die-python 0.4.0__cp313-abi3-win_amd64.whl

die/db/db/COM/VSF&K_protection.2.sg

@@ -0,0 +1,13 @@
+// Detect It Easy: detection rule file
+// Author: hypn0 <hypn0@mail.ru>
+
+init("protector", "VSF&K protection");
+
+function detect() {
+    if (Binary.compare("e9$$$$eb$$8cdb8cca8edafa8becbe....bc....bf....313c312446474c75")) {
+        sOptions = "1992";
+        bDetected = true;
+    }
+
+    return result();
+}

die/db/db/COM/VSS.1.sg

@@ -0,0 +1,13 @@
+// Detect It Easy: detection rule file
+// Author: hypn0 <hypn0@mail.ru>
+
+init("immunizer", "Viren Schutz Schild");
+
+function detect() {
+    if (Binary.compare("e9$$$$e8$$$$5b81eb....1e065051525354555657061e8bebb430cd2186e03d....73..e9")) {
+        sVersion = "1993 by Ralph Roth";
+        bDetected = true;
+    }
+
+    return result();
+}

die/db/db/COM/Vacsina.4.sg

@@ -0,0 +1,12 @@
+// Detect It Easy: detection rule file
+// Author: hypn0 <hypn0@mail.ru>
+
+init("converter", "Vacsina EXE2COM");
+
+function detect() {
+    if (Binary.compare("e9$$$$e8....5b508cc005....8b0e....894f..8b0e....03c8894f..8b0e....894f..8b0e....03c8894f..8b3e....8b16")) {
+        bDetected = true;
+    }
+
+    return result();
+}

die/db/db/COM/Venus.2.sg

@@ -0,0 +1,12 @@
+// Detect It Easy: detection rule file
+// Author: hypn0 <hypn0@mail.ru>
+
+init("protector", "Venus crypt");
+
+function detect() {
+    if (Binary.compare("b9....fa8bdc8cd2bc....03e1d1e94c4c5886e9d3c033c186e9f7d050e2")) {
+        bDetected = true;
+    }
+
+    return result();
+}

die/db/db/COM/Vienna-C.4.sg

@@ -0,0 +1,12 @@
+// Detect It Easy: detection rule file
+// Author: hypn0 <hypn0@mail.ru>
+
+init("compiler", "Vienna-C");
+
+function detect() {
+    if (Binary.compare("90e9$$$$8cc88ed8e8....803e......75..8a3e....883e....8b1e....891e....a3....8ec00306....8ed0a3....8b26....8b2e....be....c706")) {
+        bDetected = true;
+    }
+
+    return result();
+}

die/db/db/COM/Watcom_C.4.sg

@@ -0,0 +1,37 @@
+// Detect It Easy: detection rule file
+// Author: hypn0 <hypn0@mail.ru>
+
+init("compiler", "Watcom C");
+
+function detect() {
+    if (Binary.compare("e9$$$$fb8cc98ec126bb....83c3..80e3..26891e....268c1e....26a1....3d....73..b8....01c383c3..80e3..8ed189dc26891e....89dad1")) {
+        sName += "/C++16";
+        sVersion = "1994";
+        bDetected = true;
+    } else if (Binary.compare("e9$$$$fb8cc98ec1bb....83c3..80e3..26891e....268c1e....26a1....3d....73..b8....03d883c3..80e3..8ed18be326891e....8bd3d1ea")) {
+        sName += "/C++16";
+        sVersion = "1993";
+        bDetected = true;
+    } else if (Binary.compare("e9$$$$fb8cc9bb....8ec1268c1e....26a1....3d....73..b8....03d88ed18be326891e....83c3")) {
+        sName += "/C++16";
+        sVersion = "1988";
+        bDetected = true;
+    } else if (Binary.compare("e9$$$$fb8cc98ec1bb....83c3..83e3..26891e....268c1e....26a1....3d....73..b8....03d88ed18be326891e....83c3..83e3..8bd3d1ea")) {
+        sVersion = "1991";
+        bDetected = true;
+    } else if (Binary.compare("e9$$$$0e0e1f07b4..ba....cd21ba....cd21e8....803e......74..b4..ba....cd21e9")) {
+        sName += "/C++32";
+        sVersion = "1995";
+        bDetected = true;
+    } else if (Binary.compare("eb$$fb8cc98ec1bb....83c3..80e3..26891e....268c1e....26a1....3d....73..b8........83c3..80e3..8ed1")) {
+        sName = "Open Watcom C/C++16";
+        sVersion = "2002 by Sybase, Inc.";
+        bDetected = true;
+    } else if (Binary.compare("eb$$fb8cc98ec126bb....83c3..80e3..26891e....268c1e....26a1....3d....73..b8........83c3..80e3..8ed1")) {
+        sName = "Open Watcom C/C++16";
+        sVersion = "2002 by Sybase, Inc.";
+        bDetected = true;
+    }
+
+    return result();
+}

