1f72f8299SJan Lentfer 2327e51cbSPeter Avalos#----------------------------------------------------------------------------- 3*614728caSSascha Wildner# $File: misctools,v 1.20 2021/05/25 15:13:55 christos Exp $ 479343712SPeter Avalos# misctools: file(1) magic for miscellaneous UNIX tools. 5327e51cbSPeter Avalos# 679343712SPeter Avalos0 search/1 %%!! X-Post-It-Note text 7327e51cbSPeter Avalos0 string/c BEGIN:VCALENDAR vCalendar calendar file 8e4d4ce0cSPeter Avalos!:mime text/calendar 9*614728caSSascha Wildner# updated by Joerg Jenderek at Apr 2015, May 2021 106fca56fbSSascha Wildner# https://en.wikipedia.org/wiki/VCard 11*614728caSSascha Wildner# URL: http://fileformats.archiveteam.org/wiki/VCard 12*614728caSSascha Wildner# https://datatracker.ietf.org/doc/html/rfc6350 13*614728caSSascha Wildner# the value is case-insensitive 14*614728caSSascha Wildner0 string/c begin:vcard 15*614728caSSascha Wildner# skip DROID fmt-395-signature-id-634.vcf 16*614728caSSascha Wildner>13 string !VERSION:END vCard visiting card 17c30bd091SSascha Wildner# deprecated 18c30bd091SSascha Wildner#!:mime text/x-vcard 19c30bd091SSascha Wildner!:mime text/vcard 20*614728caSSascha Wildner!:apple ????vCrd 21*614728caSSascha Wildner!:ext vcf/vcard 22c30bd091SSascha Wildner# VERSION must come right after BEGIN for 3.0 or 4.0 except in 2.1 , where it can be anywhere 23*614728caSSascha Wildner# Joerg_Jenderek_67.vcf 24*614728caSSascha Wildner>>12 search/0x113b4/c version: 25c30bd091SSascha Wildner# VERSION 2.1 , 3.0 or 4.0 26*614728caSSascha Wildner>>>&0 string x \b, version %-.3s 27*614728caSSascha Wildner>>>&0 string !2.1 28*614728caSSascha Wildner>>>>13 string !VERSION: \b, 2nd line does not start with VERSION: 29*614728caSSascha Wildner# downcase violates RFC 6350, but some "bad" software produce such vcards 30*614728caSSascha Wildner>>0 string !BEGIN \b, not up case 31*614728caSSascha Wildner# http://ftp.mozilla.org/pub/thunderbird/candidates/ 32*614728caSSascha Wildner# 78.10.1-candidates/build1/source/thunderbird-78.10.1.source.tar.xz 33*614728caSSascha Wildner# thunderbird-78.10.1/comm/mailnews/import/test/unit/resources/basic_vcard_addressbook.vcf 34*614728caSSascha Wildner>>11 beshort !0x0D0A \b, lines not separated by CRLF 35327e51cbSPeter Avalos 3679343712SPeter Avalos# Summary: Libtool library file 3779343712SPeter Avalos# Extension: .la 3879343712SPeter Avalos# Submitted by: Tomasz Trojanowski <tomek@uninet.com.pl> 39327e51cbSPeter Avalos0 search/80 .la\ -\ a\ libtool\ library\ file libtool library file 4079343712SPeter Avalos 4179343712SPeter Avalos# Summary: Libtool object file 4279343712SPeter Avalos# Extension: .lo 4379343712SPeter Avalos# Submitted by: Abel Cheung <abelcheung@gmail.com> 4479343712SPeter Avalos0 search/80 .lo\ -\ a\ libtool\ object\ file libtool object file 45e4d4ce0cSPeter Avalos 46e4d4ce0cSPeter Avalos# From: Daniel Novotny <dnovotny@redhat.com> 47c30bd091SSascha Wildner# Update: Joerg Jenderek 48c30bd091SSascha Wildner# URL: https://en.wikipedia.org/wiki/Core_dump#User-mode_memory_dumps 49c30bd091SSascha Wildner# Reference: https://msdn.microsoft.com/en-us/library/ms680378%28VS.85%29.aspx 50c30bd091SSascha Wildner# 51c30bd091SSascha Wildner# "Windows Minidump" by TrID 52c30bd091SSascha Wildner# ./misctools (version 5.25) labeled the entry as "MDMP crash report data" 53c30bd091SSascha Wildner0 string MDMP Mini DuMP crash report 546fca56fbSSascha Wildner# https://filext.com/file-extension/DMP 55c30bd091SSascha Wildner!:mime application/x-dmp 56c30bd091SSascha Wildner!:ext dmp/mdmp 57c30bd091SSascha Wildner# The high-order word is an internal value that is implementation specific. 58c30bd091SSascha Wildner# The low-order word is MINIDUMP_VERSION 0xA793 59*614728caSSascha Wildner>4 ulelong&0x0000FFFF !0xA793 \b, version %#4.4x 60c30bd091SSascha Wildner# NumberOfStreams 8,9,10,13 61c30bd091SSascha Wildner>8 ulelong x \b, %d streams 62c30bd091SSascha Wildner# StreamDirectoryRva 0x20 63*614728caSSascha Wildner>12 ulelong !0x20 \b, %#8.8x RVA 64c30bd091SSascha Wildner# CheckSum 0 65*614728caSSascha Wildner>16 ulelong !0 \b, CheckSum %#8.8x 66c30bd091SSascha Wildner# Reserved or TimeDateStamp 67c30bd091SSascha Wildner>20 ledate x \b, %s 68c30bd091SSascha Wildner# https://msdn.microsoft.com/en-us/library/windows/desktop/ms680519%28v=vs.85%29.aspx 69c30bd091SSascha Wildner# Flags MINIDUMP_TYPE enumeration type 0 0x121 0x800 70*614728caSSascha Wildner>24 ulelong x \b, %#x type 71c30bd091SSascha Wildner# >24 ulelong >0 \b; include 72c30bd091SSascha Wildner# >>24 ulelong &0x00000001 \b data sections, 73c30bd091SSascha Wildner# >>24 ulelong &0x00000020 \b list of unloaded modules, 74c30bd091SSascha Wildner# >>24 ulelong &0x00000100 \b process and thread information, 75c30bd091SSascha Wildner# >>24 ulelong &0x00000800 \b memory information, 76e8af9738SPeter Avalos 77e8af9738SPeter Avalos# Summary: abook addressbook file 78e8af9738SPeter Avalos# Submitted by: Mark Schreiber <mark7@alumni.cmu.edu> 79e8af9738SPeter Avalos0 string #\x20abook\x20addressbook\x20file abook address book 80e8af9738SPeter Avalos!:mime application/x-abook-addressbook 81