BurnOutSharp 1.8.0
This is a major overhaul and breaking change compared to the 1.7.x releases:
IncludePositionflag has been renamed toIncludeDebugfor future expandability- Added a few new protection and packer checks
- Removed EVORE helper class (which attempted to run some executables in very specific circumstances)
- Updated, fixed, and implemented PE and NE executable reading (only a few gaps missing)
- Converted the vast majority of content checks to use the new PE and NE reads instead
- Reduced the surface area of the majority of content checks - reduced possible false positives
- Validated as many checks as possible locally instead of relying purely on community feedback
For those using the test executable, you may notice some changes:
- Not all protections will show positions (or the position within the file may seem incorrect) when the
IncludeDebugflag is set totrue. This is because, where possible, checks have been reduced to more concrete locations and executable sections, therefore making the found position mostly obsolete - If an uncaught exception occurs, more information will be printed out to the textfile. This was an oversight on my part originally.