mirrors/Detect-It-Easy
2
0
Fork 0
mirror of https://github.com/horsicq/Detect-It-Easy.git synced 2026-06-24 01:54:08 +00:00
Code Issues Projects Releases Packages Wiki Activity

dbs_min update

Browse source
This commit is contained in:
DosX 2026-05-06 00:09:48 +03:00
commit ce8e7e5efe
47 changed files with 76 additions and 56 deletions
Download patch file Download diff file Expand all files Collapse all files

8
dbs_min/db/Binary/audio.AIFF.1.sg Normal file
View file

@ -0,0 +1,8 @@
function detect(){if(X.c("'FORM' ........ 'AIF'")&&["F","C"].includes(fc=X.SA(11,1))){"F"==fc?sName+=".AIF,.aiff)":sName+=".aifc)"
for(var s,e="",a=-1,r=12,t=X.U32(4,_BE)+8,n=ssnd=-1,c=sr=smp=smpsz=bps=0,i="";r<t;){var d=X.SA(r,4),f=X.U32(r+4,_BE),o=!1
if(65535<f&&"SSND"!=d){if("NONE"!=d){e=e.addIfNone("!badchunk")
break}f=X.U8(r+4),o=!0}if(!charStat(d,1).includes("allasc"))break
switch(r+=o?6+(1&f):8,d){case"COMM":if(0<n&&(e=e.addIfNone("!manyCOMMs")),n=r,f<18)return
c=X.I16(r,_BE),smp=X.U32(r+2,_BE),smpsz=X.I16(r+6,_BE),sr=readFloat80(r+8,_BE),18<f&&(i=X.SA(r+18,f-18))
break
case"SSND":ssnd=r}r+=f+(1&f)}if(!(n<0||ssnd<0))return bDetected=1,X.isVerbose()&&(s=Math.round(smp/sr*1e4)/10,a=new Date(s).toISOString().substr(11,8),sOption("ch:"+c+" s/r:"+Math.round(sr)+"Hz "+(-1!==a?" len: "+a:"")+" co:"+i+" sz:"+outSz(t))),result()}}meta("audio","Audio Interchange file (")

1
dbs_min/db/Binary/audio_AIF.1.sg
View file

@ -1 +0,0 @@
function detect(){return Binary.compare("464f524d00......'AIFFCOMM'")&&(bDetected=1),result()}meta("audio","AIF")

2
dbs_min/db/Binary/data_overlays.6.sg
View file

File diff suppressed because one or more lines are too long

0
dbs_min/db/COM/Microsoft_C.4.sg → dbs_min/db/COM/compiler_Microsoft_C.4.sg
View file

0
dbs_min/db/COM/SPHINX_C--.4.sg → dbs_min/db/COM/compiler_SPHINX_C--.4.sg
View file

0
dbs_min/db/COM/Microsoft_RTL.3.sg → dbs_min/db/COM/library_Microsoft_RTL.3.sg
View file

0
dbs_min/db/COM/Crypt_(CyPoxl).2.sg → dbs_min/db/COM/protector_Crypt_(CyPoxl).2.sg
View file

0
dbs_min/db/COM/Crypt_(Dismember).2.sg → dbs_min/db/COM/protector_Crypt_(Dismember).2.sg
View file

0
dbs_min/db/COM/Inbuild_Encryption.2.sg → dbs_min/db/COM/protector_Inbuild_Encryption.2.sg
View file

0
dbs_min/db/COM/Maveriks_C0der.2.sg → dbs_min/db/COM/protector_Maveriks_C0der.2.sg
View file

0
dbs_min/db/COM/MrHDKiller_Protection.2.sg → dbs_min/db/COM/protector_MrHDKiller_Protection.2.sg
View file

0
dbs_min/db/COM/LHarc_SFX.1.sg → dbs_min/db/COM/sfx_LHarc_SFX.1.sg
View file

1
dbs_min/db/ELF/library_X11.4.sg Normal file
View file

@ -0,0 +1 @@
function detect(){return ELF.isLibraryPresent("libX11.so.6")&&(bDetected=1),result()}meta("library","X11")

1
dbs_min/db/LX/PKZIP-SFX.1.sg Normal file
View file

@ -0,0 +1 @@
function detect(){return LX.compareEP("5aff......ff......ff......8b4424..a3........5068........5264678b16....8b")&&LX.compareOverlay("07'SFX.EXE'")&&(bDetected=1),result()}meta("sfx","PKZIP-SFX")

1
dbs_min/db/LX/RAR-SFX.1.sg Normal file
View file

@ -0,0 +1 @@
function detect(){return LX.compareOverlay("07'sfx.EXE'")&&(LX.compareEP("8b4424..a3........5868........50e8........e9")?(sVersion="2.x",bDetected=1):LX.compareEP("fcb8........ba........0a6a..68........f601..036a..9a")&&(sVersion="1.5x",bDetected=1)),result()}meta("sfx","RAR-SFX")

