Matt Nadareski
b3bf008e31
Fix NE table printing
2022-12-03 14:44:18 -08:00
Matt Nadareski
ce5e2982d2
Fix resource entry handling
2022-12-03 14:22:54 -08:00
Matt Nadareski
7d2edd315c
Add stub data to cache, resource/section finding
2022-12-03 13:17:29 -08:00
Matt Nadareski
8ae0452873
Fix reading 0-length string data
2022-12-03 13:08:10 -08:00
Matt Nadareski
e0efc0d9ab
Cache PE overlay data
2022-12-02 22:44:55 -08:00
Matt Nadareski
3ce3b7ca2b
Cache PE resource, version, manifest
2022-12-02 22:24:22 -08:00
Matt Nadareski
6997608b63
Split printing into methods, add notes
2022-12-02 21:20:52 -08:00
Matt Nadareski
cee7f12974
Add printing regions
2022-12-02 20:09:55 -08:00
Matt Nadareski
5b4a8d5775
Ceeate wrapper base class, PE raw reads
2022-12-02 20:05:20 -08:00
Matt Nadareski
a59bedec5d
Add data source to all wrappers, add note
2022-12-02 17:19:59 -08:00
Matt Nadareski
3c5d670924
Add printing to wrappers, remove from test exe
2022-12-02 16:39:49 -08:00
Matt Nadareski
7bab251915
Add PE passthrough properties
2022-12-02 16:16:12 -08:00
Matt Nadareski
57e47eee5d
Add LE passthrough properties
2022-12-02 15:58:06 -08:00
Matt Nadareski
4f09c57755
Add NE passthrough properties
2022-12-02 15:44:33 -08:00
Matt Nadareski
7c1edab6ca
Add DOS stub passthrough for LE/NE/PE
2022-12-02 15:35:10 -08:00
Matt Nadareski
f24004c949
Add proof-of-concept MS-DOS wrapper
2022-12-02 15:29:10 -08:00
Matt Nadareski
c4bf3931e2
Add skeletons for all wrappers
2022-12-02 15:20:44 -08:00
Matt Nadareski
fe13562f3e
Add notes about ByteShield (TheRogueArchivist)
2022-12-02 15:06:31 -08:00
Matt Nadareski
64334d72ea
Improve SolidShield detection
...
- Add new SolidShield executable and file checks.
- Fix false positives in file name checks due to not using a directory separator in the check.
- Add a few notes and reorganize slightly.
2022-12-02 15:02:45 -08:00
Matt Nadareski
a915980187
Improve SafeDisc detection
...
- Add support for detecting 4.60.000's drvmgt.
- Add version checks for Diag.exe to remove one case of "SafeCast/SafeDisc" ambiguity.
2022-12-02 14:59:26 -08:00
Matt Nadareski
af882fa588
Properly differentiate between Code-Lock and CopyLok (TheRogueArchivist)
2022-12-02 14:56:08 -08:00
Matt Nadareski
7fcaa16835
Add first Themida check (TheRogueArchivist)
2022-12-02 14:52:28 -08:00
Matt Nadareski
4d640f3cf2
Add Wrapper skeleton project
2022-12-02 14:44:06 -08:00
Matt Nadareski
25d495b1d0
ASN.1 OID parsing (nw)
2022-12-02 14:18:15 -08:00
Matt Nadareski
7fd936c4a8
Handle empty resource name strings
2022-12-02 14:15:50 -08:00
Matt Nadareski
fe753fc4fd
Try to fix null resource types issue
2022-12-02 14:15:44 -08:00
Matt Nadareski
0a4763fcc1
Fix PE dialog item printing
2022-12-02 14:15:37 -08:00
Matt Nadareski
e281faf664
Add first attempt at PE certificate parsing
2022-11-12 21:56:24 -08:00
Matt Nadareski
dcb291c1c6
Disable printing raw PE cert data
2022-11-11 16:23:25 -08:00
Matt Nadareski
ecd1c93bb9
Add PE message resource printing, fix parsing
2022-11-11 16:20:17 -08:00
Matt Nadareski
eeb555a6ce
Add PE message resource data to parser
2022-11-11 15:52:05 -08:00
Matt Nadareski
27d53abd10
Add PE message resource models
2022-11-11 15:41:37 -08:00
Matt Nadareski
91eef55173
Fix tiny formatting issue
2022-11-11 15:33:41 -08:00
Matt Nadareski
f9e1518da6
Add PE menu resource reading and writing
2022-11-11 15:31:00 -08:00
Matt Nadareski
5b974260cc
Add PE extended dialog templates
2022-11-11 14:22:53 -08:00
Matt Nadareski
554374b710
Add PE dialog template extended
2022-11-11 14:12:03 -08:00
Matt Nadareski
475669ac1b
Add PE standard dialog parsing and writing
2022-11-11 13:56:23 -08:00
Matt Nadareski
623d1e6a40
Invert PE "if" logic where possible
2022-11-11 10:08:15 -08:00
Matt Nadareski
08fa4a997f
Fix PE resource data entry printing
2022-11-11 09:58:50 -08:00
Matt Nadareski
4e21cf8494
Make PE RVA checks simpler
2022-11-11 09:58:19 -08:00
Matt Nadareski
2ebbda6852
Don't trust PE sections
2022-11-10 23:38:59 -08:00
Matt Nadareski
010a6d6e42
Safeguard all PE virtual address uses
2022-11-10 23:06:21 -08:00
Matt Nadareski
3b1481879a
Fix PE debug table parsing
2022-11-10 22:39:10 -08:00
Matt Nadareski
3ddcc3884b
Fix PE printing typo
2022-11-10 22:23:36 -08:00
Matt Nadareski
260ab1ec89
Safeguard PE invalid virtual addresses
2022-11-10 22:19:58 -08:00
Matt Nadareski
69803a999f
Fix PE virtual address for section-aligned RVAs
2022-11-10 22:09:58 -08:00
Matt Nadareski
d4a75ed871
Reorganize PE notes for delay-load
2022-11-10 21:41:42 -08:00
Matt Nadareski
7394f14218
Add missing PE notes for sections
2022-11-10 21:38:52 -08:00
Matt Nadareski
23cd7b9ebd
Add note for PE .drectve section
2022-11-10 21:32:01 -08:00
Matt Nadareski
477cfee78e
Add PE debug section printing
2022-11-10 21:29:17 -08:00