die-python 0.4.0__cp313-abi3-win_amd64.whl

db/MSDOS/Bitlok.2.sg

@@ -0,0 +1,14 @@
+// Detect It Easy: detection rule file
+// Author: hypn0 <hypn0@mail.ru>
+
+init("protector", "BITLOK");
+
+function detect() {
+    if (MSDOS.compareEP("eb$$b430cd213c..72..2e8c1e....8cdb83c3..2e011e....0e1feb$$33c0eb$$bf....eb$$b9....eb$$51eb$$2bcf")) {
+        sVersion = "3.1";
+        sOptions = "by Yellow Rose Software Workgroup";
+        bDetected = true;
+    }
+
+    return result();
+}

db/MSDOS/Black_fist.2.sg

@@ -0,0 +1,13 @@
+// Detect It Easy: detection rule file
+// Author: hypn0 <hypn0@mail.ru>
+
+init("packer", "BlacK FiST");
+
+function detect() {
+    if (MSDOS.compareEP("eb$$061ee8....1f072ea1....2e8b1e....8cd12e2b0e....fa8ed1fb5053cb")) {
+        sOptions = "1993";
+        bDetected = true;
+    }
+
+    return result();
+}

db/MSDOS/Blinker.0a.sg

@@ -0,0 +1,25 @@
+// Detect It Easy: detection rule file
+// Author: Jason Hood <jadoxa@yahoo.com.au>
+
+init("extender", "Blinker");
+
+function detect() {
+    if (MSDOS.isNE()) {
+        if (MSDOS.compare("'BLINKER'", MSDOS.getBaseOffset(0x18))) {
+            bDetected = true;
+            nOffset = MSDOS.getNEOffset(-0x1200);
+            if (nOffset > 0) {
+                nOffset = MSDOS.findString(nOffset, 0x1200, "Blinker ");
+                if (nOffset != -1) {
+                    sVersion = MSDOS.getString(nOffset + 8, 4);
+                }
+            }
+        }
+    } else if (MSDOS.compareEP("e8$$$$558bec5053515256571e06fc8cc88ed8e8....bf....8845..8c")) {
+        bDetected = true;
+    } else if (MSDOS.compareEP("e8$$$$1e06fc8cc88ed8e8....bf....8845..8c1e....c41e....891d")) {
+        bDetected = true;
+    }
+
+    return result();
+}

