mirrors/Detect-It-Easy
2
0
Fork 0
mirror of https://github.com/horsicq/Detect-It-Easy.git synced 2026-06-24 01:54:08 +00:00
Code Issues Projects Releases Packages Wiki Activity

dbs_min update

Browse source
This commit is contained in:
DosX 2026-03-09 13:18:55 +03:00
commit 4a49b824e4
20 changed files with 409 additions and 383 deletions
Download patch file Download diff file Expand all files Collapse all files

BIN
dbs_min/.compiler_cache
View file

Binary file not shown.

772
dbs_min/db/Binary/ROM_1.sg
View file

File diff suppressed because it is too large Load diff

2
dbs_min/db/Binary/archive_HIP.1.sg
View file

@ -1 +1 @@
function detect(){return Binary.compare("'HIPA'000000005041434b00000090")&&(sVersion=Binary.getString(88)).match(/^[A-Za-z]{3}\s[A-Za-z]{3}\s\d{1,2}\s\d{2}:\d{2}:\d{2}\s\d{4}$/)&&(sVersion="Build date: "+sVersion,bDetected=1),result()}meta("archive","HIP archive")
function detect(){return Binary.compare("'HIPA'00000000'PACK'00000090")&&(sVersion=Binary.getString(88)).match(/^[A-Za-z]{3}\s[A-Za-z]{3}\s\d{1,2}\s\d{2}:\d{2}:\d{2}\s\d{4}$/)&&(sVersion="Build date: "+sVersion,bDetected=1),result()}meta("archive","HIP archive")

3
dbs_min/db/Binary/data_overlay_null_padding.1.sg Normal file
View file

@ -0,0 +1,3 @@
function detect(){if(!Binary.isOverlay())return result()
var e=Binary.getSize()
Binary.isZeroFilled(0,e)&&_setResult("overlay","null padding","","")}

2
dbs_min/db/Binary/format_img.VM.1.sg
View file

@ -1 +1 @@
function detect(){return(Binary.compare("'KDMV'01")||Binary.compare("'KDMV'02")||Binary.compare("'KDMV'03"))&&(bDetected=1,sVersion="v"+File.read_uint8(4)),result()}meta("format","VMWare Virtual Disk (VMDK)")
function detect(){return(Binary.compare("'KDMV'01")||Binary.compare("'KDMV'02")||Binary.compare("'KDMV'03"))&&(sVersion=File.read_uint8(4),bDetected=1),result()}meta("format","VMWare Virtual Disk (VMDK)")

0
dbs_min/db/MSDOS/BSTAR_FORTH.4.sg → dbs_min/db/MSDOS/compiler_BSTAR_FORTH.4.sg
View file

0
dbs_min/db/MSDOS/Symantec_BASIC.4.sg → dbs_min/db/MSDOS/compiler_Symantec_BASIC.4.sg
View file

0
dbs_min/db/MSDOS/Topspeed_C.4.sg → dbs_min/db/MSDOS/compiler_Topspeed_C.4.sg
View file

0
dbs_min/db/MSDOS/Turbo_Basic.4.sg → dbs_min/db/MSDOS/compiler_Turbo_Basic.4.sg
View file

0
dbs_min/db/MSDOS/Turbo_Prolog.4.sg → dbs_min/db/MSDOS/compiler_Turbo_Prolog.4.sg
View file

0
dbs_min/db/MSDOS/Tenth_Planet.2.sg → dbs_min/db/MSDOS/packer_Tenth_Planet.2.sg
View file

0
dbs_min/db/MSDOS/AVAST_CRC-Check.2.sg → dbs_min/db/MSDOS/protector_AVAST_CRC-Check.2.sg
View file

1
dbs_min/db/MSDOS/runtime_VROOMM.4.sg Normal file
View file

@ -0,0 +1 @@
function detect(){return MSDOS.compareOverlay("46424f56")&&(bDetected=1),result()}meta("runtime","VROOMM (Virtual Real-time Object-Oriented Memory)")

0
dbs_min/db/MSDOS/PKZIP_mini-sfx.1.sg → dbs_min/db/MSDOS/sfx_PKZIP_mini-sfx.1.sg
View file

2
dbs_min/db/PE/compiler_PerlApp.1.sg
View file

@ -1,2 +1,2 @@
function detect(){if(PE.compareEP("558bec6a..68........68........64a1........50648925........83ec..5356578965..8365....6a..ff15"))for(var e=0;e<PE.getNumberOfResources();e++)if("232"==PE.resource[e].Type&&PE.compare("ff'BFS'01",PE.resource[e].Offset)){bDetected=1
function detect(){if(PE.compareEP("558bec6a..68........68........64a1........50648925........83ec..5356578965..8365....6a..ff15"))for(var e=0;e<PE.getNumberOfResources();e++)if(("232"==PE.resource[e].Type||"BFS"==PE.resource[e].Name)&&PE.compare("ff'BFS'01",PE.resource[e].Offset)){bDetected=1
break}return sLang="Perl",result()}meta("compiler","PerlApp")

1
dbs_min/db/PE/compiler_TASM32.4.sg Normal file
View file

@ -0,0 +1 @@
function detect(){return bTASM32&&(2==PE.getMajorLinkerVersion()&&25==PE.getMinorLinkerVersion()&&(sVersion="5.x"),bDetected=1),sLang="ASMx86",result()}meta("compiler","TASM32"),includeScript("Borland"),includeScript("TASM32")

