SabreTools/BinaryObjectScanner
1
0
Fork 0
mirror of https://github.com/SabreTools/BinaryObjectScanner.git synced 2026-07-17 06:14:59 +00:00
Code Issues 295 Packages Projects Releases 20 Wiki Activity

Use exposed model directly in more places

Browse Source
This commit is contained in:
Matt Nadareski
2023-09-15 22:21:05 -04:00
parent 57eaa1f04c
commit a52d45f7c2
117 changed files with 876 additions and 7138 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
BinaryObjectScanner.Packer/ASPack.cs
View File

@@ -14,7 +14,7 @@ namespace BinaryObjectScanner.Packer
public string CheckPortableExecutable(string file, PortableExecutable pex, bool includeDebug)
{
// Get the sections from the executable, if possible
var sections = pex?.SectionTable;
var sections = pex?.Model.SectionTable;
if (sections == null)
return null;

2
BinaryObjectScanner.Packer/AdvancedInstaller.cs
View File

@@ -14,7 +14,7 @@ namespace BinaryObjectScanner.Packer
public string CheckPortableExecutable(string file, PortableExecutable pex, bool includeDebug)
{
// Get the sections from the executable, if possible
var sections = pex?.SectionTable;
var sections = pex?.Model.SectionTable;
if (sections == null)
return null;

2
BinaryObjectScanner.Packer/Armadillo.cs
View File

@@ -15,7 +15,7 @@ namespace BinaryObjectScanner.Packer
public string CheckPortableExecutable(string file, PortableExecutable pex, bool includeDebug)
{
// Get the sections from the executable, if possible
var sections = pex?.SectionTable;
var sections = pex?.Model.SectionTable;
if (sections == null)
return null;

2
BinaryObjectScanner.Packer/AutoPlayMediaStudio.cs
View File

@@ -14,7 +14,7 @@ namespace BinaryObjectScanner.Packer
public string CheckPortableExecutable(string file, PortableExecutable pex, bool includeDebug)
{
// Get the sections from the executable, if possible
var sections = pex?.SectionTable;
var sections = pex?.Model.SectionTable;
if (sections == null)
return null;

2
BinaryObjectScanner.Packer/CExe.cs
View File

@@ -19,7 +19,7 @@ namespace BinaryObjectScanner.Packer
public string CheckPortableExecutable(string file, PortableExecutable pex, bool includeDebug)
{
// Get the sections from the executable, if possible
var sections = pex?.SectionTable;
var sections = pex?.Model.SectionTable;
if (sections == null)
return null;

2
BinaryObjectScanner.Packer/EXEStealth.cs
View File

@@ -41,7 +41,7 @@ namespace BinaryObjectScanner.Packer
public string CheckPortableExecutable(string file, PortableExecutable pex, bool includeDebug)
{
// Get the sections from the executable, if possible
var sections = pex?.SectionTable;
var sections = pex?.Model.SectionTable;
if (sections == null)
return null;

2
BinaryObjectScanner.Packer/EmbeddedExecutable.cs
View File

@@ -17,7 +17,7 @@ namespace BinaryObjectScanner.Packer
public string CheckPortableExecutable(string file, PortableExecutable pex, bool includeDebug)
{
// Get the sections from the executable, if possible
var sections = pex?.SectionTable;
var sections = pex?.Model.SectionTable;
if (sections == null)
return null;

2
BinaryObjectScanner.Packer/GenteeInstaller.cs
View File

@@ -14,7 +14,7 @@ namespace BinaryObjectScanner.Packer
public string CheckPortableExecutable(string file, PortableExecutable pex, bool includeDebug)
{
// Get the sections from the executable, if possible
var sections = pex?.SectionTable;
var sections = pex?.Model.SectionTable;
if (sections == null)
return null;

