File tree Expand file tree Collapse file tree 1 file changed +6
-0
lines changed
BinaryObjectScanner/Packer Expand file tree Collapse file tree 1 file changed +6
-0
lines changed Original file line number Diff line number Diff line change @@ -11,6 +11,12 @@ namespace BinaryObjectScanner.Packer
1111 // executables, then every single file appears embedded in the first's overlay.
1212 // While this technically extracts the data, it does so improperly. It may require
1313 // using the size of image and headers for overlay-extracted data.
14+ //
15+ // Further research shows that there is a signature at the end of the overlay:
16+ // "41 44 56 49 4E 53 54 53 46 58 00 00" (ADVINSTSFX\0\0)
17+ // Above it is something resembling the central directory of a PKZIP file,
18+ // including clear entries that represent each file. This structure needs to
19+ // be documented in Models.
1420 public class AdvancedInstaller : IExecutableCheck < PortableExecutable >
1521 {
1622 /// <inheritdoc/>
You can’t perform that action at this time.
0 commit comments