Commit Graph

1096 Commits

Author SHA1 Message Date
Matt Nadareski
aeaeff28d3 Better alignment in PE resources 2022-12-07 23:56:08 -08:00
Matt Nadareski
28948a0511 Add back truncation 2022-12-07 23:09:18 -08:00
Matt Nadareski
52d190e339 Rewrite WinZip SFX PE checks 2022-12-07 22:52:49 -08:00
Matt Nadareski
d47707c433 Add some CD-Cops notes 2022-12-06 22:31:46 -08:00
Matt Nadareski
11bc46ae86 Update WZ-SFX NE checks a little 2022-12-06 21:04:52 -08:00
Matt Nadareski
d229b23ea6 Fix CD-Cops table checks 2022-12-06 21:04:08 -08:00
Matt Nadareski
41dc7f7b14 Add notes for NE Inno detection 2022-12-05 20:44:34 -08:00
Matt Nadareski
dbd8b14cd2 Convert arbitray data read for NE WZ-SFX 2022-12-05 19:57:57 -08:00
Matt Nadareski
3af8adb067 Add unversioned CD-Cops NE checks 2022-12-05 17:05:41 -08:00
Matt Nadareski
5baa470d54 Use header padding data for UPX 2022-12-05 16:50:18 -08:00
Matt Nadareski
1f5d5215f7 Clean up SafeDisc checks, add header padding check 2022-12-05 15:58:44 -08:00
Matt Nadareski
24c77ecd07 Add header padding data for searching 2022-12-05 15:56:37 -08:00
Matt Nadareski
2264fc0172 Fix IIF product name check 2022-12-05 15:46:56 -08:00
Matt Nadareski
00028ac59b Add notes to EXE Stealth 2022-12-05 14:11:52 -08:00
Matt Nadareski
ad5735a559 Update printing for import tables 2022-12-05 13:57:07 -08:00
Matt Nadareski
9411f5044a Fix import table parsing 2022-12-05 13:52:15 -08:00
Matt Nadareski
7293d55239 Fix PlayJ description check 2022-12-05 12:57:54 -08:00
Matt Nadareski
31dc347df4 Merge pull request #178 from mnadareski/new-exe-framework
Use new executable framework for protection checks
2022-12-05 11:30:54 -08:00
Matt Nadareski
d72d0d4dc2 Clean up printing methods 2022-12-05 11:01:22 -08:00
Matt Nadareski
7181dc9d5b Fix formatting/tagging 2022-12-05 10:47:17 -08:00
Matt Nadareski
95fa8681fe Make SmartE checks even simpler 2022-12-05 10:21:15 -08:00
Matt Nadareski
3a63755d96 Simplify section printing 2022-12-05 10:06:37 -08:00
Matt Nadareski
5390970054 Fix segment validity checks 2022-12-05 10:04:37 -08:00
Matt Nadareski
2b43f2b261 Add notes to SmartE 2022-12-04 23:21:18 -08:00
Matt Nadareski
4330cd1aac Fix WTM code/CODE section 2022-12-04 23:20:22 -08:00
Matt Nadareski
fc9dd8a34d Add base relocation table to passthrough 2022-12-04 23:17:34 -08:00
Matt Nadareski
c64abc15c9 Move .rsrc StarForce checks to new file 2022-12-04 23:00:30 -08:00
Matt Nadareski
fca12c639c Update CDS PlayJ check 2022-12-04 22:44:59 -08:00
Matt Nadareski
a1522aabd6 Add relocation real address 2022-12-04 22:37:59 -08:00
Matt Nadareski
9be4b339f8 Add PE base relocation table parsing and printing 2022-12-04 22:32:41 -08:00
Matt Nadareski
ce1c74aec3 Update DiscGuard 2022-12-04 21:11:55 -08:00
Matt Nadareski
e824428e0f String tables are always Unicode 2022-12-04 13:38:04 -08:00
Matt Nadareski
2fd4a8a9b1 Fix launch.json 2022-12-04 00:41:56 -08:00
Matt Nadareski
82de7e8b8e Off by one 2022-12-03 23:58:20 -08:00
Matt Nadareski
26831b4732 Both, both is good 2022-12-03 23:48:48 -08:00
Matt Nadareski
a6862925ca Use endOffset instead of EOF 2022-12-03 23:46:19 -08:00
Matt Nadareski
1e2ce169af Fix unaligned end-of-file certificates 2022-12-03 23:41:42 -08:00
Matt Nadareski
dda9b3551a Cast certificate length more safely 2022-12-03 23:32:11 -08:00
Matt Nadareski
b1760d3541 Fix version printing 2022-12-03 23:30:32 -08:00
Matt Nadareski
2c1e087bc6 Include negative numbers 2022-12-03 23:23:55 -08:00
Matt Nadareski
90d5bd52a2 Check more EA resources 2022-12-03 23:17:29 -08:00
Matt Nadareski
26db75853b Fix malformed PE certificates 2022-12-03 23:09:45 -08:00
Matt Nadareski
fe5a674518 Add more safety around resource finding 2022-12-03 22:55:03 -08:00
Matt Nadareski
2fe56cd6af Register encoding provider in scanner 2022-12-03 22:47:57 -08:00
Matt Nadareski
f26e82d2bc Fix some PE resource caching issues 2022-12-03 22:47:32 -08:00
Matt Nadareski
65892f067a Merge remote-tracking branch 'origin' into new-exe-framework 2022-12-03 22:29:12 -08:00
Matt Nadareski
768717d7b3 Remove old executable framework 2022-12-03 22:28:03 -08:00
Matt Nadareski
f78b3daf8b Attempt to use new executable framework 2022-12-03 22:17:48 -08:00
Matt Nadareski
8a6f481118 Fix indexed section data read 2022-12-03 22:13:17 -08:00
Matt Nadareski
f420434fd3 Handle overlay data better 2022-12-03 21:59:21 -08:00