58
dbs_min/db/PE/__GenericHeuristicAnalysis_By_DosX.7.sg
View file

File diff suppressed because one or more lines are too long

4
dbs_min/db/PE/_init
View file

@ -1,9 +1,9 @@
var File=PE,X=PE
function Section(e,t,i,r,n,s,o){this.Number=e,this.Name=t,this.VirtualSize=i,this.VirtualAddress=r,this.FileSize=n,this.FileOffset=s,this.Characteristics=o}PE.getEntryPointSignature=function(e,t){return PE.getSignature(PE.nEP+e,t)},PE.getGeneralOptionsEx=function(){return sResult=PE.getGeneralOptions(),PE.isConsole()&&(sResult=sResult.append("console")),/requireAdministrator/.test(PE.getManifest())&&(sResult=sResult.append("admin")),sResult=PE.isSignedFile()?sResult.append("signed"):sResult},PE.isLibraryPresentExp=function(e){for(var t=null,i=0;i<PE.getNumberOfImports();i++)if(t=PE.getImportLibraryName(i).match(e)){t[-1]=i,t[0]=PE.getImportLibraryName(i).toLowerCase()
function Section(e,t,i,s,r,n,o){this.Number=e,this.Name=t,this.VirtualSize=i,this.VirtualAddress=s,this.FileSize=r,this.FileOffset=n,this.Characteristics=o,this.Size=this.FileSize,this.Offset=this.FileOffset}PE.getEntryPointSignature=function(e,t){return PE.getSignature(PE.nEP+e,t)},PE.getGeneralOptionsEx=function(){return sResult=PE.getGeneralOptions(),PE.isConsole()&&(sResult=sResult.append("console")),/requireAdministrator/.test(PE.getManifest())&&(sResult=sResult.append("admin")),sResult=PE.isSignedFile()?sResult.append("signed"):sResult},PE.isLibraryPresentExp=function(e){for(var t=null,i=0;i<PE.getNumberOfImports();i++)if(t=PE.getImportLibraryName(i).match(e)){t[-1]=i,t[0]=PE.getImportLibraryName(i).toLowerCase()
break}return t},PE.isExportFunctionPresentExp=function(e){for(var t=null,i=0;i<PE.getNumberOfExportFunctions();i++)if(t=PE.getExportFunctionName(i).match(e)){t[-1]=i,t[0]=PE.getExportFunctionName(i)
break}return t},PE.isSectionNamePresentExp=function(e){for(var t=null,i=0;i<PE.getNumberOfSections();i++)if(t=PE.getSectionName(i).match(e)){t[-1]=i,t[0]=PE.getSectionName(i)
break}return t},PE.isResourceNamePresentExp=function(e){for(var t=null,i=0;i<PE.getNumberOfResources();i++)if(t=PE.getResourceNameByNumber(i).match(e)){t[-1]=i,t[0]=PE.getResourceNameByNumber(i)
break}return t},PE.nLastSection=PE.getNumberOfSections()-1,PE.section=[]
for(var i=0;i<=PE.nLastSection;i++)PE.section[i]=new Section(i,PE.getSectionName(i),PE.getSectionVirtualSize(i),PE.getSectionVirtualAddress(i),PE.getSectionFileSize(i),PE.getSectionFileOffset(i),PE.getSectionCharacteristics(i)),PE.section[i].Name&&+(name=PE.section[i].Name).toString()!=name&&(PE.section[name]=PE.section[i])
function Resource(e,t,i,r,n,s){this.Number=e,this.Id=t,this.Name=i,this.Offset=r,this.Size=n,this.Type=s}PE.section[-1]=new Section(-1,"\0",0,0,0,PE.getSize(),0),-1==PE.nLastSection&&(PE.section[0]=PE.section[-1]),PE.resource=[]
function Resource(e,t,i,s,r,n){this.Number=e,this.Id=t,this.FileName=i,this.FileOffset=s,this.FileSize=r,this.Type=n,this.Size=this.FileSize,this.Offset=this.FileOffset}PE.section[-1]=new Section(-1,"\0",0,0,0,PE.getSize(),0),-1==PE.nLastSection&&(PE.section[0]=PE.section[-1]),PE.resource=[]
for(var name,i=0;i<PE.getNumberOfResources();i++)PE.resource[i]=new Resource(i,PE.getResourceIdByNumber(i),PE.getResourceNameByNumber(i),PE.getResourceOffsetByNumber(i),PE.getResourceSizeByNumber(i),PE.getResourceTypeByNumber(i)),PE.resource[i].Name&&(+(name=PE.resource[i].Name)).toString()!=name&&(PE.resource[name]=PE.resource[i])

1
dbs_min/db/PE/cryptor_Huan.1.sg
View file

@ -1 +0,0 @@
function detect(){return PE.isSectionNamePresent(".huan")&&(bDetected=1),result()}meta("cryptor","Huan")

1
dbs_min/db/PE/cryptor_Huan.2.sg Normal file
View file

@ -0,0 +1 @@
function detect(){return PE.is64()&&1===PE.getNumberOfImports()&&PE.compareEP("4883EC28E8........4883C428E9........CCCC40534883EC..488BD933C9FF15........488BCBFF15........FF15........488BC8BA........4883C4..5B48FF25........48894C24..")&&"VirtualAlloc"===PE.getImportFunctionName(0,0)&&"LoadLibraryA"===PE.getImportFunctionName(0,1)&&(bDetected=1,".huan"!==PE.section[PE.getNumberOfSections()-1].Name)&&(sOptions="modified"),result()}meta("cryptor","Huan")

2
dbs_min/db/PE/game_engine_AGS.3.sg
View file

@ -1 +1 @@
function detect(){return PE.compareOverlay("434c49421a")&&(bDetected=1),result()}meta("game engine","Adventure Game Studio (AGS)")
function detect(){return!PE.compareOverlay("434c49421a")&&"This game was created using AGS - http://www.adventuregamestudio.co.uk/"!=PE.getVersionStringInfo("Comment")&&"Adventure Game Studio run-time engine"!=PE.getVersionStringInfo("FileDescription")||(bDetected=1),result()}meta("game engine","Adventure Game Studio (AGS)")

2
dbs_min/db/PE/game_engine_RenderWare.3.sg
View file

@ -1 +1 @@
function detect(){return PE.isSectionNamePresent("_rwdseg")&&PE.isSectionNamePresent("_rwcseg")&&(bDetected=1),result()}meta("game engine","RenderWare")
function detect(){return(PE.isSectionNamePresent("_rwdseg")||PE.isSectionNamePresent("_rwcseg"))&&(bDetected=1),result()}meta("game engine","RenderWare")

2
dbs_min/db/PE/installer_Setup-Specialist.1.sg
View file

@ -1 +1 @@
function detect(){return PE.compareEP("6a..68........e8........bf........8bc7e8........8965..8bf4893e56ff15")&&PE.compareOverlay("'TGCF'")&&(sVersion="4.0.X",bDetected=1),result()}meta("installer","Setup-Specialist")
function detect(){return PE.compareOverlay("'TGCF'")&&(PE.compareEP("6a..68........e8........bf........8bc7e8........8965..8bf4893e56ff15")?(sVersion="4.0.X",bDetected=1):PE.compareEP("a1........c1e0..a3........575133c0bf........b9........3bcf76")&&(sVersion="3.0",bDetected=1)),result()}meta("installer","Setup-Specialist")

1
dbs_min/db/PE/library_ShFolder.4.sg Normal file
View file

@ -0,0 +1 @@
function detect(){return PE.isLibraryPresent("SHFOLDER.dll")&&(bDetected=1),result()}meta("library","ShFolder")

