From 7fcdfce1525c44ed40236a8f816661f7c13ee67e Mon Sep 17 00:00:00 2001 From: Matt Nadareski Date: Fri, 26 Sep 2025 20:39:22 -0400 Subject: [PATCH] Add notes about ApecSoft --- BinaryObjectScanner/Packer/ApecSoft.cs | 18 ++++++++++++++++++ 1 file changed, 18 insertions(+) create mode 100644 BinaryObjectScanner/Packer/ApecSoft.cs diff --git a/BinaryObjectScanner/Packer/ApecSoft.cs b/BinaryObjectScanner/Packer/ApecSoft.cs new file mode 100644 index 00000000..488a8415 --- /dev/null +++ b/BinaryObjectScanner/Packer/ApecSoft.cs @@ -0,0 +1,18 @@ +namespace BinaryObjectScanner.Packer +{ + // TODO: Implement + public class ApecSoft + { + // The overlay data starts with the string "CWS\7" [43 57 53 07] + // Data is likely compressed with zlib based on some clues from + // the executable content. + + // The executable has a ".CRT" section that may contain clues of + // how to process. The section appears mostly empty. The sample + // I have has a value of [80 95 46 00] (4625792). This does not + // appear to be an offset, relative or otherwise. + + // On initial research, there is no obvious file table or directory + // visible in any of the sections. + } +}