db/MSDOS/Borland_C.4.sg

@@ -0,0 +1,89 @@
+// Detect It Easy: detection rule file
+// Author: Jason Hood <jadoxa@yahoo.com.au>
+
+init("compiler", "Borland C/C++");
+
+function detect() {
+    var nOffset = 0;
+    if (MSDOS.compareEP("FB")) {
+        nOffset = 1;
+    }
+    if (MSDOS.compareEP("BA....2E8916....B430CD218B2E02008B1E2C008EDA", nOffset)) {
+        var nDataSeg = MSDOS.readWord(MSDOS.getEntryPointOffset(nOffset + 1));
+        nOffset = MSDOS.AddressToOffset(nDataSeg);
+        bDetected = true;
+    } else if (MSDOS.compareEP("8CCA2E8916....B430CD218B2E02008B1E2C008EDAA3")) {
+        var nDataOfs = MSDOS.readWord(MSDOS.getEntryPointOffset(22));
+        nOffset = MSDOS.AddressToOffset(0, nDataOfs - 120);
+        bDetected = true;
+    }
+    nOffset = MSDOS.findString(nOffset, 64, " - Copyright ");
+    if (nOffset != -1) {
+        sVersion = MSDOS.getString(nOffset + 13, 4);
+        if (MSDOS.compare("43", nOffset - 1)) {
+            sName = "Turbo C";
+            if (sVersion == "(c) ") {
+                sVersion = MSDOS.getString(nOffset + 17, 4);
+            }
+        } else if (MSDOS.compare("'Turbo'", nOffset - 9)) {
+            sName = "Turbo C/C++";
+        } else if (sVersion == "1991") {
+            sVersion = "3.1";
+        } else if (sVersion == "1994") {
+            sVersion = "4.X";
+        }
+        bDetected = true;
+    }
+    if (MSDOS.compareEP("b4..cd103c..74..b8....cd10ba....2e8916....8b2e....8b1e....8eda8c06....891e....892e....a1")) {
+        sVersion = "1991";
+        bDetected = true;
+    } else if (MSDOS.compareEP("ba....2e8916....b430cd218b2e....8b1e....8edaa3....8c06....891e....892e....e8")) {
+        sVersion = "1991";
+        bDetected = true;
+    } else if (MSDOS.compareEP("ba....2e8916....b430cd218b2e....8b1e....8edaa3....8c06....891e....892e....c43e....8bc78bd8")) {
+        sVersion = "1988";
+        bDetected = true;
+    }
+    //moved from Turbo C.sg
+    else if (MSDOS.compareEP("BA....2E89......B4..CD218B......8B......8EDAA3....8C......89......89......C7..........E8....C4......8bc78bd8b9....26........75")) {
+        sName = "Turbo C";
+        sVersion = "1988";
+        bDetected = true;
+    } else if (MSDOS.compareEP("BA....2E89......B4..CD218B......8B......8EDAA3....8C......89......89......8cd22bea8b3e....81ff....73..bf....893e....b1")) {
+        sName = "Turbo C";
+        sVersion = "1988";
+        bDetected = true;
+    } else if (MSDOS.compareEP("BA....2E89......B4..CD218B......8B......8EDAA3....8C......89......53E8....0733FF2BDB8BC3B9....FCF2AEE3..4326......75..80")) {
+        sName = "Turbo C";
+        sVersion = "1990";
+        bDetected = true;
+    } else if (MSDOS.compareEP("FBBA....2E89......B430CD218B......8B......8EDAA3....8C......89......89......C706........E8....C4......8BC78BD8B9....2681")) {
+        sName = "Turbo C";
+        sVersion = "1987";
+        bDetected = true;
+    } else if (MSDOS.compareEP("FB8cca2E89......B430CD218B......8B......8EDAA3....8C......89......89......C706........E8....C4......8BC78BD8B9....2681")) {
+        sName = "Turbo C";
+        sVersion = "1987";
+        bDetected = true;
+    } else if (MSDOS.compareEP("BA....2E89......B430CD218B......8B......8EDAA3....8C......89......89......C706........8ec333c0b9....8bf88bd82681......75")) {
+        sName = "Turbo C";
+        sVersion = "1987";
+        bDetected = true;
+    } else if (MSDOS.compareEP("8cca2E89......B430CD218B......8B......8EDAA3....8C......89......89......C706")) {
+        sName = "Turbo C";
+        sVersion = "1988";
+        bDetected = true;
+    } else if (MSDOS.compareEP("8cca2E89......B430CD218B......8B......8EDAA3....8C......89......89......E8")) {
+        sName = "Turbo C";
+        sVersion = "1990";
+        bDetected = true;
+    } else if (MSDOS.compareEP("8cd8bb....8edb8cd38bccfa8e16....bc....fbe8....fa8ed38be1fbea")) {
+        sName = "Turbo C";
+        sVersion = "1988";
+        bDetected = true;
+    }
+
+    _setLang(sName.indexOf("C++") !== -1 ? "C" : "C++", bDetected);
+
+    return result();
+}