die/db/db/COM/WiZ_Cryptor.2.sg

@@ -0,0 +1,14 @@
+// Detect It Easy: detection rule file
+// Author: hypn0 <hypn0@mail.ru>
+
+init("cryptor", "WiZ Cryptor");
+
+function detect() {
+    if (Binary.compare("e9$$$$fa60561e8ed8be....bf....b8....8706....ab8cc88706....ab1f68....9c5880cc..509dfc")) {
+        sVersion = "1.00a";
+        sOptions = "by SP0T //UCL";
+        bDetected = true;
+    }
+
+    return result();
+}

die/db/db/COM/XCK2COM.1.sg

@@ -0,0 +1,12 @@
+// Detect It Easy: detection rule file
+// Author: hypn0 <hypn0@mail.ru>
+
+init("converter", "XCK2COM");
+
+function detect() {
+    if (Binary.compare("e9$$$$be....e8....ad89c15156e8....be....e8")) {
+        bDetected = true;
+    }
+
+    return result();
+}

die/db/db/COM/XE.2.sg

@@ -0,0 +1,13 @@
+// Detect It Easy: detection rule file
+// Author: hypn0 <hypn0@mail.ru>
+
+init("packer", "XE");
+
+function detect() {
+    if (Binary.compare("be....56bf....b9....fc56f3a55fe9")) {
+        sVersion = "1.42";
+        bDetected = true;
+    }
+
+    return result();
+}

die/db/db/COM/XORCOPY.2.sg

@@ -0,0 +1,14 @@
+// Detect It Easy: detection rule file
+// Author: hypn0 <hypn0@mail.ru>
+
+init("protector", "XORCOPY");
+
+function detect() {
+    if (Binary.compare("e9$$$$b8....bb....ba....3107434039d375..c606......c606......c606......31c031db31d2e9")) {
+        sVersion = "1.0";
+        sOptions = "1995 by DeiMoS";
+        bDetected = true;
+    }
+
+    return result();
+}

die/db/db/COM/XPACK.2.sg

@@ -0,0 +1,22 @@
+// Detect It Easy: detection rule file
+// Author: hypn0 <hypn0@mail.ru>
+
+init("packer", "XPACK/LZCOM");
+
+function detect() {
+    if (Binary.compare("e9$$$$fa8bece8....06bf....57e8....06b8....50be....bf....cb")) {
+        sVersion = "1.67";
+        bDetected = true;
+    } else if (Binary.compare("e9$$$$fa8bece8....fb06bf....57e8....06b8....50be....bf....cb")) {
+        sVersion = "1.67.1";
+        bDetected = true;
+    } else if (Binary.compare("e9$$$$8cc805....8ec0bf....8bf7fcb9....f3a506b8....50cb")) {
+        sVersion = "1.65";
+        bDetected = true;
+    } else if (Binary.compare("e9$$$$8cc8a3....05....8ec0bf....8bf7fcb9....f3a506b8....50cb")) {
+        sVersion = "1.4";
+        bDetected = true;
+    }
+
+    return result();
+}

