using BurnOutSharp.ExecutableType.Microsoft.PE; using BurnOutSharp.Tools; namespace BurnOutSharp.ProtectionType { public class Intenium : IPEContentCheck { /* * Possible strings for finding INTENIUM Trial & Buy Protection * * Luxor Only: * - command_buyNowCb - 63 6F 6D 6D 61 6E 64 5F 62 75 79 4E 6F 77 43 62 * - command_testTrialCb - 63 6F 6D 6D 61 6E 64 5F 74 65 73 74 54 72 69 61 6C 43 62 * - PHRASE_TRIAL - 50 48 52 41 53 45 5F 54 52 49 41 4C * - V_TRIAL_GAME - 56 5F 54 52 49 41 4C 5F 47 41 4D 45 * - V_FULL_GAME - 56 5F 46 55 4C 4C 5F 47 41 4D 45 * * Luxor, World, Cradle, and Kingdom: * - Trial + (char)0x00 + P - 54 72 69 61 6C 00 50 * + This is possibly followed by a version number. Undetermined if it's the software or protection version. * - NO NESTED PRMS SUPPORTED - 4E 4F 20 4E 45 53 54 45 44 20 50 52 4D 53 20 53 55 50 50 4F 52 54 45 44 */ /// public string CheckPEContents(string file, PortableExecutable pex, bool includeDebug) { // Get the sections from the executable, if possible var sections = pex?.SectionTable; if (sections == null) return null; var fileNameResource = Utilities.FindResourceInSection(pex.ResourceSection, dataContains: $"NO NESTED PRMS SUPPORTED"); if (fileNameResource != null) return "ITENIUM Trial & Buy Protection"; return null; } } }