MeshCentral/MeshAgent
1
0
Fork 0
mirror of https://github.com/Ylianst/MeshAgent synced 2025-12-19 09:43:20 +00:00
Code Issues Releases Wiki Activity

Updated authenticode parser for 32 bit

Browse Source
This commit is contained in:
Bryan Roe
2022-01-21 09:35:29 -08:00
parent d246cd95dd
commit 6eab5afe39
2 changed files with 7 additions and 7 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
microscript/ILibDuktape_Polyfills.c
View File

File diff suppressed because one or more lines are too long

12
modules/win-authenticode-opus.js
View File

@@ -67,20 +67,20 @@ function read(path)
dwSignerInfo).Val != 0) dwSignerInfo).Val != 0)
{ {
var attr; var attr;
var attributes = pSignerInfo.Deref(104, 16); var attributes = pSignerInfo.Deref(GM.PointerSize == 8 ? 104 : 52, GM.PointerSize * 2);
var attrCount = attributes.toBuffer().readUInt32LE(); var attrCount = attributes.toBuffer().readUInt32LE();
for (n = 0; n < attrCount; n++) for (n = 0; n < attrCount; n++)
{ {
attr = attributes.Deref(8, 8).Deref(); attr = attributes.Deref(GM.PointerSize, GM.PointerSize).Deref();
attr = attr.increment(n * 24); attr = attr.increment(n * (GM.PointerSize == 8 ? 24 : 12));
if (SPC_SP_OPUS_INFO_OBJID == attr.Deref().String) if (SPC_SP_OPUS_INFO_OBJID == attr.Deref().String)
{ {
var blob = attr.Deref(16, 8).Deref(); var blob = attr.Deref(GM.PointerSize * 2, GM.PointerSize).Deref();
var dwData = GM.CreateVariable(4); var dwData = GM.CreateVariable(4);
var cb = blob.Deref(0, 4).toBuffer().readUInt32LE(); var cb = blob.Deref(0, 4).toBuffer().readUInt32LE();
var pb = blob.Deref(8, 8).Deref(); var pb = blob.Deref(GM.PointerSize, GM.PointerSize).Deref();
if (crypt.CryptDecodeObject(ENCODING, GM.CreateVariable(SPC_SP_OPUS_INFO_OBJID), pb, cb, 0, 0, dwData).Val != 0) if (crypt.CryptDecodeObject(ENCODING, GM.CreateVariable(SPC_SP_OPUS_INFO_OBJID), pb, cb, 0, 0, dwData).Val != 0)
{ {
@@ -88,7 +88,7 @@ function read(path)
if (crypt.CryptDecodeObject(ENCODING, GM.CreateVariable(SPC_SP_OPUS_INFO_OBJID), pb, cb, 0, opus, dwData).Val != 0) if (crypt.CryptDecodeObject(ENCODING, GM.CreateVariable(SPC_SP_OPUS_INFO_OBJID), pb, cb, 0, opus, dwData).Val != 0)
{ {
return ({ description: opus.Deref().Val != 0 ? opus.Deref().Wide2UTF8 : null, url: opus.Deref(8, 8).Deref().Val != 0 ? opus.Deref(8, 8).Deref().Deref(8, 8).Deref().Wide2UTF8 : null }); return ({ description: opus.Deref().Val != 0 ? opus.Deref().Wide2UTF8 : null, url: opus.Deref(GM.PointerSize, GM.PointerSize).Deref().Val != 0 ? opus.Deref(GM.PointerSize, GM.PointerSize).Deref().Deref(GM.PointerSize, GM.PointerSize).Deref().Wide2UTF8 : null });
} }
} }
} }