db/MSDOS/Borland_Pascal.4.sg

@@ -0,0 +1,89 @@
+// Detect It Easy: detection rule file
+
+init("compiler", "Borland Pascal");
+
+function detect() {
+    if (MSDOS.compareEP("9AFFFF00009AFFFF00005589E531C09AFFFF0000")) {
+        sVersion = "7.0*";
+        bDetected = true;
+    } else if (MSDOS.compareEP("B8....BB....8ED08BE38CD88EC00E1FA1....25....A3....E8....833E......75")) {
+        sVersion = "7.0*";
+        sOptions = "Protected Mode";
+        bDetected = true;
+    } else if (MSDOS.compareEP("B8....8ED88C......8CD38CC02BD88BC405....C1....03D8B4..CD210E")) {
+        sVersion = "7.0*";
+        bDetected = true;
+    } else if (MSDOS.compareEP("9a########ba....8eda8c06....33ed8bc405....b1..d3e88cd203c2a3....a3")) {
+        sVersion = "7.0";
+        bDetected = true;
+    } else if (MSDOS.compareEP("9a########ba....8eda8c06....33ede8....e8....8bc405....b1..d3e88cd203c2a3....a3....0306....a3....a3....a3....a3....8e06....26a1....a3....c706")) {
+        sVersion = "6.0";
+        bDetected = true;
+    } else if (MSDOS.compareEP("9a########06ba....8eda268b3e....8ec25b8bef83ed..1eb8....8ed8b9....2bc8d1e1")) {
+        sVersion = "6.0-7.0";
+        bDetected = true;
+    } else if (MSDOS.compareEP("9a########ba....8eda8c06....8bc405....a3....8c16....05....b1..d3e88cd203c2a3....a3")) {
+        sVersion = "6.0-7.0";
+        bDetected = true;
+    } else if (MSDOS.compareEP("9a########ba....8edae8....8c06....33ed8bc405....b1..d3e88cd203c2c706")) {
+        sVersion = "6.0-7.0";
+        bDetected = true;
+    } else if (MSDOS.compareEP("9a########5589e50ee8$$$$5589e583ec..31c0")) {
+        sVersion = "6.0-7.0";
+        bDetected = true;
+    } else if (MSDOS.compareEP("9a########ba....8eda8c06....8bc405....b1..d3e88cd203c2a3....a3....26a1....2d....a3....c706")) {
+        sVersion = "4.0-6.0";
+        sOptions = "1987";
+        bDetected = true;
+    } else if (MSDOS.compareEP("9a########54583bc475..9c585080cc..509d9c589d80e4..75..bb....e8....b8....cd21ba....8eda")) {
+        sVersion = "6.0-7.0";
+        sOptions = "1992 by Borland & Eagle Performance Software";
+        bDetected = true;
+    } else if (MSDOS.compareEP("9a........5589e5bf....0e57e8$$$$f9")) {
+        sName = "Turbo Pascal";
+        sVersion = "6.0-7.0";
+        bDetected = true;
+    } else if (MSDOS.compareEP("9a########b8....8ed88c06....cb")) {
+        sName = "Turbo Pascal";
+        sVersion = "6.0-7.0";
+        bDetected = true;
+    } else if (MSDOS.compareEP("9a########ba....8eda8c06....b430cd2186c43d....73..0e1f")) {
+        sName = "Turbo Pascal";
+        sVersion = "6.0-7.0";
+        bDetected = true;
+    } else if (MSDOS.compareEP("31ed9a########2e8e1e....b451cd21891e....803e......74..f706........74..e8")) {
+        sName = "Turbo Pascal";
+        sVersion = "6.0-7.0";
+        bDetected = true;
+    }
+    if (MSDOS.compareEP("9a########f860f972..8bdc36c51f83c3..807f....74..807f")) {
+        sName = "Turbo Pascal";
+        sVersion = "6.0-7.0";
+        bDetected = true;
+    } else if (MSDOS.compareEP("9A0000")) {
+        var nDataSeg = MSDOS.readWord(MSDOS.getEntryPointOffset(3));
+        var nOffset = MSDOS.AddressToOffset(nDataSeg);
+        nOffset = MSDOS.findSignature(nOffset, Math.min(1024, MSDOS.getSize() - nOffset),
+            "'Portions Copyr	ight (c) 1983,9'..' Borland'");
+        if (nOffset != -1) {
+            switch (MSDOS.getString(nOffset + 29, 1)) {
+                case "0":
+                    sVersion = "5.0";
+                    sName = "Turbo Pascal";
+                    break; // guess
+                case "1":
+                    sVersion = "6.0";
+                    sName = "Turbo Pascal";
+                    break; // guess
+                case "2":
+                    sVersion = "7.0";
+                    break;
+            }
+            bDetected = true;
+        }
+    }
+
+    _setLang("Pascal", bDetected);
+
+    return result();
+}

