1 --- file-4.17/magic/Magdir/msdos.orig 2006-03-02 22:50:36.000000000 +0100
2 +++ file-4.17/magic/Magdir/msdos 2006-07-25 13:13:03.874440000 +0200
5 # .BAT files (Daniel Quinlan, quinlan@yggdrasil.com)
6 # updated by Joerg Jenderek
8 ->1 string/cB \ echo\ off MS-DOS batch file text
9 ->1 string/cB echo\ off MS-DOS batch file text
10 ->1 string/cB rem\ MS-DOS batch file text
11 ->1 string/cB set\ MS-DOS batch file text
12 +0 string/cB @\ echo\ off MS-DOS batch file text
13 +0 string/cB @echo\ off MS-DOS batch file text
14 +0 string/cB @rem\ MS-DOS batch file text
15 +0 string/cB @set\ MS-DOS batch file text
18 # OS/2 batch files are REXX. the second regex is a bit generic, oh well
20 # Uncommenting only the first two lines will cover about 2/3 of COM files,
21 # but it isn't feasible to match all COM files since there must be at least
22 # two dozen different one-byte "magics".
23 -0 byte 0xe9 DOS executable (COM)
24 ->0x1FE leshort 0xAA55 \b, boot code
25 ->6 string SFX\ of\ LHarc (%s)
27 +#>0x1FE leshort 0xAA55 DOS executable (COM), boot code
28 +#>6 string SFX\ of\ LHarc DOS executable (COM) (%s)
29 0 belong 0xffffffff DOS executable (device driver)
35 >>>>77 string x \b, name: %.8s
36 -0 byte 0x8c DOS executable (COM)
37 # 0xeb conflicts with "sequent" magic
38 -0 byte 0xeb DOS executable (COM)
39 ->0x1FE leshort 0xAA55 \b, boot code
40 ->85 string UPX \b, UPX compressed
41 ->4 string \ $ARX \b, ARX self-extracting archive
42 ->4 string \ $LHarc \b, LHarc self-extracting archive
43 ->0x20e string SFX\ by\ LARC \b, LARC self-extracting archive
44 -0 byte 0xb8 COM executable
46 +#>0x1FE leshort 0xAA55 DOS executable (COM), boot code
47 +#>85 string UPX DOS executable (COM), UPX compressed
48 +#>4 string \ $ARX DOS executable (COM), ARX self-extracting archive
49 +#>4 string \ $LHarc DOS executable (COM), LHarc self-extracting archive
50 +#>0x20e string SFX\ by\ LARC DOS executable (COM), LARC self-extracting archive
52 # modified by Joerg Jenderek
53 ->1 lelong !0x21cd4cff for DOS
54 +#>1 lelong !0x21cd4cff COM executale for DOS
55 # http://syslinux.zytor.com/comboot.php
56 # (32-bit COMBOOT) programs *.C32 contain 32-bit code and run in flat-memory 32-bit protected mode
57 # start with assembler instructions mov eax,21cd4cffh
58 ->1 lelong 0x21cd4cff (32-bit COMBOOT)
59 +#>1 lelong 0x21cd4cff COM executable (32-bit COMBOOT)
61 >4 string \x77\x02\xcd\x20\xb9
62 >>36 string UPX! FREE-DOS executable (COM), UPX compressed
63 252 string Must\ have\ DOS\ version DR-DOS executable (COM)
64 # GRR search is not working
65 #2 search/28 \xcd\x21 COM executable for MS-DOS
67 -2 string \xcd\x21 COM executable for DOS
68 -#DELTREE.cOM DELTREE2.cOM
69 -4 string \xcd\x21 COM executable for DOS
70 -#IFMEMDSK.cOM ASSIGN.cOM COMP.cOM
71 -5 string \xcd\x21 COM executable for DOS
73 +#2 string \xcd\x21 COM executable for DOS
74 +##DELTREE.cOM DELTREE2.cOM
75 +#4 string \xcd\x21 COM executable for DOS
76 +##IFMEMDSK.cOM ASSIGN.cOM COMP.cOM
77 +#5 string \xcd\x21 COM executable for DOS
78 #DELTMP.COm HASFAT32.cOM
80 ->0 byte !0xb8 COM executable for DOS
82 +#>0 byte !0xb8 COM executable for DOS
85 ->5 string !\xcd\x21 COM executable for DOS
87 +#>5 string !\xcd\x21 COM executable for DOS
89 -13 string \xcd\x21 COM executable for DOS
90 +#13 string \xcd\x21 COM executable for DOS
92 -18 string \xcd\x21 COM executable for MS-DOS
93 +#18 string \xcd\x21 COM executable for MS-DOS
95 -23 string \xcd\x21 COM executable for MS-DOS
96 +#23 string \xcd\x21 COM executable for MS-DOS
97 #LOADFIX.cOm LOADFIX.cOm
98 -30 string \xcd\x21 COM executable for MS-DOS
99 +#30 string \xcd\x21 COM executable for MS-DOS
101 -70 string \xcd\x21 COM executable for DOS
102 +#70 string \xcd\x21 COM executable for DOS
103 # many compressed/converted COMs start with a copy loop instead of a jump
104 0x6 search/0xa \xfc\x57\xf3\xa5\xc3 COM executable for MS-DOS
105 0x6 search/0xa \xfc\x57\xf3\xa4\xc3 COM executable for DOS