2
dbs_min/db/PE/packer_ASPack.2.sg
View file

@ -15,4 +15,4 @@ else if(PE.compare("60E803000000E9EB045D4555C3E801",e))sVersion="2.12-2.42"
else if(PE.compare("9060E8$$$$$$$$5D4555C3",e))sVersion="2.12b"
else{if(!PE.compare("60e8$$$$$$$$8b2c2481ed........c3",e)&&!PE.compare("9060e8$$$$$$$$8b2c2481ed........c3",e))return!1
sVersion="2.1X-2.39"}return!0}function detect(){var e=PE.getEntryPointOffset()
return-1!=e&&(getASPackVersion(e)?bDetected=1:(PE.compareEP("7500E9")?(e+=3,bDetected=1):PE.compareEP("907500E9")?(e+=4,bDetected=1):PE.compareEP("90907500E9")||PE.compareEP("90750190E9")||PE.compareEP("907501FFE9")?(e+=5,bDetected=1):PE.compareEP("9090907500E9")||PE.compareEP("9090750190E9")?(e+=6,bDetected=1):PE.compareEP("909090750190E9")&&(e+=7,bDetected=1),bDetected&&(e=PE.RVAToOffset(PE.OffsetToRVA(e)+4+~~PE.readDword(e)),bDetected=getASPackVersion(e)))),bDetected||PE.section[".aspack"]&&PE.section[".adata"]&&(sVersion="2.12-2.XX",bDetected=1),result()}meta("packer","ASPack")
return-1!=e&&(getASPackVersion(e)?bDetected=1:(PE.compareEP("7500E9")?(e+=3,bDetected=1):PE.compareEP("907500E9")?(e+=4,bDetected=1):PE.compareEP("90907500E9")||PE.compareEP("90750190E9")||PE.compareEP("907501FFE9")?(e+=5,bDetected=1):PE.compareEP("90907501FFE9")||PE.compareEP("9090907500E9")||PE.compareEP("9090750190E9")?(e+=6,bDetected=1):(PE.compareEP("909090750190E9")||PE.compareEP("9090907501FFE9"))&&(e+=7,bDetected=1),bDetected&&(e=PE.RVAToOffset(PE.OffsetToRVA(e)+4+~~PE.readDword(e)),bDetected=getASPackVersion(e)))),bDetected||PE.section[".aspack"]&&PE.section[".adata"]&&(sVersion="2.12-2.XX",bDetected=1),result()}meta("packer","ASPack")

2
dbs_min/db/PE/packer_PECompact.2.sg
View file

@ -10,6 +10,8 @@ case 20245:sVersion="2.79bB"
break
case 20247:sVersion="2.79bD"
break
case 20250:sVersion="2.80+"
break
case 20252:sVersion="2.80b1"
break
case 20256:sVersion="2.80b5"

2
dbs_min/db/PE/packer_RLPack.2.sg
View file

@ -1,2 +1,2 @@
function detect(){var e=PE.compareEP("807C2408010F85")?11:0
return PE.compareEP("608BDDE8000000005D9532C095899D80000000B8",e)?(sVersion="0.7.3 beta",bDetected=1):PE.compareEP("60E8000000008D6424048B6C24FC8DB5........8D9D........33FF",e)?(sVersion="1.0 beta",bDetected=1):PE.compareEP("60E8000000008B2C2483C404",e)?(PE.compareEP("33FFEB",24+e)?(sVersion="1.11-1.14",sOptions="aPlib"):PE.compareEP("33FF6A",24+e)?(sVersion="1.11-1.14",sOptions="LZMA"):PE.compareEP("0000EB",29+e)?(sVersion="1.15-1.18",sOptions="aPlib"):PE.compareEP("00006A",29+e)?(sVersion="1.15-1.18",sOptions="LZMA"):PE.compareEP("33FFE8",55+e)?(sVersion="1.19-1.20",sOptions="aPlib"):PE.compareEP("33FF6A",55+e)?(sVersion="1.19-1.20",sOptions="LZMA"):PE.compareEP("EB0FFF",56+e)?(sVersion="1.17 Full Edition",sOptions="aPLib"):PE.compareEP("6A4068",51+e)?(sVersion="1.17 Full Edition",sOptions="LZMA"):PE.compareEP("33ffe8",60+e)&&(sVersion="1.21",sOptions="aPLib"),bDetected=1):1===PE.getNumberOfImports()&&PE.compareEP("60")&&PE.isSectionNamePresent(".RLPack")&&(bDetected=1),result()}meta("packer","RLPack")
return PE.compareEP("608BDDE8000000005D9532C095899D80000000B8",e)?(sVersion="0.7.3 beta",bDetected=1):PE.compareEP("60E8000000008D6424048B6C24FC8DB5........8D9D........33FF",e)?(sVersion="1.0 beta",bDetected=1):PE.compareEP("60E8000000008B2C2483C404",e)?(PE.compareEP("33FFEB",24+e)?(sVersion="1.11-1.14",sOptions="aPlib"):PE.compareEP("33FF6A",24+e)?(sVersion="1.11-1.14",sOptions="LZMA"):PE.compareEP("0000EB",29+e)?(sVersion="1.15-1.18",sOptions="aPlib"):PE.compareEP("00006A",29+e)?(sVersion="1.15-1.18",sOptions="LZMA"):PE.compareEP("33FFE8",55+e)?(sVersion="1.19-1.20",sOptions="aPlib"):PE.compareEP("33FF6A",55+e)?(sVersion="1.19-1.20",sOptions="LZMA"):PE.compareEP("EB0FFF",56+e)?(sVersion="1.17 Full Edition",sOptions="aPLib"):PE.compareEP("6A4068",51+e)?(sVersion="1.17 Full Edition",sOptions="LZMA"):PE.compareEP("33ffe8",60+e)&&(sVersion="1.21",sOptions="aPLib"),bDetected=1):1===PE.getNumberOfImports()&&PE.compareEP("60")&&PE.isSectionNamePresent(".RLPack")?bDetected=1:PE.compareEP("eb$$9c60e8........33c08bc483c0..938be3")&&(sVersion="1.16-1.21",bDetected=1),result()}meta("packer","RLPack")

2
dbs_min/db/PE/packer_WWPack32.2.sg
View file

@ -1 +1 @@
function detect(){return PE.compareEP("53558be833dbeb$$e8000000005d3e807d....0f84........6083ed..33c033c9")?(sVersion="1.XX",bDetected=1):PE.isDll()&&".WWP32"===PE.section[PE.nLastSection].Name&&(bDetected=1),result()}meta("packer","WWPack32")
function detect(){return PE.compareEP("53558be833dbeb$$e8000000005d3e807d....0f84........6083ed..33c033c9")||PE.compareEP("53558be833dbeb$$e800000000582d........8be850")||PE.compareEP("5355508be833dbeb$$e800000000582d........8be850")?(sVersion="1.XX",bDetected=1):PE.isDll()&&".WWP32"===PE.section[PE.nLastSection].Name&&(bDetected=1),result()}meta("packer","WWPack32")

