mirror of
https://github.com/horsicq/Detect-It-Easy.git
synced 2026-06-24 01:54:08 +00:00
Reclassify and rename MSDOS rule files
Rename multiple files in db/MSDOS to add category prefixes (e.g. converter_, extender_, packer_, protector_, self-displayer_) for clearer organization. Remove executable bit on several .sg files (mode 100755 -> 100644) and apply minor whitespace/line-ending normalization in a few detection rules (no functional changes).
This commit is contained in:
DosX
parent
798b437caa
commit
9a03a2c257
10 changed files with 84 additions and 84 deletions
60
db/MSDOS/DOS_16M.0a.sg → db/MSDOS/extender_DOS_16M.0a.sg
Executable file → Normal file
60
db/MSDOS/DOS_16M.0a.sg → db/MSDOS/extender_DOS_16M.0a.sg
Executable file → Normal file
|
|
@ -1,31 +1,31 @@
|
|||
// Detect It Easy: detection rule file
|
||||
// Author: hypn0 <hypn0@mail.ru>
|
||||
|
||||
meta("extender", "DOS/16M DOS Extender");
|
||||
|
||||
function detect() {
|
||||
if (MSDOS.compareEP("bf....8ed781c4....be....2bf73689......8bc6b1..d3e04836a3....be....468936....8cc32bdef7dbb44acd21368c......1607fcbf....b9....2bcf33c0")) {
|
||||
sOptions = "1991 by Rational Systems, Inc.";
|
||||
bDetected = true;
|
||||
} else if (MSDOS.compareEP("bf....8ec78ed7bc....368c......ff36....268f......be....ac8ad8b7..88388b3e....4f8ec726a1....36f726....4836a3....8e06....33c08bc8f7d18bf8f2ae26")) {
|
||||
sOptions = "1994 by Tenberry Software Inc.";
|
||||
bDetected = true;
|
||||
} else if (MSDOS.compareEP("bf....8ec78ed7bc....368c1e....ff36....368f06....be....ac8ad8b7..88388b3e....4f8ec726a1....36f726....4836a3....8e06....33c08bc8f7d18bf8f2ae26")) {
|
||||
sOptions = "1995 by Tenberry Software";
|
||||
bDetected = true;
|
||||
} else if (MSDOS.compareEP("bf....8ec78ed7bc....368c1e....ff36....368f06....be....ac8ad8b7..883816078b3e....4f8ec726a1....36f726....4836a3....8e06....33c08bc8f7d18bf8f2ae26")) {
|
||||
sOptions = "1994 by Rational Systems, Inc.";
|
||||
bDetected = true;
|
||||
} else if (MSDOS.compareEP("bf....8ec78ed7bc....368c1e....1607be....ac98508b3e....4f8ec726a1....c1e0..4836a3....8e06....33c08bc8f7d18bf8f2ae26")) {
|
||||
sOptions = "1993 by Rational Systems, Inc.";
|
||||
bDetected = true;
|
||||
} else if (MSDOS.compareEP("bf....8ed781c4....be....2bf7368926....368926....8bc6b1..d3e04836a3....be....468936....8cc32bdef7dbb4..cd21")) {
|
||||
sOptions = "1989 by Rational Systems, Inc.";
|
||||
bDetected = true;
|
||||
} else if (MSDOS.compareEP("BF....8ED781C4....BE....2BF78BC6B1..D3E04836A3....368926....BE....468936....8CC32BDEF7DBB4..CD21368C")) {
|
||||
sOptions = "1987-1992 by Rational Systems, Inc.";
|
||||
bDetected = true;
|
||||
}
|
||||
|
||||
return result();
|
||||
// Detect It Easy: detection rule file
|
||||
// Author: hypn0 <hypn0@mail.ru>
|
||||
|
||||
meta("extender", "DOS/16M DOS Extender");
|
||||
|
||||
function detect() {
|
||||
if (MSDOS.compareEP("bf....8ed781c4....be....2bf73689......8bc6b1..d3e04836a3....be....468936....8cc32bdef7dbb44acd21368c......1607fcbf....b9....2bcf33c0")) {
|
||||
sOptions = "1991 by Rational Systems, Inc.";
|
||||
bDetected = true;
|
||||
