SabreTools/BinaryObjectScanner
1
0
Fork 0
mirror of https://github.com/SabreTools/BinaryObjectScanner.git synced 2026-04-25 23:59:59 +00:00
Code Issues 295 Packages Projects Releases 20 Wiki Activity

Add notes to EXE Stealth

Browse Source
This commit is contained in:
Matt Nadareski
2022-12-05 14:11:52 -08:00
parent ad5735a559
commit 00028ac59b
1 changed files with 12 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

14
BurnOutSharp/PackerType/EXEStealth.cs
View File

@@ -7,8 +7,7 @@ using BurnOutSharp.Wrappers;
namespace BurnOutSharp.PackerType
{
// TODO: Figure out how to more granularly determine versions like PiD,
// at least for the 2.41 -> 2.75 range
// TODO: Figure out how to more granularly determine versions like PiD
// TODO: Detect 3.15 and up (maybe looking for `Metamorphism`)
// TODO: Add extraction
// https://raw.githubusercontent.com/wolfram77web/app-peid/master/userdb.txt
@@ -50,6 +49,17 @@ namespace BurnOutSharp.PackerType
if (sections == null)
return null;
// The ExeS/EXES/*mtw sections seem to map to the Import Table
// 2.6/2.51
// `ExeStealth - www.webtoolmaster.com`
// 2.72/2.73
// `Shareware - ExeStealth`
// `www.webtoolmaster.com`
// 2.74
// `Shareware - ExeStealth`
// 2.76
// `ExeStealth V2 Shareware not for public - This text not in registered version - www.webtoolmaster.com`
// Get the ExeS/EXES section, if it exists
bool exesSection = pex.ContainsSection("ExeS", exact: true) || pex.ContainsSection("EXES", exact: true);
if (exesSection)