Matt Nadareski
1105f36cee
Add hacky thing for Inno for now
2022-03-15 11:11:22 -07:00
Matt Nadareski
3211149996
Remove NE Inno check from PE path
2022-03-15 09:01:54 -07:00
Matt Nadareski
dc252e8d86
Add comments around remaining SourceArray usages
2022-03-14 23:32:19 -07:00
Matt Nadareski
ceae505f4d
Switch order of interface parameters
2022-03-14 22:51:17 -07:00
Matt Nadareski
a7e9164f4f
Use SourceArray for PE checks
2022-03-14 22:49:35 -07:00
Matt Nadareski
3820546c07
Use SourceArray for NE checks
2022-03-14 22:43:26 -07:00
Matt Nadareski
513e799aa3
Migrate protections to new interfaces
2022-03-14 11:20:11 -07:00
Matt Nadareski
fcbf006e4e
Migrate packers to new interfaces
2022-03-14 11:00:17 -07:00
Matt Nadareski
ffb529edb3
Granularly separate out executable types
2022-03-14 10:40:44 -07:00
Matt Nadareski
7773b32847
Update comment in Inno
2021-09-11 22:48:05 -07:00
Matt Nadareski
143b261a67
Fix NE reading for Inno
2021-09-11 22:40:01 -07:00
Matt Nadareski
214e8d41c7
Pre-read 3 most commonly-used section data
...
This also adds comprehensive notes around the sections used in various protections, how they're used, and what we can do with them. It also adds a couple of various notes based on the findings from the protection audit
2021-09-11 16:47:25 -07:00
Matt Nadareski
b779f2f546
Only deserialze a file once per round of checks
2021-09-10 16:10:15 -07:00
Matt Nadareski
5344de96b2
Cleanup and bugfixes; additional notes
2021-09-10 15:32:37 -07:00
Matt Nadareski
ee0193eb71
Clean up some usings, add note to NSIS
2021-08-27 13:30:24 -07:00
Matt Nadareski
2de4f3f808
Continue exe organization, start IIF migration
2021-08-27 09:42:05 -07:00
Matt Nadareski
2bdbad1ba6
Convert Inno Setup to section based
2021-08-26 23:07:04 -07:00
Matt Nadareski
6cde7b8bef
Reduce redundant code in content matchers now
2021-08-25 20:26:43 -07:00
Matt Nadareski
3ab0bcc0ae
ContentMatchSets are now expected in IContentCheck
2021-08-25 19:37:32 -07:00
Matt Nadareski
43845cf722
Rename position flag -> debug flag
2021-08-24 15:19:23 -07:00
Matt Nadareski
3667a5b57a
Concurrent protection scans per file ( #52 )
...
* Move to ConcurrentDictionary
* Convert to ConcurrentQueue
2021-07-18 09:44:23 -07:00
Matt Nadareski
3ac57b1c0c
Fix static matcher issues ( fixes #51 )
...
Note: This may result in slower, but more accurate, scans
2021-07-17 23:40:16 -07:00
SilasLaspada
b76d09aa20
Improve Inno Setup detection ( #37 )
...
* Improve Inno Setup detection
* Split "GetVersion"
* Remove unneeded check
* Make version detection more robust
* Add Unicode version detection
* Address review comments
2021-06-05 11:46:04 -07:00
Matt Nadareski
9f40a8c4c0
Perform some post-removal cleanup
2021-03-23 16:43:23 -07:00
Matt Nadareski
921292e077
Static list of content matchers
...
This also includes some more path matcher conversions that I couldn't reasonably split out
2021-03-23 09:52:09 -07:00
Matt Nadareski
5240f2eb70
Simplify util method naming
2021-03-22 21:32:58 -07:00
Matt Nadareski
6400c954ef
Split matchers more cleanly, comment better
2021-03-22 21:25:14 -07:00
Matt Nadareski
e47a52dbe0
Use framework in even more content protections
2021-03-22 11:43:51 -07:00
Matt Nadareski
7aca58a6c9
Better split matching code, fix UPX name
2021-03-22 00:41:18 -07:00
Matt Nadareski
15ae2441c3
Use content matching helper, part 5
2021-03-21 22:37:16 -07:00
Matt Nadareski
7e3ef544f0
Use content matching helper, part 2
2021-03-21 15:24:23 -07:00
Matt Nadareski
ab07eb96ce
Use content matching helper, part 1
2021-03-21 14:30:37 -07:00
Matt Nadareski
544aaed9da
Modify array finding, part 2
2021-03-20 20:47:56 -07:00
Matt Nadareski
cdc4d509ee
Modify array finding, part 1
2021-03-20 19:00:22 -07:00
Matt Nadareski
54465ff4e7
Move both installers to packers
2021-02-26 09:34:07 -08:00