} else if (MSDOS.compareEP("bf....8ec78ed7bc....368c......ff36....268f......be....ac8ad8b7..88388b3e....4f8ec726a1....36f726....4836a3....8e06....33c08bc8f7d18bf8f2ae26")) {
|
||||
sOptions = "1994 by Tenberry Software Inc.";
|
||||
bDetected = true;
|
||||
} else if (MSDOS.compareEP("bf....8ec78ed7bc....368c1e....ff36....368f06....be....ac8ad8b7..88388b3e....4f8ec726a1....36f726....4836a3....8e06....33c08bc8f7d18bf8f2ae26")) {
|
||||
sOptions = "1995 by Tenberry Software";
|
||||
bDetected = true;
|
||||
} else if (MSDOS.compareEP("bf....8ec78ed7bc....368c1e....ff36....368f06....be....ac8ad8b7..883816078b3e....4f8ec726a1....36f726....4836a3....8e06....33c08bc8f7d18bf8f2ae26")) {
|
||||
sOptions = "1994 by Rational Systems, Inc.";
|
||||
bDetected = true;
|
||||
} else if (MSDOS.compareEP("bf....8ec78ed7bc....368c1e....1607be....ac98508b3e....4f8ec726a1....c1e0..4836a3....8e06....33c08bc8f7d18bf8f2ae26")) {
|
||||
sOptions = "1993 by Rational Systems, Inc.";
|
||||
bDetected = true;
|
||||
} else if (MSDOS.compareEP("bf....8ed781c4....be....2bf7368926....368926....8bc6b1..d3e04836a3....be....468936....8cc32bdef7dbb4..cd21")) {
|
||||
sOptions = "1989 by Rational Systems, Inc.";
|
||||
bDetected = true;
|
||||
} else if (MSDOS.compareEP("BF....8ED781C4....BE....2BF78BC6B1..D3E04836A3....368926....BE....468936....8CC32BDEF7DBB4..CD21368C")) {
|
||||
sOptions = "1987-1992 by Rational Systems, Inc.";
|
||||
bDetected = true;
|
||||
}
|
||||
|
||||
return result();
|
||||
}
|
||||
36
db/MSDOS/DOS_32A.0a.sg → db/MSDOS/extender_DOS_32A.0a.sg
Executable file → Normal file
36
db/MSDOS/DOS_32A.0a.sg → db/MSDOS/extender_DOS_32A.0a.sg
Executable file → Normal file
|
|
@ -1,21 +1,21 @@
|
|||
// Detect It Easy: detection rule file
|
||||
// Author: hypn0 <hypn0@mail.ru>
|
||||
|
||||
meta("extender", "DOS/32A DOS Extender");
|
||||
|
||||
function detect() {
|
||||
if (MSDOS.compareEP("fb0e1f8c1e....8c06....8c16....26a1....a3....fce8....e8....e8....8cd0268b36....05")) {
|
||||
sVersion = "R9-07.0101.2011";
|
||||
sOptions = "1996-98, 2002 by Narech Koumar (Supernar Systems, Ltd.)";
|
||||
bDetected = true;
|
||||
} else if (MSDOS.compareEP("0e1f8cc08cd3a3....2bd88bc4d1e8d1e8")) {
|
||||
sVersion = "R8-07.0101.0076";
|
||||
sOptions = "1996-98, 2002 by Narech Koumar (Supernar Systems, Ltd.)";
|
||||
bDetected = true;
|
||||
} else if (MSDOS.compareEP("0e1f8c1e....8c06....8c16....26a1....a3....fbfce8")) {
|
||||
sVersion = "04-20-06";
|
||||
sOptions = "1996-2006 by Narech Koumar (Supernar Systems, Ltd.)";
|
||||
bDetected = true;
|
||||
// Detect It Easy: detection rule file
|
||||
// Author: hypn0 <hypn0@mail.ru>
|
||||
|
||||
meta("extender", "DOS/32A DOS Extender");
|
||||
|
||||
function detect() {
|
||||
if (MSDOS.compareEP("fb0e1f8c1e....8c06....8c16....26a1....a3....fce8....e8....e8....8cd0268b36....05")) {
|
||||
sVersion = "R9-07.0101.2011";
|
||||
sOptions = "1996-98, 2002 by Narech Koumar (Supernar Systems, Ltd.)";
|
||||
bDetected = true;
|
||||
} else if (MSDOS.compareEP("0e1f8cc08cd3a3....2bd88bc4d1e8d1e8")) {
|
||||
sVersion = "R8-07.0101.0076";
|
||||
sOptions = "1996-98, 2002 by Narech Koumar (Supernar Systems, Ltd.)";
|
||||