die/db/db/COM/XcomOR.2.sg

@@ -0,0 +1,24 @@
+// Detect It Easy: detection rule file
+// Author: hypn0 <hypn0@mail.ru>
+
+init("protector", "XcomOR by madmax");
+
+function detect() {
+    if (Binary.compare("'MMX'e8$$$$83c5..8306......b8....5050ffe0")) {
+        sVersion = "0.xx";
+        bDetected = true;
+    } else if (Binary.compare("'MMX'668136............eb$$668136............eb")) {
+        sVersion = "0.99i, 0.99h";
+        bDetected = true;
+    } else if (Binary.compare("'MMX'b409ba....cd21e8$$$$1e6a..1f8136........8136........8b1e....a1....501f813f....75")) {
+        bDetected = true;
+    } else if (Binary.compare("'MMX'b8....ba....87ecbc....eb$$50b409cd2187e533edeb$$4f030de8")) {
+        sName = "XcomOR/486 by madmax";
+        bDetected = true;
+    } else if (Binary.compare("e8$$$$8006......b4..5050c3bf....57bb....8b4d..81")) {
+        sVersion = "0.99a";
+        bDetected = true;
+    }
+
+    return result();
+}

die/db/db/COM/XoReR.2.sg

@@ -0,0 +1,26 @@
+// Detect It Easy: detection rule file
+// Author: hypn0 <hypn0@mail.ru>
+
+init("protector", "XoReR");
+
+function detect() {
+    if (Binary.compare("e9$$$$ba....b9....51b0..e660fab430cd213c..73..33c00650cbbf....8b36....59e2")) {
+        sVersion = "2.l";
+        sOptions = "by dR.No //ViP";
+        bDetected = true;
+    } else if (Binary.compare("e9$$$$be....8bfeb9....33db80c3..ac32c3aae2")) {
+        sVersion = "1.0";
+        sOptions = "by dR.No //ViP";
+        bDetected = true;
+    } else if (Binary.compare("e9$$$$b8....e721b8....cd21b430cd218b2e....8b1e....bf....b9....b430cd2132..73..be....bf....b9....fcac300547e2")) {
+        sVersion = "1.0 [2nd pass]";
+        sOptions = "by dR.No //ViP";
+        bDetected = true;
+    } else if (Binary.compare("e9$$$$ba....b9....51b8....e721b430cd213c..73..33c00650cb")) {
+        sVersion = "2.0";
+        sOptions = "1998 by dR.No //ViP";
+        bDetected = true;
+    }
+
+    return result();
+}

die/db/db/COM/XorCom.2.sg

@@ -0,0 +1,14 @@
+// Detect It Easy: detection rule file
+// Author: hypn0 <hypn0@mail.ru>
+
+init("protector", "XorCom");
+
+function detect() {
+    if (Binary.compare("e9$$$$fcbe....bf....57b9....ac34..aae2..c3")) {
+        sVersion = "1.0";
+        sOptions = "by tFF";
+        bDetected = true;
+    }
+
+    return result();
+}

die/db/db/COM/Zbikowski_C.4.sg

@@ -0,0 +1,13 @@
+// Detect It Easy: detection rule file
+// Author: hypn0 <hypn0@mail.ru>
+
+init("compiler", "Zbikowski C");
+
+function detect() {
+    if (Binary.compare("8975..8a0430e48946..408bf88a85....30e425....74..8b46..2d....eb..8b76..8a0430e42d....8346")) {
+        sOptions = "1983 by Mark Zbikowski (Microsoft Corp.)";
+        bDetected = true;
+    }
+
+    return result();
+}

