mirror of
https://github.com/horsicq/Detect-It-Easy.git
synced 2026-06-24 01:54:08 +00:00
Rename multiple files under db/COM to add explicit category prefixes and improve consistency/organization. Renamed files: Turbo_C++.4.sg → compiler_Turbo_C++.4.sg; Turbo_C.4.sg → compiler_Turbo_C.4.sg; Turbo_Pascal.4.sg → compiler_Turbo_Pascal.4.sg; Watcom_C.4.sg → compiler_Watcom_C.4.sg; Zbikowski_C.4.sg → compiler_Zbikowski_C.4.sg; Zortech_C.4.sg → compiler_Zortech_C.4.sg; Cheat_packer.2.sg → packer_Cheat_packer.2.sg; com_RLE_packer.2.sg → packer_com_RLE_packer.2.sg; Keygen_crypt.2.sg → protector_Keygen_crypt.2.sg; virus_virus.1.sg → virus.1.sg.
34 lines
No EOL
1.2 KiB
JavaScript
34 lines
No EOL
1.2 KiB
JavaScript
// Detect It Easy: detection rule file
|
|
// Author: hypn0 <hypn0@mail.ru>
|
|
|
|
meta("compiler", "Turbo Pascal");
|
|
|
|
function detect() {
|
|
if (Binary.compare("e9$$$$e8$$$$e8$$$$b430e8$$$$80fc..74..80fc..74..80fc..74..80fc..74..55")) {
|
|
sVersion = "3.0";
|
|
sOptions = "1985";
|
|
bDetected = true;
|
|
} else if (Binary.compare("e9$$$$e8$$$$..8cc82e03....2e03....2e03....2e3b06....76")) {
|
|
sVersion = "3.0";
|
|
sOptions = "1985";
|
|
bDetected = true;
|
|
} else if (Binary.compare("e9$$$$eb$$e8....b8....b1..d3e88cca03d08eda2ea1....2bc2a3")) {
|
|
sVersion = "3.0";
|
|
sOptions = "1985";
|
|
bDetected = true;
|
|
} else if (Binary.compare("e9$$$$e9$$$$b8....b1..d3e88cca03d08eda2ea1....2bc2a3")) {
|
|
sVersion = "3.0";
|
|
sOptions = "1985";
|
|
bDetected = true;
|
|
} else if (Binary.compare("e9$$$$c706............................8b0c39c174..4e4ef3a5")) {
|
|
sVersion = "3.0";
|
|
sOptions = "1985";
|
|
bDetected = true;
|
|
} else if (Binary.compare("e9$$$$e8$$$$1ee8$$$$5051b8....b1..d3e88cc903c18ed85958c3")) {
|
|
sVersion = "3.0";
|
|
sOptions = "1985";
|
|
bDetected = true;
|
|
}
|
|
|
|
return result();
|
|
} |