db/MSDOS/Borland_RTM.0a.sg

@@ -0,0 +1,33 @@
+// Detect It Easy: detection rule file
+// Author: hypn0 <hypn0@mail.ru>
+
+init("extender", "Borland RTM DPMI loader");
+
+function getBLVersion() {
+    var sResult = "";
+
+    var nOffset = MSDOS.findString(0, MSDOS.getSize(), "RTM loader version")
+
+    if (nOffset != -1) {
+        sResult = MSDOS.getString(nOffset + 19);
+        sResult = sResult.substr(0, sResult.indexOf(' '));
+    }
+
+    return sResult;
+}
+
+function detect() {
+    if (MSDOS.compareEP("b8....8ed8b8....bb....8ed08be38926....0626......8ec0263b......74..e9")) {
+        sVersion = "1.0-1.5";
+        bDetected = true;
+    }
+
+    if (bDetected) {
+        var sBL = getBLVersion();
+        if (sBL != "") {
+            sVersion = sBL;
+        }
+    }
+
+    return result();
+}

db/MSDOS/Borland_TDS.sg

@@ -0,0 +1,14 @@
+// Detect It Easy: detection rule file
+
+init("debug", "Borland TLINK Symbol Table Present");
+
+function detect() {
+    if (MSDOS.compareOverlay("FB52")) {
+        sVersion = (MSDOS.readByte(MSDOS.getOverlayOffset() + 0x3) + MSDOS.readByte(MSDOS.getOverlayOffset() + 0x2) / 100);
+
+        sOptions = "TDS";
+        bDetected = true;
+    }
+
+    return result();
+}

db/MSDOS/Borland_TLINK.5.sg

@@ -0,0 +1,13 @@
+// Detect It Easy: detection rule file
+
+init("linker", "Borland TLINK");
+
+function detect() {
+    var nVer = MSDOS.readWord(0x1E);
+    if ((nVer & 0xFF) == 0xFB) {
+        sVersion = ((nVer >> 8) / 16).toFixed(1);
+        bDetected = true;
+    }
+
+    return result();
+}

db/MSDOS/Bunny.2.sg

@@ -0,0 +1,14 @@
+// Detect It Easy: detection rule file
+// Author: hypn0 <hypn0@mail.ru>
+
+init("protector", "Bunny");
+
+function detect() {
+    if (MSDOS.compareEP("fae9$$$$8cc02ea3....8cd82ea3....8cd02ea3....8bc42ea3....8cc88ed88ec08ed0bc....e8")) {
+        sVersion = "4.1";
+        sOptions = "1993 by M.Bunjes";
+        bDetected = true;
+    }
+
+    return result();
+}

db/MSDOS/CC.2.sg

@@ -0,0 +1,18 @@
+// Detect It Easy: detection rule file
+// Author: hypn0 <hypn0@mail.ru>
+
+init("protector", "CC");
+
+function detect() {
+    if (MSDOS.compareEP("b8....ba....3be073..b409ba....cd21b8....cd218bdc81eb....83e3..fcbe....8bfbb9....f3a48bc3b1..d3e88cc903c15033c050cb")) {
+        sVersion = "1.0";
+        sOptions = "1991 by B.Vorontsov";
+        bDetected = true;
+    } else if (MSDOS.compareEP("ba....b430cd213c..73..33c00650cbb9....b8....eb$$05....fc80c4..eb")) {
+        sVersion = "2.61 Beta";
+        sOptions = "by UniHackers";
+        bDetected = true;
+    }
+
+    return result();
+}

db/MSDOS/CEPexe.2.sg

@@ -0,0 +1,12 @@
+// Detect It Easy: detection rule file
+// Author: hypn0 <hypn0@mail.ru>
+
+init("protector", "CEPexe");
+
+function detect() {
+    if (MSDOS.compareEP("8cdd0e070e1fbf....be....b9....fcf3a41f5f8f..8f....8f....8c....8f....8f....595f5e8cc88ec08ed8ea")) {
+        bDetected = true;
+    }
+
+    return result();
+}

db/MSDOS/CERBERUS.2.sg

@@ -0,0 +1,12 @@
+// Detect It Easy: detection rule file
+
+init("protector", "CERBERUS");
+
+function detect() {
+    if (MSDOS.compareEP("9C2BED8C....8C....FAE4..88....1607BF....8EDD9BF5B9....FCF3A5")) {
+        sVersion = "2.0";
+        bDetected = true;
+    }
+
+    return result();
+}

