archive 20 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550551552553554555556557558559560561562563564565566567568569570571572573574575576577578579580581582583584585586587588589590591592593594595596597598599600601602603604605606607608609610611612613614615616617618619620621622623624625626627628629630631632633634635636
  1. #------------------------------------------------------------------------------
  2. # archive: file(1) magic for archive formats (see also "msdos" for self-
  3. # extracting compressed archives)
  4. #
  5. # cpio, ar, arc, arj, hpack, lha/lharc, rar, squish, uc2, zip, zoo, etc.
  6. # pre-POSIX "tar" archives are handled in the C code.
  7. # POSIX tar archives
  8. 257 string ustar\0 POSIX tar archive
  9. 257 string ustar\040\040\0 GNU tar archive
  10. # cpio archives
  11. #
  12. # Yes, the top two "cpio archive" formats *are* supposed to just be "short".
  13. # The idea is to indicate archives produced on machines with the same
  14. # byte order as the machine running "file" with "cpio archive", and
  15. # to indicate archives produced on machines with the opposite byte order
  16. # from the machine running "file" with "byte-swapped cpio archive".
  17. #
  18. # The SVR4 "cpio(4)" hints that there are additional formats, but they
  19. # are defined as "short"s; I think all the new formats are
  20. # character-header formats and thus are strings, not numbers.
  21. 0 short 070707 cpio archive
  22. 0 short 0143561 byte-swapped cpio archive
  23. 0 string 070707 ASCII cpio archive (pre-SVR4 or odc)
  24. 0 string 070701 ASCII cpio archive (SVR4 with no CRC)
  25. 0 string 070702 ASCII cpio archive (SVR4 with CRC)
  26. # Debian package (needs to go before regular portable archives)
  27. #
  28. 0 string =!<arch>\ndebian
  29. >8 string debian-split part of multipart Debian package
  30. >8 string debian-binary Debian binary package
  31. >68 string >\0 (format %s)
  32. >81 string bz2 \b, uses bzip2 compression
  33. >84 string gz \b, uses gzip compression
  34. #>136 ledate x created: %s
  35. # other archives
  36. 0 long 0177555 very old archive
  37. 0 short 0177555 very old PDP-11 archive
  38. 0 long 0177545 old archive
  39. 0 short 0177545 old PDP-11 archive
  40. 0 long 0100554 apl workspace
  41. 0 string =<ar> archive
  42. # MIPS archive (needs to go before regular portable archives)
  43. #
  44. 0 string =!<arch>\n__________E MIPS archive
  45. >20 string U with MIPS Ucode members
  46. >21 string L with MIPSEL members
  47. >21 string B with MIPSEB members
  48. >19 string L and an EL hash table
  49. >19 string B and an EB hash table
  50. >22 string X -- out of date
  51. 0 string -h- Software Tools format archive text
  52. #
  53. # XXX - why are there multiple <ar> thingies? Note that 0x213c6172 is
  54. # "!<ar", so, for new-style (4.xBSD/SVR2andup) archives, we have:
  55. #
  56. # 0 string =!<arch> current ar archive
  57. # 0 long 0x213c6172 archive file
  58. #
  59. # and for SVR1 archives, we have:
  60. #
  61. # 0 string \<ar> System V Release 1 ar archive
  62. # 0 string =<ar> archive
  63. #
  64. # XXX - did Aegis really store shared libraries, breakpointed modules,
  65. # and absolute code program modules in the same format as new-style
  66. # "ar" archives?
  67. #
  68. 0 string =!<arch> current ar archive
  69. >8 string __.SYMDEF random library
  70. >0 belong =65538 - pre SR9.5
  71. >0 belong =65539 - post SR9.5
  72. >0 beshort 2 - object archive
  73. >0 beshort 3 - shared library module
  74. >0 beshort 4 - debug break-pointed module
  75. >0 beshort 5 - absolute code program module
  76. 0 string \<ar> System V Release 1 ar archive
  77. 0 string =<ar> archive
  78. #
  79. # XXX - from "vax", which appears to collect a bunch of byte-swapped
  80. # thingies, to help you recognize VAX files on big-endian machines;
  81. # with "leshort", "lelong", and "string", that's no longer necessary....
