mirror of
https://github.com/horsicq/Detect-It-Easy.git
synced 2026-06-24 01:54:08 +00:00
73382cf170
Additionally: ELF/UPX - test "UPX!" signature at the end of the file; MSDOS/PKLITE - fixed compare arguments; MSDOS/WWPACK - use MSDOS, not PE; PE/EXE joiner - removed, same signature as "Borland C".
41 lines
953 B
Text
41 lines
953 B
Text
// DIE's signature file
|
|
|
|
init("packer","PKLITE");
|
|
|
|
function detect(bShowType,bShowVersion,bShowOptions)
|
|
{
|
|
if(MSDOS.compare("'PKLITE'",0x1E)||MSDOS.compare("'PKlite'",0x1E))
|
|
{
|
|
var bBit=MSDOS.readByte(0x1D);
|
|
sVersion=(bBit&0x7)+"."+("0"+MSDOS.readByte(0x1C)).slice(-2);
|
|
|
|
if(bBit&0x8)
|
|
{
|
|
sOptions="Extra compression";
|
|
}
|
|
if(bBit&0x10)
|
|
{
|
|
sOptions=sOptions.append("Multi-segment file");
|
|
}
|
|
|
|
bDetected=1;
|
|
}
|
|
else if(MSDOS.compareEP("1FB409BA....CD21B8....CD21"))
|
|
{
|
|
sVersion="1.50";
|
|
sOptions="CRC check";
|
|
bDetected=1;
|
|
}
|
|
else if(MSDOS.compareEP("50B8....BA....0500003B060200"))
|
|
{
|
|
sVersion="1.50";
|
|
bDetected=1;
|
|
}
|
|
else if(MSDOS.compareEP("B8....BA....0500003B060200"))
|
|
{
|
|
sVersion="1.12-1.20";
|
|
bDetected=1;
|
|
}
|
|
|
|
return result(bShowType,bShowVersion,bShowOptions);
|
|
}
|