4
BinaryObjectScanner.Packer/HyperTechCrackProof.cs
View File

@@ -16,14 +16,14 @@ namespace BinaryObjectScanner.Packer
public string CheckPortableExecutable(string file, PortableExecutable pex, bool includeDebug)
{
// Get the sections from the executable, if possible
var sections = pex?.SectionTable;
var sections = pex?.Model.SectionTable;
if (sections == null)
return null;
// This check may be overly limiting, as it excludes the sample provided to DiE (https://github.com/horsicq/Detect-It-Easy/issues/102).
// TODO: Find further samples and invesitgate if the "peC" section is only present on specific versions.
bool peCSection = pex.ContainsSection("peC", exact: true);
bool importTableMatch = (pex.ImportTable?.ImportDirectoryTable?.Any(idte => idte.Name == "KeRnEl32.dLl") ?? false);
bool importTableMatch = (pex.Model.ImportTable?.ImportDirectoryTable?.Any(idte => idte.Name == "KeRnEl32.dLl") ?? false);
if (peCSection && importTableMatch)
return "HyperTech CrackProof";

4
BinaryObjectScanner.Packer/InnoSetup.cs
View File

@@ -19,7 +19,7 @@ namespace BinaryObjectScanner.Packer
return null;
// Check for "Inno" in the reserved words
if (nex.Stub_Reserved2[4] == 0x6E49 && nex.Stub_Reserved2[5] == 0x6F6E)
if (nex.Model.Stub?.Header?.Reserved2[4] == 0x6E49 && nex.Model.Stub?.Header?.Reserved2[5] == 0x6F6E)
{
string version = GetOldVersion(file, nex);
if (!string.IsNullOrWhiteSpace(version))
@@ -35,7 +35,7 @@ namespace BinaryObjectScanner.Packer
public string CheckPortableExecutable(string file, PortableExecutable pex, bool includeDebug)
{
// Get the sections from the executable, if possible
var sections = pex?.SectionTable;
var sections = pex?.Model.SectionTable;
if (sections == null)
return null;

2
BinaryObjectScanner.Packer/InstallAnywhere.cs
View File

@@ -13,7 +13,7 @@ namespace BinaryObjectScanner.Packer
public string CheckPortableExecutable(string file, PortableExecutable pex, bool includeDebug)
{
// Get the sections from the executable, if possible
var sections = pex?.SectionTable;
var sections = pex?.Model.SectionTable;
if (sections == null)
return null;

2
BinaryObjectScanner.Packer/InstallerVISE.cs
View File

@@ -15,7 +15,7 @@ namespace BinaryObjectScanner.Packer
public string CheckPortableExecutable(string file, PortableExecutable pex, bool includeDebug)
{
// Get the sections from the executable, if possible
var sections = pex?.SectionTable;
var sections = pex?.Model.SectionTable;
if (sections == null)
return null;

2
BinaryObjectScanner.Packer/IntelInstallationFramework.cs
View File

@@ -12,7 +12,7 @@ namespace BinaryObjectScanner.Packer
public string CheckPortableExecutable(string file, PortableExecutable pex, bool includeDebug)
{
// Get the sections from the executable, if possible
var sections = pex?.SectionTable;
var sections = pex?.Model.SectionTable;
if (sections == null)
return null;

2
BinaryObjectScanner.Packer/MicrosoftCABSFX.cs
View File

@@ -15,7 +15,7 @@ namespace BinaryObjectScanner.Packer
public string CheckPortableExecutable(string file, PortableExecutable pex, bool includeDebug)
{
// Get the sections from the executable, if possible
var sections = pex?.SectionTable;
var sections = pex?.Model.SectionTable;
if (sections == null)
return null;

2
BinaryObjectScanner.Packer/NSIS.cs
View File

@@ -13,7 +13,7 @@ namespace BinaryObjectScanner.Packer
public string CheckPortableExecutable(string file, PortableExecutable pex, bool includeDebug)
{
// Get the sections from the executable, if possible
var sections = pex?.SectionTable;
var sections = pex?.Model.SectionTable;
if (sections == null)
return null;

2
BinaryObjectScanner.Packer/NeoLite.cs
View File

@@ -21,7 +21,7 @@ namespace BinaryObjectScanner.Packer
public string CheckPortableExecutable(string file, PortableExecutable pex, bool includeDebug)
{
// Get the sections from the executable, if possible
var sections = pex?.SectionTable;
var sections = pex?.Model.SectionTable;
if (sections == null)
return null;