1
dbs_min/db/PE/player_Power_Screen_Recorder.1.sg
View file

@ -1 +0,0 @@
function detect(){return PE.compareEP("eb$$a1........c1e0..a3........526a..e8........8bd0e8........5ae8........e8")&&-1!=PE.findSignature(PE.getSize()-1280,1280,"'xzjtlx'")&&(sVersion="6.X-7.X",sOptions="by www.tlxsoft.com",bDetected=1),result()}meta("player","Power Screen Recorder")

1
dbs_min/db/PE/players.1.sg Normal file
View file

@ -0,0 +1 @@
function detect(){return PE.compareEP("eb$$a1........c1e0..a3........526a..e8........8bd0e8........5ae8........e8")&&(-1!=PE.findSignature(PE.getSize()-1280,1280,"'xzjtlx'")?(sName="Power Screen Recorder",sVersion="6.X-7.X",sOptions="by www.tlxsoft.com",bDetected=1):PE.compareOverlay("'------'")&&PE.isSignaturePresent(PE.getOverlayOffset(),272,"'CM3PKG'")&&(sName="ComicMaker",sVersion="3",bDetected=1)),result()}meta("player","player")

2
dbs_min/db/PE/protector_Denuvo.2.sg → dbs_min/db/PE/protection_Denuvo.5.sg
View file

@ -1 +1 @@
function detect(){if(!PE.isNet())return(10<PE.getNumberOfSections()&&PE.isSectionNamePresentExp(/^\.[ex](text|code)$/)&&PE.isSectionNamePresentExp(/^\.([eu]|my|s[xr]|x[pd])data$/)||PE.isSectionNamePresent(".arch")||PE.isSectionNamePresent(".xtls"))&&(PE.is64()?(PE.compareEP("51 52 41 50 41 51 4C 8D ?? ?? ?? ?? ?? 4C 8D ?? ?? ?? ?? ?? 4D 29 C1")?(sVersion="1.0",bDetected=1):PE.compareEP("48 8D 0D ?? ?? ?? ?? E9 ?? ?? ?? ??")?(sVersion="2.0a",bDetected=1):PE.compareEP("48 89 ?? ?? ?? ?? ?? 48 89 ?? ?? ?? ?? ?? 4C 89 ?? ?? ?? ?? ?? 4C 89 ?? ?? ?? ?? ?? 48 83 FA 01")?(sVersion="2.0b",bDetected=1):PE.compareEP("?? ?? ?? ?? ?? ?? ?? ?? 4C 89 1C 24 49 89 E3")?(sVersion="3.0a",bDetected=1):PE.compareEP("48 8D 64 24 .. 50 51 52 80 3D .. .. .. .. .. 75 .. 48 8D 05 .. .. .. .. 48 8D 0D .. .. .. ..")?(sVersion="12.0-17.0+",bDetected=1):PE.compareEP("4D 8D ?? ?? ?? ?? ?? ?? ?? ?? ?? 48 89 ?? ?? ?? ?? ?? 48 8D ?? ?? 48 89 ?? 48 89 ?? 48 89")?(sVersion="3.0b",bDetected=1):PE.compareEP("47 61 6D 65 41 73 73 65 6D 62 6C 79 44 65 6E 75 76 6F 44 72 6D 2E 64 6C 6C")?(sOptions="Unity",bDetected=1):PE.isSignaturePresent(PE.section[0].FileOffset,PE.getSize()-PE.getOverlaySize(),"64 65 6E 75 76 6F 5F 61 74 64 00 00 00 00 00 00")&&(bDetected=1),PE.isLibraryPresent("steam_api64.dll")&&(sOptions="Steam",bDetected=1),PE.isLibraryPresent("eossdk-win64-shipping.dll")&&(sOptions="Epic Games",bDetected=1)):(PE.compareEP("55 89 E5 8D ?? ?? ?? ?? ?? ?? E8 ?? ?? ?? ?? E8 ?? ?? ?? ?? E8 ?? ?? ?? ?? E8 ?? ?? ?? ??")?(sVersion="1.0",bDetected=1):PE.compareEP("8D ?? ?? ?? ?? ?? ?? 89 7C 24 04 89 E7")&&(sVersion="2.0",bDetected=1),PE.isLibraryPresent("steam_api.dll")&&(sOptions="Steam",bDetected=1),PE.isLibraryPresent("eossdk-win32-shipping.dll")&&(sOptions="Epic Game Store",bDetected=1),PE.isLibraryPresent("uplay_r1_loader.dll")&&(sOptions="uPlay",bDetected=1))),bDetected||(PE.isLibraryPresent("dbdata.dll")&&(sOptions="FIFA23 series",bDetected=1),PE.isLibraryPresent("uplay_r1_loader64.dll")&&(sOptions="uPlay",bDetected=1),PE.isLibraryPresentExp(/^Core[\\/]Activation(64)?\.dll$/i)&&(sOptions="Origin",bDetected=1),10<PE.getNumberOfImports()&&PE.isLibraryPresentExp(/^d3d/i)&&PE.isExportFunctionPresentExp(/^GetDenuvo(TimeTicketRequest|TicketLocation)$/)&&(bDetected=1)),PE.isExportFunctionPresentExp(/^ANTICHEAT_OBFUSCATE_(.+_)?CODEMARKER$/)&&_setResult("marker","Denuvo","",""),result()}meta("protector","Denuvo")
function detect(){if(!PE.isNet())return(10<PE.getNumberOfSections()&&PE.isSectionNamePresentExp(/^\.[ex](text|code)$/)&&PE.isSectionNamePresentExp(/^\.([eu]|my|s[xr]|x[pd])data$/)||PE.isSectionNamePresent(".arch")||PE.isSectionNamePresent(".xtls"))&&(PE.is64()?(PE.compareEP("51 52 41 50 41 51 4C 8D ?? ?? ?? ?? ?? 4C 8D ?? ?? ?? ?? ?? 4D 29 C1")?(sVersion="1.0",bDetected=1):PE.compareEP("48 8D 0D ?? ?? ?? ?? E9 ?? ?? ?? ??")?(sVersion="2.0a",bDetected=1):PE.compareEP("48 89 ?? ?? ?? ?? ?? 48 89 ?? ?? ?? ?? ?? 4C 89 ?? ?? ?? ?? ?? 4C 89 ?? ?? ?? ?? ?? 48 83 FA 01")?(sVersion="2.0b",bDetected=1):PE.compareEP("?? ?? ?? ?? ?? ?? ?? ?? 4C 89 1C 24 49 89 E3")?(sVersion="3.0a",bDetected=1):PE.compareEP("48 8D 64 24 .. 50 51 52 80 3D .. .. .. .. .. 75 .. 48 8D 05 .. .. .. .. 48 8D 0D .. .. .. ..")?(sVersion="12.0-17.0+",bDetected=1):PE.compareEP("4D 8D ?? ?? ?? ?? ?? ?? ?? ?? ?? 48 89 ?? ?? ?? ?? ?? 48 8D ?? ?? 48 89 ?? 48 89 ?? 48 89")?(sVersion="3.0b",bDetected=1):PE.compareEP("47 61 6D 65 41 73 73 65 6D 62 6C 79 44 65 6E 75 76 6F 44 72 6D 2E 64 6C 6C")?(sOptions="Unity",bDetected=1):PE.isSignaturePresent(PE.section[0].FileOffset,PE.getSize()-PE.getOverlaySize(),"64 65 6E 75 76 6F 5F 61 74 64 00 00 00 00 00 00")&&(bDetected=1),PE.isLibraryPresent("steam_api64.dll")&&(sOptions="Steam",bDetected=1),PE.isLibraryPresent("eossdk-win64-shipping.dll")&&(sOptions="Epic Games",bDetected=1)):(PE.compareEP("55 89 E5 8D ?? ?? ?? ?? ?? ?? E8 ?? ?? ?? ?? E8 ?? ?? ?? ?? E8 ?? ?? ?? ?? E8 ?? ?? ?? ??")?(sVersion="1.0",bDetected=1):PE.compareEP("8D ?? ?? ?? ?? ?? ?? 89 7C 24 04 89 E7")&&(sVersion="2.0",bDetected=1),PE.isLibraryPresent("steam_api.dll")&&(sOptions="Steam",bDetected=1),PE.isLibraryPresent("eossdk-win32-shipping.dll")&&(sOptions="Epic Game Store",bDetected=1),PE.isLibraryPresent("uplay_r1_loader.dll")&&(sOptions="uPlay",bDetected=1))),bDetected||(PE.isLibraryPresent("dbdata.dll")&&(sOptions="FIFA23 series",bDetected=1),PE.isLibraryPresent("uplay_r1_loader64.dll")&&(sOptions="uPlay",bDetected=1),PE.isLibraryPresentExp(/^Core[\\/]Activation(64)?\.dll$/i)&&(sOptions="Origin",bDetected=1),10<PE.getNumberOfImports()&&PE.isLibraryPresentExp(/^d3d/i)&&PE.isExportFunctionPresentExp(/^GetDenuvo(TimeTicketRequest|TicketLocation)$/)&&(bDetected=1)),PE.isExportFunctionPresentExp(/^ANTICHEAT_OBFUSCATE_(.+_)?CODEMARKER$/)&&_setResult("marker","Denuvo","",""),result()}meta("protection","Denuvo")