  82. #
  83. 0 belong 0x65ff0000 VAX 3.0 archive
  84. 0 belong 0x3c61723e VAX 5.0 archive
  85. #
  86. 0 long 0x213c6172 archive file
  87. 0 lelong 0177555 very old VAX archive
  88. 0 leshort 0177555 very old PDP-11 archive
  89. #
  90. # XXX - "pdp" claims that 0177545 can have an __.SYMDEF member and thus
  91. # be a random library (it said 0xff65 rather than 0177545).
  92. #
  93. 0 lelong 0177545 old VAX archive
  94. >8 string __.SYMDEF random library
  95. 0 leshort 0177545 old PDP-11 archive
  96. >8 string __.SYMDEF random library
  97. #
  98. # From "pdp" (but why a 4-byte quantity?)
  99. #
  100. 0 lelong 0x39bed PDP-11 old archive
  101. 0 lelong 0x39bee PDP-11 4.0 archive
  102. # ARC archiver, from Daniel Quinlan (quinlan@yggdrasil.com)
  103. #
  104. # The first byte is the magic (0x1a), byte 2 is the compression type for
  105. # the first file (0x01 through 0x09), and bytes 3 to 15 are the MS-DOS
  106. # filename of the first file (null terminated). Since some types collide
  107. # we only test some types on basis of frequency: 0x08 (83%), 0x09 (5%),
  108. # 0x02 (5%), 0x03 (3%), 0x04 (2%), 0x06 (2%). 0x01 collides with terminfo.
  109. 0 lelong&0x8080ffff 0x0000081a ARC archive data, dynamic LZW
  110. 0 lelong&0x8080ffff 0x0000091a ARC archive data, squashed
  111. 0 lelong&0x8080ffff 0x0000021a ARC archive data, uncompressed
  112. 0 lelong&0x8080ffff 0x0000031a ARC archive data, packed
  113. 0 lelong&0x8080ffff 0x0000041a ARC archive data, squeezed
  114. 0 lelong&0x8080ffff 0x0000061a ARC archive data, crunched
  115. # [JW] stuff taken from idarc, obviously ARC successors:
  116. 0 lelong&0x8080ffff 0x00000a1a PAK archive data
  117. 0 lelong&0x8080ffff 0x0000141a ARC+ archive data
  118. 0 lelong&0x8080ffff 0x0000481a HYP archive data
  119. # Acorn archive formats (Disaster prone simpleton, m91dps@ecs.ox.ac.uk)
  120. # I can't create either SPARK or ArcFS archives so I have not tested this stuff
  121. # [GRR: the original entries collide with ARC, above; replaced with combined
  122. # version (not tested)]
  123. #0 byte 0x1a RISC OS archive
  124. #>1 string archive (ArcFS format)
  125. #0 string \032archive RISC OS archive (ArcFS format)
  126. 0 string \032 RISC OS archive (spark format)
  127. 0 string Archive\000 RISC OS archive (ArcFS format)
  128. # All these were taken from idarc, many could not be verified. Unfortunately,
  129. # there were many low-quality sigs, i.e. easy to trigger false positives.
