This commit is contained in:
hypn0chka 2018-06-18 00:08:10 +05:00
commit e70d065355
14 changed files with 162 additions and 17 deletions

View file

@ -11,6 +11,12 @@ function detect(bShowType,bShowVersion,bShowOptions)
sOptions="by D'B";
bDetected=1;
}
if(Binary.compare("e9$$$$bf....be....a5a48cda83c2..50b4..bb....cd2158"))
{
sVersion="1.0c";
sOptions="1994 by D'B";
bDetected=1;
}
else if(Binary.compare("e9$$$$e800005b508cc005....8b0e....03c889....8b0e"))
{
sVersion="1.0";

View file

@ -0,0 +1,15 @@
// DIE's signature file
// Author: hypn0 <hypn0@mail.ru>
init("protector","J0B cryptor");
function detect(bShowType,bShowVersion,bShowOptions)
{
if(Binary.compare("e9$$$$fa be....8d0e....2bcee8$$$$5051ba....8bda301cac32c35183c4..b9"))
{
sOptions="1996";
bDetected=1;
}
return result(bShowType,bShowVersion,bShowOptions);
}

View file

@ -82,6 +82,12 @@ function detect(bShowType,bShowVersion,bShowOptions)
sOptions="mutated COM like RSCC";
bDetected=1;
}
else if(Binary.compare("fc50be....bf....57b9....f3a4c3"))
{
sVersion="1.0x";
sOptions="mutated COM like RSCC";
bDetected=1;
}
return result(bShowType,bShowVersion,bShowOptions);
}

View file

@ -5,16 +5,16 @@ init("packer","SCRNCH");
function detect(bShowType,bShowVersion,bShowOptions)
{
if(Binary.compare("eb$$bb....b44acd2181eb....73..ba....b9....e9$$$$0e1fb440bb....cd21b8....cd21"))
if(Binary.compare("eb$$bb....b44acd2181eb....73..ba....b9....e9"))
{
sVersion="1.02";
sOptions="by Graeme W. McRae";
sOptions="1988 by Graeme W. McRae";
bDetected=1;
}
if(Binary.compare("bb....b44acd2181eb....73..ba....b9....e9$$$$0e1fb440bb....cd21b8....cd21"))
{
sVersion="1.00";
sOptions="1988";
sOptions="1988 by Graeme W. McRae";
bDetected=1;
}

View file

@ -43,6 +43,26 @@ function detect(bShowType,bShowVersion,bShowOptions)
sVersion="1.5";
bDetected=1;
}
else if(MSDOS.compareEP("e8$$$$e4212e0c..e6212eb9....5151fd89c93eb5..fcb8....fbcd162e5987c926b8....fd"))
{
sVersion="1.5";
bDetected=1;
}
else if(MSDOS.compareEP("e8$$$$26e421f80c..e621f98d1e....53365389d93e30edb8....cd165b"))
{
sVersion="1.5";
bDetected=1;
}
else if(MSDOS.compareEP("91221db4..cd21d2d1e9$$$$b4..cd21a6e8"))
{
sVersion="1.5";
bDetected=1;
}
else if(MSDOS.compareEP("b4..cd21b4..cd21e8$$$$ba....ec900c..26ee8d0e....51fd51"))
{
sVersion="1.5";
bDetected=1;
}
else if(MSDOS.compareEP("95e8$$$$fbba....3eecfc0c..3eeefb8d0e....51512687c9b8....28ed26cd162e59fdfb87c9b8....fd88e9f8b5..cd1626592ec3"))
{
sVersion="1.5";

View file

@ -15,6 +15,11 @@ function detect(bShowType,bShowVersion,bShowOptions)
sVersion="2.02T";
bDetected=1;
}
else if(MSDOS.compareEP("fc0e1fb4..bb....b9....ba....cd21061e07bf....b9....30c0f3aa07e9"))
{
sVersion="2.02T";
bDetected=1;
}
return result(bShowType,bShowVersion,bShowOptions);
}

View file

@ -24,6 +24,11 @@ function detect(bShowType,bShowVersion,bShowOptions)
sVersion="1.11c";
bDetected=1;
}
else if(MSDOS.compareEP("B430CD2186E03D....73..B0..B4..CD2150B8....58EB$$EB$$b8....CD2150B2..B8....CD21"))
{
sVersion="1.00";
bDetected=1;
}
else if(MSDOS.compareEP("521eb430cd2186e03d....73..cd200e1fb4..e8"))
{
sVersion="1.11f-1.12s";

View file

@ -20,6 +20,12 @@ function detect(bShowType,bShowVersion,bShowOptions)
sVersion="0.91c";
bDetected=1;
}
else if(MSDOS.compareEP("50060e1f8b0e....8bf14e8cdb89f703......8ec3fdf3a4b8....5350cb"))
{
sVersion="0.91";
sOptions="1990";
bDetected=1;
}
else if(MSDOS.compareEP("0e1f068b0e....8bf14e89f78cdb031e....8ec3fdf3a453b8....50cb"))
{
sVersion="1.0";

