BinaryObjectScanner/BinaryObjectScanner.Protection/SoftLock.cs

using System.Collections.Concurrent;
using System.Collections.Generic;
using System.Linq;
using BinaryObjectScanner.Interfaces;
using BinaryObjectScanner.Matching;
using BinaryObjectScanner.Wrappers;

namespace BinaryObjectScanner.Protection
{
    /// <see href="https://zhidao.baidu.com/question/211454017.html"/>
    /// <see href="https://bbs.pediy.com/thread-62414-3.htm"/>
    /// <see href="https://bbs.pediy.com/thread-141554.htm"/>
    /// <see href="https://forum.arabhardware.net/showthread.php?t=45360"/>
    /// <see href="https://forum.arabhardware.net/showthread.php?t=45360&p=304085"/>
    public class SoftLock : IPortableExecutableCheck, IPathCheck
    {
        /// <inheritdoc/>
        public string CheckPortableExecutable(string file, PortableExecutable pex, bool includeDebug)
        {
            // Get the sections from the executable, if possible
            var sections = pex?.SectionTable;
            if (sections == null)
                return null;

            // Found in "IALib.DLL" in IA item "TAFSEERVER4SETUP"
            string name = pex.InternalName;
            if (name?.Equals("Softlock Protected Application") == true)
                return "SoftLock";

            // Found in "IALib.DLL" in IA item "TAFSEERVER4SETUP"
            name = pex.Comments;
            if (name?.Equals("Softlock Protected Application") == true)
                return "SoftLock";

            // Found in "IALib.DLL" in IA item "TAFSEERVER4SETUP"
            var stMatch = pex.FindStringTableByEntry("Softlock CD");
            if (stMatch.Any())
                return "SoftLock";

            // Found in "IALib.DLL" in IA item "TAFSEERVER4SETUP"
            stMatch = pex.FindStringTableByEntry("Softlock USB Key");
            if (stMatch.Any())
                return "SoftLock";

            // Found in "IALib.DLL" in IA item "TAFSEERVER4SETUP"
            var dbMatch = pex.FindDialogByTitle("Softlock Protection Kit");
            if (dbMatch.Any())
                return "SoftLock";

            // Found in "IALib.DLL" in IA item "TAFSEERVER4SETUP"
            dbMatch = pex.FindDialogByTitle("About Softlock Protected Application");
            if (dbMatch.Any())
                return "SoftLock";

            // Found in "IALib.DLL" in IA item "TAFSEERVER4SETUP"
            dbMatch = pex.FindDialogBoxByItemTitle("www.softlock.net");
            if (dbMatch.Any())
                return "SoftLock";

            // TODO: See if the version number is anywhere else
            // TODO: Parse the version number out of the dialog box item
            // Found in "IALib.DLL" in IA item "TAFSEERVER4SETUP"
            dbMatch = pex.FindDialogBoxByItemTitle("Softlock Protected Application Version 1.0");
            if (dbMatch.Any())
                return "SoftLock";

            // There are many mentions of USB dongle and CD protection in the various string tables
            // and dialog boxes. See if any of those are unique to SoftLock.

            // Get strings from .section, if possible
            var strings = pex.GetFirstSectionStrings(".section");
            if (strings != null && strings.Any())
            {
                // Found in "TafseerVer4.exe" in IA item "TAFSEERVER4SETUP"
                if (strings.Any(s => s?.Contains("SOFTLOCKPROTECTION") == true))
                    return "SoftLock";
            }

            // Investigate if the ".section" section is an indicator of SoftLock

            return null;
        }

        /// <inheritdoc/>
        public ConcurrentQueue<string> CheckDirectoryPath(string path, IEnumerable<string> files)
        {
            var matchers = new List<PathMatchSet>
            {
                new PathMatchSet(new List<PathMatch>
                {
                    new PathMatch(needle: "SOFTLOCKC.dat", useEndsWith: true),
                    new PathMatch("SOFTLOCKI.dat", useEndsWith: true),
                }, "SoftLock"),
            };

            return MatchUtil.GetAllMatches(files, matchers, any: false);
        }

        /// <inheritdoc/>
        public string CheckFilePath(string path)
        {
            var matchers = new List<PathMatchSet>
            {
                new PathMatchSet(new PathMatch("SOFTLOCKC.dat", useEndsWith: true), "SoftLock"),
                new PathMatchSet(new PathMatch("SOFTLOCKI.dat", useEndsWith: true), "SoftLock"),
            };

            return MatchUtil.GetFirstMatch(path, matchers, any: true);
        }
    }
}