64 Commits

Author	SHA1	Message	Date
Matt Nadareski	b521df2ad4	Fix finding, update SecuROM	2022-06-22 09:29:29 -07:00
Matt Nadareski	778fe106f9	Read overlay data (unused)	2022-06-22 09:13:01 -07:00
Matt Nadareski	adb349932f	Start overlay framework	2022-06-20 21:39:19 -07:00
Matt Nadareski	b233b3c17b	Add data at PE entry point	2022-06-19 22:40:07 -07:00
Matt Nadareski	b933249ff7	Add resource finding on creation	2022-04-02 16:12:23 -07:00
Matt Nadareski	61c09e3c97	Move resource helpers to PortableExecutable	2022-04-02 15:54:51 -07:00
Matt Nadareski	e1e7172561	Make ReadArbitraryRange safer	2022-03-15 21:30:46 -07:00
Matt Nadareski	9b98215fc9	Make SourceArray private in NE	2022-03-15 11:18:53 -07:00
Matt Nadareski	40e037fb2a	Make SourceStream private	2022-03-15 11:11:54 -07:00
Matt Nadareski	f9fcd8749b	Add arbitrary reads to NE	2022-03-15 10:50:40 -07:00
Matt Nadareski	eef76d362a	Fix arbitrary reads, update SecuROM check	2022-03-15 10:39:06 -07:00
Matt Nadareski	3b0e3693eb	Add arbitrary range reading	2022-03-15 10:26:29 -07:00
Matt Nadareski	ba4c56997a	Add Relocation section skeleton	2022-03-15 10:15:05 -07:00
Matt Nadareski	ca4d08567d	Fix resetting position for DebugSection	2022-03-15 10:02:10 -07:00
Matt Nadareski	dc252e8d86	Add comments around remaining SourceArray usages	2022-03-14 23:32:19 -07:00
Matt Nadareski	133e29dc2e	Add NameString to SectionHeader	2022-03-14 23:28:31 -07:00
Matt Nadareski	368cec4fc6	Remove more explicit content array usages	2022-03-14 23:17:45 -07:00
Matt Nadareski	65eea4301d	Hide section complexity from content checks	2022-03-14 23:01:06 -07:00
Matt Nadareski	a7e9164f4f	Use SourceArray for PE checks	2022-03-14 22:49:35 -07:00
Matt Nadareski	0fa6673d21	Add debug section (nw)	2022-03-14 15:27:42 -07:00
Matt Nadareski	ffb529edb3	Granularly separate out executable types	2022-03-14 10:40:44 -07:00
Matt Nadareski	d1279a471c	Add NE Resident Name table structures	2022-03-14 10:01:01 -07:00
Matt Nadareski	ec83669d7d	Create Executable constructors	2022-03-08 23:03:26 -08:00
Matt Nadareski	d9d84a01e5	Fix crash in SolidShield scanning (fixes #76)	2022-02-10 10:37:57 -08:00
Matt Nadareski	56f009ac56	Fail slower on resource parsing (fixes #81)	2022-02-10 10:28:59 -08:00
Matt Nadareski	a579bfea1f	Fix reading generic sections	2021-09-15 11:47:12 -07:00
Matt Nadareski	0d75ee135c	Combine SafeCast into SafeDisc; improvements	2021-09-14 13:56:43 -07:00
Matt Nadareski	d6fd0c4d2c	Reduce reliance on fileContent; add notes	2021-09-11 22:27:52 -07:00
Matt Nadareski	44c44be412	Read MS-DOS stub data directly; use with CExe	2021-09-11 21:54:38 -07:00
Matt Nadareski	7b71d7b4bf	Fix resource parsing, fix MS-CAB SFX	2021-09-11 21:41:17 -07:00
Matt Nadareski	2c2aee6797	Add a couple of sections to raw read with notes	2021-09-11 21:10:29 -07:00
Matt Nadareski	afdd032f73	Start using more methods to make life easier	2021-09-11 21:03:36 -07:00
Matt Nadareski	6ab7a06dd5	Lock stream when reading raw section	2021-09-11 16:54:00 -07:00
Matt Nadareski	7195ed3587	Combine CD-Cops and DVD-Cops	2021-09-11 16:49:54 -07:00
Matt Nadareski	214e8d41c7	Pre-read 3 most commonly-used section data ... This also adds comprehensive notes around the sections used in various protections, how they're used, and what we can do with them. It also adds a couple of various notes based on the findings from the protection audit	2021-09-11 16:47:25 -07:00
Matt Nadareski	bd9f583659	Add sections note to PE	2021-09-11 15:22:17 -07:00
Matt Nadareski	abbf0b7ff5	Work on PE export data section	2021-09-11 15:08:58 -07:00
Matt Nadareski	f2b9e3a31b	Clean up a significant number of TODOs	2021-09-11 00:32:48 -07:00
Matt Nadareski	73dd669c20	Add and use byte array extension methods	2021-09-10 22:35:32 -07:00
Matt Nadareski	2a6a2930c1	Handle some TODOs	2021-09-10 21:42:42 -07:00
Matt Nadareski	44fac8cc92	Fix reading resource table from stream	2021-09-10 16:21:55 -07:00
Matt Nadareski	b779f2f546	Only deserialze a file once per round of checks	2021-09-10 16:10:15 -07:00
Matt Nadareski	5344de96b2	Cleanup and bugfixes; additional notes	2021-09-10 15:32:37 -07:00
Matt Nadareski	905d440367	Process file info resources; cleanup; refactors	2021-09-10 02:58:59 -07:00
Matt Nadareski	af79b00bd6	Finalize resource reading	2021-09-09 16:05:17 -07:00
Matt Nadareski	dc9a581e1c	Fix resource entry checking	2021-09-09 15:10:22 -07:00
Matt Nadareski	4d800fd644	Fix ResourceDirectoryString reading	2021-09-09 11:25:02 -07:00
Matt Nadareski	0411278f1d	Remove unused and outdated classes	2021-09-08 10:33:28 -07:00
Matt Nadareski	f8f02a54f6	Combine VOB into ProtectDISC; add notes ... This also means that EVORE is no longer relevant to the code and has been fully removed.	2021-09-07 23:53:05 -07:00
Matt Nadareski	b287c7236b	Fix NE header deserialization	2021-08-28 15:55:08 -07:00