2
dbs_min/db/PE/protector_ASProtect.2.sg
View file

@ -1 +1 @@
function detect(){return PE.compareEP("6801......E801000000C3C3")?sVersion="1.23-2.56":PE.compareEP("68########9060e8$$$$$$$$5d4555c3")?sVersion="SKE 2.1-2.2":PE.compareEP("68########60e8$$$$$$$$5d4555c3")?sVersion="SKE 2.3-2.5":PE.compareEP("60E803000000E9EB045D4555C3E801000000EB5DBBEDFFFFFF03DD81EB00......807D4D01750C8B74242883FE01895D4E75318D45535053FFB5ED0900008D453550E9820000000000000000000000000000000000")||PE.compareEP("9060E803000000E9EB045D4555C3E801000000EB5DBBEDFFFFFF03DD81EB00......807D4D01750C8B74242883FE01895D4E75318D45535053FFB5ED0900008D453550E98200000000000000000000000000000000")?sVersion="SKE 2.1/2.2":PE.compareEP("9060E803000000E9EB045D4555C3E801000000EB5DBBEDFFFFFF03DD81EB00......807D4D01750C8B74242883FE01895D4E75318D45535053FFB5E50B00008D453550E98200000000000000000000000000000000")?sVersion="SKE 2.3":PE.compareEP("9060E803000000E9EB045D4555C3E801000000EB5DBBEDFFFFFF03DD81EB00....00807D4D01750C8B74242883FE01895D4E75318D45535053FFB5DD0900008D453550E98200000000000000000000000000000000")?bDetected=1:PE.compareEP("60E801000000905D81ED........BB........03DD2B9D")?sVersion="1.0":PE.compareEP("60E9..05")?sVersion="1.1 BRS":PE.compareEP("60E9........9178797979E9")?sVersion="1.1 MTE":PE.compareEP("9060E9..04")?sVersion="1.1 MTEb":PE.compareEP("9060E81B......E9FC")?sVersion="MTEc":PE.compareEP("60E9..04....E9..............EE")||PE.compareEP("60E9$$$$$$$$81da........e8$$$$$$$$0fbffe0fbffd")?sVersion="1.1":PE.compareEP("6801......C3")?sVersion="1.2":PE.compareEP("9060E803000000E9EB045D4555C3E801000000EB5DBBEDFFFFFF03DD81EB........807D4D01750C8B74242883FE01895D4E75318D45535053FFB5D50900008D453550E98200000000000000000000000000000000")?sVersion="1.23 RC4 build 08.07":PE.compareEP("60E8........E9........05........B9........AD35........AB4975F6EB045D4555C3")&&(sVersion="1.1"),bDetected=bDetected||Boolean(sVersion),result()}meta("protector","ASProtect")
function detect(){return PE.compareEP("6801......E801000000C3C3")?sVersion="1.23-2.56":PE.compareEP("68########9060e8$$$$$$$$5d4555c3")?sVersion="SKE 2.1-2.2":PE.compareEP("68########60e8$$$$$$$$5d4555c3")?sVersion="SKE 2.3-2.5":PE.compareEP("60E803000000E9EB045D4555C3E801000000EB5DBBEDFFFFFF03DD81EB00......807D4D01750C8B74242883FE01895D4E75318D45535053FFB5ED0900008D453550E9820000000000000000000000000000000000")||PE.compareEP("9060E803000000E9EB045D4555C3E801000000EB5DBBEDFFFFFF03DD81EB00......807D4D01750C8B74242883FE01895D4E75318D45535053FFB5ED0900008D453550E98200000000000000000000000000000000")?sVersion="SKE 2.1/2.2":PE.compareEP("9060E803000000E9EB045D4555C3E801000000EB5DBBEDFFFFFF03DD81EB00......807D4D01750C8B74242883FE01895D4E75318D45535053FFB5E50B00008D453550E98200000000000000000000000000000000")?sVersion="SKE 2.3":PE.compareEP("9060E803000000E9EB045D4555C3E801000000EB5DBBEDFFFFFF03DD81EB00....00807D4D01750C8B74242883FE01895D4E75318D45535053FFB5DD0900008D453550E98200000000000000000000000000000000")?bDetected=1:PE.compareEP("60E801000000905D81ED........BB........03DD2B9D")?sVersion="1.0":PE.compareEP("60E9..05")?sVersion="1.1 BRS":PE.compareEP("60E9........9178797979E9")?sVersion="1.1 MTE":PE.compareEP("9060E9..04")?sVersion="1.1 MTEb":PE.compareEP("9060E81B......E9FC")?sVersion="MTEc":PE.compareEP("60E9..04....E9..............EE")||PE.compareEP("60E9$$$$$$$$81da........e8$$$$$$$$0fbffe0fbffd")?sVersion="1.1":PE.compareEP("6801......C3")?sVersion="1.2":PE.compareEP("9060E803000000E9EB045D4555C3E801000000EB5DBBEDFFFFFF03DD81EB........807D4D01750C8B74242883FE01895D4E75318D45535053FFB5D50900008D453550E98200000000000000000000000000000000")?sVersion="1.23 RC4 build 08.07":PE.compareEP("60E8........E9........05........B9........AD35........AB4975F6EB045D4555C3")?sVersion="1.1":PE.compareEP("60e8$$$$$$$$5d455581ed........c3")?sVersion="1.11c":PE.compareEP("60e8$$$$$$$$5d4555c3")&&(sVersion="SKE 2.72+"),bDetected=bDetected||Boolean(sVersion),result()}meta("protector","ASProtect")