db/MSDOS/CII-C.4.sg

@@ -0,0 +1,18 @@
+// Detect It Easy: detection rule file
+// Author: hypn0 <hypn0@mail.ru>
+
+init("compiler", "CII-C");
+
+function detect() {
+    if (MSDOS.compareEP("eb$$dbe3fcb8....8ed88c06....26a1....3b06....76..2b06....8cdf81c7....3bf873..8bc7be....3bf0")) {
+        bDetected = true;
+    } else if (MSDOS.compareEP("dbe3fcb8....8ed88c06....26a1....3b06....76..2b06....be....3bf073..2bc63b06....72..3b06")) {
+        bDetected = true;
+    } else if (MSDOS.compareEP("eb$$dbe3fcb8....8ed88c06....26a1....3b06....76..2b06....be....3bf073..2bc63b06....72..3b06")) {
+        bDetected = true;
+    }
+
+    _setLang("C", bDetected);
+
+    return result();
+}

db/MSDOS/COMCRYPT.2.sg

@@ -0,0 +1,15 @@
+// Detect It Easy: detection rule file
+// Author: hypn0 <hypn0@mail.ru>
+
+init("protector", "COMCRYPT");
+
+function detect() {
+    if (MSDOS.compareEP("e9$$$$b9....be....89f70e1f0e07bb....fcad31d8abe2")) {
+        bDetected = true;
+    } else if (MSDOS.compareEP("e9$$$$eb$$5053575152061e572e8b36....81c6....8a5c..2e881e....8a5c")) {
+        sVersion = "1.0b";
+        bDetected = true;
+    }
+
+    return result();
+}

db/MSDOS/COMPACK.2.sg

@@ -0,0 +1,15 @@
+// Detect It Easy: detection rule file
+
+init("packer", "COMPACK");
+
+function detect() {
+    if (MSDOS.compareEP("BE....E8....5D83....55505351520E070E1F8BCE")) {
+        sVersion = "4.5";
+        bDetected = true;
+    } else if (MSDOS.compareEP("BD....50068CCB03DD8CD24B8EDBBE....BF....8EC2B9....F3A54A4D75")) {
+        sVersion = "5.1";
+        bDetected = true;
+    }
+
+    return result();
+}

db/MSDOS/COMPROTECT.2.sg

@@ -0,0 +1,14 @@
+// Detect It Easy: detection rule file
+// Author: hypn0 <hypn0@mail.ru>
+
+init("protector", "COMPROTECT");
+
+function detect() {
+    if (MSDOS.compareEP("b8....15....72..8ac4bb....50515253555657061e50b8....58eb")) {
+        sVersion = "2.10";
+        sOptions = "1988-95 by Ralph Roth (converted to exe)";
+        bDetected = true;
+    }
+
+    return result();
+}

db/MSDOS/CONVOY.2.sg

@@ -0,0 +1,17 @@
+// Detect It Easy: detection rule file
+// Author: hypn0 <hypn0@mail.ru>
+
+init("protector", "CONVOY++");
+
+function detect() {
+    if (MSDOS.compareEP("e9$$$$2e8c06....2ea3....b8....cd2f3c..75..b8....ba....0e1fcd21b8....cd21")) {
+        sOptions = "1993 by ELIAS Copy-Protection System";
+        bDetected = true;
+    } else if (MSDOS.compareEP("e9$$$$2e8c06....2ea3....e8$$$$5056571e062e8b3e....2e8106........2e893e....0e0733c08ed833f6b9")) {
+        sVersion = "3.2";
+        sOptions = "1993 by ELIAS Copy-Protection System";
+        bDetected = true;
+    }
+
+    return result();
+}

db/MSDOS/CPAV.1.sg

@@ -0,0 +1,13 @@
+// Detect It Easy: detection rule file
+// Author: hypn0 <hypn0@mail.ru>
+
+init("immunizer", "Central Point Anti-Virus");
+
+function detect() {
+    if (MSDOS.compareEP("e8$$$$5b81eb....50515256578beb1e2ec6........268e......061fb9....bf....8bc7eb")) {
+        sVersion = "1992-1993";
+        bDetected = true;
+    }
+
+    return result();
+}

db/MSDOS/CRYPACK.2.sg

@@ -0,0 +1,12 @@
+// Detect It Easy: detection rule file
+
+init("packer", "CRYPACK");
+
+function detect() {
+    if (MSDOS.compareEP("EB..061E8CD805....8ED833DB0E0733FFBE....8A0726....32C48807473BFE")) {
+        sVersion = "3.0";
+        bDetected = true;
+    }
+
+    return result();
+}