bDetected = true;
|
||||
} else if (MSDOS.compareEP("0e1f8c1e....8c06....8c16....26a1....a3....fbfce8")) {
|
||||
sVersion = "04-20-06";
|
||||
sOptions = "1996-2006 by Narech Koumar (Supernar Systems, Ltd.)";
|
||||
bDetected = true;
|
||||
}
|
||||
|
||||
return result();
|
||||
30
db/MSDOS/EXE_Packer.2.sg → db/MSDOS/packer_EXE_Packer.2.sg
Executable file → Normal file
30
db/MSDOS/EXE_Packer.2.sg → db/MSDOS/packer_EXE_Packer.2.sg
Executable file → Normal file
|
|
@ -1,16 +1,16 @@
|
|||
// Detect It Easy: detection rule file
|
||||
// Author: horsicq <horsicq@gmail.com>
|
||||
|
||||
meta("packer", "EXE Packer");
|
||||
|
||||
function detect() {
|
||||
if (MSDOS.compareEP("1E068CC383....2E........B9....8CC88ED88BF14E8BFE")) {
|
||||
sVersion = "7.0";
|
||||
bDetected = true;
|
||||
} else if (MSDOS.compareEP("EB$$1E068CC383....0E1F011E....011E....BE....B9....FCAD3BC174")) {
|
||||
sVersion = "7.0";
|
||||
bDetected = true;
|
||||
}
|
||||
|
||||
return result();
|
||||
// Detect It Easy: detection rule file
|
||||
// Author: horsicq <horsicq@gmail.com>
|
||||
|
||||
meta("packer", "EXE Packer");
|
||||
|
||||
function detect() {
|
||||
if (MSDOS.compareEP("1E068CC383....2E........B9....8CC88ED88BF14E8BFE")) {
|
||||
sVersion = "7.0";
|
||||
bDetected = true;
|
||||
} else if (MSDOS.compareEP("EB$$1E068CC383....0E1F011E....011E....BE....B9....FCAD3BC174")) {
|
||||
sVersion = "7.0";
|
||||
bDetected = true;
|
||||
}
|
||||
|
||||
return result();
|
||||
}
|
||||
42
db/MSDOS/Guardian_Angel.2.sg → db/MSDOS/protector_Guardian_Angel.2.sg
Executable file → Normal file
42
db/MSDOS/Guardian_Angel.2.sg → db/MSDOS/protector_Guardian_Angel.2.sg
Executable file → Normal file
|
|
@ -1,22 +1,22 @@
|
|||
// Detect It Easy: detection rule file
|
||||
// Author: horsicq <horsicq@gmail.com>
|
||||
|
||||
meta("protector", "Guardian Angel");
|
||||
|
||||
function detect() {
|
||||
if (MSDOS.compareEP("068cc88ed88ec0fc......8be8e4210c..eb")) {
|
||||
sVersion = "1.0";
|
||||
bDetected = true;
|
||||
} else if (MSDOS.compareEP("068CC88ED88EC0FCBF....EB")) {
|
||||
sVersion = "1.0";
|
||||
bDetected = true;
|
||||
} else if (MSDOS.compareEP("068CC88ED88EC0FCBB....EB")) {
|
||||
sVersion = "1.0";
|
||||
bDetected = true;
|
||||
} else if (MSDOS.compareEP("068CC88ED88EC0FCBE....EB")) {
|
||||
sVersion = "1.0";
|
||||
bDetected = true;
|
||||
}
|
||||
|
||||
return result();
|
||||
// Detect It Easy: detection rule file
|
||||
// Author: horsicq <horsicq@gmail.com>
|
||||
|
||||
meta("protector", "Guardian Angel");
|
||||
|
||||
function detect() {
|
||||
if (MSDOS.compareEP("068cc88ed88ec0fc......8be8e4210c..eb")) {
|
||||
sVersion = "1.0";
|
||||
bDetected = true;
|
||||
} else if (MSDOS.compareEP("068CC88ED88EC0FCBF....EB")) {
|
||||
sVersion = "1.0";
|
||||
bDetected = true;
|
||||
} else if (MSDOS.compareEP("068CC88ED88EC0FCBB....EB")) {
|
||||
sVersion = "1.0";
|
||||
bDetected = true;
|
||||
} else if (MSDOS.compareEP("068CC88ED88EC0FCBE....EB")) {
|
||||
sVersion = "1.0";
|
||||
bDetected = true;
|
||||
}
|
||||
|
||||
return result();
|
||||
}
|
||||
Loading…
Add table
Add a link
Reference in a new issue