6
dbs_min/db/PE/protector_PE-Shield.2.sg
View file

@ -1,3 +1,3 @@
function detect(){PE.compareEP("E9$$$$$$$$60E8$$$$$$$$5D83ED..EB$$8DB5........BA........8A3C1632FA80....80....88....4AEB")?(sVersion="0.25",bDetected=1):PE.compareEP("60E8$$$$$$$$5D83ED..EB$$8D....................8A....32..80....80....88......EB")?(sVersion="0.25-0.26",bDetected=1):PE.compareEP("60E8$$$$$$$$414e414b494e5d83ed..eb$$8d....................8a....32")&&(sVersion="0.2",bDetected=1)
var $=PE.section.PESHiELD
return bDetected?$||(sOptions="modified"):PE.isImportPositionHashPresent(0,911341197)&&$&&(bDetected=1),result()}meta("protector","PE-SHiELD")
function detect(){PE.compareEP("E9$$$$$$$$60E8$$$$$$$$5D83ED..EB$$8DB5........BA........8A3C1632FA80....80....88....4AEB")?(sVersion="0.25",bDetected=1):PE.compareEP("60E8$$$$$$$$5D83ED..EB$$8D....................8A....32..80....80....88......EB")?(sVersion="0.25-0.26",bDetected=1):PE.compareEP("60E8$$$$$$$$414e414b494e5d83ed..eb$$8d....................8a....32")?(sVersion="0.2",bDetected=1):(PE.compareEP("E8$$$$$$$$4e86ed38ca47475a524333f681c2")||PE.compareEP("E8$$$$$$$$4f465951f52bf9d1e638c281c1")||PE.compareEP("E8$$$$$$$$4e86c94f5951424784f686e4d1ca81c1"))&&(sVersion="0.1d",bDetected=1)
var $=PE.section.PESHiELD,e=PE.section.ANAKiN98
return bDetected?$||e||(sOptions="modified"):PE.isImportPositionHashPresent(0,911341197)&&($||e)&&(bDetected=1),result()}meta("protector","PE-SHiELD")

2
dbs_min/db/PE/protector_Safengine_Shielden.2.sg
View file

@ -1,2 +1,2 @@
function detect(){var e
return PE.compareEP("E8........5361")&&(4096==PE.section[PE.nLastSection].FileSize&&4096==PE.section[PE.nLastSection].VirtualSize?(sVersion="2.X",bDetected=1):8192==PE.section[PE.nLastSection].FileSize&&8192==PE.section[PE.nLastSection].VirtualSize&&(bDetected=1)),PE.compareEP("EB$$E9$$$$$$$$E8........'Safengine Shielden'")&&(sVersion="2.X",bDetected=1),PE.compareEP("E8........'Shielden'")&&-1!=(e=PE.findString(PE.getEntryPointOffset(),80,"Shielden v"))&&(sName="Shielden",sVersion=PE.getString(e+10),bDetected=1),1==bDetected&&-1!=(e=PE.findString(0,PE.getSize(),"Safengine Shielden v"))&&(sVersion=PE.getString(e+19)),result()}meta("protector","Safengine Shielden")
return PE.compareEP("E8........5361")&&(4096==PE.section[PE.nLastSection].FileSize&&4096==PE.section[PE.nLastSection].VirtualSize?(sVersion="2.X",bDetected=1):8192==PE.section[PE.nLastSection].FileSize&&8192==PE.section[PE.nLastSection].VirtualSize&&(bDetected=1)),PE.compareEP("EB$$E9$$$$$$$$E8........'Safengine Shielden'")&&(sVersion="2.X",bDetected=1),PE.compareEP("E8........'Shielden'")&&-1!=(e=PE.findString(PE.getEntryPointOffset(),80,"Shielden v"))&&(sName="Shielden",sVersion=File.cleanString(PE.getString(e+10)),bDetected=1),bDetected&&(-1!=(e=PE.findString(0,PE.getSize(),"Safengine Shielden v"))?sVersion=File.cleanString(PE.getString(e+19)):-1!=(e=PE.findString(0,PE.getSize(),"Safengine NetLicensor v"))&&(sVersion=File.cleanString(PE.getString(e+22)))),result()}meta("protector","Safengine Shielden")