die/db/db/COM/Zortech_C.4.sg

@@ -0,0 +1,26 @@
+// Detect It Easy: detection rule file
+// Author: hypn0 <hypn0@mail.ru>
+
+init("compiler", "Zortech C");
+
+function detect() {
+    if (Binary.compare("eb$$fab8....05....b9....d3e88cc903c18ed88c06....268b1e....891e....8bd82b1e....891e....268b1e....2bd881fb....72")) {
+        sVersion = "2.10";
+        sOptions = "1990 by Walter Bright";
+        bDetected = true;
+    } else if (Binary.compare("eb$$fcbe....b9....8b3e....5703f981c7....57f3a45f81c7....ffe7")) {
+        sVersion = "2.00";
+        sOptions = "1990 by Walter Bright";
+        bDetected = true;
+    } else if (Binary.compare("eb$$8cc883c0..50b8....50cbfc8e06....b0..b9....33fff2aeae75..4747be....e8")) {
+        sVersion = "2.00";
+        sOptions = "1990 by Walter Bright";
+        bDetected = true;
+    } else if (Binary.compare("eb$$fab8....05....b9....d3e88cc903c1dbe38ed88c06....8bd82b1e....891e....268b1e....2bd8")) {
+        sVersion = "4.00";
+        sOptions = "by Walter Bright";
+        bDetected = true;
+    }
+
+    return result();
+}

die/db/db/COM/_init

@@ -0,0 +1,2 @@
+var File = COM;
+var X = COM;

die/db/db/COM/aPACK.2.sg

@@ -0,0 +1,22 @@
+// Detect It Easy: detection rule file
+// Author: hypn0 <hypn0@mail.ru>
+
+init("packer", "aPACK");
+
+function detect() {
+    if (Binary.compare("be....bf....8bcffc57f3a4c3")) {
+        sVersion = "0.98-0.99 small";
+        bDetected = true;
+    } else if (Binary.compare("8cc880c4..8ec0fcb9....be....8bfe57f3a55fbe....0668....1e078ed8cb")) {
+        sVersion = "0.82b-0.94b";
+        bDetected = true;
+    } else if (Binary.compare("8cc805....8ec0598ed051be....bf....5057fcb2..bd....50a4ffd5")) {
+        sVersion = "0.61";
+        bDetected = true;
+    } else if (Binary.compare("8cc880c4..8ec0fcb9....be....8bfe57f3a55fbe....06ba....521e078ed8cb")) {
+        sVersion = "0.82-0.94";
+        bDetected = true;
+    }
+
+    return result();
+}

die/db/db/COM/aPatch.2.sg

@@ -0,0 +1,13 @@
+// Detect It Easy: detection rule file
+// Author: hypn0 <hypn0@mail.ru>
+
+init("protector", "aPatch");
+
+function detect() {
+    if (Binary.compare("e8$$$$fde8$$$$ffc75e83ee..e8$$$$5d8176......c646....eb")) {
+        sVersion = "0.05-0.33";
+        bDetected = true;
+    }
+
+    return result();
+}

die/db/db/COM/acBBS_protection.2.sg

@@ -0,0 +1,13 @@
+// Detect It Easy: detection rule file
+// Author: hypn0 <hypn0@mail.ru>
+
+init("protector", "acBBS protection p1");
+
+function detect() {
+    if (Binary.compare("e9$$$$bf....b9....870581f0....86e0faeb$$e8$$$$501e33c08ed8eb$$8706....eb$$8706....8706....1f58c3")) {
+        sOptions = "1994 by p.q.";
+        bDetected = true;
+    }
+
+    return result();
+}

die/db/db/COM/com-crypt.2.sg

@@ -0,0 +1,16 @@
+// Detect It Easy: detection rule file
+// Author: hypn0 <hypn0@mail.ru>
+
+init("protector", "com-crypt");
+
+function detect() {
+    if (Binary.compare("b8....ffe0")) {
+        sOffset = Binary.readWord(1);
+        if (Binary.compare("5756bf....b8....abb8....abb0..aa89feb9....31dbad01c329cb89d8abe2", sOffset - 0x100)) {
+            sOptions = "by BlackLight, MANtiCORE";
+            bDetected = true;
+        }
+    }
+
+    return result();
+}

die/db/db/COM/com_RLE_packer.2.sg

@@ -0,0 +1,15 @@
+// Detect It Easy: detection rule file
+// Author: hypn0 <hypn0@mail.ru>
+
+init("packer", "com RLE packer");
+
+function detect() {
+    if (Binary.compare("60be....bf....8b0e....f3a4be....bf....57b9....f3a4c3")) {
+        sOptions = "by NOP/PC";
+        bDetected = true;
+    } else if (Binary.compare("fc8cc833ff05....8ec006be....b9....57f3a40e07cb")) {
+        bDetected = true;
+    }
+
+    return result();
+}

