mirror of
https://github.com/horsicq/Detect-It-Easy.git
synced 2026-06-24 01:54:08 +00:00
19 lines
503 B
Text
19 lines
503 B
Text
// DIE's signature file
|
|
|
|
init("protector","CodeCrypt");
|
|
|
|
function detect(bShowType,bShowVersion,bShowOptions)
|
|
{
|
|
if(PE.compareEP("E9........EB02833D58EB02FF1D5BEB020FC75F"))
|
|
{
|
|
switch(PE.readDword(PE.nEP+1))
|
|
{
|
|
case 0x2c5: sVersion="0.14b"; break;
|
|
case 0x331: sVersion="0.15b"; break;
|
|
case 0x32e: sVersion=(PE.compareEP("EB03FF1D34",20))?"0.164":"0.16b-0.163b";
|
|
}
|
|
bDetected=1;
|
|
}
|
|
|
|
return result(bShowType,bShowVersion,bShowOptions);
|
|
}
|