mirror of
https://github.com/horsicq/Detect-It-Easy.git
synced 2026-06-24 01:54:08 +00:00
20 lines
620 B
Text
20 lines
620 B
Text
// DIE's signature file
|
|
|
|
init("protector","IntelliProtector");
|
|
|
|
function detect(bShowType,bShowVersion,bShowOptions)
|
|
{
|
|
var nLastSectionOffset=PE.section[PE.nLastSection].FileOffset;
|
|
if(PE.compare("E9........CC",nLastSectionOffset))
|
|
{
|
|
var nLastSectionSize=PE.section[PE.nLastSection].FileSize;
|
|
var nVersionOffset=PE.findString(nLastSectionOffset,nLastSectionSize,"Protected by IntelliProtector");
|
|
if(nVersionOffset!=-1)
|
|
{
|
|
sVersion=PE.getString(nVersionOffset+30);
|
|
bDetected=1;
|
|
}
|
|
}
|
|
|
|
return result(bShowType,bShowVersion,bShowOptions);
|
|
}
|