die/db/db/COM/cryptors.2.sg

@@ -0,0 +1,214 @@
+// Detect It Easy: detection rule file
+// Author: hypn0 <hypn0@mail.ru>
+
+init("cryptor", "Cryptor");
+
+function detect() {
+    if (Binary.compare("e9$$$$60c704....c644....b9....bf....ac32018bd64a")) {
+        sVersion = "0.04";
+        sOptions = "by SkullC0DEr";
+        bDetected = true;
+    } else if (Binary.compare("e800005dbf....e8$$$$fa065733ff57078d76..b9....8004..46e2")) {
+        sOptions = "by Synopsis";
+        bDetected = true;
+    } else if (Binary.compare("eb$$fdbf....ba....33c01e8ed8a3....1fb1..525e3bfa74..ac3205aae2..eb")) {
+        sOptions = "by Min-Jei-Chen";
+        bDetected = true;
+    } else if (Binary.compare("e8$$$$eb$$8cca8eda8ec2be....bf....b9....eb$$ad2ea3....2e3136....8bc18bdef7e3eb$$2e3106....2e3116....2ea1....abe2")) {
+        sOptions = "by PHOENiX";
+        bDetected = true;
+    } else if (Binary.compare("5053515756b8....508bf0b9....b0..8bfe0004f71404..46e2")) {
+        sOptions = "by FalCoN'AleX";
+        bDetected = true;
+    } else if (Binary.compare("40429c58f6c4..74..eb....b4..be....bf....b9....68....68....68....57f3a4c3")) {
+        sOptions = "by Terrible BloodSucker //FDs Group";
+        bDetected = true;
+    } else if (Binary.compare("e9$$$$e80000fa9cfc505393584c4c3bc35b74..9de8....32e480c4..3065..47e2")) {
+        sName += ' N1';
+        sOptions = "by ZeroCoder //XG";
+        bDetected = true;
+    } else if (Binary.compare("be....b9....ac03d8e2..81fb....74..cd19be....8bfeb9....8a26....ac32c1aae2")) {
+        sOptions = "by Kai";
+        bDetected = true;
+    } else if (Binary.compare("eb$$c606......f873..e9$$$$be....bf....0633c08ec0bb....fa268b07268917a3")) {
+        sName += ' N2';
+        sOptions = "by ZeroCoder //XG";
+        bDetected = true;
+    } else if (Binary.compare("e9$$$$e800002e9c589e72..fa9cfc505393584c4c3bc35b74..9de8....32e480c4")) {
+        sOptions = "by Digital Information Pirates Group (DiPG)";
+        bDetected = true;
+    } else if (Binary.compare("'PHROZEN'fa'CREW'0d....fbfdbe....ac300481fe....77..94")) {
+        sOptions = "by Phrozen Crew";
+        bDetected = true;
+    } else if (Binary.compare("0e1fb9....be....80....301c46e2..eb")) {
+        sOptions = "by Dwolf //ROK";
+        bDetected = true;
+    } else if (Binary.compare("2e8006......eb00c3")) {
+        sName += " #1";
+        sOptions = "by Misha";
+        bDetected = true;
+    } else if (Binary.compare("2e8036....28eb00c3")) {
+        sName += " #2";
+        sOptions = "by Misha";
+        bDetected = true;
+    } else if (Binary.compare("be....e8$$$$5d8bce8d72..bf....fd5747acaa86c4ac32c4aae2..8d75..fcf98d7e..c3")) {
+        sOptions = "by TGT";
+        bDetected = true;
+    } else if (Binary.compare("e9$$$$33dbb9....d1e941b8....8b97....33c28987....924343e2..68....c3")) {
+        sOptions = "by hijaq";
+        bDetected = true;
+    } else if (Binary.compare("e9$$$$0e179c58f6c4..75..b9....b8....2bc8bf....be....8a0551b9....8ae0862432c44ee2..88054759e2..e9")) {
+        sOptions = "1996 by WildRover";
+        bDetected = true;
+    } else if (Binary.compare("668d3e....66b9........678137....6683c7..e2..e9")) {
+        sOptions = "by PCY group";
+        bDetected = true;
+    } else if (Binary.compare("e9$$$$66b8........66a3....be....8bfeb9....fcad35....f7d0abe2..68....c3")) {
+        sOptions = "by Evil Genius //rPG";
+        bDetected = true;
+    } else if (Binary.compare("e9$$$$9cfafc1e06bb....b44acd21b448bb....cd218ec0be....b9....51bf....57f3a5061fb9....5e8bfe")) {
+        sOptions = "by AliS S0fT //VCrT";
+        bDetected = true;
+    } else if (Binary.compare("e8$$$$ba....b8....cd218bd8b8....33c933d2cd2191b4..cd218bdc8b072d....89078bf05603f183ee..8904")) {
