misctools revision 298920
1
2#-----------------------------------------------------------------------------
3# $File: misctools,v 1.16 2016/02/14 15:46:52 christos Exp $
4# misctools:  file(1) magic for miscellaneous UNIX tools.
5#
60	search/1	%%!!			X-Post-It-Note text
70	string/c	BEGIN:VCALENDAR		vCalendar calendar file
8!:mime	text/calendar
9# updated by Joerg Jenderek at Apr 2015
10# Extension: .vcf
11# http://en.wikipedia.org/wiki/VCard
120	string/c	BEGIN:VCARD		vCard visiting card
13# deprecated
14#!:mime	text/x-vcard
15!:mime	text/vcard
16# VERSION must come right after BEGIN for 3.0 or 4.0 except in 2.1 , where it can be anywhere
17>12	search/14000/c	VERSION:		
18# VERSION 2.1 , 3.0 or 4.0
19>>&0	string		x			\b, version %-.3s
20
21# Summary: Libtool library file
22# Extension: .la
23# Submitted by: Tomasz Trojanowski <tomek@uninet.com.pl>
240	search/80	.la\ -\ a\ libtool\ library\ file	libtool library file
25
26# Summary: Libtool object file
27# Extension: .lo
28# Submitted by: Abel Cheung <abelcheung@gmail.com>
290	search/80	.lo\ -\ a\ libtool\ object\ file	libtool object file
30
31# From: Daniel Novotny <dnovotny@redhat.com>
32# Update: Joerg Jenderek
33# URL: https://en.wikipedia.org/wiki/Core_dump#User-mode_memory_dumps
34# Reference: https://msdn.microsoft.com/en-us/library/ms680378%28VS.85%29.aspx
35#
36# "Windows Minidump" by TrID
37# ./misctools (version 5.25) labeled the entry as "MDMP crash report data"
380	string		MDMP					Mini DuMP crash report
39# http://filext.com/file-extension/DMP
40!:mime	application/x-dmp
41!:ext	dmp/mdmp
42# The high-order word is an internal value that is implementation specific.
43# The low-order word is MINIDUMP_VERSION 0xA793
44>4	ulelong&0x0000FFFF	!0xA793				\b, version 0x%4.4x
45# NumberOfStreams 8,9,10,13
46>8	ulelong			x				\b, %d streams
47# StreamDirectoryRva 0x20
48>12	ulelong			!0x20				\b, 0x%8.8x RVA
49# CheckSum 0
50>16	ulelong			!0				\b, CheckSum 0x%8.8x
51# Reserved or TimeDateStamp 
52>20	ledate			x				\b, %s
53# https://msdn.microsoft.com/en-us/library/windows/desktop/ms680519%28v=vs.85%29.aspx
54# Flags MINIDUMP_TYPE enumeration type 0 0x121 0x800
55>24	ulelong			x				\b, 0x%x type
56# >24	ulelong			>0				\b; include
57# >>24	ulelong			&0x00000001			\b data sections,
58# >>24	ulelong			&0x00000020			\b list of unloaded modules,
59# >>24	ulelong			&0x00000100			\b process and thread information,
60# >>24	ulelong			&0x00000800			\b memory information,
61
62# Summary: abook addressbook file
63# Submitted by: Mark Schreiber <mark7@alumni.cmu.edu>
640	string	#\x20abook\x20addressbook\x20file abook address book
65!:mime application/x-abook-addressbook
66