View file

@ -8,13 +8,31 @@ function detect(bShowType,bShowVersion,bShowOptions)
if(MSDOS.compareEP("b8....fcfdb9....be....f82e180cf5fcfc74..fccc"))
{
sVersion="3.05 PRO";
sOptions="1994/97 by Blagoje Ceklic //COMSEC";
sOptions="1994/97 by Ceklic Blagoje //COMSEC";
bDetected=1;
}
else if(MSDOS.compareEP("2bdb81cb....f8fdbf....2bd281ca....f52e291dfcf7d3fdfccc"))
{
sVersion="3.05";
sOptions="1994/97 by Blagoje Ceklic //COMSEC";
sOptions="1994/97 by Ceklic Blagoje //COMSEC";
bDetected=1;
}
else if(MSDOS.compareEP("bb....f5b9....fcfdbe....fdfc2e190cfcfdf8f7d9d1d9f8f8"))
{
sVersion="3.xx";
sOptions="by Ceklic Blagoje //COMSEC";
bDetected=1;
}
else if(MSDOS.compareEP("be....fcb9....fdf5f5ba....fc2e102cf8d1d1d1c9f7d9"))
{
sVersion="3.xx";
sOptions="by Ceklic Blagoje //COMSEC";
bDetected=1;
}
else if(MSDOS.compareEP("33db81c3....f8fdbe....f8f5fcba....f52e111cfcfd72"))
{
sVersion="3.xx";
sOptions="by Ceklic Blagoje //COMSEC";
bDetected=1;
}

View file

@ -10,16 +10,47 @@ function detect(bShowType,bShowVersion,bShowOptions)
sVersion="2.11";
bDetected=1;
}
if(MSDOS.compareEP("e8$$$$e8$$$$e9$$$$bf....e9$$$$29d2e9$$$$8edaeb$$eb$$e9$$$$e8$$$$8715e8$$$$e8$$$$e8$$$$52e8$$$$31ede9$$$$be....eb$$872ceb$$55e8$$$$eb$$be....bb....2e8a3789d880c6..2d....80f6..35....80ee..00c6"))
else if(MSDOS.compareEP("e8$$$$e8$$$$e9$$$$bf....e9$$$$29d2e9$$$$8edaeb$$eb$$e9$$$$e8$$$$8715e8$$$$e8$$$$e8$$$$52e8$$$$31ede9$$$$be....eb$$872ceb$$55e8$$$$eb$$be....bb....2e8a3789d880c6..2d....80f6..35....80ee..00c6"))
{
sVersion="3.10/11";
bDetected=1;
}
if(MSDOS.compareEP("e9$$$$bb....e8$$$$e9$$$$e9$$$$e8$$$$e9$$$$31c0e9$$$$8ed8e8$$$$e9$$$$8707e8$$$$e8$$$$50e8$$$$31dbe8$$$$e8$$$$e8$$$$be....eb$$871ce8$$$$53e8$$$$b9....bf....2e8a0589fb04..81eb....34..81f3....81c3....28d800f8"))
else if(MSDOS.compareEP("e8$$$$eb$$bf....e8$$$$eb$$31c0e9$$$$8ed8e8$$$$e8$$$$8705e8$$$$50eb$$31c9e8$$$$e9$$$$e8$$$$e8$$$$bb"))
{
sVersion="3.10/11";
bDetected=1;
}
else if(MSDOS.compareEP("e8$$$$be....e8$$$$eb$$eb$$e9$$$$eb$$eb$$29d2eb$$e9$$$$8eda"))
{
sVersion="3.10/11";
bDetected=1;
}
else if(MSDOS.compareEP("e8$$$$bf....e9$$$$31dbeb$$e8$$$$e8$$$$8edbeb$$e9$$$$871de8$$$$e9$$$$53"))
{
sVersion="3.10/11";
bDetected=1;
}
else if(MSDOS.compareEP("e9$$$$bb....e8$$$$e9$$$$e9$$$$e8$$$$e9$$$$31c0e9$$$$8ed8e8$$$$e9$$$$8707e8$$$$e8$$$$50e8$$$$31dbe8$$$$e8$$$$e8$$$$be....eb$$871ce8$$$$53e8$$$$b9....bf....2e8a0589fb04..81eb....34..81f3....81c3....28d800f8"))
{
sVersion="3.10/11";
bDetected=1;
}
else if(MSDOS.compareEP("e9$$$$be....e8$$$$29c9eb$$e9$$$$eb$$e8$$$$8ed9e9$$$$870ce8$$$$51e8$$$$31d2"))
{
sVersion="3.10/11";
bDetected=1;
}
else if(MSDOS.compareEP("e9$$$$bf....e9$$$$31f6e9$$$$8edee9$$$$e9$$$$8735eb$$eb$$56e8$$$$29d2e8$$$$be....e9$$$$e8$$$$8714"))
{
sVersion="3.10/11";
bDetected=1;
}
else if(MSDOS.compareEP("9c505351525657551e06fcb8....cd2184c075..cd20a8..04..eb$$eb$$ba....ec0c..eb"))
{
sVersion="3.0";
sOptions="by T.Torfs";
bDetected=1;
}
return result(bShowType,bShowVersion,bShowOptions);
}