db/MSDOS/CRYPTEXE.2.sg

@@ -0,0 +1,19 @@
+// Detect It Easy: detection rule file
+
+init("protector", "CRYPTEXE");
+
+function detect() {
+    if (MSDOS.compareEP("EB..8BDCEB..EA........01EA83FC..74..EB")) {
+        sVersion = "1.04";
+        bDetected = true;
+    } else if (MSDOS.compareEP("eb$$8bdceb$$bc....eb$$83fc..74..eb$$cd20eb$$8be3")) {
+        sVersion = "1.04";
+        bDetected = true;
+    } else if (MSDOS.compareEP("2e8c1e....eb$$fa50b8....58eb$$eb$$8bdceb$$bc....eb$$83fc..eb$$74..fa")) {
+        sVersion = "1.01b";
+        sOptions = "1996 by DoP";
+        bDetected = true;
+    }
+
+    return result();
+}

db/MSDOS/CSCRYPT_Pro.2.sg

@@ -0,0 +1,14 @@
+// Detect It Easy: detection rule file
+// Author: hypn0 <hypn0@mail.ru>
+
+init("protector", "CSCRYPT Pro");
+
+function detect() {
+    if (MSDOS.compareEP("8d36....565f81ef....b8....81ef....81c0....81f7....2e2935474781c6....e9")) {
+        sVersion = "3.30/386";
+        sOptions = "1995-97 by Christian Schwarz";
+        bDetected = true;
+    }
+
+    return result();
+}

db/MSDOS/CWSDPMI.0a.sg

@@ -0,0 +1,22 @@
+// Detect It Easy: detection rule file
+// Author: hypn0 <hypn0@mail.ru>
+
+init("extender", "CWSDPMI");
+
+function detect() {
+    if (MSDOS.compareEP("8b2e....ba....8eda8c06....2bea8b3e....81c7....b1..d3ef473bef72..bf....3bef77..8bfd8bdfd3e7")) {
+        sVersion = "0.90+ (r4)";
+        sOptions = "1997 by Charles W. Sandmann";
+        bDetected = true;
+    } else if (MSDOS.compareEP("e8$$$$8b2e....ba....8eda8c06....2bea8b3e....81c7....b1..d3ef473bef72..bf....3bef77..8bfd8bdfd3e7")) {
+        sVersion = "0.90+ (6b)";
+        sOptions = "2001 by Charles W. Sandmann";
+        bDetected = true;
+    } else if (MSDOS.compareEP("ba....8eda8cd32bdac1e3..8ed203e38c06....fcb430cd213c0373..b0..ba....e9")) {
+        sName += " (ELFstub)";
+        sVersion = "1.00";
+        bDetected = true;
+    }
+
+    return result();
+}

db/MSDOS/CauseWay_DOS_Extender.0a.sg

@@ -0,0 +1,16 @@
+// Detect It Easy: detection rule file
+// Author: hypn0 <hypn0@mail.ru>
+
+init("extender", "CauseWay DOS Extender");
+
+function detect() {
+    if (MSDOS.compareEP("fa161f26a1....83e8..8ed0fb061607be....8bfeb9....f3a407368c......8bd88cca3603......368b......fd8bc53d....76")) {
+        sVersion = "3.1x-3.4x";
+        bDetected = true;
+    } else if (MSDOS.compareEP("eb$$8be88cc60e1f8cc005....0106....b8....cd213c..73..b8....cd21803e......74..8cc005....0306....268b16....3bc273..8ec0a1....33ff")) {
+        sVersion = "2.64, 3.25";
+        bDetected = true;
+    }
+
+    return result();
+}

