168349Sobrien 268349Sobrien#------------------------------------------------------------------------------ 3275698Sdelphij# $File: vms,v 1.9 2014/08/17 13:47:59 christos Exp $ 468349Sobrien# vms: file(1) magic for VMS executables (experimental) 568349Sobrien# 668349Sobrien# VMS .exe formats, both VAX and AXP (Greg Roelofs, newt@uchicago.edu) 768349Sobrien 868349Sobrien# GRR 950122: I'm just guessing on these, based on inspection of the headers 968349Sobrien# of three executables each for Alpha and VAX architectures. The VAX files 1068349Sobrien# all had headers similar to this: 1168349Sobrien# 1268349Sobrien# 00000 b0 00 30 00 44 00 60 00 00 00 00 00 30 32 30 35 ..0.D.`.....0205 1368349Sobrien# 00010 01 01 00 00 ff ff ff ff ff ff ff ff 00 00 00 00 ................ 1468349Sobrien# 1568349Sobrien0 string \xb0\0\x30\0 VMS VAX executable 1668349Sobrien>44032 string PK\003\004 \b, Info-ZIP SFX archive v5.12 w/decryption 1768349Sobrien# 1868349Sobrien# The AXP files all looked like this, except that the byte at offset 0x22 1968349Sobrien# was 06 in some of them and 07 in others: 2068349Sobrien# 2168349Sobrien# 00000 03 00 00 00 00 00 00 00 ec 02 00 00 10 01 00 00 ................ 2268349Sobrien# 00010 68 00 00 00 98 00 00 00 b8 00 00 00 00 00 00 00 h............... 2368349Sobrien# 00020 00 00 07 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 2468349Sobrien# 00030 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 ................ 2568349Sobrien# 00040 00 00 00 00 ff ff ff ff ff ff ff ff 02 00 00 00 ................ 2668349Sobrien# 27267843Sdelphij# GRR this test is still too general as it catches example adressen.dbt 28267843Sdelphij0 belong 0x03000000 29267843Sdelphij>8 ubelong 0xec020000 VMS Alpha executable 30267843Sdelphij>>75264 string PK\003\004 \b, Info-ZIP SFX archive v5.12 w/decryption 31