+        sVersion = "#1";
+        sOptions = "by RAZOR 1911";
+        bDetected = true;
+    } else if (Binary.compare("eb$$e8$$$$eb$$e4210c..e62133c08ed80e50558becc746......5dfa8f06....8f06....fb9c580d....509d")) {
+        sVersion = "#2";
+        sOptions = "by RAZOR 1911";
+        bDetected = true;
+    } else if (Binary.compare("'SNOWPANTHER'e9$$$$................8db7....bf....b9....f3a58db7....538ccf83c7..ad09c074..91ad")) {
+        sName += " #1";
+        sOptions = "by Snow Panther //DTG";
+        bDetected = true;
+    } else if (Binary.compare("fcbe....bf....b9....90ba....c606......90ac0fb61e....03da8a2732c4aafe06....803e......75..c606")) {
+        sOptions = "by pASkuda";
+        bDetected = true;
+    } else if (Binary.compare("e9$$$$50538bdc8cd0bc....8ed49090909090909090909090909090909033e48ed4bc....909090909090909090909090909090908ed08be35b58c606")) {
+        sOptions = "by Crack Soft";
+        bDetected = true;
+    } else if (Binary.compare("e9$$$$16179c58f6c4..74..faeb..e8$$$$58")) {
+        sVersion = "1.0";
+        sOptions = "1999 by Alex";
+        bDetected = true;
+    } else if (Binary.compare("e8$$$$33ed83ed..2ed0....5e0e8bfe81e7....f7df03fe2e893526a1....8ec0263b06....74..f92eff35")) {
+        sOptions = "by DREAMMASTER";
+        bDetected = true;
+    } else if (Binary.compare("b8....ffe0")) {
+        var nOffset = Binary.readWord(1) - 256;
+        if (Binary.compare("be....8be88bd88bf883c5..908bd04a5287d687fe5981e9....52", nOffset)) {
+            sOptions = "by BlackLight, MANtiCORE";
+            bDetected = true;
+        }
+    } else if (Binary.compare("'FALCON//TULACREW'0d....e9$$$$be....b9....33c0f7d03004eb..04..32e046e2")) {
+        sOptions = "by FALCON //UCL";
+        bDetected = true;
+    } else if (Binary.compare("bb....b9....be....301c02df86df46e2")) {
+        sName += " #1";
+        sOptions = "by dR.No";
+        bDetected = true;
+    } else if (Binary.compare("be....b9....b8....bb....33c34086c44b86fb93300446e2")) {
+        sName += " #2";
+        sOptions = "by dR.No";
+        bDetected = true;
+    } else if (Binary.compare("a3....eb$$5351525756b9....fa8bdc8cd2bc....03e1d1e94c4c5886e9d3c033c186e9f7d050e2")) {
+        sOptions = "by venus soft.";
+        bDetected = true;
+    } else if (Binary.compare("e9$$$$3aac....3a29fc1aa8....80cd..1e0e0e1f0726fe06....ba....be....81f6....80f9")) {
+        sName += " #1";
+        sOptions = "by LiGHt DRUiD //SOS";
+        bDetected = true;
+    } else if (Binary.compare("e9$$$$fd1e0e81de....89f63bf23aaf....03f423f61bf40a2d80f9..18dd0e071f03f433f081e6")) {
+        sName += " #2";
+        sOptions = "by LiGHt DRUiD //SOS";
+        bDetected = true;
+    } else if (Binary.compare("fcbe....8bfeac3206....8006......84c0aa75..be....e8")) {
+        sOptions = "by Sludge Vohaul //DAT";
+        bDetected = true;
+    } else if (Binary.compare("'[HPA]'b5..8bf98be9be....57f3a4c3")) {
+        sOptions = "by Hungarian Pirates Alliance [HPA]";
+        bDetected = true;
+    } else if (Binary.compare("bc....bb....b4..cd21bb....b9....8037..43e2..b409ba....cd21b8....cd21891e")) {
+        sOptions = "by .EXEcutor //SOS";
+        bDetected = true;
+    } else if (Binary.compare("e9$$$$e800005b8bcc8cd2fa33c08ec08ed0bc....588947..90588947..900e8bc305....508ed28be1fb")) {
+        sOptions = "1998 by Demon Magister Protection";
+        bDetected = true;
+    } else if (Binary.compare("eb$$2ea3....8cc82e0306....502eff36....cb")) {
+        sOptions = "1991 by YMI";
+        bDetected = true;
+    } else if (Binary.compare("53515256570633c08ec0fa26a1....268b16....fb075052b8....06508cca33c08ec058fa26a3....268916....fb07")) {
+        sOptions = "1991 by Elisoft";
