// DIE's signature file
// Author: hypn0 <hypn0@mail.ru>

init("protection", "NetHASP dongle reference");

function detect(bShowType, bShowVersion, bShowOptions) {
    // I'm (adoxa) guessing these don't occur in the overlay, so don't search it (avoid wasting time on big installers).
    var nSize = PE.isOverlayPresent() ? PE.getOverlayOffset() : PE.getSize();

    if (nSize > 50000000)
        nSize = 50000000;

    if (PE.findString(0, nSize, "NETHASP_00112233445566zz") != -1 ||
        PE.findString(0, nSize, "nethasp.ini") != -1) {
        bDetected = true;
    }

    return result(bShowType, bShowVersion, bShowOptions);
}