Commit Graph

  • cd770bf974 Bumped the copyright year of the project. master v3.1.0.5 atom0s 2024-03-29 22:13:07 -07:00
  • a571eeb560 Bumped the version information for affected binaries. atom0s 2024-03-29 22:05:38 -07:00
  • a278875e1c Unpacker: (variant31.x86) Fixed AES decryption not properly handling the code section, leading to junk data being copied into unpacked file. Unpacker: (variant31.x86) Fixed AES decryption not properly preserving non-encrypted data. atom0s 2024-03-29 22:04:56 -07:00
  • 4c2c218a72 Unpacker: (variant21.x86) Fixed AES decryption not properly handling the code section, leading to junk data being copied into unpacked file. Unpacker: (variant21.x86) Fixed AES decryption not properly preserving non-encrypted data. atom0s 2024-03-29 22:04:12 -07:00
  • c58518a65f API: Changed the AES buffer size from 2048 to 16 to correct block size alignment issues. atom0s 2024-03-29 22:01:56 -07:00
  • 87732ea284 Update README.md atom0s 2023-05-28 02:57:18 -07:00
  • 976b194522 Add repo files. atom0s 2023-05-28 02:49:31 -07:00
  • 0fd49fe42c Update copyright year to 2023. atom0s 2023-05-28 02:14:43 -07:00
  • 97db6cb6de Bump the main executable version. atom0s 2023-05-28 02:09:30 -07:00
  • 2a63293807 Plugin: (AutomaticPlugin) Add additional error messages for when failing to parse a valid PE file and when an exception happens during parsing. atom0s 2023-05-28 02:08:05 -07:00
  • 4c3c6e757c API: (PE32) Adjusted 'Parse' method to exit early if the DOS stub is invalid. (Avoids attempting to read an invalid NT header block.) API: (PE64) Adjusted 'Parse' method to exit early if the DOS stub is invalid. (Avoids attempting to read an invalid NT header block.) atom0s 2023-05-28 02:07:05 -07:00
  • 7f92aded2c API: (PE32) Changed IMAGE_DOS_HEADER structure field 'Signature' to be a full type (ushort) instead of an array. API: (PE64) Changed IMAGE_DOS_HEADER structure field 'Signature' to be a full type (ushort) instead of an array. API: (PE32) Changed IMAGE_NT_HEADERS structure field 'Signature' to be a full type (uint) instead of an array. API: (PE64) Changed IMAGE_NT_HEADERS structure field 'Signature' to be a full type (uint) instead of an array. API: (PE32) Fixed IMAGE_DOS_HEADER helper property 'IsValid' to use the standard 'IMAGE_DOS_SIGNATURE' value. API: (PE64) Fixed IMAGE_NT_HEADERS helper property 'IsValid' to use the standard 'IMAGE_NT_SIGNATURE' value. atom0s 2023-05-28 01:48:40 -07:00
  • 640e57e148 Unpacker 2.0 (x86) - Add support for additional samples. (Header size: 884) Bump version. v3.1.0.3 atom0s 2022-09-26 02:30:40 -07:00
  • fa0d8319f3 Bump version. v3.1.0.2 atom0s 2022-09-23 16:04:00 -07:00
  • 65b5644afe Unpacker v2.0 (x86) - Add support for multiple variants of the header. Unpacker v2.0 (x86) - Fix and rename some of the fields of the stub header. Unpacker v2.0 (x86) - Add error message for unsupported header sizes to help collect samples. atom0s 2022-09-23 16:00:33 -07:00
  • 411f4f711c PE32: Replace manual PE checksum calculations with Win32 API call instead. PE64: Replace manual PE checksum calculations with Win32 API call instead. atom0s 2022-09-23 15:57:55 -07:00
  • 51be8ca795 API: Add import for MapFileAndCheckSum. atom0s 2022-09-23 15:54:19 -07:00
  • b6d445fda4 AutomaticPlugin - Added support for logging service usage. AutomaticPlugin - Added detection and logging output to mention if a file is most likely not packed with SteamStub. Core - Fixed issue with AutomaticPlugin not properly initializing. Unpacker v2.0 (x86) - Adjusted how the code section RVA is determined. (Moved a second check to 'optional feature' state for now.) v3.1.0.1 atom0s 2022-09-21 18:55:29 -07:00