+        bDetected = true;
+    } else if (Binary.compare("b8....5650c3")) {
+        var nOffset = Binary.readWord(1) - 256;
+        if (Binary.compare("bf....8bdeb9....8b0533c689074747434346e2..c3", nOffset)) {
+            sOptions = "by PC0R$AiR //UCL";
+            bDetected = true;
+        }
+    } else if (Binary.compare("908cc8515a54e9$$$$36c0e0..eb$$eb$$6a..e8$$$$58eb$$e8$$$$58eb$$e8$$$$eb$$2eeb$$eb$$665eeb$$eb$$7c")) {
+        sName = "Rowdy's Strong Protection {MtE}";
+        sOptions = "by Rowdy";
+        bDetected = true;
+    } else if (Binary.compare("0f011e....fbe9$$$$e90000c0c3..f8eb$$6a..c0e9..e800000f23dae8000059665e36e8")) {
+        sName = "Rowdy's Strong Protection {MtE}";
+        sOptions = "by Rowdy";
+        bDetected = true;
+    } else if (Binary.compare("e9$$$$5060bf....c706........c605..e8....5e5681c6....b9....5756ffe7")) {
+        sOptions = "1998 by StrangeLion";
+        bDetected = true;
+    } else if (Binary.compare("e8$$$$5f87f757b9....ac34..aae2..c3")) {
+        sName = "Wumpus soft lab cryptor";
+        bDetected = true;
+    } else if (Binary.compare("e8$$$$5eb9....ac32c12e8844..e2..e9")) {
+        sOptions = "by MXL //RIP";
+        bDetected = true;
+    } else if (Binary.compare("e9$$$$8d36....fd8d0e....81e9....d1e9add1c835....8944..e2..ff26")) {
+        sOptions = "1989 by Sydex";
+        bDetected = true;
+    } else if (Binary.compare("e9$$$$bb....b4..b0..8b0e....8a1728c230e28857..43fec0e2")) {
+        sOptions = "1999 by SLine";
+        bDetected = true;
+    } else if (Binary.compare("'(C)1997'00'by'00'PSH'0d0a..005b..3139287a..2850..81c6....33db8bfeb9....ad35")) {
+        sOptions = "1997 by PSH";
+        bDetected = true;
+    } else if (Binary.compare("e9$$$$bf....be....b9....b0..2e8a1c32c132d82e881d4647e2..e9")) {
+        sName = "SAGE-crypt";
+        bDetected = true;
+    } else if (Binary.compare("e9$$$$fcb0..bf....b9....263005fec047e2..b9....be....e8")) {
+        sName = "PU-Disk encryption";
+        sOptions = "1992";
+        bDetected = true;
+    } else if (Binary.compare("e9$$$$bb....8a073c..74..e8$$$$50515234..3c..74..b4..8ad0cd21e9")) {
+        sOptions = "1999 by Leon";
+        bDetected = true;
+    } else if (Binary.compare("fa'SNOW'fa'PANTHER'fabc....bf....8bf7b9....b3..ac34..d2c02ac3d2c832c3fec3aae2")) {
+        sName += " #2";
+        sOptions = "by Snow Panther //DTG";
+        bDetected = true;
+    } else if (Binary.compare("e9$$$$c704....c644....b9....5683c6..8bfeb2..b6..ac32c202d6aae2..c3")) {
+        sOptions = "1997 by Ment0R //UCL";
+        bDetected = true;
+    } else if (Binary.compare("eb$$bb....8b0f03d981c3....8be38cc88ed88ec08ed0b8....ba....cd21b3..ccb3..cc")) {
+        sOptions = "1993 by The Shadow Lord";
+        bDetected = true;
+    } else if (Binary.compare("eb$$bb....001f4beb$$001f4beb")) {
+        sName = "Crypt.Trivial.173";
+        sOptions = "1998 by SMT";
+        bDetected = true;
+    } else if (Binary.compare("'SFINKS_SOFT___'fafcb430cd21fb33c0502ec606......0783e9..3be175..26c706........b9")) {
+        sOptions = "by SFINKS SOFT";
+        bDetected = true;
+    } else if (Binary.compare("e8$$$$1e33c08ed8f716....eb$$f716....1f5ebf....57b9....ac34..aae2")) {
+        sOptions = "by R!SC";
+        bDetected = true;
+    } else if (Binary.compare("e9$$$$6033edbe....b4..bd....bf....ac32c4aa80c4..fec43bf575..33c0b9....f3ab61bf....ffe7")) {
+        sOptions = "by DarkGrey //DSA";
+        bDetected = true;
+    } else if (Binary.compare("'(C)1997'00'by'00'PSH'............................bc....6081c6....33db8bfeb9....ad35....c1c0..03d8abe2")) {
+        sOptions = "1997 by PSH";
+        bDetected = true;
+    }
+
+    return result();
+}

