You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
99 lines
4.0 KiB
99 lines
4.0 KiB
6 years ago
|
diff --git a/magic/Magdir/msdos b/magic/Magdir/msdos
|
||
|
|
index d1a19a6..9e89f11 100644
|
||
|
|
--- a/magic/Magdir/msdos
|
||
|
|
+++ b/magic/Magdir/msdos
|
||
|
|
@@ -319,9 +319,9 @@
|
||
|
|
# but it isn't feasible to match all COM files since there must be at least
|
||
|
|
# two dozen different one-byte "magics".
|
||
|
|
# test too generic ?
|
||
|
|
-0 byte 0xe9 DOS executable (COM)
|
||
|
|
->0x1FE leshort 0xAA55 \b, boot code
|
||
|
|
->6 string SFX\ of\ LHarc (%s)
|
||
|
|
+#0 byte 0xe9 DOS executable (COM)
|
||
|
|
+#>0x1FE leshort 0xAA55 \b, boot code
|
||
|
|
+#>6 string SFX\ of\ LHarc (%s)
|
||
|
|
|
||
|
|
# DOS device driver updated by Joerg Jenderek at May 2011
|
||
|
|
# http://maben.homeip.net/static/S100/IBM/software/DOS/DOS%20techref/CHAPTER.009
|
||
|
|
@@ -396,28 +396,28 @@
|
||
|
|
#>4 uleshort&0x4000 0x4000 \b,control strings-support)
|
||
|
|
|
||
|
|
# test too generic ?
|
||
|
|
-0 byte 0x8c DOS executable (COM)
|
||
|
|
+#0 byte 0x8c DOS executable (COM)
|
||
|
|
# updated by Joerg Jenderek at Oct 2008
|
||
|
|
0 ulelong 0xffff10eb DR-DOS executable (COM)
|
||
|
|
# byte 0xeb conflicts with "sequent" magic leshort 0xn2eb
|
||
|
|
-0 ubeshort&0xeb8d >0xeb00
|
||
|
|
+#0 ubeshort&0xeb8d >0xeb00
|
||
|
|
# DR-DOS STACKER.COM SCREATE.SYS missed
|
||
|
|
->0 byte 0xeb
|
||
|
|
->>0x1FE leshort 0xAA55 DOS executable (COM), boot code
|
||
|
|
->>85 string UPX DOS executable (COM), UPX compressed
|
||
|
|
->>4 string \ $ARX DOS executable (COM), ARX self-extracting archive
|
||
|
|
->>4 string \ $LHarc DOS executable (COM), LHarc self-extracting archive
|
||
|
|
->>0x20e string SFX\ by\ LARC DOS executable (COM), LARC self-extracting archive
|
||
|
|
+#>0 byte 0xeb
|
||
|
|
+#>>0x1FE leshort 0xAA55 DOS executable (COM), boot code
|
||
|
|
+#>>85 string UPX DOS executable (COM), UPX compressed
|
||
|
|
+#>>4 string \ $ARX DOS executable (COM), ARX self-extracting archive
|
||
|
|
+#>>4 string \ $LHarc DOS executable (COM), LHarc self-extracting archive
|
||
|
|
+#>>0x20e string SFX\ by\ LARC DOS executable (COM), LARC self-extracting archive
|
||
|
|
# updated by Joerg Jenderek at Oct 2008
|
||
|
|
#0 byte 0xb8 COM executable
|
||
|
|
-0 uleshort&0x80ff 0x00b8
|
||
|
|
+#0 uleshort&0x80ff 0x00b8
|
||
|
|
# modified by Joerg Jenderek
|
||
|
|
->1 lelong !0x21cd4cff COM executable for DOS
|
||
|
|
+#>1 lelong !0x21cd4cff COM executable for DOS
|
||
|
|
# http://syslinux.zytor.com/comboot.php
|
||
|
|
# (32-bit COMBOOT) programs *.C32 contain 32-bit code and run in flat-memory 32-bit protected mode
|
||
|
|
# start with assembler instructions mov eax,21cd4cffh
|
||
|
|
-0 uleshort&0xc0ff 0xc0b8
|
||
|
|
->1 lelong 0x21cd4cff COM executable (32-bit COMBOOT)
|
||
|
|
+#0 uleshort&0xc0ff 0xc0b8
|
||
|
|
+#>1 lelong 0x21cd4cff COM executable (32-bit COMBOOT)
|
||
|
|
# syslinux:doc/comboot.txt
|
||
|
|
# A COM32R program must start with the byte sequence B8 FE 4C CD 21 (mov
|
||
|
|
# eax,21cd4cfeh) as a magic number.
|
||
|
|
@@ -437,27 +437,27 @@
|
||
|
|
# GRR search is not working
|
||
|
|
#2 search/28 \xcd\x21 COM executable for MS-DOS
|
||
|
|
#WHICHFAT.cOM
|
||
|
|
-2 string \xcd\x21 COM executable for DOS
|
||
|
|
+#2 string \xcd\x21 COM executable for DOS
|
||
|
|
#DELTREE.cOM DELTREE2.cOM
|
||
|
|
-4 string \xcd\x21 COM executable for DOS
|
||
|
|
+#4 string \xcd\x21 COM executable for DOS
|
||
|
|
#IFMEMDSK.cOM ASSIGN.cOM COMP.cOM
|
||
|
|
-5 string \xcd\x21 COM executable for DOS
|
||
|
|
+#5 string \xcd\x21 COM executable for DOS
|
||
|
|
#DELTMP.COm HASFAT32.cOM
|
||
|
|
-7 string \xcd\x21
|
||
|
|
->0 byte !0xb8 COM executable for DOS
|
||
|
|
+#7 string \xcd\x21
|
||
|
|
+#>0 byte !0xb8 COM executable for DOS
|
||
|
|
#COMP.cOM MORE.COm
|
||
|
|
-10 string \xcd\x21
|
||
|
|
->5 string !\xcd\x21 COM executable for DOS
|
||
|
|
+#10 string \xcd\x21
|
||
|
|
+#>5 string !\xcd\x21 COM executable for DOS
|
||
|
|
#comecho.com
|
||
|
|
-13 string \xcd\x21 COM executable for DOS
|
||
|
|
+#13 string \xcd\x21 COM executable for DOS
|
||
|
|
#HELP.COm EDIT.coM
|
||
|
|
-18 string \xcd\x21 COM executable for MS-DOS
|
||
|
|
+#18 string \xcd\x21 COM executable for MS-DOS
|
||
|
|
#NWRPLTRM.COm
|
||
|
|
-23 string \xcd\x21 COM executable for MS-DOS
|
||
|
|
+#23 string \xcd\x21 COM executable for MS-DOS
|
||
|
|
#LOADFIX.cOm LOADFIX.cOm
|
||
|
|
-30 string \xcd\x21 COM executable for MS-DOS
|
||
|
|
+#30 string \xcd\x21 COM executable for MS-DOS
|
||
|
|
#syslinux.com 3.11
|
||
|
|
-70 string \xcd\x21 COM executable for DOS
|
||
|
|
+#70 string \xcd\x21 COM executable for DOS
|
||
|
|
# many compressed/converted COMs start with a copy loop instead of a jump
|
||
|
|
0x6 search/0xa \xfc\x57\xf3\xa5\xc3 COM executable for MS-DOS
|
||
|
|
0x6 search/0xa \xfc\x57\xf3\xa4\xc3 COM executable for DOS
|