2
dbs_min/db/PE/protector_VBox.2.sg
View file

@ -1 +1 @@
function detect(){return PE.compareEP("ff7424..ff7424..ff7424..68........68........68........68........ff15")&&PE.isLibraryPresent("vboxp410.dll")&&(sVersion="4.10",bDetected=1),-1!==PE.findSignature(PE.getEntryPointOffset(),4096,"558bec83c4..5657be........8b45..8946..ff75..8f46..8b45..8946..56")&&(sVersion="4.20",bDetected=1),result()}meta("protector","VBox")
function detect(){return PE.compareEP("ff7424..ff7424..ff7424..68........68........68........68........ff15")&&(PE.isLibraryPresent("vboxp410.dll")?(sVersion="4.10",bDetected=1):PE.isLibraryPresent("vboxp403.dll")&&(sVersion="4.03",bDetected=1)),-1!==PE.findSignature(PE.getEntryPointOffset(),4096,"558bec83c4..5657be........8b45..8946..ff75..8f46..8b45..8946..56")&&(sVersion="4.20",bDetected=1),result()}meta("protector","VBox")

2
dbs_min/db/PE/sfx_LZH_SFX.1.sg
View file

@ -1 +1 @@
function detect(){return PE.compareEP("64a1........558bec6a..68........68........50a1........648925........8b0d")&&(PE.compareOverlay("....'-lh5-'")||PE.compareOverlay("........'-lh7-'"))&&(sVersion="2.60.w32.0031",sOptions="by Yoshi 1991 / mH 1995 / Micco 1997-99",bDetected=1),result()}meta("sfx","LZH SFX")
function detect(){return PE.compareEP("64a1........558bec6a..68........68........50a1........648925........8b0d")?PE.compareOverlay("....'-lh'..'-'")?(sVersion="2.60.w32",sOptions="by Yoshi 1991 / mH 1995 / Micco 1997-99",bDetected=1):PE.compareOverlay("........'-lh'..'-'")&&(sVersion="2.71.X",sOptions="by Yoshi 1991 / mH 1995 / Micco 1997-99",bDetected=1):PE.compareEP("a1........c1e0..a3........575133c0bf........b9........3bcf")&&PE.isSignaturePresent(PE.getOverlayOffset(),4096,"'-lh'..'-'")&&(sOptions="custom",bDetected=1),result()}meta("sfx","LZH")

2
dbs_min/db/PE/sfx_Paquet.1.sg
View file

@ -1 +1 @@
function detect(){return PE.compareEP("558bec81c4........53565733c08985........8985........e8........e8")&&PE.compareOverlay("04'PBG'")&&(sVersion="1.5, 1998 by Guillaume Di Giusto",bDetected=1),result()}meta("sfx","Paquet")
function detect(){return PE.compareEP("558bec81c4........53565733c08985")&&(PE.compareOverlay("04'PBG'")?(sVersion="1.5, 1998 by Guillaume Di Giusto",bDetected=1):PE.compareOverlay("'GSfx'")&&(sVersion="1.0, 1997 by Guillaume Di Giusto",bDetected=1)),result()}meta("sfx","Paquet")

2
dbs_min/db/PE/sfx_Zip_SFX.2.sg
View file

@ -1 +1 @@
function detect(){return PE.compareEP("558bec6a..68........68........64a1........50648925........83....5356578965..ff15")?-1!=PE.findSignature(PE.getOverlayOffset(),Math.min(255,PE.getOverlaySize()),"'PK'0304")&&(bDetected=1):PE.compareEP("558bec83c4..b8........e8........33c05568........64ff30648920e8")?PE.resource.length&&784==PE.resource[0].Type&&(bDetected=1):PE.compareEP("e8$$$$$$$$8bff558bec83ec..a1........8365....8365....5357bf........bb")&&PE.compareOverlay("'PK'0304")&&(sOptions="by Intel",bDetected=1),PE.compareEP("558bec83c4..5356e8$$$$$$$$e8........6a..e8........8905........e8........8905")&&PE.compareOverlay("'PK'0304")&&(sOptions="by C.Ghisler & Co.",bDetected=1),PE.compareEP("558becb8........e8........5356be........578d45..5633db5053ff15........85c00f84")&&-1!=PE.findSignature(PE.getOverlayOffset(),4096,"'PK'0304")&&(sOptions="by Symantec",bDetected=1),PE.compareEP("83ec..5657ff15........8bf08d4424..50c74424..........ff15........8a068b3d........3c..75..56ffd7")&&PE.compareOverlay("'PK'0304")&&(sName="SymW32SFX",sOptions="by Symantec",bDetected=1),PE.compareEP("558bec83ec..565733ffff15........8bf0897d..8d45..50ff15........8a063c..75..56ff15")&&PE.compareOverlay("'PK'0304")&&(sName="Symantec EasyZIP SFX",bDetected=1),PE.compareEP("558bec83ec..56ff15........8bf08a003c..75..84c074..803e..74..46803e..75..803e..75..46eb")&&-1!=PE.findSignature(PE.getOverlayOffset(),8192,"'PK'0304")&&(sOptions="Squeez SFX by SpeedProject 1995-1998",bDetected=1),PE.compareEP("6a..33c0505050ff15........50e8$$$$$$$$55b8........8bece8........53b9........5657be")&&PE.compareOverlay("'PK'0304")&&(sOptions="EasyZIP SFX by AKSoft 1995-1996",bDetected=1),result()}meta("sfx","Zip SFX")
function detect(){return PE.compareEP("558bec6a..68........68........64a1........50648925........83....5356578965..ff15")?-1!=PE.findSignature(PE.getOverlayOffset(),Math.min(255,PE.getOverlaySize()),"'PK'0304")&&(bDetected=1):PE.compareEP("558bec83c4..b8........e8........33c05568........64ff30648920e8")?PE.resource.length&&784==PE.resource[0].Type&&(bDetected=1):PE.compareEP("e8$$$$$$$$8bff558bec83ec..a1........8365....8365....5357bf........bb")?PE.compareOverlay("'PK'0304")&&(sName="WinRAR",sVersion="5.0+",sOptions="ZIP",bDetected=1):PE.compareEP("e8$$$$$$$$558bec83c4..b8........53bb........56e8........e8........8bf0")&&PE.compareOverlay("'PK'0304")&&(sName="WinRAR",sVersion="3.0",sOptions="ZIP",bDetected=1),PE.compareEP("558bec83c4..5356e8$$$$$$$$e8........6a..e8........8905........e8........8905")&&PE.compareOverlay("'PK'0304")&&(sOptions="by C.Ghisler & Co.",bDetected=1),PE.compareEP("558becb8........e8........5356be........578d45..5633db5053ff15........85c00f84")&&-1!=PE.findSignature(PE.getOverlayOffset(),4096,"'PK'0304")&&(sOptions="by Symantec",bDetected=1),PE.compareEP("83ec..5657ff15........8bf08d4424..50c74424..........ff15........8a068b3d........3c..75..56ffd7")&&PE.compareOverlay("'PK'0304")&&(sName="SymW32SFX",sOptions="by Symantec",bDetected=1),PE.compareEP("558bec83ec..565733ffff15........8bf0897d..8d45..50ff15........8a063c..75..56ff15")&&PE.compareOverlay("'PK'0304")&&(sName="Symantec EasyZIP SFX",bDetected=1),PE.compareEP("558bec83ec..56ff15........8bf08a003c..75..84c074..803e..74..46803e..75..803e..75..46eb")&&-1!=PE.findSignature(PE.getOverlayOffset(),8192,"'PK'0304")&&(sOptions="Squeez SFX by SpeedProject 1995-1998",bDetected=1),PE.compareEP("6a..33c0505050ff15........50e8$$$$$$$$55b8........8bece8........53b9........5657be")&&PE.compareOverlay("'PK'0304")&&(sOptions="EasyZIP SFX by AKSoft 1995-1996",bDetected=1),PE.compareEP("a1........c1e0..a3........575133c0bf........b9........3bcf76")&&PE.isSignaturePresent(PE.getOverlayOffset(),4096,"'PK'0304")&&(sOptions="custom",bDetected=1),result()}meta("sfx","Zip SFX")