  130. # Please notify me of any real-world fishy/ambiguous signatures and I'll try
  131. # to get my hands on the actual archiver and see if I find something better. [JW]
  132. # probably many can be enhanced by finding some 0-byte or control char near the start
  133. # idarc calls this Crush/Uncompressed... *shrug*
  134. 0 string CRUSH Crush archive data
  135. # Squeeze It (.sqz)
  136. 0 string HLSQZ Squeeze It archive data
  137. # SQWEZ
  138. 0 string SQWEZ SQWEZ archive data
  139. # HPack (.hpk)
  140. 0 string HPAK HPack archive data
  141. # HAP
  142. 0 string \x91\x33HF HAP archive data
  143. # MD/MDCD
  144. 0 string MDmd MDCD archive data
  145. # LIM
  146. 0 string LIM\x1a LIM archive data
  147. # SAR
  148. 3 string LH5 SAR archive data
  149. # BSArc/BS2
  150. 0 string \212\3SB \0 BSArc/BS2 archive data
  151. # MAR
  152. 2 string =-ah MAR archive data
  153. # ACB
  154. 0 belong&0x00f800ff 0x00800000 ACB archive data
  155. # CPZ
  156. # TODO, this is what idarc says: 0 string \0\0\0 CPZ archive data
  157. # JRC
  158. 0 string JRchive JRC archive data
  159. # Quantum
  160. 0 string DS\0 Quantum archive data
  161. # ReSOF
  162. 0 string PK\3\6 ReSOF archive data
  163. # QuArk
  164. 0 string 7\4 QuArk archive data
  165. # YAC
  166. 14 string YC YAC archive data
  167. # X1
  168. 0 string X1 X1 archive data
  169. 0 string XhDr X1 archive data
  170. # CDC Codec (.dqt)
  171. 0 belong&0xffffe000 0x76ff2000 CDC Codec archive data
  172. # AMGC
  173. 0 string \xad6" AMGC archive data
  174. # NuLIB
  175. 0 string NõFélå NuLIB archive data
  176. # PakLeo
  177. 0 string LEOLZW PAKLeo archive data
  178. # ChArc
  179. 0 string SChF ChArc archive data
  180. # PSA
  181. 0 string PSA PSA archive data
  182. # CrossePAC
  183. 0 string DSIGDCC CrossePAC archive data
  184. # Freeze
  185. 0 string \x1f\x9f\x4a\x10\x0a Freeze archive data
  186. # KBoom
  187. 0 string ¨MP¨ KBoom archive data
  188. # NSQ, must go after CDC Codec
  189. 0 string \x76\xff NSQ archive data
  190. # DPA
  191. 0 string Dirk\ Paehl DPA archive data
  192. # BA
  193. # TODO: idarc says "bytes 0-2 == bytes 3-5"
  194. # TTComp
  195. 0 string \0\6 TTComp archive data
  196. # ESP, could this conflict with Easy Software Products' (e.g.ESP ghostscript) documentation?
  197. 0 string ESP ESP archive data
  198. # ZPack
  199. 0 string \1ZPK\1 ZPack archive data
  200. # Sky
  201. 0 string \xbc\x40 Sky archive data
  202. # UFA
  203. 0 string UFA UFA archive data
  204. # Dry
  205. 0 string =-H2O DRY archive data
  206. # FoxSQZ
  207. 0 string FOXSQZ FoxSQZ archive data
  208. # AR7
  209. 0 string ,AR7 AR7 archive data
  210. # PPMZ
  211. 0 string PPMZ PPMZ archive data
  212. # MS Compress
  213. 4 string \x88\xf0\x27 MS Compress archive data
  214. # MP3 (archiver, not lossy audio compression)
  215. 0 string MP3\x1a MP3-Archiver archive data
  216. # ZET
  217. 0 string OZÝ ZET archive data
  218. # TSComp
  219. 0 string \x65\x5d\x13\x8c\x08\x01\x03\x00 TSComp archive data
  220. # ARQ
  221. 0 string gW\4\1 ARQ archive data
  222. # Squash
  223. 3 string OctSqu Squash archive data
  224. # Terse
  225. 0 string \5\1\1\0 Terse archive data
  226. # PUCrunch
  227. 0 string \x01\x08\x0b\x08\xef\x00\x9e\x32\x30\x36\x31 PUCrunch archive data
  228. # UHarc