3
dbs_min/db/PE/debug_data.5.sg Normal file
View file

@ -0,0 +1,3 @@
function detectUnknownDebugData(e,t){var a
t<2||(21243===PE.readWord(e)?(t=PE.readByte(e+2),a=PE.readByte(e+3),t=(10*(t>>4)+(15&t)).toString(),a=(10*(a>>4)+(15&a)).toString()+"."+t,t=PE.readWord(e+14),_setResult("debug data","Borland TDS",a,t?t+" symbols":"")):PE.compare("'FB09'",e)?_setResult("debug data","Borland TDS","","Delphi TDS"):PE.compare("'FB0A'",e)&&_setResult("debug data","Borland TDS","","C++ TDS"))}function detect(){for(var e=PE.getNumberOfDebugDataRecords(),t=0;t<e;t++){var a=PE.getDebugDataType(t)
"UNKNOWN"===a?detectUnknownDebugData(PE.getDebugDataOffset(t),PE.getDebugDataSize(t)):_setResult("debug data",a,"","")}}

2
dbs_min/db/PE/linkers.6.sg
View file

@ -1,3 +1,3 @@
function detect(){sVersion=PE.getCompilerVersion(),PE.compare("'MZ'90000300000004000000FFFF0000B800000000000000400000000000000000000000000000000000000000000000000000000000000000000000800000000E1FBA0E00B409CD21B8014CCD21'This program cannot be run in DOS mode.\r\r\n$'0000000000000'PE'0000")?(e=PE.getMajorLinkerVersion(),r=PE.getMinorLinkerVersion(),2==e?55==r?(sName="LCC Linker",sVersion+="*",sLang="C",bDetected=1):r<=40||56==r?(sName="GNU Linker ld (GNU Binutils)",56==r&&(sVersion+="*"),bDetected=1):50==r&&(sName="Polink",sVersion+="*",bDetected=1):1==e&&3==r&&(sName="LCC Linker",bDetected=1)):PE.compare("'This program must be run under Win'....0D0A24..00",80)?(sName="Turbo Linker","2.25"==sVersion&&(sVersion+="*, Delphi",sLang="Object Pascal (Delphi)"),bDetected=1):PE.compare("FB..'jr'",30)?(sName="Turbo Linker",sVersion=(PE.readByte(31)/16).toFixed(1),PE.compare("'32STUB'",512)&&(sOptions=sOptions.append("RTM32")),bDetected=1):PE.compare("'his is a Windows '",79)?(sName="Watcom Linker",sVersion+="*",bDetected=1):PE.compare("'MZ'6c000100000002000000ffff000000000000110000004000000000000000'Win'....' Program!\r\n\b409ba0001cd21b44ccd2160000000'GoLink, GoAsm www.GoDevTool.com'00")&&(sName="GoLink",bDetected=1)
function detect(){sVersion=PE.getCompilerVersion(),PE.compare("'MZ'90000300000004000000FFFF0000B800000000000000400000000000000000000000000000000000000000000000000000000000000000000000800000000E1FBA0E00B409CD21B8014CCD21'This program cannot be run in DOS mode.\r\r\n$'0000000000000'PE'0000")?(e=PE.getMajorLinkerVersion(),r=PE.getMinorLinkerVersion(),2==e?55==r?(sName="LCC Linker",sVersion+="*",sLang="C",bDetected=1):r<=40||56==r?(sName="GNU Linker ld (GNU Binutils)",56==r&&(sVersion+="*"),bDetected=1):50==r&&(sName="Polink",sVersion+="*",bDetected=1):1==e&&3==r&&(sName="LCC Linker",bDetected=1)):PE.compare("'This program must be run under Win'....0D0A24..00",80)?(sName="Turbo Linker","2.25"==sVersion&&PE.isSectionNamePresent(".tls")&&(sLang="Object Pascal (Delphi)"),bDetected=1):PE.compare("FB..'jr'",30)?(sName="Turbo Linker",sVersion=(PE.readByte(31)/16).toFixed(1),PE.compare("'32STUB'",512)&&(sOptions=sOptions.append("RTM32")),bDetected=1):PE.compare("'his is a Windows '",79)?(sName="Watcom Linker",sVersion+="*",bDetected=1):PE.compare("'MZ'6c000100000002000000ffff000000000000110000004000000000000000'Win'....' Program!\r\n\b409ba0001cd21b44ccd2160000000'GoLink, GoAsm www.GoDevTool.com'00")&&(sName="GoLink",bDetected=1)
var e=PE.getMajorLinkerVersion(),r=PE.getMinorLinkerVersion()
return 2==e&&18==r?(sName="Watcom Linker",bDetected=1):2==e&&52==r?(sName="PowerBASIC Linker",sLang="Basic",bDetected=1):255==e&&255==r?(sName="IBM VisualAge",bDetected=1):7==e&&32==r&&(sName="Symantec C/C++",sVersion="7.2",bDetected=1),"Borland Linker"==sName&&15<PE.getMajorLinkerVersion()&&(sVersion+="*"),(bFASM||bRosASM||bSpASM||bFPC)&&(bDetected=0),result()}meta("linker"),includeScript("FASM"),includeScript("RosASM"),includeScript("SpASM"),includeScript("FPC")

2
dbs_min/db/TASM32 Normal file
View file

@ -0,0 +1,2 @@
var bTASM32
void 0===bTASM32&&(bTASM32=!1,!PE||!PE.compare("'This program must be run under Win'....0D0A24..00",80)||bBorlandC||PE.resource.PACKAGEINFO||PE.resource.DVCLAL||(bTASM32=!0))

2
dbs_min/timestamp.log
View file

@ -1 +1 @@
Generated: 01/03/2026
Generated: 09/03/2026