Matt Nadareski
760c481d39
Fix PE section header
2022-11-08 16:31:15 -08:00
Matt Nadareski
2c4906534b
Enable PE headers writing
2022-11-08 15:11:18 -08:00
Matt Nadareski
2ed79f3f9c
Safer PE optional header builder; start printing PE
2022-11-08 15:02:31 -08:00
Matt Nadareski
7e9be878c4
Add PE optional header parsing to builder
2022-11-08 14:27:41 -08:00
Matt Nadareski
0a5ae3b090
Add PE COFF file header parsing to builder
2022-11-08 14:12:05 -08:00
Matt Nadareski
70b8c1f9b7
NE nonresident table absolute, not relative
2022-11-08 14:07:02 -08:00
Matt Nadareski
b067b671db
Add PE signature parsing to builder
2022-11-08 14:04:02 -08:00
Matt Nadareski
268ccac7e1
Add NE nonresident name table printing
2022-11-08 13:41:51 -08:00
Matt Nadareski
5e487bc4ba
Add NE entry table printing
2022-11-08 13:41:37 -08:00
Matt Nadareski
ffeda7d60b
Print NE imported-name table
2022-11-08 13:35:21 -08:00
Matt Nadareski
2779d1a489
Add NE module reference table printing
2022-11-08 13:30:12 -08:00
Matt Nadareski
1752815654
Print NE resident name table
2022-11-08 13:27:12 -08:00
Matt Nadareski
429ca400e5
Fix all NE table bounded offsets
2022-11-08 13:25:31 -08:00
Matt Nadareski
984853bd66
Add NE resource name/type string output
2022-11-08 13:16:24 -08:00
Matt Nadareski
ff2549d4b7
Fix NE resource table parsing
2022-11-08 13:16:00 -08:00
Matt Nadareski
d33bb6b4bb
Add first part of NE printing
2022-11-08 13:07:48 -08:00
Matt Nadareski
a3c0eca063
Address some NE parsing issues
2022-11-08 11:52:24 -08:00
Matt Nadareski
10de4ac78e
Create executable info test program
2022-11-08 11:35:39 -08:00
Matt Nadareski
895394ebb9
Fix MS-DOS header parsing
2022-11-08 11:30:23 -08:00
Matt Nadareski
349f8d936a
Add NE nonresident table to builder
2022-11-08 10:36:16 -08:00
Matt Nadareski
bbc65391a1
Add NE entry table to builder
2022-11-08 10:09:23 -08:00
Matt Nadareski
751c248657
Update NE entry table bundle
2022-11-08 09:59:15 -08:00
Matt Nadareski
9052cd3cdd
Add NE imported-name table to builder
2022-11-07 14:13:23 -08:00
Matt Nadareski
2736527fc1
NE imported name table needs indexes
2022-11-07 13:22:59 -08:00
Matt Nadareski
0c7001acf6
Add NE module-reference table parsing
...
This also fixes a critical flaw in the resident-name table parsing since there is no defined size, just the point where the next table begins.
2022-11-07 10:42:48 -08:00
Matt Nadareski
9e9be5bf09
Add NE resident-name table parsing to builder
2022-11-07 10:13:10 -08:00
Matt Nadareski
008e1ad27b
Finalize NE resource table building
2022-11-07 09:38:34 -08:00
Matt Nadareski
3e5ae14a54
Implment first half of NE resource table builder
2022-11-07 09:18:20 -08:00
Matt Nadareski
0c28833b14
Fix offsets for NE tables in builder
2022-11-06 23:58:53 -08:00
Matt Nadareski
75ef95c6bf
Fix missing LE/LX/PE stub setting in builders
2022-11-06 23:52:52 -08:00
Matt Nadareski
b906f3c654
Add NE resource table skeleton to builder
2022-11-06 23:49:46 -08:00
Matt Nadareski
4b274a454b
Add extensions for NE resource entries
2022-11-06 23:47:54 -08:00
Matt Nadareski
6554005742
Return incomplete NE from builder
2022-11-06 21:48:53 -08:00
Matt Nadareski
9f04022afc
Add regions for easier code navigation
2022-11-06 21:48:19 -08:00
Matt Nadareski
fbab512975
Add NE segment table parsing to builder
2022-11-06 21:45:37 -08:00
Matt Nadareski
c9b3a67c8b
Merge branch 'master' of https://github.com/mnadareski/BurnOutSharp
2022-11-06 21:39:02 -08:00
Matt Nadareski
3169cd6591
Let private methods be simpler
2022-11-06 21:38:42 -08:00
TheRogueArchivist
b116e487d3
Overhaul Freelock ( #170 )
...
* Overhaul Freelock
* Overhaul Freelock, including notes and new checks, along with confirming the existing checks.
* Add text-based checks for Freelock.
* Update README.
* Fix whitespace and re-add return
* Fix whitespace and re-add return
2022-11-06 21:30:59 -08:00
Matt Nadareski
aa57044bb8
Add skeleton for NE segment table parsing
2022-11-06 21:30:19 -08:00
TheRogueArchivist
fdd578dad9
Confirm existing WinLock checks ( #169 )
...
* Confirm existing WinLock checks
* Confirm existing WinLock checks.
* Add WinLock notes.
* Update README.
* Rename Winlock.cs to WinLock.cs
2022-11-06 21:22:58 -08:00
Matt Nadareski
2801520546
Add NE header parsing tp builder
2022-11-06 21:19:48 -08:00
TheRogueArchivist
caaf983b3d
Overhaul TZCopyProtection ( #168 )
...
* Add notes and research relating to TZCopyProtection.
* Fix name (was previously "TZCopyProtector").
* Add new file check for "ZakMcCrack.Ghost".
* Update README.
2022-11-06 21:05:58 -08:00
TheRogueArchivist
aaba13530c
Confirm existing CD-Protector checks ( #167 )
...
* Confirm existing CD-Protector checks, and add one new one.
* Add CD-Protector notes.
* Update README.
2022-11-06 21:04:03 -08:00
TheRogueArchivist
e05ec3bcee
Initial addition of Rainbow Sentinel ( #166 )
...
* Initial addition of Rainbow Sentinel
* Basic detection based off of one sample, no specific research/notes.
* Update README.
* Add additional sample sources for Rainbow Sentinel
* Add additional sample sources for Rainbow Sentinel, with no new functionality.
* Add Rainbow Sentinel text checks
* Add Rainbow Sentinel text checks.
2022-11-06 21:03:23 -08:00
Matt Nadareski
703a132a61
Add missing MS-DOS stub to builders
2022-11-06 00:01:24 -07:00
Matt Nadareski
e55226e685
Add header skeletons for NE/LE/LX/PE builders
2022-11-05 23:59:38 -07:00
Matt Nadareski
9a4e6de5f9
Add MS-DOS stub to NE/LE/LX/PE builders
2022-11-05 23:52:16 -07:00
Matt Nadareski
a4e55a328c
Add boilerplate for NE, LE, PE builders
2022-11-05 23:47:50 -07:00
Matt Nadareski
2705685f07
Add placeholder LE interface ( fixes #165 )
2022-11-05 23:42:55 -07:00
Matt Nadareski
b7fb17a79f
Add skeletons for other executable types
2022-11-05 23:36:15 -07:00
