| 1234567891011121314151617181920212223242526272829303132333435363738394041424344454647484950515253545556575859606162636465 | 
#-----------------------------------------------------------------------------# $File: misctools,v 1.18 2019/04/19 00:42:27 christos Exp $# misctools:  file(1) magic for miscellaneous UNIX tools.#0	search/1	%%!!			X-Post-It-Note text0	string/c	BEGIN:VCALENDAR		vCalendar calendar file!:mime	text/calendar# updated by Joerg Jenderek at Apr 2015# Extension: .vcf# https://en.wikipedia.org/wiki/VCard0	string/c	BEGIN:VCARD		vCard visiting card# deprecated#!:mime	text/x-vcard!:mime	text/vcard# VERSION must come right after BEGIN for 3.0 or 4.0 except in 2.1 , where it can be anywhere>12	search/14000/c	VERSION:# VERSION 2.1 , 3.0 or 4.0>>&0	string		x			\b, version %-.3s# Summary: Libtool library file# Extension: .la# Submitted by: Tomasz Trojanowski <tomek@uninet.com.pl>0	search/80	.la\ -\ a\ libtool\ library\ file	libtool library file# Summary: Libtool object file# Extension: .lo# Submitted by: Abel Cheung <abelcheung@gmail.com>0	search/80	.lo\ -\ a\ libtool\ object\ file	libtool object file# From: Daniel Novotny <dnovotny@redhat.com># Update: Joerg Jenderek# URL: https://en.wikipedia.org/wiki/Core_dump#User-mode_memory_dumps# Reference: https://msdn.microsoft.com/en-us/library/ms680378%28VS.85%29.aspx## "Windows Minidump" by TrID# ./misctools (version 5.25) labeled the entry as "MDMP crash report data"0	string		MDMP					Mini DuMP crash report# https://filext.com/file-extension/DMP!:mime	application/x-dmp!:ext	dmp/mdmp# The high-order word is an internal value that is implementation specific.# The low-order word is MINIDUMP_VERSION 0xA793>4	ulelong&0x0000FFFF	!0xA793				\b, version 0x%4.4x# NumberOfStreams 8,9,10,13>8	ulelong			x				\b, %d streams# StreamDirectoryRva 0x20>12	ulelong			!0x20				\b, 0x%8.8x RVA# CheckSum 0>16	ulelong			!0				\b, CheckSum 0x%8.8x# Reserved or TimeDateStamp>20	ledate			x				\b, %s# https://msdn.microsoft.com/en-us/library/windows/desktop/ms680519%28v=vs.85%29.aspx# Flags MINIDUMP_TYPE enumeration type 0 0x121 0x800>24	ulelong			x				\b, 0x%x type# >24	ulelong			>0				\b; include# >>24	ulelong			&0x00000001			\b data sections,# >>24	ulelong			&0x00000020			\b list of unloaded modules,# >>24	ulelong			&0x00000100			\b process and thread information,# >>24	ulelong			&0x00000800			\b memory information,# Summary: abook addressbook file# Submitted by: Mark Schreiber <mark7@alumni.cmu.edu>0	string	#\x20abook\x20addressbook\x20file abook address book!:mime application/x-abook-addressbook
 |