misctools revision 354939
1168404Spjd 2168404Spjd#----------------------------------------------------------------------------- 3168404Spjd# $File: misctools,v 1.18 2019/04/19 00:42:27 christos Exp $ 4168404Spjd# misctools: file(1) magic for miscellaneous UNIX tools. 5168404Spjd# 6168404Spjd0 search/1 %%!! X-Post-It-Note text 7168404Spjd0 string/c BEGIN:VCALENDAR vCalendar calendar file 8168404Spjd!:mime text/calendar 9168404Spjd# updated by Joerg Jenderek at Apr 2015 10168404Spjd# Extension: .vcf 11168404Spjd# https://en.wikipedia.org/wiki/VCard 12168404Spjd0 string/c BEGIN:VCARD vCard visiting card 13168404Spjd# deprecated 14168404Spjd#!:mime text/x-vcard 15168404Spjd!:mime text/vcard 16168404Spjd# VERSION must come right after BEGIN for 3.0 or 4.0 except in 2.1 , where it can be anywhere 17168404Spjd>12 search/14000/c VERSION: 18168404Spjd# VERSION 2.1 , 3.0 or 4.0 19168404Spjd>>&0 string x \b, version %-.3s 20168404Spjd 21168404Spjd# Summary: Libtool library file 22219089Spjd# Extension: .la 23277826Sdelphij# Submitted by: Tomasz Trojanowski <tomek@uninet.com.pl> 24286766Smav0 search/80 .la\ -\ a\ libtool\ library\ file libtool library file 25260835Sdelphij 26286764Smav# Summary: Libtool object file 27168404Spjd# Extension: .lo 28168404Spjd# Submitted by: Abel Cheung <abelcheung@gmail.com> 29168404Spjd0 search/80 .lo\ -\ a\ libtool\ object\ file libtool object file 30168404Spjd 31168404Spjd# From: Daniel Novotny <dnovotny@redhat.com> 32168404Spjd# Update: Joerg Jenderek 33168404Spjd# URL: https://en.wikipedia.org/wiki/Core_dump#User-mode_memory_dumps 34168404Spjd# Reference: https://msdn.microsoft.com/en-us/library/ms680378%28VS.85%29.aspx 35168404Spjd# 36168404Spjd# "Windows Minidump" by TrID 37168404Spjd# ./misctools (version 5.25) labeled the entry as "MDMP crash report data" 38168404Spjd0 string MDMP Mini DuMP crash report 39168404Spjd# https://filext.com/file-extension/DMP 40168404Spjd!:mime application/x-dmp 41168404Spjd!:ext dmp/mdmp 42168404Spjd# The high-order word is an internal value that is implementation specific. 43168404Spjd# The low-order word is MINIDUMP_VERSION 0xA793 44168404Spjd>4 ulelong&0x0000FFFF !0xA793 \b, version 0x%4.4x 45168404Spjd# NumberOfStreams 8,9,10,13 46168404Spjd>8 ulelong x \b, %d streams 47168404Spjd# StreamDirectoryRva 0x20 48168404Spjd>12 ulelong !0x20 \b, 0x%8.8x RVA 49168404Spjd# CheckSum 0 50168404Spjd>16 ulelong !0 \b, CheckSum 0x%8.8x 51185029Spjd# Reserved or TimeDateStamp 52185029Spjd>20 ledate x \b, %s 53168404Spjd# https://msdn.microsoft.com/en-us/library/windows/desktop/ms680519%28v=vs.85%29.aspx 54168404Spjd# Flags MINIDUMP_TYPE enumeration type 0 0x121 0x800 55168404Spjd>24 ulelong x \b, 0x%x type 56168404Spjd# >24 ulelong >0 \b; include 57185029Spjd# >>24 ulelong &0x00000001 \b data sections, 58168404Spjd# >>24 ulelong &0x00000020 \b list of unloaded modules, 59168404Spjd# >>24 ulelong &0x00000100 \b process and thread information, 60168404Spjd# >>24 ulelong &0x00000800 \b memory information, 61168404Spjd 62251631Sdelphij# Summary: abook addressbook file 63168404Spjd# Submitted by: Mark Schreiber <mark7@alumni.cmu.edu> 64168404Spjd0 string #\x20abook\x20addressbook\x20file abook address book 65168404Spjd!:mime application/x-abook-addressbook 66251631Sdelphij