2 #-----------------------------------------------------------------------------
3 # $File: misctools,v 1.16 2016/02/14 15:46:52 christos Exp $
4 # misctools: file(1) magic for miscellaneous UNIX tools.
6 0 search/1 %%!! X-Post-It-Note text
7 0 string/c BEGIN:VCALENDAR vCalendar calendar file
9 # updated by Joerg Jenderek at Apr 2015
11 # http://en.wikipedia.org/wiki/VCard
12 0 string/c BEGIN:VCARD vCard visiting card
16 # VERSION must come right after BEGIN for 3.0 or 4.0 except in 2.1 , where it can be anywhere
17 >12 search/14000/c VERSION:
18 # VERSION 2.1 , 3.0 or 4.0
19 >>&0 string x \b, version %-.3s
21 # Summary: Libtool library file
23 # Submitted by: Tomasz Trojanowski <tomek@uninet.com.pl>
24 0 search/80 .la\ -\ a\ libtool\ library\ file libtool library file
26 # Summary: Libtool object file
28 # Submitted by: Abel Cheung <abelcheung@gmail.com>
29 0 search/80 .lo\ -\ a\ libtool\ object\ file libtool object file
31 # From: Daniel Novotny <dnovotny@redhat.com>
32 # Update: Joerg Jenderek
33 # URL: https://en.wikipedia.org/wiki/Core_dump#User-mode_memory_dumps
34 # Reference: https://msdn.microsoft.com/en-us/library/ms680378%28VS.85%29.aspx
36 # "Windows Minidump" by TrID
37 # ./misctools (version 5.25) labeled the entry as "MDMP crash report data"
38 0 string MDMP Mini DuMP crash report
39 # http://filext.com/file-extension/DMP
40 !:mime application/x-dmp
42 # The high-order word is an internal value that is implementation specific.
43 # The low-order word is MINIDUMP_VERSION 0xA793
44 >4 ulelong&0x0000FFFF !0xA793 \b, version 0x%4.4x
45 # NumberOfStreams 8,9,10,13
46 >8 ulelong x \b, %d streams
47 # StreamDirectoryRva 0x20
48 >12 ulelong !0x20 \b, 0x%8.8x RVA
50 >16 ulelong !0 \b, CheckSum 0x%8.8x
51 # Reserved or TimeDateStamp
53 # https://msdn.microsoft.com/en-us/library/windows/desktop/ms680519%28v=vs.85%29.aspx
54 # Flags MINIDUMP_TYPE enumeration type 0 0x121 0x800
55 >24 ulelong x \b, 0x%x type
56 # >24 ulelong >0 \b; include
57 # >>24 ulelong &0x00000001 \b data sections,
58 # >>24 ulelong &0x00000020 \b list of unloaded modules,
59 # >>24 ulelong &0x00000100 \b process and thread information,
60 # >>24 ulelong &0x00000800 \b memory information,
62 # Summary: abook addressbook file
63 # Submitted by: Mark Schreiber <mark7@alumni.cmu.edu>
64 0 string #\x20abook\x20addressbook\x20file abook address book
65 !:mime application/x-abook-addressbook