From 057ce3c4cca0261651ba91752154a760e276aab8 Mon Sep 17 00:00:00 2001 From: Matt Nadareski Date: Thu, 25 Sep 2025 21:44:08 -0400 Subject: [PATCH] Add more Advanced Installer notes --- BinaryObjectScanner/Packer/AdvancedInstaller.cs | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/BinaryObjectScanner/Packer/AdvancedInstaller.cs b/BinaryObjectScanner/Packer/AdvancedInstaller.cs index d7abe7ce..fdb5afb2 100644 --- a/BinaryObjectScanner/Packer/AdvancedInstaller.cs +++ b/BinaryObjectScanner/Packer/AdvancedInstaller.cs @@ -11,6 +11,12 @@ namespace BinaryObjectScanner.Packer // executables, then every single file appears embedded in the first's overlay. // While this technically extracts the data, it does so improperly. It may require // using the size of image and headers for overlay-extracted data. + // + // Further research shows that there is a signature at the end of the overlay: + // "41 44 56 49 4E 53 54 53 46 58 00 00" (ADVINSTSFX\0\0) + // Above it is something resembling the central directory of a PKZIP file, + // including clear entries that represent each file. This structure needs to + // be documented in Models. public class AdvancedInstaller : IExecutableCheck { ///