  229. 0 string UHA UHarc archive data
  230. # ABComp
  231. 0 string \2AB ABComp archive data
  232. 0 string \3AB2 ABComp archive data
  233. # CMP
  234. 0 string CO\0 CMP archive data
  235. # Splint
  236. 0 string \x93\xb9\x06 Splint archive data
  237. # InstallShield
  238. 0 string \x13\x5d\x65\x8c InstallShield Z archive Data
  239. # Gather
  240. 1 string GTH Gather archive data
  241. # BOA
  242. 0 string BOA BOA archive data
  243. # RAX
  244. 0 string ULEB\xa RAX archive data
  245. # Xtreme
  246. 0 string ULEB\0 Xtreme archive data
  247. # Pack Magic
  248. 0 string @â\1\0 Pack Magic archive data
  249. # BTS
  250. 0 belong&0xfeffffff 0x1a034465 BTS archive data
  251. # ELI 5750
  252. 0 string Ora\ ELI 5750 archive data
  253. # QFC
  254. 0 string \x1aFC\x1a QFC archive data
  255. 0 string \x1aQF\x1a QFC archive data
  256. # PRO-PACK
  257. 0 string RNC PRO-PACK archive data
  258. # 777
  259. 0 string 777 777 archive data
  260. # LZS221
  261. 0 string sTaC LZS221 archive data
  262. # HPA
  263. 0 string HPA HPA archive data
  264. # Arhangel
  265. 0 string LG Arhangel archive data
  266. # EXP1, uses bzip2
  267. 0 string 0123456789012345BZh EXP1 archive data
  268. # IMP
  269. 0 string IMP\xa IMP archive data
  270. # NRV
  271. 0 string \x00\x9E\x6E\x72\x76\xFF NRV archive data
  272. # Squish
  273. 0 string \x73\xb2\x90\xf4 Squish archive data
  274. # Par
  275. 0 string PHILIPP Par archive data
  276. 0 string PAR Par archive data
  277. # HIT
  278. 0 string UB HIT archive data
  279. # SBX
  280. 0 belong&0xfffff000 0x53423000 SBX archive data
  281. # NaShrink
  282. 0 string NSK NaShrink archive data
  283. # SAPCAR
  284. 0 string #\ CAR\ archive\ header SAPCAR archive data
  285. 0 string CAR\ 2.00RG SAPCAR archive data
  286. # Disintegrator
  287. 0 string DST Disintegrator archive data
  288. # ASD
  289. 0 string ASD ASD archive data
  290. # InstallShield CAB
  291. 0 string ISc( InstallShield CAB
  292. # TOP4
  293. 0 string T4\x1a TOP4 archive data
  294. # BatComp left out: sig looks like COM executable
  295. # so TODO: get real 4dos batcomp file and find sig
  296. # BlakHole
  297. 0 string BH\5\7 BlakHole archive data
  298. # BIX
  299. 0 string BIX0 BIX archive data
  300. # ChiefLZA
  301. 0 string ChfLZ ChiefLZA archive data
  302. # Blink
  303. 0 string Blink Blink archive data
  304. # Logitech Compress
  305. 0 string \xda\xfa Logitech Compress archive data
  306. # ARS-Sfx (FIXME: really a SFX? then goto COM/EXE)
  307. 1 string (C)\ STEPANYUK ARS-Sfx archive data
  308. # AKT/AKT32
  309. 0 string AKT32 AKT32 archive data
  310. 0 string AKT AKT archive data
  311. # NPack
  312. 0 string MSTSM NPack archive data
  313. # PFT
  314. 0 string \0\x50\0\x14 PFT archive data
  315. # SemOne
  316. 0 string SEM SemOne archive data
  317. # PPMD
  318. 0 string \x8f\xaf\xac\x84 PPMD archive data
  319. # FIZ
  320. 0 string FIZ FIZ archive data
  321. # MSXiE
  322. 0 belong&0xfffff0f0 0x4d530000 MSXiE archive data
  323. # DeepFreezer
  324. 0 belong&0xfffffff0 0x797a3030 DeepFreezer archive data
  325. # DC
  326. 0 string =<DC- DC archive data
  327. # TPac
  328. 0 string \4TPAC\3 TPac archive data
  329. # Ai
  330. 0 string Ai\1\1\0 Ai archive data
  331. 0 string Ai\1\0\0 Ai archive data
  332. # Ai32