  • 1bdd96e657 * Unpacker v2.1 (x86) - Updated the header to handle the StubData more correctly. atom0s 2022-04-24 21:34:23 -07:00
  • 0b67eab1d1 Unpacker v2.1 (x86) - Updated the header information based on new sample info. atom0s 2022-04-15 19:28:59 -07:00
  • 2023853b31 Small cleanup. v3.1.0.0 atom0s 2022-04-04 22:03:28 -07:00
  • 700425f68a CLI: Remove .pdb generation on Release mode. Unpacker: Variant v10x86 - Fix incorrect output path when compiled for Release mode. atom0s 2022-04-04 21:59:42 -07:00
  • c2719b776d CLI: Fix issues where Steamless.API.dll was required to be in the same folder as the CLI executable. CLI: Fix Steamless.API.dll reference being copied to main output folder. atom0s 2022-04-04 21:55:49 -07:00
  • 0a38c2476c Bump version number. atom0s 2022-04-04 21:40:50 -07:00
  • 25f3584e39 Core: fix release mode output folder for new CLI version. atom0s 2022-04-04 21:39:00 -07:00
  • 62ffbe6732 Core: Added Steamless.CLI to run Steamless from the command line. Core: Bumped version to 3.0.0.15 atom0s 2022-04-04 21:37:35 -07:00
  • 9adc76d6da Bump version. atom0s 2022-03-27 00:20:44 -07:00
  • 6b7fa1d977 Updated the project README.md Updated the AboutView. atom0s 2022-03-27 00:19:57 -07:00
  • d97e1a4426 Add Patreon link to FUNDING.yml atom0s 2022-03-26 02:52:24 -07:00
  • 540b4b067f API: PE64 - Add new functionality to Pe64Helpers to recalculate a PE file checksum. Unpackers: (x64) Ensure all unpacked files default to a checksum of 0. Unpackers: (x64) Add support for new RecalculateFileChecksum setting. v3.0.0.13 atom0s 2022-03-26 02:38:35 -07:00
  • 2380a4bd8a Unpackers: (x86) - Ensure all unpacked files default to a checksum of 0. atom0s 2022-03-26 02:25:36 -07:00
  • 7cb8eaf613 Core: Fix typo with new ZeroDosStubData option checkbox using wrong field bool. API: Add new option RecalculateFileChecksum to allow unpacked files to have their PE checksum recalculated. API: PE32 - Add new functionality to Pe32Helpers to recalculate a PE file checksum. Unpackers: (x86) Add support for new RecalculateFileChecksum setting. atom0s 2022-03-26 02:23:03 -07:00
  • 12c312b4db API: Add new option to zero the DOS stub data when unpacking. Core: Add UI option to enable/disable the new zero DOS stub data option. Unpackers: Add support for new zero DOS stub data option. API: DontRealignSections and ZeroDosStubData are now default enabled as this is the general 'correct' way to handle most files. (Some files do require the section alignment to happen and some files may use the DOS stub for self-validation and such. Adjust accordingly when using Steamless.) atom0s 2022-03-25 20:09:21 -07:00
  • 18c389ce3c Unpacker: v10.x86 - Finish implementing SteamStub variant v1.0 (x86) unpacker. (Fixes #22) atom0s 2022-03-25 19:33:17 -07:00
  • 39ad5a2631 Update project information copyrights. atom0s 2022-03-25 18:53:29 -07:00
  • 5c2c32cab4 Begin variant v1.0 x86 plugin support. atom0s 2022-03-25 18:52:33 -07:00
  • 9c16bcc8a5 API: PE32 Adjusted FindPattern to return a long instead of uint. Default return is now -1. API: PE36 Adjusted FindPattern to return a long instead of uint. Default return is now -1. Unpackers: Updated all usages of FindPattern to reflect new API change. atom0s 2022-03-25 18:49:50 -07:00
  • d3a9dad663 Bump version number. atom0s 2022-03-25 16:49:01 -07:00
  • b97f148945 Unpacker: v30.x64 - Renamed header field Unknown0003 to HasTlsCallback. Unpacker: v30.x64 - Add support for handling files packed with TlsCallback overrides. atom0s 2022-03-25 16:46:38 -07:00
