Commit Graph

1071 Commits

Author SHA1 Message Date
Matt Nadareski
fc9dd8a34d Add base relocation table to passthrough 2022-12-04 23:17:34 -08:00
Matt Nadareski
c64abc15c9 Move .rsrc StarForce checks to new file 2022-12-04 23:00:30 -08:00
Matt Nadareski
fca12c639c Update CDS PlayJ check 2022-12-04 22:44:59 -08:00
Matt Nadareski
a1522aabd6 Add relocation real address 2022-12-04 22:37:59 -08:00
Matt Nadareski
9be4b339f8 Add PE base relocation table parsing and printing 2022-12-04 22:32:41 -08:00
Matt Nadareski
ce1c74aec3 Update DiscGuard 2022-12-04 21:11:55 -08:00
Matt Nadareski
e824428e0f String tables are always Unicode 2022-12-04 13:38:04 -08:00
Matt Nadareski
2fd4a8a9b1 Fix launch.json 2022-12-04 00:41:56 -08:00
Matt Nadareski
82de7e8b8e Off by one 2022-12-03 23:58:20 -08:00
Matt Nadareski
26831b4732 Both, both is good 2022-12-03 23:48:48 -08:00
Matt Nadareski
a6862925ca Use endOffset instead of EOF 2022-12-03 23:46:19 -08:00
Matt Nadareski
1e2ce169af Fix unaligned end-of-file certificates 2022-12-03 23:41:42 -08:00
Matt Nadareski
dda9b3551a Cast certificate length more safely 2022-12-03 23:32:11 -08:00
Matt Nadareski
b1760d3541 Fix version printing 2022-12-03 23:30:32 -08:00
Matt Nadareski
2c1e087bc6 Include negative numbers 2022-12-03 23:23:55 -08:00
Matt Nadareski
90d5bd52a2 Check more EA resources 2022-12-03 23:17:29 -08:00
Matt Nadareski
26db75853b Fix malformed PE certificates 2022-12-03 23:09:45 -08:00
Matt Nadareski
fe5a674518 Add more safety around resource finding 2022-12-03 22:55:03 -08:00
Matt Nadareski
2fe56cd6af Register encoding provider in scanner 2022-12-03 22:47:57 -08:00
Matt Nadareski
f26e82d2bc Fix some PE resource caching issues 2022-12-03 22:47:32 -08:00
Matt Nadareski
65892f067a Merge remote-tracking branch 'origin' into new-exe-framework 2022-12-03 22:29:12 -08:00
Matt Nadareski
768717d7b3 Remove old executable framework 2022-12-03 22:28:03 -08:00
Matt Nadareski
f78b3daf8b Attempt to use new executable framework 2022-12-03 22:17:48 -08:00
Matt Nadareski
8a6f481118 Fix indexed section data read 2022-12-03 22:13:17 -08:00
Matt Nadareski
f420434fd3 Handle overlay data better 2022-12-03 21:59:21 -08:00
Matt Nadareski
8e73d7970f Fix PE data locking, add offset read helper 2022-12-03 21:37:32 -08:00
Matt Nadareski
9699af93bc Add temporary helper method for NE 2022-12-03 21:37:05 -08:00
Matt Nadareski
44ca0a94b7 Better PE wrapper section handling 2022-12-03 20:56:06 -08:00
Matt Nadareski
b3bf008e31 Fix NE table printing 2022-12-03 14:44:18 -08:00
Matt Nadareski
ce5e2982d2 Fix resource entry handling 2022-12-03 14:22:54 -08:00
Matt Nadareski
7d2edd315c Add stub data to cache, resource/section finding 2022-12-03 13:17:29 -08:00
Matt Nadareski
8ae0452873 Fix reading 0-length string data 2022-12-03 13:08:10 -08:00
Matt Nadareski
e0efc0d9ab Cache PE overlay data 2022-12-02 22:44:55 -08:00
Matt Nadareski
3ce3b7ca2b Cache PE resource, version, manifest 2022-12-02 22:24:22 -08:00
Matt Nadareski
6997608b63 Split printing into methods, add notes 2022-12-02 21:20:52 -08:00
Matt Nadareski
cee7f12974 Add printing regions 2022-12-02 20:09:55 -08:00
Matt Nadareski
5b4a8d5775 Ceeate wrapper base class, PE raw reads 2022-12-02 20:05:20 -08:00
Matt Nadareski
a59bedec5d Add data source to all wrappers, add note 2022-12-02 17:19:59 -08:00
Matt Nadareski
3c5d670924 Add printing to wrappers, remove from test exe 2022-12-02 16:39:49 -08:00
Matt Nadareski
7bab251915 Add PE passthrough properties 2022-12-02 16:16:12 -08:00
Matt Nadareski
57e47eee5d Add LE passthrough properties 2022-12-02 15:58:06 -08:00
Matt Nadareski
4f09c57755 Add NE passthrough properties 2022-12-02 15:44:33 -08:00
Matt Nadareski
7c1edab6ca Add DOS stub passthrough for LE/NE/PE 2022-12-02 15:35:10 -08:00
Matt Nadareski
f24004c949 Add proof-of-concept MS-DOS wrapper 2022-12-02 15:29:10 -08:00
Matt Nadareski
c4bf3931e2 Add skeletons for all wrappers 2022-12-02 15:20:44 -08:00
Matt Nadareski
fe13562f3e Add notes about ByteShield (TheRogueArchivist) 2022-12-02 15:06:31 -08:00
Matt Nadareski
64334d72ea Improve SolidShield detection
- Add new SolidShield executable and file checks.
- Fix false positives in file name checks due to not using a directory separator in the check.
- Add a few notes and reorganize slightly.
2022-12-02 15:02:45 -08:00
Matt Nadareski
a915980187 Improve SafeDisc detection
- Add support for detecting 4.60.000's drvmgt.
- Add version checks for Diag.exe to remove one case of "SafeCast/SafeDisc" ambiguity.
2022-12-02 14:59:26 -08:00
Matt Nadareski
af882fa588 Properly differentiate between Code-Lock and CopyLok (TheRogueArchivist) 2022-12-02 14:56:08 -08:00
Matt Nadareski
7fcaa16835 Add first Themida check (TheRogueArchivist) 2022-12-02 14:52:28 -08:00