5
dbs_min/db/PE/sfx_rar.1.sg
View file

@ -1,2 +1,3 @@
function detect(){if(PE.compareEP("558bec83c4..535657e8........e8........33c05568........64ff30648920e8"))for(var e=0;e<PE.resource.length&&!bDetected;e++)PE.compare("'rar!'",PE.resource[e].Offset)&&(bDetected=1)
return result()}meta("sfx","RAR")
function detect(){if(PE.compareEP("558bec83c4..535657e8........e8........33c05568........64ff30648920e8"))for(var e=0;e<PE.resource.length&&!bDetected;e++)PE.compare("'rar!'",PE.resource[e].Offset)&&(sOptions="type 1",bDetected=1)
else PE.compareEP("a1........c1e0..a3")&&PE.isSignaturePresent(PE.getOverlayOffset(),4096,"'Rar!'")&&(sOptions="type 2",bDetected=1)
return result()}meta("sfx","RAR (custom)")

2
dbs_min/db/read
View file

@ -9,7 +9,7 @@ case 92:r==JISX0201?n+="¥":n+="\\"
break
case 94:r==CPSpeccy?n+="↑":n+="^"
break
case 96:r==CPSpeccy?n+="£":r==CPPETSCIIshifted?n+=" ":n+="`"
case 96:r==CPSpeccy?n+="£":r==CPFullCPETshifted?n+=" ":n+="`"
break
case 123:r==CPATASCII?i==Chars0to1FATASCII2?n+="Ä":i==Chars0to1FATASCII_PL?n+=" ":n+="♠":n+="{"
break

2
dbs_min/db_extra/PE/ARDI-SFX.1.sg
View file

@ -1 +1 @@
function detect(){return PE.compareOverlay("000201010002e000400bf00900120002")&&(PE.compareEP("e9$$$$$$$$5351525589e583ec..b8........e8........a1........83c0..24fc31d2")?(sOptions="EMT4PM by Daniel F. Valot (2002)",bDetected=1):PE.compareEP("c705................e9$$$$$$$$5351525589e583ec..b8........e8........a1")&&(sOptions="EMT4PM by Daniel F. Valot (1999)",bDetected=1)),result()}meta("sfx","ARDI")
function detect(){return PE.compareOverlay("0002..010002................0002")&&(PE.compareEP("e9$$$$$$$$5351525589e583ec..b8........e8........a1........83c0..24fc31d2")?(sOptions="EMT4PM by Daniel F. Valot (2002)",bDetected=1):PE.compareEP("c705................e9$$$$$$$$5351525589e583ec..b8........e8........a1")&&(sOptions="EMT4PM by Daniel F. Valot (1999)",bDetected=1)),result()}meta("sfx","ARDI")

1
dbs_min/db_extra/PE/NFO.2.sg Normal file
View file

@ -0,0 +1 @@
function detect(){return PE.compareEP("609c8d50..2bc9b1..8a0234d1880242e2")&&(sVersion="1.0",bDetected=1),result()}meta("protector","NFO")

1
dbs_min/db_extra/PE/Visual_Protect.2.sg Normal file
View file

@ -0,0 +1 @@
function detect(){return(PE.compareEP("558bec51535657c705................68........ff15........a3........68")||PE.compareEP("558bec515356578325..........68........ff15........a3........68")||PE.compareEP("8b4424..83f8..75..a3........8b4424..50a3........e8"))&&(bDetected=1),result()}meta("protector","Visual Protect")

1
dbs_min/db_extra/PE/installer_SetupBuilder.1.sg Normal file
View file

@ -0,0 +1 @@
function detect(){return PE.compareEP("a1........c1e0..a3........575133c0bf........b9........3bcf76")&&PE.isSignaturePresent(PE.getOverlayOffset(),4096,"'SZDD'")&&(sOptions="SZDD",bDetected=1),result()}meta("installer","SetupBuilder")

1
dbs_min/db_extra/PE/installer_TInstall.1.sg Normal file
View file

@ -0,0 +1 @@
function detect(){return PE.compareEP("558bec83c4..535657e8........e8$$$$$$$$558bec535657")&&PE.isSignaturePresent(PE.getSize()-64,40,"'SELFEXTRACTING'")&&(sOptions="zlib",bDetected=1),result()}meta("installer","TInstall")

1
dbs_min/db_extra/PE/installer_instyler.1.sg Normal file
View file

@ -0,0 +1 @@
function detect(){return PE.compareEP("558bec81c4........53565733c08985")&&PE.compareOverlay("'IS'011a")&&(sVersion="1.6",sOptions="zlib",bDetected=1),result()}meta("installer","Instyler")

1
dbs_min/db_extra/PE/installer_unknown.1.sg Normal file
View file

@ -0,0 +1 @@
function detect(){return PE.compareEP("a1........c1e0..a3........575133c0bf........b9........3bcf76")&&PE.compareOverlay("00000000000000000000000000000000................................'FI'")&&(sName+=" (FI)",sOptions="GZIP",bDetected=1),result()}meta("installer","Unknown")

2
dbs_min/timestamp.log
View file

@ -1 +1 @@
Generated: 01/05/2026
Generated: 06/05/2026