SabreTools/BinaryObjectScanner
1
0
Fork 0
mirror of https://github.com/SabreTools/BinaryObjectScanner.git synced 2026-02-04 05:35:49 +00:00
Code Issues 295 Packages Projects Releases 20 Wiki Activity

[Bug] BOS cannot identify securom-protected executable, InfoPrint fails #197

New Issue
Closed
opened 2026-01-29 21:07:03 +00:00 by claunia · 3 comments
claunia commented 2026-01-29 21:07:03 +00:00
Owner
Copy Link

Originally created by @HeroponRikiBestest on GitHub (Mar 22, 2025).

The securom-protected executable in http://redump.org/disc/79461/ http://redump.org/disc/79462/ (Might and Magic VI - The Mandate of Heaven (Italy)) is not detected by BOS, despite having the relevant cms sections. Attempting to run InfoPrint on it fails.

~/InfoPrint_net9.0_linux-x64_debug/InfoPrint -d mm6.exe 
Checking possible path: mm6.exe
Attempting to print info for mm6.exe
File format found: Executable
Either Executable is not supported or something went wrong during parsing!

output from gnu file:

mm6.exe: PE32 executable (GUI) Intel 80386, for MS Windows, 9 sections

pedump-identified sections:

=== SECTIONS ===

  NAME          RVA      VSZ   RAW_SZ  RAW_PTR  nREL  REL_PTR nLINE LINE_PTR     FLAGS
  .text        1000    b9e92    ba000      400     0        0     0        0  60000020  R-X CODE
  .cms_t      bb000     be46     c000    ba400     0        0     0        0  60000020  R-X CODE
  .rdata      c7000     25d0     2600    c6400     0        0     0        0  40000040  R-- IDATA
  .cms_rd     ca000      46f      600    c8a00     0        0     0        0  40000040  R-- IDATA
  .data       cb000   5275f0     c400    c9000     0        0     0        0  c0000040  RW- IDATA
  .cms_d     5f3000     8674     4e00    d5400     0        0     0        0  c0000040  RW- IDATA
  .idata     5fc000     1524     1600    da200     0        0     0        0  40000040  R-- IDATA
  .rsrc      5fe000     8620     8800    db800     0        0     0        0  40000040  R-- IDATA
  .reloc     607000    109ac    10a00    e4000     0        0     0        0  42000040  R-- IDATA DISCARDABLE

Beginning of executable:

Image

Executable:

mm6.zip

Originally created by @HeroponRikiBestest on GitHub (Mar 22, 2025). The securom-protected executable in http://redump.org/disc/79461/ http://redump.org/disc/79462/ (Might and Magic VI - The Mandate of Heaven (Italy)) is not detected by BOS, despite having the relevant cms sections. Attempting to run InfoPrint on it fails. ``` ~/InfoPrint_net9.0_linux-x64_debug/InfoPrint -d mm6.exe Checking possible path: mm6.exe Attempting to print info for mm6.exe File format found: Executable Either Executable is not supported or something went wrong during parsing! ``` output from gnu file: ``` mm6.exe: PE32 executable (GUI) Intel 80386, for MS Windows, 9 sections ``` pedump-identified sections: ``` === SECTIONS === NAME RVA VSZ RAW_SZ RAW_PTR nREL REL_PTR nLINE LINE_PTR FLAGS .text 1000 b9e92 ba000 400 0 0 0 0 60000020 R-X CODE .cms_t bb000 be46 c000 ba400 0 0 0 0 60000020 R-X CODE .rdata c7000 25d0 2600 c6400 0 0 0 0 40000040 R-- IDATA .cms_rd ca000 46f 600 c8a00 0 0 0 0 40000040 R-- IDATA .data cb000 5275f0 c400 c9000 0 0 0 0 c0000040 RW- IDATA .cms_d 5f3000 8674 4e00 d5400 0 0 0 0 c0000040 RW- IDATA .idata 5fc000 1524 1600 da200 0 0 0 0 40000040 R-- IDATA .rsrc 5fe000 8620 8800 db800 0 0 0 0 40000040 R-- IDATA .reloc 607000 109ac 10a00 e4000 0 0 0 0 42000040 R-- IDATA DISCARDABLE ``` Beginning of executable: ![Image](https://github.com/user-attachments/assets/af295d4d-de64-4fe7-8eb3-eac470f65bc8) Executable: [mm6.zip](https://github.com/user-attachments/files/19404085/mm6.zip)
claunia commented 2026-01-29 21:07:03 +00:00
Author
Owner
Copy Link

@mnadareski commented on GitHub (Sep 7, 2025):

Parsing and output have been addressed:

mm6.exe: SecuROM 1-3
@mnadareski commented on GitHub (Sep 7, 2025): Parsing and output have been addressed: ``` mm6.exe: SecuROM 1-3 ```
claunia commented 2026-01-29 21:07:04 +00:00
Author
Owner
Copy Link

@HeroponRikiBestest commented on GitHub (Sep 7, 2025):

It might be supposed to display a more verbose version number; I'll have to check

@HeroponRikiBestest commented on GitHub (Sep 7, 2025): It might be supposed to display a more verbose version number; I'll have to check
claunia commented 2026-01-29 21:07:04 +00:00
Author
Owner
Copy Link

@mnadareski commented on GitHub (Sep 7, 2025):

If so, that can be a separate issue. This one was tracking that it failed entirely.

@mnadareski commented on GitHub (Sep 7, 2025): If so, that can be a separate issue. This one was tracking that it failed entirely.
Sign in to join this conversation.
No Branch/Tag Specified
Branches Tags
Labels
Clear labels
bug
enhancement
help wanted
pull-request
Mirrored from GitHub Pull Request
 question
No Label
Milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
claunia
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: SabreTools/BinaryObjectScanner#197
Delete Branch "%!s()"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?