die/db/db/COM/envelope.2.sg

@@ -0,0 +1,13 @@
+// Detect It Easy: detection rule file
+// Author: hypn0 <hypn0@mail.ru>
+
+init("packer", "envelope");
+
+function detect() {
+    if (Binary.compare("60ba....3bd472$$be....8bfeb9....bb....fcad33c343abe2")) {
+        sOptions = "by ROWDY, St.Petersburg";
+        bDetected = true;
+    }
+
+    return result();
+}

die/db/db/COM/fds-cp.2.sg

@@ -0,0 +1,13 @@
+// Detect It Easy: detection rule file
+// Author: hypn0 <hypn0@mail.ru>
+
+init("protector", "fds-cp");
+
+function detect() {
+    if (Binary.compare("8cca2e8916....b4..8b2e....8b1e....8edaa3....8c06....891e....892e....eb")) {
+        sVersion = "0.04a";
+        bDetected = true;
+    }
+
+    return result();
+}

die/db/db/COM/integrity_checker.1.sg

@@ -0,0 +1,13 @@
+// Detect It Easy: detection rule file
+// Author: hypn0 <hypn0@mail.ru>
+
+init("other", "integrity checker");
+
+function detect() {
+    if (Binary.compare("e9$$$$505351521ea1....8ed829db43833f..75..434389dab8....cd211fb9....ba....72..89c3b4..cd21")) {
+        sOptions = "1990-92 by D.A. Martynoff";
+        bDetected = true;
+    }
+
+    return result();
+}