mirror of
https://github.com/SabreTools/BinaryObjectScanner.git
synced 2026-02-12 05:35:17 +00:00
112 lines
4.4 KiB
C#
112 lines
4.4 KiB
C#
using System.Collections.Concurrent;
|
|
using System.Collections.Generic;
|
|
using System.Linq;
|
|
using BurnOutSharp.Interfaces;
|
|
using BurnOutSharp.Matching;
|
|
using BurnOutSharp.Wrappers;
|
|
|
|
namespace BurnOutSharp.ProtectionType
|
|
{
|
|
/// <see href="https://zhidao.baidu.com/question/211454017.html"/>
|
|
/// <see href="https://bbs.pediy.com/thread-62414-3.htm"/>
|
|
/// <see href="https://bbs.pediy.com/thread-141554.htm"/>
|
|
/// <see href="https://forum.arabhardware.net/showthread.php?t=45360"/>
|
|
/// <see href="https://forum.arabhardware.net/showthread.php?t=45360&p=304085"/>
|
|
public class SoftLock : IPortableExecutableCheck, IPathCheck
|
|
{
|
|
/// <inheritdoc/>
|
|
public string CheckPortableExecutable(string file, PortableExecutable pex, bool includeDebug)
|
|
{
|
|
// Get the sections from the executable, if possible
|
|
var sections = pex?.SectionTable;
|
|
if (sections == null)
|
|
return null;
|
|
|
|
// Found in "IALib.DLL" in IA item "TAFSEERVER4SETUP"
|
|
string name = pex.InternalName;
|
|
if (name?.Equals("Softlock Protected Application") == true)
|
|
return "SoftLock";
|
|
|
|
// Found in "IALib.DLL" in IA item "TAFSEERVER4SETUP"
|
|
name = pex.Comments;
|
|
if (name?.Equals("Softlock Protected Application") == true)
|
|
return "SoftLock";
|
|
|
|
// Found in "IALib.DLL" in IA item "TAFSEERVER4SETUP"
|
|
var stMatch = pex.FindStringTableByEntry("Softlock CD");
|
|
if (stMatch.Any())
|
|
return "SoftLock";
|
|
|
|
// Found in "IALib.DLL" in IA item "TAFSEERVER4SETUP"
|
|
stMatch = pex.FindStringTableByEntry("Softlock USB Key");
|
|
if (stMatch.Any())
|
|
return "SoftLock";
|
|
|
|
// Found in "IALib.DLL" in IA item "TAFSEERVER4SETUP"
|
|
var dbMatch = pex.FindDialogByTitle("Softlock Protection Kit");
|
|
if (dbMatch.Any())
|
|
return "SoftLock";
|
|
|
|
// Found in "IALib.DLL" in IA item "TAFSEERVER4SETUP"
|
|
dbMatch = pex.FindDialogByTitle("About Softlock Protected Application");
|
|
if (dbMatch.Any())
|
|
return "SoftLock";
|
|
|
|
// Found in "IALib.DLL" in IA item "TAFSEERVER4SETUP"
|
|
dbMatch = pex.FindDialogBoxByItemTitle("www.softlock.net");
|
|
if (dbMatch.Any())
|
|
return "SoftLock";
|
|
|
|
// TODO: See if the version number is anywhere else
|
|
// TODO: Parse the version number out of the dialog box item
|
|
// Found in "IALib.DLL" in IA item "TAFSEERVER4SETUP"
|
|
dbMatch = pex.FindDialogBoxByItemTitle("Softlock Protected Application Version 1.0");
|
|
if (dbMatch.Any())
|
|
return "SoftLock";
|
|
|
|
// There are many mentions of USB dongle and CD protection in the various string tables
|
|
// and dialog boxes. See if any of those are unique to SoftLock.
|
|
|
|
// Get strings from .section, if possible
|
|
var strings = pex.GetFirstSectionStrings(".section");
|
|
if (strings != null && strings.Any())
|
|
{
|
|
// Found in "TafseerVer4.exe" in IA item "TAFSEERVER4SETUP"
|
|
if (strings.Any(s => s?.Contains("SOFTLOCKPROTECTION") == true))
|
|
return "SoftLock";
|
|
}
|
|
|
|
// Investigate if the ".section" section is an indicator of SoftLock
|
|
|
|
return null;
|
|
}
|
|
|
|
/// <inheritdoc/>
|
|
public ConcurrentQueue<string> CheckDirectoryPath(string path, IEnumerable<string> files)
|
|
{
|
|
var matchers = new List<PathMatchSet>
|
|
{
|
|
new PathMatchSet(new List<PathMatch>
|
|
{
|
|
new PathMatch(needle: "SOFTLOCKC.dat", useEndsWith: true),
|
|
new PathMatch("SOFTLOCKI.dat", useEndsWith: true),
|
|
}, "SoftLock"),
|
|
};
|
|
|
|
return MatchUtil.GetAllMatches(files, matchers, any: false);
|
|
}
|
|
|
|
/// <inheritdoc/>
|
|
public string CheckFilePath(string path)
|
|
{
|
|
var matchers = new List<PathMatchSet>
|
|
{
|
|
new PathMatchSet(new PathMatch("SOFTLOCKC.dat", useEndsWith: true), "SoftLock"),
|
|
new PathMatchSet(new PathMatch("SOFTLOCKI.dat", useEndsWith: true), "SoftLock"),
|
|
};
|
|
|
|
return MatchUtil.GetFirstMatch(path, matchers, any: true);
|
|
}
|
|
}
|
|
}
|