mirror of
https://github.com/horsicq/Detect-It-Easy.git
synced 2026-06-24 01:54:08 +00:00
33 lines
No EOL
1.2 KiB
JavaScript
Executable file
33 lines
No EOL
1.2 KiB
JavaScript
Executable file
// Detect It Easy: detection rule file
|
|
// Author: hypn0 <hypn0@mail.ru>
|
|
|
|
init("protector", "UnPackStop");
|
|
|
|
function detect() {
|
|
if (MSDOS.compareEP("3670..b8....81c0....bb....43e8....5f83c7..0e570656cbbe....eb")) {
|
|
sVersion = "0.9x";
|
|
sOptions = "by Szaszi (Szabo Laszlo)";
|
|
bDetected = true;
|
|
} else if (MSDOS.compareEP("68....c3")) {
|
|
var nOffset = MSDOS.readWord(MSDOS.getEntryPointOffset() + 1) - 32;
|
|
if (MSDOS.compare("bf....e2..a541b9....2e31154747e2", nOffset)) {
|
|
sVersion = "0.95";
|
|
sOptions = "by Szaszi (Szabo Laszlo)";
|
|
bDetected = true;
|
|
} else if (MSDOS.compare("b9....39fe2e31154747eb", nOffset)) {
|
|
sVersion = "0.95 freeware";
|
|
sOptions = "by Szaszi (Szabo Laszlo)";
|
|
bDetected = true;
|
|
}
|
|
} else if (MSDOS.compareEP("4e46555dbb....70..b8....81c0....4c44cd213efc268b2e....8ec5")) {
|
|
sVersion = "0.94";
|
|
sOptions = "by Szaszi (Szabo Laszlo)";
|
|
bDetected = true;
|
|
} else if (MSDOS.compareEP("b8....40bb....4be8$$$$be....eb$$5f83c7..0e570656cb")) {
|
|
sVersion = "0.94";
|
|
sOptions = "by Szaszi (Szabo Laszlo)";
|
|
bDetected = true;
|
|
}
|
|
|
|
return result();
|
|
} |