Matt Nadareski
008e1ad27b
Finalize NE resource table building
2022-11-07 09:38:34 -08:00
Matt Nadareski
3e5ae14a54
Implment first half of NE resource table builder
2022-11-07 09:18:20 -08:00
Matt Nadareski
0c28833b14
Fix offsets for NE tables in builder
2022-11-06 23:58:53 -08:00
Matt Nadareski
75ef95c6bf
Fix missing LE/LX/PE stub setting in builders
2022-11-06 23:52:52 -08:00
Matt Nadareski
b906f3c654
Add NE resource table skeleton to builder
2022-11-06 23:49:46 -08:00
Matt Nadareski
4b274a454b
Add extensions for NE resource entries
2022-11-06 23:47:54 -08:00
Matt Nadareski
6554005742
Return incomplete NE from builder
2022-11-06 21:48:53 -08:00
Matt Nadareski
9f04022afc
Add regions for easier code navigation
2022-11-06 21:48:19 -08:00
Matt Nadareski
fbab512975
Add NE segment table parsing to builder
2022-11-06 21:45:37 -08:00
Matt Nadareski
c9b3a67c8b
Merge branch 'master' of https://github.com/mnadareski/BurnOutSharp
2022-11-06 21:39:02 -08:00
Matt Nadareski
3169cd6591
Let private methods be simpler
2022-11-06 21:38:42 -08:00
TheRogueArchivist
b116e487d3
Overhaul Freelock ( #170 )
...
* Overhaul Freelock
* Overhaul Freelock, including notes and new checks, along with confirming the existing checks.
* Add text-based checks for Freelock.
* Update README.
* Fix whitespace and re-add return
* Fix whitespace and re-add return
2022-11-06 21:30:59 -08:00
Matt Nadareski
aa57044bb8
Add skeleton for NE segment table parsing
2022-11-06 21:30:19 -08:00
TheRogueArchivist
fdd578dad9
Confirm existing WinLock checks ( #169 )
...
* Confirm existing WinLock checks
* Confirm existing WinLock checks.
* Add WinLock notes.
* Update README.
* Rename Winlock.cs to WinLock.cs
2022-11-06 21:22:58 -08:00
Matt Nadareski
2801520546
Add NE header parsing tp builder
2022-11-06 21:19:48 -08:00
TheRogueArchivist
caaf983b3d
Overhaul TZCopyProtection ( #168 )
...
* Add notes and research relating to TZCopyProtection.
* Fix name (was previously "TZCopyProtector").
* Add new file check for "ZakMcCrack.Ghost".
* Update README.
2022-11-06 21:05:58 -08:00
TheRogueArchivist
aaba13530c
Confirm existing CD-Protector checks ( #167 )
...
* Confirm existing CD-Protector checks, and add one new one.
* Add CD-Protector notes.
* Update README.
2022-11-06 21:04:03 -08:00
TheRogueArchivist
e05ec3bcee
Initial addition of Rainbow Sentinel ( #166 )
...
* Initial addition of Rainbow Sentinel
* Basic detection based off of one sample, no specific research/notes.
* Update README.
* Add additional sample sources for Rainbow Sentinel
* Add additional sample sources for Rainbow Sentinel, with no new functionality.
* Add Rainbow Sentinel text checks
* Add Rainbow Sentinel text checks.
2022-11-06 21:03:23 -08:00
Matt Nadareski
703a132a61
Add missing MS-DOS stub to builders
2022-11-06 00:01:24 -07:00
Matt Nadareski
e55226e685
Add header skeletons for NE/LE/LX/PE builders
2022-11-05 23:59:38 -07:00
Matt Nadareski
9a4e6de5f9
Add MS-DOS stub to NE/LE/LX/PE builders
2022-11-05 23:52:16 -07:00
Matt Nadareski
a4e55a328c
Add boilerplate for NE, LE, PE builders
2022-11-05 23:47:50 -07:00
Matt Nadareski
2705685f07
Add placeholder LE interface ( fixes #165 )
2022-11-05 23:42:55 -07:00
Matt Nadareski
b7fb17a79f
Add skeletons for other executable types
2022-11-05 23:36:15 -07:00
Matt Nadareski
ffeb73ab7c
Add proof-of-concept MS-DOS builder
2022-11-05 23:29:04 -07:00
Matt Nadareski
427dec56e4
Add COFF archive note
2022-11-05 22:46:50 -07:00
Matt Nadareski
94ce87d953
Add PE resource classes
2022-11-05 22:45:18 -07:00
Matt Nadareski
0dc4f0f11a
Add PE load configuration directory; fix naming
2022-11-05 22:34:33 -07:00
Matt Nadareski
a1d7e65ffb
Add PE TLS directory
2022-11-05 22:11:41 -07:00
Matt Nadareski
61702d9c2a
Add PE base relocation blocks
2022-11-05 22:03:17 -07:00
Matt Nadareski
5b08bef53f
Add "missing" pieces list, so far
2022-11-05 21:54:36 -07:00
Matt Nadareski
53a6588054
Add PE hint name table entries
2022-11-05 21:49:34 -07:00
Matt Nadareski
9855c0c13e
Add PE import directory table entries
2022-11-05 21:41:33 -07:00
Matt Nadareski
c5d005bdeb
Add PE export address table entries
2022-11-05 21:37:54 -07:00
Matt Nadareski
1eb844c75b
Add PE export directory table
2022-11-05 21:34:30 -07:00
Matt Nadareski
7e177f3cbf
Add PE debug directory
2022-11-05 21:29:36 -07:00
Matt Nadareski
eb91cfbda1
Add PE delay load directory
2022-11-05 21:12:41 -07:00
Matt Nadareski
54082c1fce
Add PE attribute certificate table
2022-11-05 21:02:30 -07:00
Matt Nadareski
b5caf6dacf
Add PE COFF string table
2022-11-05 15:40:48 -07:00
Matt Nadareski
f4d1ce5388
Add PE CLR token definition symbol
2022-11-05 15:37:25 -07:00
Matt Nadareski
7d7ec69dc1
Add PE auxiliary symbol record formats
2022-11-05 15:34:14 -07:00
Matt Nadareski
7208288c00
Add PE section numbers
2022-11-05 15:16:38 -07:00
Matt Nadareski
aff3745859
Add PE COFF symbol table
2022-11-05 00:17:26 -07:00
Matt Nadareski
e103ddd216
Add PE COFF line numbers to section headers
2022-11-05 00:08:00 -07:00
Matt Nadareski
41a4965775
Add PE COFF relocations to section headers
2022-11-05 00:04:17 -07:00
Matt Nadareski
49a06f513b
Add PE section table
2022-11-04 23:56:56 -07:00
Matt Nadareski
1308f3684b
Add PE data directories
2022-11-04 23:50:54 -07:00
Matt Nadareski
c51eccac38
Add PE optional header
2022-11-04 23:41:31 -07:00
Matt Nadareski
09157767bf
Add PE COFF file header
2022-11-04 23:25:02 -07:00
Matt Nadareski
32cc2c708a
Add PE enums
2022-11-04 23:19:28 -07:00
