1f72f8299SJan Lentfer 2f72f8299SJan Lentfer#------------------------------------------------------------------------------ 3*614728caSSascha Wildner# $File: digital,v 1.12 2021/07/03 14:01:46 christos Exp $ 4327e51cbSPeter Avalos# Digital UNIX - Info 5327e51cbSPeter Avalos# 6327e51cbSPeter Avalos0 string =!<arch>\n________64E Alpha archive 7327e51cbSPeter Avalos>22 string X -- out of date 8327e51cbSPeter Avalos# 9884044a5SPeter Avalos 10884044a5SPeter Avalos0 leshort 0603 11e8af9738SPeter Avalos>24 leshort 0410 COFF format alpha pure 12e8af9738SPeter Avalos>24 leshort 0413 COFF format alpha demand paged 13e8af9738SPeter Avalos>>22 leshort&030000 !020000 executable 14e8af9738SPeter Avalos>>22 leshort&020000 !0 dynamically linked 15e8af9738SPeter Avalos>>16 lelong !0 not stripped 16e8af9738SPeter Avalos>>16 lelong 0 stripped 17e8af9738SPeter Avalos>>27 byte x - version %d 18e8af9738SPeter Avalos>>26 byte x \b.%d 19e8af9738SPeter Avalos>>28 byte x \b-%d 20e8af9738SPeter Avalos>24 leshort 0407 COFF format alpha object 21e8af9738SPeter Avalos>>22 leshort&030000 020000 shared library 22e8af9738SPeter Avalos>>27 byte x - version %d 23e8af9738SPeter Avalos>>26 byte x \b.%d 24e8af9738SPeter Avalos>>28 byte x \b-%d 25884044a5SPeter Avalos 26884044a5SPeter Avalos# Basic recognition of Digital UNIX core dumps - Mike Bremford <mike@opac.bl.uk> 27884044a5SPeter Avalos# 28884044a5SPeter Avalos# The actual magic number is just "Core", followed by a 2-byte version 29884044a5SPeter Avalos# number; however, treating any file that begins with "Core" as a Digital 30884044a5SPeter Avalos# UNIX core dump file may produce too many false hits, so we include one 31884044a5SPeter Avalos# byte of the version number as well; DU 5.0 appears only to be up to 32884044a5SPeter Avalos# version 2. 33884044a5SPeter Avalos# 34884044a5SPeter Avalos0 string Core\001 Alpha COFF format core dump (Digital UNIX) 35884044a5SPeter Avalos>24 string >\0 \b, from '%s' 36884044a5SPeter Avalos0 string Core\002 Alpha COFF format core dump (Digital UNIX) 37884044a5SPeter Avalos>24 string >\0 \b, from '%s' 38327e51cbSPeter Avalos# 39327e51cbSPeter Avalos# The next is incomplete, we could tell more about this format, 40327e51cbSPeter Avalos# but its not worth it. 41327e51cbSPeter Avalos0 leshort 0x188 Alpha compressed COFF 42327e51cbSPeter Avalos0 leshort 0x18f Alpha u-code object 43327e51cbSPeter Avalos# 44327e51cbSPeter Avalos# 45327e51cbSPeter Avalos# Some other interesting Digital formats, 46327e51cbSPeter Avalos0 string \377\377\177 ddis/ddif 47327e51cbSPeter Avalos0 string \377\377\174 ddis/dots archive 48327e51cbSPeter Avalos0 string \377\377\176 ddis/dtif table data 49327e51cbSPeter Avalos0 string \033c\033 LN03 output 50327e51cbSPeter Avalos0 long 04553207 X image 51327e51cbSPeter Avalos# 52327e51cbSPeter Avalos0 string =!<PDF>!\n profiling data file 53327e51cbSPeter Avalos# 54327e51cbSPeter Avalos# Locale data tables (MIPS and Alpha). 55327e51cbSPeter Avalos# 56*614728caSSascha Wildner# GRR: line below is too general as it matches also TTComp archive, ASCII, 2K handled by ./archive 57327e51cbSPeter Avalos0 short 0x0501 locale data table 58327e51cbSPeter Avalos>6 short 0x24 for MIPS 59327e51cbSPeter Avalos>6 short 0x40 for Alpha 60