  333. 0 string Ai\2\0 Ai32 archive data
  334. 0 string Ai\2\1 Ai32 archive data
  335. # SBC
  336. 0 string SBC SBC archive data
  337. # Ybs
  338. 0 string YBS Ybs archive data
  339. # DitPack
  340. 0 string \x9e\0\0 DitPack archive data
  341. # DMS
  342. 0 string DMS! DMS archive data
  343. # EPC
  344. 0 string \x8f\xaf\xac\x8c EPC archive data
  345. # VSARC
  346. 0 string VS\x1a VSARC archive data
  347. # PDZ
  348. 0 string PDZ PDZ archive data
  349. # ReDuq
  350. 0 string rdqx ReDuq archive data
  351. # GCA
  352. 0 string GCAX GCA archive data
  353. # PPMN
  354. 0 string pN PPMN archive data
  355. # WinImage
  356. 3 string WINIMAGE WinImage archive data
  357. # Compressia
  358. 0 string CMP0CMP Compressia archive data
  359. # UHBC
  360. 0 string UHB UHBC archive data
  361. # WinHKI
  362. 0 string \x61\x5C\x04\x05 WinHKI archive data
  363. # WWPack data file
  364. 0 string WWP WWPack archive data
  365. # BSN (BSA, PTS-DOS)
  366. 0 string \xffBSG BSN archive data
  367. 1 string \xffBSG BSN archive data
  368. 3 string \xffBSG BSN archive data
  369. 1 string \0\xae\2 BSN archive data
  370. 1 string \0\xae\3 BSN archive data
  371. 1 string \0\xae\7 BSN archive data
  372. # AIN
  373. 0 string \x33\x18 AIN archive data
  374. 0 string \x33\x17 AIN archive data
  375. # XPA32
  376. 0 string xpa\0\1 XPA32 archive data
  377. # SZip (TODO: doesn't catch all versions)
  378. 0 string SZ\x0a\4 SZip archive data
  379. # XPack DiskImage
  380. 0 string jm XPack DiskImage archive data
  381. # XPack Data
  382. 0 string xpa XPack archive data
  383. # XPack Single Data
  384. 0 string Í\ jm XPack single archive data
  385. # TODO: missing due to unknown magic/magic at end of file:
  386. #DWC
  387. #ARG
  388. #ZAR
  389. #PC/3270
  390. #InstallIt
  391. #RKive
  392. #RK
  393. #XPack Diskimage
  394. # These were inspired by idarc, but actually verified
  395. # Dzip archiver (.dz)
  396. 0 string DZ Dzip archive data
  397. >2 byte x \b, version %i
  398. >3 byte x \b.%i
  399. # ZZip archiver (.zz)
  400. 0 string ZZ\ \0\0 ZZip archive data
  401. 0 string ZZ0 ZZip archive data
  402. # PAQ archiver (.paq)
  403. 0 string \xaa\x40\x5f\x77\x1f\xe5\x82\x0d PAQ archive data
  404. 0 string PAQ PAQ archive data
  405. >3 byte&0xf0 0x30
  406. >>3 byte x (v%c)
  407. # JAR archiver (.j), this is the successor to ARJ, not Java's JAR (which is essentially ZIP)
  408. 0xe string \x1aJar\x1b JAR (ARJ Software, Inc.) archive data
  409. 0 string JARCS JAR (ARJ Software, Inc.) archive data
  410. # ARJ archiver (jason@jarthur.Claremont.EDU)
  411. 0 leshort 0xea60 ARJ archive data
  412. >5 byte x \b, v%d,
  413. >8 byte &0x04 multi-volume,
  414. >8 byte &0x10 slash-switched,
  415. >8 byte &0x20 backup,
  416. >34 string x original name: %s,
  417. >7 byte 0 os: MS-DOS
  418. >7 byte 1 os: PRIMOS
  419. >7 byte 2 os: Unix
  420. >7 byte 3 os: Amiga
  421. >7 byte 4 os: Macintosh
  422. >7 byte 5 os: OS/2
  423. >7 byte 6 os: Apple ][ GS
  424. >7 byte 7 os: Atari ST
  425. >7 byte 8 os: NeXT
  426. >7 byte 9 os: VAX/VMS
  427. >3 byte >0 %d]
  428. # [JW] idarc says this is also possible
  429. 2 leshort 0xea60 ARJ archive data
  430. # HA archiver (Greg Roelofs, newt@uchicago.edu)
  431. # This is a really bad format. A file containing HAWAII will match this...