  • 0ad40aeabd API: PE32 - Fix SizeOfImage alignment. API: PE64 - Fix SizeOfImage alignment. Unpacker: v20.x86 - Fix SizeOfImage alignment. Unpacker: v21.x86 - Fix SizeOfImage alignment. Unpacker: v30.x64 - Fix incorrect TlsOepRva being stored and used. Unpacker: v30.x64 - Fix incorrect TlsOepRva calculations when reading payload and SteamDRMP.dll. Unpacker: v31.x64 - Fix incorrect TlsOepRva being stored and used. Unpacker: v31.x64 - Fix incorrect TlsOepRva calculations when reading payload and SteamDRMP.dll. atom0s 2022-03-24 00:58:32 -07:00
  • 079a086129 API: Add new option to allow disabling of section realignment. Core: Add support for new disable section realignment option. Unpacker: v20.x86 - Add support for new disable section realignment option. Unpacker: v21.x86 - Add support for new disable section realignment option. Unpacker: v30.x86 - Add support for new disable section realignment option. Unpacker: v30.x64 - Add support for new disable section realignment option. Unpacker: v31.x86 - Add support for new disable section realignment option. Unpacker: v31.x64 - Add support for new disable section realignment option. atom0s 2022-03-23 00:26:02 -07:00
  • 75afb9e425 Unpacker: v31.x64 - Bump unpacker version. Previous commit fixes #65 atom0s 2022-03-22 14:46:24 -07:00
  • f83d140ebf API: Add ToString overrides to the section entries to allow easier debugging. Unpacker: v31.x64 - Remove code section size check. (Some virtualized files will have an empty code section.) Unpacker: v31.x64 - Allow empty code section files to still unpack by skipping decryption step. atom0s 2022-03-22 14:44:49 -07:00
  • 5b02106fca Bump version numbers. atom0s 2022-03-22 03:47:51 -07:00
  • d3423cde0e API: PE64 - Add check for TlsDirectory.AddressOfCallBacks == 0 to prevent attempting to reference invalid data. Unpacker: v31.x64 - Adjust size of data searched when determining the variant version. Fixes #56 Misc: Update project copyrights. Misc: Remove some unused/dead code from the UI. atom0s 2022-03-22 03:46:48 -07:00
  • b31c7a1884 Fixed 2.1 (x86) unpacker using the wrong encryption size when the .text section is encrypted. (Fixes #57) v3.0.0.12 atom0s 2021-09-23 22:51:31 -07:00
  • 2a10df60c1 Update README. atom0s 2020-12-18 02:31:35 -08:00
  • 6b06ba9902 File version bump for 3.0.0.11 release. v3.0.0.11 atom0s 2020-12-18 02:24:32 -08:00
  • 769232fc65 Add support for the real stub 2.0 variant. (This is a first-go at this version. I only have 1 sample with this version of the stub so it is solely based on this one exe. The full stub has been reversed for this file though. You can find more about that in issue #37) atom0s 2020-12-18 02:10:09 -08:00
  • 82d763940a Fix a few more renames. atom0s 2020-12-17 23:39:35 -08:00
  • 69b2053f57 Finish 2.0 to 2.1 renaming. atom0s 2020-12-17 23:19:02 -08:00
  • 5b286530a4 Renamed SteamStub variant 2.0 to 2.1. This is a major change due to a file being presented that looks to be an earlier version of the 2.x variant. This new (older) file presents like 2.x however, it predates some more common features such as the XTEA encryption seen in 2.1 and newer. This version seems less feature-rich and thus I feel it's actually 2.0. atom0s 2020-12-17 23:16:20 -08:00
  • 869b893ac3 Update more copyrights to 2020. Update Paypal links to use newer Paypal.me format. Fix issue with structure size casting that can cause an exception when trying to read a stub header structure. Fix typo's on some spelling. atom0s 2020-12-17 23:10:04 -08:00
  • 0b6374e497 Merge branch 'master' of https://github.com/atom0s/Steamless v3.0.0.10 atom0s 2020-08-17 01:52:40 -07:00
  • 676c863b08 Updated copyright date ranges. Fixed issue with memory errors due to incorrect structure mapping handling. atom0s 2020-08-17 01:52:21 -07:00
  • 0725ed3c25 Create FUNDING.yml atom0s 2020-04-29 18:09:53 -07:00
  • 8d911528cd Merge pull request #32 from pengc99/patch-1 atom0s 2020-02-16 19:24:48 -08:00
  • 270de3ca6d Update README.md Andrew Peng 2020-02-16 19:55:05 -06:00
