Matt Nadareski
afdd032f73
Start using more methods to make life easier
2021-09-11 21:03:36 -07:00
Matt Nadareski
1bc8fe7ff6
Fix version finding for MS-CAB SFX
2021-09-11 16:58:05 -07:00
Matt Nadareski
214e8d41c7
Pre-read 3 most commonly-used section data
...
This also adds comprehensive notes around the sections used in various protections, how they're used, and what we can do with them. It also adds a couple of various notes based on the findings from the protection audit
2021-09-11 16:47:25 -07:00
Matt Nadareski
f2b9e3a31b
Clean up a significant number of TODOs
2021-09-11 00:32:48 -07:00
Matt Nadareski
e817063e53
Remove debug write from NSIS
2021-09-10 22:05:43 -07:00
Matt Nadareski
bf385f0bbf
Identify and use .rsrc item for NSIS
2021-09-10 21:45:14 -07:00
Matt Nadareski
b779f2f546
Only deserialze a file once per round of checks
2021-09-10 16:10:15 -07:00
Matt Nadareski
5344de96b2
Cleanup and bugfixes; additional notes
2021-09-10 15:32:37 -07:00
Matt Nadareski
373268a6a8
Convert resource checks to header checks
2021-09-10 13:51:32 -07:00
Matt Nadareski
905d440367
Process file info resources; cleanup; refactors
2021-09-10 02:58:59 -07:00
Matt Nadareski
460eb78ecd
Improve Setup Factory matching
2021-08-30 14:18:15 -07:00
Matt Nadareski
ffcaf4d16b
Improve MS-CAB SFX matching
2021-08-30 12:08:17 -07:00
Matt Nadareski
64de357257
Remove debug from IIF again
2021-08-30 12:06:29 -07:00
Matt Nadareski
cc3f6622b4
Improve IIF matching
2021-08-30 11:47:49 -07:00
Matt Nadareski
f0b66d4bfb
Improve NSIS matching
2021-08-30 11:40:14 -07:00
Matt Nadareski
dbc72cb4c2
Fix typo in Wise Installer
2021-08-29 22:39:34 -07:00
Matt Nadareski
621bcdf380
Convert Wise to section based; add note
2021-08-29 20:52:00 -07:00
Matt Nadareski
1b54dd92ab
Convert WZ-SFX to section and header based
2021-08-29 11:43:43 -07:00
Matt Nadareski
d2606e21fe
Convert WinRAR SFX to section based
2021-08-27 21:58:05 -07:00
Matt Nadareski
22235cbe84
Add Setup Factory version info checks; add notes
2021-08-27 21:49:14 -07:00
Matt Nadareski
2400f2d0ad
Convert PEC to section based; add notes
2021-08-27 14:28:17 -07:00
Matt Nadareski
ee0193eb71
Clean up some usings, add note to NSIS
2021-08-27 13:30:24 -07:00
Matt Nadareski
eb76acb767
Add note to MS-CAB SFX
2021-08-27 13:13:41 -07:00
Matt Nadareski
6c77cccf53
Clarify and comment out in IIF
2021-08-27 12:03:00 -07:00
Matt Nadareski
2de4f3f808
Continue exe organization, start IIF migration
2021-08-27 09:42:05 -07:00
Matt Nadareski
4b5d0980f7
Convert Installer VISE to section based
2021-08-26 23:18:55 -07:00
Matt Nadareski
2bdbad1ba6
Convert Inno Setup to section based
2021-08-26 23:07:04 -07:00
Matt Nadareski
3b634877d0
Add note to EXE Stealth
2021-08-26 22:22:15 -07:00
Matt Nadareski
2996bbb18f
Add note to dotFuscator
2021-08-26 22:13:14 -07:00
Matt Nadareski
c4ca27608b
Convert Advanced Installer to section based
2021-08-26 21:57:56 -07:00
Matt Nadareski
5a85ff2ad3
Clean up Armadillo, fix edge case
2021-08-26 21:47:44 -07:00
Matt Nadareski
a27b3cc43f
Add old version UPX detection
2021-08-26 20:43:58 -07:00
Matt Nadareski
ea8f557097
Start converting Armadillo checks
2021-08-26 20:38:01 -07:00
Matt Nadareski
0ec6dfb287
Use UPX as a guinea pig for new exe handling
2021-08-26 15:50:38 -07:00
Matt Nadareski
6cde7b8bef
Reduce redundant code in content matchers now
2021-08-25 20:26:43 -07:00
Matt Nadareski
3ab0bcc0ae
ContentMatchSets are now expected in IContentCheck
2021-08-25 19:37:32 -07:00
Matt Nadareski
7548646ba2
Create and use the Tools namespace
2021-08-25 15:09:42 -07:00
SilasLaspada
958d306f42
Fix NullReferenceExceptions ( #59 )
2021-08-24 23:13:27 -07:00
Matt Nadareski
43845cf722
Rename position flag -> debug flag
2021-08-24 15:19:23 -07:00
Matt Nadareski
93e8322ba5
Add skeleton code to MS-CAB SFX
2021-08-24 14:29:30 -07:00
Matt Nadareski
8a07c9cf4e
Add byte array checks for IIF
2021-08-24 09:26:27 -07:00
Matt Nadareski
6049eda580
Add byte array checks for MS-CAB SFX
2021-08-24 09:13:58 -07:00
Matt Nadareski
177641894e
Clean up MS-CAB SFX a little
2021-08-23 23:09:05 -07:00
Matt Nadareski
dc49335ace
Add notes for later
2021-08-23 23:04:01 -07:00
SilasLaspada
3dcce8a8ac
Add support for Intel Installation Framework detection ( #57 )
...
* Add support for Intel Installation Framework detection
* Address reviews
2021-08-23 22:56:31 -07:00
Matt Nadareski
04651d46d8
Clean up usings
2021-08-23 22:07:24 -07:00
SilasLaspada
97c9c7e5ed
Add support for Microsoft SFX CAB detection ( #56 )
...
* Add support for Microsoft SFX CAB detection
* Address reviews
* Simplify GetVersion
* Fix GetVersion
2021-08-23 22:03:28 -07:00
Matt Nadareski
80905b56cd
Better attempt at narrowing down
2021-07-19 21:56:31 -07:00
Matt Nadareski
0a7cd8a69e
Comment out broader UPX (NOS) check
2021-07-19 21:38:19 -07:00
Matt Nadareski
3667a5b57a
Concurrent protection scans per file ( #52 )
...
* Move to ConcurrentDictionary
* Convert to ConcurrentQueue
2021-07-18 09:44:23 -07:00