Matt Nadareski
fc9dd8a34d
Add base relocation table to passthrough
2022-12-04 23:17:34 -08:00
Matt Nadareski
c64abc15c9
Move .rsrc StarForce checks to new file
2022-12-04 23:00:30 -08:00
Matt Nadareski
fca12c639c
Update CDS PlayJ check
2022-12-04 22:44:59 -08:00
Matt Nadareski
a1522aabd6
Add relocation real address
2022-12-04 22:37:59 -08:00
Matt Nadareski
9be4b339f8
Add PE base relocation table parsing and printing
2022-12-04 22:32:41 -08:00
Matt Nadareski
ce1c74aec3
Update DiscGuard
2022-12-04 21:11:55 -08:00
Matt Nadareski
e824428e0f
String tables are always Unicode
2022-12-04 13:38:04 -08:00
Matt Nadareski
2fd4a8a9b1
Fix launch.json
2022-12-04 00:41:56 -08:00
Matt Nadareski
82de7e8b8e
Off by one
2022-12-03 23:58:20 -08:00
Matt Nadareski
26831b4732
Both, both is good
2022-12-03 23:48:48 -08:00
Matt Nadareski
a6862925ca
Use endOffset instead of EOF
2022-12-03 23:46:19 -08:00
Matt Nadareski
1e2ce169af
Fix unaligned end-of-file certificates
2022-12-03 23:41:42 -08:00
Matt Nadareski
dda9b3551a
Cast certificate length more safely
2022-12-03 23:32:11 -08:00
Matt Nadareski
b1760d3541
Fix version printing
2022-12-03 23:30:32 -08:00
Matt Nadareski
2c1e087bc6
Include negative numbers
2022-12-03 23:23:55 -08:00
Matt Nadareski
90d5bd52a2
Check more EA resources
2022-12-03 23:17:29 -08:00
Matt Nadareski
26db75853b
Fix malformed PE certificates
2022-12-03 23:09:45 -08:00
Matt Nadareski
fe5a674518
Add more safety around resource finding
2022-12-03 22:55:03 -08:00
Matt Nadareski
2fe56cd6af
Register encoding provider in scanner
2022-12-03 22:47:57 -08:00
Matt Nadareski
f26e82d2bc
Fix some PE resource caching issues
2022-12-03 22:47:32 -08:00
Matt Nadareski
65892f067a
Merge remote-tracking branch 'origin' into new-exe-framework
2022-12-03 22:29:12 -08:00
Matt Nadareski
768717d7b3
Remove old executable framework
2022-12-03 22:28:03 -08:00
Matt Nadareski
f78b3daf8b
Attempt to use new executable framework
2022-12-03 22:17:48 -08:00
Matt Nadareski
8a6f481118
Fix indexed section data read
2022-12-03 22:13:17 -08:00
Matt Nadareski
f420434fd3
Handle overlay data better
2022-12-03 21:59:21 -08:00
Matt Nadareski
8e73d7970f
Fix PE data locking, add offset read helper
2022-12-03 21:37:32 -08:00
Matt Nadareski
9699af93bc
Add temporary helper method for NE
2022-12-03 21:37:05 -08:00
Matt Nadareski
44ca0a94b7
Better PE wrapper section handling
2022-12-03 20:56:06 -08:00
Matt Nadareski
b3bf008e31
Fix NE table printing
2022-12-03 14:44:18 -08:00
Matt Nadareski
ce5e2982d2
Fix resource entry handling
2022-12-03 14:22:54 -08:00
Matt Nadareski
7d2edd315c
Add stub data to cache, resource/section finding
2022-12-03 13:17:29 -08:00
Matt Nadareski
8ae0452873
Fix reading 0-length string data
2022-12-03 13:08:10 -08:00
Matt Nadareski
e0efc0d9ab
Cache PE overlay data
2022-12-02 22:44:55 -08:00
Matt Nadareski
3ce3b7ca2b
Cache PE resource, version, manifest
2022-12-02 22:24:22 -08:00
Matt Nadareski
6997608b63
Split printing into methods, add notes
2022-12-02 21:20:52 -08:00
Matt Nadareski
cee7f12974
Add printing regions
2022-12-02 20:09:55 -08:00
Matt Nadareski
5b4a8d5775
Ceeate wrapper base class, PE raw reads
2022-12-02 20:05:20 -08:00
Matt Nadareski
a59bedec5d
Add data source to all wrappers, add note
2022-12-02 17:19:59 -08:00
Matt Nadareski
3c5d670924
Add printing to wrappers, remove from test exe
2022-12-02 16:39:49 -08:00
Matt Nadareski
7bab251915
Add PE passthrough properties
2022-12-02 16:16:12 -08:00
Matt Nadareski
57e47eee5d
Add LE passthrough properties
2022-12-02 15:58:06 -08:00
Matt Nadareski
4f09c57755
Add NE passthrough properties
2022-12-02 15:44:33 -08:00
Matt Nadareski
7c1edab6ca
Add DOS stub passthrough for LE/NE/PE
2022-12-02 15:35:10 -08:00
Matt Nadareski
f24004c949
Add proof-of-concept MS-DOS wrapper
2022-12-02 15:29:10 -08:00
Matt Nadareski
c4bf3931e2
Add skeletons for all wrappers
2022-12-02 15:20:44 -08:00
Matt Nadareski
fe13562f3e
Add notes about ByteShield (TheRogueArchivist)
2022-12-02 15:06:31 -08:00
Matt Nadareski
64334d72ea
Improve SolidShield detection
...
- Add new SolidShield executable and file checks.
- Fix false positives in file name checks due to not using a directory separator in the check.
- Add a few notes and reorganize slightly.
2022-12-02 15:02:45 -08:00
Matt Nadareski
a915980187
Improve SafeDisc detection
...
- Add support for detecting 4.60.000's drvmgt.
- Add version checks for Diag.exe to remove one case of "SafeCast/SafeDisc" ambiguity.
2022-12-02 14:59:26 -08:00
Matt Nadareski
af882fa588
Properly differentiate between Code-Lock and CopyLok (TheRogueArchivist)
2022-12-02 14:56:08 -08:00
Matt Nadareski
7fcaa16835
Add first Themida check (TheRogueArchivist)
2022-12-02 14:52:28 -08:00