conditions: &[CheckItem{offs: 0, cond: &CC::Str(b"IMAX") },
CheckItem{offs: 10, cond: &CC::Eq(Arg::U16LE(0x102)) }],
},
+ DetectConditions {
+ demux_name: "hl-fmv",
+ extensions: ".fmv",
+ conditions: &[CheckItem{offs: 0, cond: &CC::Str(b"FMV*") },
+ CheckItem{offs: 4, cond: &CC::Eq(Arg::U32LE(0)) }],
+ },
DetectConditions {
demux_name: "legend-q",
extensions: ".q",
conditions: &[CheckItem{offs: 0, cond: &CC::Eq(Arg::U16LE(0x6839))},
CheckItem{offs: 2, cond: &CC::In(Arg::Byte(3), Arg::Byte(7))}],
},
+ DetectConditions {
+ demux_name: "siff",
+ extensions: ".vb,.vbc,.fcp,.son",
+ conditions: &[CheckItem{offs: 0, cond: &CC::Str(b"SIFF")},
+ CheckItem{offs: 4, cond: &CC::Or(
+ &CC::Or(
+ &CC::Str(b"VBV1VBHD"),
+ &CC::Str(b"SOUNSHDR")),
+ &CC::Str(b"FCPKFCHD"))}],
+ },
DetectConditions {
demux_name: "smush",
extensions: ".san",