Matt Nadareski
9d7cc4012c
Move interfaces to own namespace
2022-05-01 17:41:50 -07:00
Matt Nadareski
f9f2e0d932
Better naming
2022-05-01 17:17:15 -07:00
Matt Nadareski
b933249ff7
Add resource finding on creation
2022-04-02 16:12:23 -07:00
Matt Nadareski
61c09e3c97
Move resource helpers to PortableExecutable
2022-04-02 15:54:51 -07:00
Matt Nadareski
4b66cd8cd2
Update file version resource handling
2022-04-01 10:16:31 -07:00
Matt Nadareski
ceae505f4d
Switch order of interface parameters
2022-03-14 22:51:17 -07:00
Matt Nadareski
a7e9164f4f
Use SourceArray for PE checks
2022-03-14 22:49:35 -07:00
Matt Nadareski
fcbf006e4e
Migrate packers to new interfaces
2022-03-14 11:00:17 -07:00
Matt Nadareski
ffb529edb3
Granularly separate out executable types
2022-03-14 10:40:44 -07:00
Matt Nadareski
7b71d7b4bf
Fix resource parsing, fix MS-CAB SFX
2021-09-11 21:41:17 -07:00
Matt Nadareski
1bc8fe7ff6
Fix version finding for MS-CAB SFX
2021-09-11 16:58:05 -07:00
Matt Nadareski
214e8d41c7
Pre-read 3 most commonly-used section data
...
This also adds comprehensive notes around the sections used in various protections, how they're used, and what we can do with them. It also adds a couple of various notes based on the findings from the protection audit
2021-09-11 16:47:25 -07:00
Matt Nadareski
b779f2f546
Only deserialze a file once per round of checks
2021-09-10 16:10:15 -07:00
Matt Nadareski
5344de96b2
Cleanup and bugfixes; additional notes
2021-09-10 15:32:37 -07:00
Matt Nadareski
373268a6a8
Convert resource checks to header checks
2021-09-10 13:51:32 -07:00
Matt Nadareski
905d440367
Process file info resources; cleanup; refactors
2021-09-10 02:58:59 -07:00
Matt Nadareski
ffcaf4d16b
Improve MS-CAB SFX matching
2021-08-30 12:08:17 -07:00
Matt Nadareski
eb76acb767
Add note to MS-CAB SFX
2021-08-27 13:13:41 -07:00
Matt Nadareski
6cde7b8bef
Reduce redundant code in content matchers now
2021-08-25 20:26:43 -07:00
Matt Nadareski
3ab0bcc0ae
ContentMatchSets are now expected in IContentCheck
2021-08-25 19:37:32 -07:00
Matt Nadareski
7548646ba2
Create and use the Tools namespace
2021-08-25 15:09:42 -07:00
SilasLaspada
958d306f42
Fix NullReferenceExceptions ( #59 )
2021-08-24 23:13:27 -07:00
Matt Nadareski
43845cf722
Rename position flag -> debug flag
2021-08-24 15:19:23 -07:00
Matt Nadareski
93e8322ba5
Add skeleton code to MS-CAB SFX
2021-08-24 14:29:30 -07:00
Matt Nadareski
6049eda580
Add byte array checks for MS-CAB SFX
2021-08-24 09:13:58 -07:00
Matt Nadareski
177641894e
Clean up MS-CAB SFX a little
2021-08-23 23:09:05 -07:00
Matt Nadareski
dc49335ace
Add notes for later
2021-08-23 23:04:01 -07:00
Matt Nadareski
04651d46d8
Clean up usings
2021-08-23 22:07:24 -07:00
SilasLaspada
97c9c7e5ed
Add support for Microsoft SFX CAB detection ( #56 )
...
* Add support for Microsoft SFX CAB detection
* Address reviews
* Simplify GetVersion
* Fix GetVersion
2021-08-23 22:03:28 -07:00