mirror of
https://github.com/horsicq/Detect-It-Easy.git
synced 2026-06-24 01:54:08 +00:00
76 lines
2.4 KiB
Text
76 lines
2.4 KiB
Text
// DIE's signature file
|
|
|
|
init("protector","ASProtect");
|
|
|
|
function detect(bShowType,bShowVersion,bShowOptions)
|
|
{
|
|
if(PE.compareEP("6801......E801000000C3C3"))
|
|
{
|
|
sVersion="1.23-2.56";
|
|
bDetected=1;
|
|
}
|
|
else if(PE.compareEP("60E803000000E9EB045D4555C3E801000000EB5DBBEDFFFFFF03DD81EB00......807D4D01750C8B74242883FE01895D4E75318D45535053FFB5ED0900008D453550E9820000000000000000000000000000000000"))
|
|
{
|
|
sVersion="SKE 2.1/2.2";
|
|
sOptions="DLL";
|
|
bDetected=1;
|
|
}
|
|
else if(PE.compareEP("9060E803000000E9EB045D4555C3E801000000EB5DBBEDFFFFFF03DD81EB00......807D4D01750C8B74242883FE01895D4E75318D45535053FFB5ED0900008D453550E98200000000000000000000000000000000"))
|
|
{
|
|
sVersion="SKE 2.1/2.2";
|
|
sOptions="exe";
|
|
bDetected=1;
|
|
}
|
|
else if(PE.compareEP("9060E803000000E9EB045D4555C3E801000000EB5DBBEDFFFFFF03DD81EB00......807D4D01750C8B74242883FE01895D4E75318D45535053FFB5E50B00008D453550E98200000000000000000000000000000000"))
|
|
{
|
|
sVersion="SKE 2.3";
|
|
bDetected=1;
|
|
}
|
|
else if(PE.compareEP("9060E803000000E9EB045D4555C3E801000000EB5DBBEDFFFFFF03DD81EB00....00807D4D01750C8B74242883FE01895D4E75318D45535053FFB5DD0900008D453550E98200000000000000000000000000000000"))
|
|
{
|
|
bDetected=1;
|
|
}
|
|
else if(PE.compareEP("60E801......905D81ED........BB........03DD2B9D"))
|
|
{
|
|
sVersion="1.0";
|
|
bDetected=1;
|
|
}
|
|
else if(PE.compareEP("60E9..05"))
|
|
{
|
|
sVersion="1.1 BRS";
|
|
bDetected=1;
|
|
}
|
|
else if(PE.compareEP("60E9........9178797979E9"))
|
|
{
|
|
sVersion="1.1 MTE";
|
|
bDetected=1;
|
|
}
|
|
else if(PE.compareEP("9060E9..04"))
|
|
{
|
|
sVersion="1.1 MTEb";
|
|
bDetected=1;
|
|
}
|
|
else if(PE.compareEP("9060E81B......E9FC"))
|
|
{
|
|
sVersion="MTEc";
|
|
bDetected=1;
|
|
}
|
|
else if(PE.compareEP("60E9..04....E9..............EE"))
|
|
{
|
|
sVersion="1.1";
|
|
bDetected=1;
|
|
}
|
|
else if(PE.compareEP("6801......C3"))
|
|
{
|
|
sVersion="1.2";
|
|
bDetected=1;
|
|
}
|
|
else if(PE.compareEP("9060E803000000E9EB045D4555C3E801000000EB5DBBEDFFFFFF03DD81EB........807D4D01750C8B74242883FE01895D4E75318D45535053FFB5D50900008D453550E98200000000000000000000000000000000"))
|
|
{
|
|
sVersion="1.23 RC4 build 08.07";
|
|
sOptions="exe";
|
|
bDetected=1;
|
|
}
|
|
|
|
return result(bShowType,bShowVersion,bShowOptions);
|
|
}
|