  432. #0 string HA HA archive data,
  433. #>2 leshort =1 1 file,
  434. #>2 leshort >1 %u files,
  435. #>4 byte&0x0f =0 first is type CPY
  436. #>4 byte&0x0f =1 first is type ASC
  437. #>4 byte&0x0f =2 first is type HSC
  438. #>4 byte&0x0f =0x0e first is type DIR
  439. #>4 byte&0x0f =0x0f first is type SPECIAL
  440. # suggestion: at least identify small archives (<1024 files)
  441. 0 belong&0xffff00fc 0x48410000 HA archive data
  442. >2 leshort =1 1 file,
  443. >2 leshort >1 %u files,
  444. >4 byte&0x0f =0 first is type CPY
  445. >4 byte&0x0f =1 first is type ASC
  446. >4 byte&0x0f =2 first is type HSC
  447. >4 byte&0x0f =0x0e first is type DIR
  448. >4 byte&0x0f =0x0f first is type SPECIAL
  449. # HPACK archiver (Peter Gutmann, pgut1@cs.aukuni.ac.nz)
  450. 0 string HPAK HPACK archive data
  451. # JAM Archive volume format, by Dmitry.Kohmanyuk@UA.net
  452. 0 string \351,\001JAM\ JAM archive,
  453. >7 string >\0 version %.4s
  454. >0x26 byte =0x27 -
  455. >>0x2b string >\0 label %.11s,
  456. >>0x27 lelong x serial %08x,
  457. >>0x36 string >\0 fstype %.8s
  458. # LHARC/LHA archiver (Greg Roelofs, newt@uchicago.edu)
  459. 2 string -lh0- LHarc 1.x/ARX archive data [lh0]
  460. 2 string -lh1- LHarc 1.x/ARX archive data [lh1]
  461. 2 string -lz4- LHarc 1.x archive data [lz4]
  462. 2 string -lz5- LHarc 1.x archive data [lz5]
  463. # [never seen any but the last; -lh4- reported in comp.compression:]
  464. 2 string -lzs- LHa/LZS archive data [lzs]
  465. 2 string -lh\40- LHa 2.x? archive data [lh ]
  466. 2 string -lhd- LHa 2.x? archive data [lhd]
  467. 2 string -lh2- LHa 2.x? archive data [lh2]
  468. 2 string -lh3- LHa 2.x? archive data [lh3]
  469. 2 string -lh4- LHa (2.x) archive data [lh4]
  470. 2 string -lh5- LHa (2.x) archive data [lh5]
  471. 2 string -lh6- LHa (2.x) archive data [lh6]
  472. 2 string -lh7- LHa (2.x)/LHark archive data [lh7]
  473. >20 byte x - header level %d
  474. # taken from idarc [JW]
  475. 2 string -lZ PUT archive data
  476. 2 string -lz LZS archive data
  477. 2 string -sw1- Swag archive data
  478. # RAR archiver (Greg Roelofs, newt@uchicago.edu)
  479. 0 string Rar! RAR archive data,
  480. >44 byte x v%0x,
  481. >35 byte 0 os: MS-DOS
  482. >35 byte 1 os: OS/2
  483. >35 byte 2 os: Win32
  484. >35 byte 3 os: Unix
  485. # some old version? idarc says:
  486. 0 string RE\x7e\x5e RAR archive data
  487. # SQUISH archiver (Greg Roelofs, newt@uchicago.edu)
  488. 0 string SQSH squished archive data (Acorn RISCOS)
  489. # UC2 archiver (Greg Roelofs, newt@uchicago.edu)
  490. # [JW] see exe section for self-extracting version
  491. 0 string UC2\x1a UC2 archive data
  492. # ZIP archives (Greg Roelofs, c/o zip-bugs@wkuvx1.wku.edu)
  493. 0 string PK\003\004 Zip archive data
  494. >4 byte 0x09 \b, at least v0.9 to extract
  495. >4 byte 0x0a \b, at least v1.0 to extract
  496. >4 byte 0x0b \b, at least v1.1 to extract
  497. >4 byte 0x14 \b, at least v2.0 to extract
  498. # Zoo archiver
  499. 20 lelong 0xfdc4a7dc Zoo archive data
  500. >4 byte >48 \b, v%c.
