mirror of
https://github.com/SabreTools/BinaryObjectScanner.git
synced 2026-02-13 13:45:57 +00:00
* Add new MGI Registration check * Add new MGI Registration check * Address PR comment * Address PR comment
38 lines
1.4 KiB
C#
38 lines
1.4 KiB
C#
using System;
|
|
using System.Linq;
|
|
using BurnOutSharp.Interfaces;
|
|
using BurnOutSharp.Wrappers;
|
|
|
|
namespace BurnOutSharp.ProtectionType
|
|
{
|
|
public class MGIRegistration : IPortableExecutableCheck
|
|
{
|
|
/// <inheritdoc/>
|
|
public string CheckPortableExecutable(string file, PortableExecutable pex, bool includeDebug)
|
|
{
|
|
// Get the sections from the executable, if possible
|
|
var sections = pex?.SectionTable;
|
|
if (sections == null)
|
|
return null;
|
|
|
|
string name = pex.ProductName;
|
|
|
|
// Found in "Register.dll" in IA item "MGIPhotoSuite4.0AndPhotoVista2.02001".
|
|
if (name?.Equals("MGI Registration Utility", StringComparison.Ordinal) == true)
|
|
return $"MGI Registration {Tools.Utilities.GetInternalVersion(pex)}";
|
|
|
|
// Found in "Register.dll" from "VideoWaveIII" in IA item "mgi-videowave-iii-version-3.00-mgi-software-2000".
|
|
var resources = pex.FindStringTableByEntry("MGI Registration");
|
|
if (resources.Any())
|
|
return "MGI Registration";
|
|
|
|
// Found in "Register.dll" in IA item "MGIPhotoSuite4.0AndPhotoVista2.02001".
|
|
resources = pex.FindStringTableByEntry("Register@register.mgisoft.com");
|
|
if (resources.Any())
|
|
return "MGI Registration";
|
|
|
|
return null;
|
|
}
|
|
}
|
|
}
|