db/MSDOS/ChSFX.1.sg

@@ -0,0 +1,27 @@
+// Detect It Easy: detection rule file
+// Author: hypn0 <hypn0@mail.ru>
+
+init("sfx", "CHZ SFX (ChSFX)");
+
+function getChSFXVersion() {
+    var sResult = "";
+    var nStringOffset = MSDOS.findString(0, Math.min(0x100, MSDOS.getSize()), "ChSFX");
+    if (nStringOffset != -1) {
+        sResult = MSDOS.getString(nStringOffset + 6);
+        sResult = sResult.replace(/\s+$/, '');
+    }
+
+    return sResult;
+}
+
+function detect() {
+    if (MSDOS.compareEP("ba....e8$$$$1e0e1fe8$$$$52568bf2fcb4..eb$$ac0ac075")) {
+        sVersion = getChSFXVersion();
+        bDetected = true;
+    } else if (MSDOS.compareEP("8d16....e8$$$$1e0e1fe8$$$$52568bf2fcb4..eb$$ac0ac075")) {
+        sVersion = getChSFXVersion();
+        bDetected = true;
+    }
+
+    return result();
+}

db/MSDOS/Ciphator.2.sg

@@ -0,0 +1,12 @@
+// Detect It Easy: detection rule file
+
+init("protector", "Ciphator");
+
+function detect() {
+    if (MSDOS.compareEP("9393E8$$$$586A..0E68....CF")) {
+        sVersion = "4.6";
+        bDetected = true;
+    }
+
+    return result();
+}

db/MSDOS/Coderunner.1.sg

@@ -0,0 +1,22 @@
+// Detect It Easy: detection rule file
+// Author: hypn0 <hypn0@mail.ru>
+
+// CodeRunneR is an effective tool for creating new TSRs and porting existing applications to a TSR environment.
+// http://www.drdobbs.com/msis-coderunner-makes-your-tsrs-run/184402267?pgno=5
+
+init("other", "CodeRunneR");
+
+function detect() {
+    if (MSDOS.compareEP("e9$$$$e8$$$$fc5e8cdaa1....bd....8edd8ec5a3....b9....bf....2bcf33c02ea3....41d1e9f3ab8916")) {
+        sOptions = "1989 by Micro Systems Software, Inc.";
+        bDetected = true;
+    } else if (MSDOS.compareEP("e9$$$$e8$$$$fc5e8cda8b1e....bd....8edd8ec5b9....bf....2bcf33c02ea3....41d1e9f3ab891e")) {
+        sOptions = "1989 by Micro Systems Software, Inc.";
+        bDetected = true;
+    } else if (MSDOS.compareEP("e9$$$$e8$$$$fc5e8cdaa1....bd....8edd8ec5a3....b9....bf....2bcf33c02ea3....d1e9f3ab8916")) {
+        sOptions = "1992 by OP";
+        bDetected = true;
+    }
+
+    return result();
+}

db/MSDOS/Codesafe.2.sg

@@ -0,0 +1,13 @@
+// Detect It Easy: detection rule file
+// Author: hypn0 <hypn0@mail.ru>
+
+init("protector", "Codesafe");
+
+function detect() {
+    if (MSDOS.compareEP("e9$$$$5033c08ec02ef606......74..26ff36....061e07e8....07268f06....fb2e8c1e....26ff36....268f06")) {
+        sOptions = "by EliaShim Ltd";
+        bDetected = true;
+    }
+
+    return result();
+}

db/MSDOS/ComProtector.2.sg

@@ -0,0 +1,15 @@
+// Detect It Easy: detection rule file
+
+init("protector", "ComProtector");
+
+function detect() {
+    if (MSDOS.compareEP("E9....E8....5E8BEE81......8D......B9....F61446E2..4B")) {
+        sVersion = "1.0b";
+        bDetected = true;
+    } else if (MSDOS.compareEP("E9....B9....BB....BF....2E....34..FEC8C0....2E....2E....2E....4743E2")) {
+        sVersion = "1.0";
+        bDetected = true;
+    }
+
+    return result();
+}

db/MSDOS/ComprEXE.2.sg

@@ -0,0 +1,14 @@
+// Detect It Easy: detection rule file
+// Author: hypn0 <hypn0@mail.ru>
+
+init("protector", "ComprEXE");
+
+function detect() {
+    if (MSDOS.compareEP("fc1e068cdd83c5..89e8ba....8b1e....29d3538ed88ec331f631ffb9....f3a540434a75..b8....50cb")) {
+        sVersion = "1.0";
+        sOptions = "by Tom Torfs";
+        bDetected = true;
+    }
+
+    return result();
+}