4
BinaryObjectScanner.Packer/PECompact.cs
View File

@@ -12,12 +12,12 @@ namespace BinaryObjectScanner.Packer
public string CheckPortableExecutable(string file, PortableExecutable pex, bool includeDebug)
{
// Get the sections from the executable, if possible
var sections = pex?.SectionTable;
var sections = pex?.Model.SectionTable;
if (sections == null)
return null;
// 0x4F434550 is "PECO"
if (pex.PointerToSymbolTable == 0x4F434550)
if (pex.Model.COFFFileHeader?.PointerToSymbolTable == 0x4F434550)
return "PE Compact v1.x";
// TODO: Get more granular version detection. PiD is somehow able to detect version ranges based

2
BinaryObjectScanner.Packer/Petite.cs
View File

@@ -12,7 +12,7 @@ namespace BinaryObjectScanner.Packer
public string CheckPortableExecutable(string file, PortableExecutable pex, bool includeDebug)
{
// Get the sections from the executable, if possible
var sections = pex?.SectionTable;
var sections = pex?.Model.SectionTable;
if (sections == null)
return null;

2
BinaryObjectScanner.Packer/SetupFactory.cs
View File

@@ -14,7 +14,7 @@ namespace BinaryObjectScanner.Packer
public string CheckPortableExecutable(string file, PortableExecutable pex, bool includeDebug)
{
// Get the sections from the executable, if possible
var sections = pex?.SectionTable;
var sections = pex?.Model.SectionTable;
if (sections == null)
return null;

2
BinaryObjectScanner.Packer/SevenZipSFX.cs
View File

@@ -12,7 +12,7 @@ namespace BinaryObjectScanner.Packer
public string CheckPortableExecutable(string file, PortableExecutable pex, bool includeDebug)
{
// Get the sections from the executable, if possible
var sections = pex?.SectionTable;
var sections = pex?.Model.SectionTable;
if (sections == null)
return null;

2
BinaryObjectScanner.Packer/Shrinker.cs
View File

@@ -12,7 +12,7 @@ namespace BinaryObjectScanner.Packer
public string CheckPortableExecutable(string file, PortableExecutable pex, bool includeDebug)
{
// Get the sections from the executable, if possible
var sections = pex?.SectionTable;
var sections = pex?.Model.SectionTable;
if (sections == null)
return null;

2
BinaryObjectScanner.Packer/UPX.cs
View File

@@ -20,7 +20,7 @@ namespace BinaryObjectScanner.Packer
public string CheckPortableExecutable(string file, PortableExecutable pex, bool includeDebug)
{
// Get the sections from the executable, if possible
var sections = pex?.SectionTable;
var sections = pex?.Model.SectionTable;
if (sections == null)
return null;

2
BinaryObjectScanner.Packer/WinRARSFX.cs
View File

@@ -15,7 +15,7 @@ namespace BinaryObjectScanner.Packer
public string CheckPortableExecutable(string file, PortableExecutable pex, bool includeDebug)
{
// Get the sections from the executable, if possible
var sections = pex?.SectionTable;
var sections = pex?.Model.SectionTable;
if (sections == null)
return null;

912
BinaryObjectScanner.Packer/WinZipSFX.cs
View File

File diff suppressed because it is too large Load Diff

4
BinaryObjectScanner.Packer/WiseInstaller.cs
View File

@@ -47,7 +47,7 @@ namespace BinaryObjectScanner.Packer
public string CheckPortableExecutable(string file, PortableExecutable pex, bool includeDebug)
{
// Get the sections from the executable, if possible
var sections = pex?.SectionTable;
var sections = pex?.Model.SectionTable;
if (sections == null)
return null;
@@ -120,7 +120,7 @@ namespace BinaryObjectScanner.Packer
private FormatProperty MatchesNEVersion(NewExecutable nex)
{
// TODO: Offset is _not_ the EXE header address, rather where the data starts. Fix this.
switch (nex.Stub_NewExeHeaderAddr)
switch (nex.Model.Stub?.Header?.NewExeHeaderAddr)
{
case 0x84b0:
return new FormatProperty { Dll = false, ArchiveStart = 0x11, ArchiveEnd = -1, InitText = false, FilenamePosition = 0x04, NoCrc = true };

2
BinaryObjectScanner.Packer/dotFuscator.cs
View File

@@ -13,7 +13,7 @@ namespace BinaryObjectScanner.Packer
public string CheckPortableExecutable(string file, PortableExecutable pex, bool includeDebug)
{
// Get the sections from the executable, if possible
var sections = pex?.SectionTable;
var sections = pex?.Model.SectionTable;
if (sections == null)
return null;