  • c2d54fa717 Bump the version number of the main app. v3.0.0.9 atom0s 2019-05-28 19:13:41 -07:00
  • e90195a0ec Merge branch 'master' of https://github.com/atom0s/Steamless atom0s 2019-05-28 19:11:43 -07:00
  • 5a10c527e2 Fixed a small bug with TLS callback parsing in the 64bit PE parser. Added TLS callback support for the 3.0 64bit unpacker. atom0s 2019-05-28 19:11:29 -07:00
  • 9765d3e5b3 More code cleanup. (Adjusted some properties and other data to newer C# standards.) v3.0.0.8 atom0s 2019-03-30 01:34:22 -07:00
  • e54c95bea3 Updated copyright date ranges to include 2019 across the project. Added new UseExperimentalFeatures option. Added new dynamic offset reader for v2 stub parser to better support more files. (experimental feature) General code cleanup. atom0s 2019-03-30 01:23:48 -07:00
  • a0f856a050 Added support for an unknown variant of v2. atom0s 2018-07-20 19:02:26 -07:00
  • aed8a86020 Added SteamStub 2.x variant D0 (header size) support. Fixed some issues with the 2.x disassembler using incorrect types. Updated the SharpDisasm.dll file to latest version. v3.0.0.7 atom0s 2018-06-25 12:15:38 -07:00
  • cdd3f56996 Updated the list of supported versions. atom0s 2018-04-15 23:00:09 -07:00
  • 168c75dc58 Bumped main executable version. Updated all copyrights to include 2018. v3.0.0.6 atom0s 2018-04-15 22:49:12 -07:00
  • 14c1ad2d0b Added support for new SteamStub v3.1.2 variant. (x64) Updated all plugins to make use of reflection to get their versions from their assembly info. Added ignore for Windows image cache file. (Thumbs.db) atom0s 2018-04-15 22:47:13 -07:00
  • 34afbba437 Merge branch 'master' of https://github.com/atom0s/Steamless v3.0.0.5 atom0s 2017-12-16 18:07:34 -08:00
  • 57dba9916f Added support for new SteamStub v3.1.2 variant. (x86 only at this time. I do not have any 64bit test files.) - Thanks to Gano for supplying test files. - Thanks to immorr for supplying test files. Adjusted the default window size on startup so that the full plugin names are seen with default screen settings. atom0s 2017-12-16 18:07:07 -08:00
  • 18d34ede4d Added fallback pattern for variant 2.0 (x86). Fixes issue #6 v3.0.0.4-2 atom0s 2017-11-09 21:50:53 -08:00
  • b3d5981784 Updated readme. atom0s 2017-01-26 14:36:55 -08:00
  • d139df8dde Updated readme. atom0s 2017-01-25 21:47:53 -08:00
  • bc1aaeb4ed Updated README to include 64bit supported notes. atom0s 2017-01-23 02:38:47 -08:00
  • 6aef1e268e Bumped the version number of Steamless. v3.0.0.4 atom0s 2017-01-23 02:35:26 -08:00
  • 8c88ba51c3 Steamless.Unpacker.Variant30.x86 - Fixed issue with header size not unpacking properly for certain files. - Fixed issue with TLS callbacks not being unpacked properly when present. atom0s 2017-01-23 02:34:02 -08:00
  • a7fa5bb337 Begin initial work on supporting 64bit files. - Implements the base 64bit file handling / reading. - This is untested and more or just less ported from the 32bit files. May have issues, will resolve as we get there. atom0s 2017-01-16 20:00:34 -08:00
  • 9a9aa8894d Fixed issue with variant 2.0 (x86) failing unpacking files with non-encrypted text section. v3.0.0.3 atom0s 2017-01-16 17:55:30 -08:00
  • 5f213235cc Adjusted Steamless to use older Aero presentation library for Windows 7 support. v3.0.0.2 atom0s 2017-01-11 01:59:46 -08:00
  • 23a9021a26 Readme update. v3.0.0.1 atom0s 2017-01-06 02:26:27 -08:00
  • 00b2854147 Fixed formatting issue with README file. atom0s 2017-01-06 02:20:09 -08:00
  • b3c1fc6e24 Initial code commit. Steamless v3.0.0.1 code base. atom0s 2017-01-06 02:17:35 -08:00
  • 2020f394e3 Initial readme commit. atom0s 2017-01-06 02:16:00 -08:00
  • fed71ed0c3 Initial commit. atom0s 2017-01-06 02:09:29 -08:00