mirror of
https://github.com/horsicq/Detect-It-Easy.git
synced 2026-06-24 01:54:08 +00:00
73382cf170
Additionally: ELF/UPX - test "UPX!" signature at the end of the file; MSDOS/PKLITE - fixed compare arguments; MSDOS/WWPACK - use MSDOS, not PE; PE/EXE joiner - removed, same signature as "Borland C".
65 lines
1.8 KiB
Text
65 lines
1.8 KiB
Text
// DIE's signature file
|
|
|
|
init("protector","HACKSTOP");
|
|
|
|
function detect(bShowType,bShowVersion,bShowOptions)
|
|
{
|
|
if(MSDOS.compareEP("FABD....FFE56A49480C..E4..3F983F"))
|
|
{
|
|
sVersion="1.00";
|
|
bDetected=1;
|
|
}
|
|
else if(MSDOS.compareEP("B430CD2186E03D....73..B42FCD21B0..B44CCD2150B8....58EB"))
|
|
{
|
|
sVersion="1.10/1.11";
|
|
bDetected=1;
|
|
}
|
|
else if(MSDOS.compareEP("B430CD2186E03D000373..B42FCD21B42ACD21B42CCD21B0FFB44CCD2150B8....58EB"))
|
|
{
|
|
sVersion="1.10p1";
|
|
bDetected=1;
|
|
}
|
|
else if(MSDOS.compareEP("B430CD2186E03D....73..B4..CD21B0..B44CCD2153BB....5BEB"))
|
|
{
|
|
sVersion="1.11c";
|
|
bDetected=1;
|
|
}
|
|
else if(MSDOS.compareEP("521eb430cd2186e03d....73..cd200e1fb4..e8"))
|
|
{
|
|
sVersion="1.11f-1.12s";
|
|
bDetected=1;
|
|
}
|
|
else if(MSDOS.compareEP("FABD....D4854E32EBEB"))
|
|
{
|
|
sVersion="1.13";
|
|
bDetected=1;
|
|
}
|
|
else if(MSDOS.compareEP("52B8....1ECD2186E03D....73..CD200E1FB409E8....24..EA"))
|
|
{
|
|
sVersion="1.13";
|
|
bDetected=1;
|
|
}
|
|
else if(MSDOS.compareEP("FABE....050C00071D4A461E16FDAC44........F16D84D33D....CFAFFB34DB33..........D0D6....92B4249E"))
|
|
{
|
|
sVersion="1.17";
|
|
bDetected=1;
|
|
}
|
|
else if(MSDOS.compareEP("52BA....5AEB..9A........30CD21......FD02....CD200E1F52BA....5AEB"))
|
|
{
|
|
sVersion="1.18";
|
|
bDetected=1;
|
|
}
|
|
else if(MSDOS.compareEP("52BA....5AEB..9A........30CD21......D602....CD200E1F52BA....5AEB"))
|
|
{
|
|
sVersion="1.19";
|
|
bDetected=1;
|
|
}
|
|
else if(MSDOS.compareEP("52B430CD2152FA..FB3D....EB..CD200E1FB409E8"))
|
|
{
|
|
sVersion="1.11f";
|
|
sOptions="modified";
|
|
bDetected=1;
|
|
}
|
|
|
|
return result(bShowType,bShowVersion,bShowOptions);
|
|
}
|