for SecuROM v8.x)";
// Search after the last section
if (exe.OverlayStrings != null)
{
if (exe.OverlayStrings.Exists(s => s == "AddD"))
return $"SecuROM {GetV4Version(exe)}";
}
string? v4Version = GetV4Version(exe);
if (v4Version != null)
return $"SecuROM {v4Version}";
// Get the sections 5+, if they exist (example names: .fmqyrx, .vcltz, .iywiak)
var sections = exe.SectionTable ?? [];
@@ -144,12 +142,17 @@ namespace BinaryObjectScanner.Protection
return MatchUtil.GetFirstMatch(path, matchers, any: true);
}
private static string GetV4Version(PortableExecutable exe)
/// <summary>
/// Try to get the SecuROM v4 version from the overlay, if possible
/// </summary>
/// <param name="exe">Executable to retrieve the overlay from</param>
/// <returns>The version on success, null otherwise</returns>
private static string? GetV4Version(PortableExecutable exe)
{
// Cache the overlay data for easier access
var overlayData = exe.OverlayData;
if (overlayData == null || overlayData.Length < 20)
return "(very old, v3 or less)";
return null;
// Search for the "AddD" string in the overlay
bool found = false;
@@ -167,7 +170,7 @@ namespace BinaryObjectScanner.Protection
// If the string wasn't found in the first 0x100 bytes
if (!found)
return "(very old, v3 or less)";
return null;
// Read the version starting 4 bytes after the signature
index += 8;