View file

@ -16,6 +16,11 @@ function detect(bShowType,bShowVersion,bShowOptions)
sOptions="modified";
bDetected=1;
}
else if(MSDOS.compareEP("83ec..83e4..8bec50be....0336....8cd28cd803....33c275..fc8ec233ff"))
{
sVersion="3.x";
bDetected=1;
}
return result(bShowType,bShowVersion,bShowOptions);
}

View file

@ -7,58 +7,64 @@ function detect(bShowType,bShowVersion,bShowOptions)
{
if(MSDOS.compareEP("e800005b83c3..908bd3e8$$$$5b2e803f..74..90908bdab9....eb"))
{
sVersion="1.21 EXE";
sVersion="1.21";
sOptions="by Christoph Gabler";
bDetected=1;
}
else if(MSDOS.compareEP("8cd0bb....8ed333c98ed0b9....eb$$e2..33d2"))
{
sVersion="1.18 EXE";
sVersion="1.18";
sOptions="by Christoph Gabler";
bDetected=1;
}
else if(MSDOS.compareEP("8cd0bb....8ed333d28ed0b9....eb$$e2..33d2"))
{
sVersion="1.x EXE";
sVersion="1.x";
sOptions="by Christoph Gabler";
bDetected=1;
}
else if(MSDOS.compareEP("b9....eb$$e2$$eb..90cd20e2"))
{
sVersion="1.15 EXE";
sVersion="1.15";
sOptions="by Christoph Gabler";
bDetected=1;
}
else if(MSDOS.compareEP("e800005b83c3..908bd3e8$$$$5b2e803f..74..90908bdab9....2ec0"))
{
sVersion="1.20 EXE";
sVersion="1.20";
sOptions="1998 by Christoph Gabler";
bDetected=1;
}
else if(MSDOS.compareEP("05....eb$$bb....81ebfa..85f9eb$$eb$$39fbeb"))
{
sVersion="1.22 EXE";
sVersion="1.22";
sOptions="by Christoph Gabler";
bDetected=1;
}
else if(MSDOS.compareEP("81ea....eb$$b9....81c1....39d0bb....85c3b9....f505....bb....ba....81c2"))
{
sVersion="1.23 EXE";
sVersion="1.23";
sOptions="by Christoph Gabler";
bDetected=1;
}
else if(MSDOS.compareEP("eb$$39c281c3....eb$$81c3....39cc81ea....39e2b9....85da39e9eb"))
{
sVersion="1.24 EXE";
sVersion="1.24";
sOptions="by Christoph Gabler";
bDetected=1;
}
else if(MSDOS.compareEP("8cd1ba....8ed233d28ed18bcaeb"))
{
sVersion="1.13 EXE";
sVersion="1.13";
sOptions="by Christoph Gabler";
bDetected=1;
}
else if(MSDOS.compareEP("e8$$$$5d81ed....458cd68bfc0f23c70f23ceb0..e6..fa0e17"))
{
sVersion="1.26b1";
sOptions="2000 by Christoph Gabler";
bDetected=1;
}
return result(bShowType,bShowVersion,bShowOptions);
}

View file

@ -33,6 +33,24 @@ function detect(bShowType,bShowVersion,bShowOptions)
sOptions="by Boogie";
bDetected=1;
}
else if(MSDOS.compareEP("8cc981c1....51b9....51b1..068cd30651b1..b8....8cca03d0fc"))
{
sVersion="3.04a";
sOptions="by Boogie";
bDetected=1;
}
else if(MSDOS.compareEP("8cc981c1....51b9....510606fc8cd5b1..51b1..8cd383eb..5351"))
{
sVersion="3.04a";
sOptions="by Boogie";
bDetected=1;
}
else if(MSDOS.compareEP("8cc981c1....51b9....fc8cd5510606b1..51b1..8cd383eb..5351"))
{
sVersion="3.04a";
sOptions="by Boogie";
bDetected=1;
}
else if(MSDOS.compareEP("f9be....81ee....2e80b4......eb"))
{
sVersion="1.1c";

View file

@ -31,6 +31,10 @@ function detect(bShowType,bShowVersion,bShowOptions)
bDetected=1;
sName="ZOO archive";
}
else if(MSDOS.compareOverlay("4c0103"))
{
bDetected=1;
sName="COFF executable";
}
return result(bShowType,bShowVersion,bShowOptions);
}