  501. >>6 byte >47 \b%c
  502. >>>7 byte >47 \b%c
  503. >32 byte >0 \b, modify: v%d
  504. >>33 byte x \b.%d+
  505. >42 lelong 0xfdc4a7dc \b,
  506. >>70 byte >0 extract: v%d
  507. >>>71 byte x \b.%d+
  508. # Shell archives
  509. 10 string #\ This\ is\ a\ shell\ archive shell archive text
  510. #
  511. # LBR. NB: May conflict with the questionable
  512. # "binary Computer Graphics Metafile" format.
  513. #
  514. 0 string \0\ \ \ \ \ \ \ \ \ \ \ \0\0 LBR archive data
  515. #
  516. # PMA (CP/M derivative of LHA)
  517. #
  518. 2 string -pm0- PMarc archive data [pm0]
  519. 2 string -pm1- PMarc archive data [pm1]
  520. 2 string -pm2- PMarc archive data [pm2]
  521. 2 string -pms- PMarc SFX archive (CP/M, DOS)
  522. 5 string -pc1- PopCom compressed executable (CP/M)
  523. # From Rafael Laboissiere <rafael@laboissiere.net>
  524. # The Project Revision Control System (see
  525. # http://prcs.sourceforge.net) generates a packaged project
  526. # file which is recognized by the following entry:
  527. 0 leshort 0xeb81 PRCS packaged project
  528. # Microsoft cabinets
  529. # by David Necas (Yeti) <yeti@physics.muni.cz>
  530. #0 string MSCF\0\0\0\0 Microsoft cabinet file data,
  531. #>25 byte x v%d
  532. #>24 byte x \b.%d
  533. # MPi: All CABs have version 1.3, so this is pointless.
  534. # Better magic in debian-additions.
  535. # GTKtalog catalogs
  536. # by David Necas (Yeti) <yeti@physics.muni.cz>
  537. 4 string gtktalog\ GTKtalog catalog data,
  538. >13 string 3 version 3
  539. >>14 beshort 0x677a (gzipped)
  540. >>14 beshort !0x677a (not gzipped)
  541. >13 string >3 version %s
  542. ############################################################################
  543. # Parity archive reconstruction file, the 'par' file format now used on Usenet.
  544. 0 string PAR\0 PARity archive data
  545. >48 leshort =0 - Index file
  546. >48 leshort >0 - file number %d
  547. # Felix von Leitner <felix-file@fefe.de>
  548. 0 string d8:announce BitTorrent file
  549. # Atari MSA archive - Teemu Hukkanen <tjhukkan@iki.fi>
  550. 0 beshort 0x0e0f Atari MSA archive data
  551. >2 beshort x \b, %d sectors per track
  552. >4 beshort 0 \b, 1 sided
  553. >4 beshort 1 \b, 2 sided
  554. >6 beshort x \b, starting track: %d
  555. >8 beshort x \b, ending track: %d
  556. # Alternate ZIP string (amc@arwen.cs.berkeley.edu)
  557. 0 string PK00PK\003\004 Zip archive data
  558. # ACE archive (from http://www.wotsit.org/download.asp?f=ace)
  559. # by Stefan `Sec` Zehl <sec@42.org>
  560. 7 string **ACE** ACE archive data
  561. >15 byte >0 version %d
  562. >16 byte =0x00 \b, from MS-DOS
  563. >16 byte =0x01 \b, from OS/2
  564. >16 byte =0x02 \b, from Win/32
  565. >16 byte =0x03 \b, from Unix
  566. >16 byte =0x04 \b, from MacOS
  567. >16 byte =0x05 \b, from WinNT
  568. >16 byte =0x06 \b, from Primos
  569. >16 byte =0x07 \b, from AppleGS
  570. >16 byte =0x08 \b, from Atari
  571. >16 byte =0x09 \b, from Vax/VMS
  572. >16 byte =0x0A \b, from Amiga
  573. >16 byte =0x0B \b, from Next
  574. >14 byte x \b, version %d to extract
  575. >5 leshort &0x0080 \b, multiple volumes,
  576. >>17 byte x \b (part %d),
  577. >5 leshort &0x0002 \b, contains comment
  578. >5 leshort &0x0200 \b, sfx
  579. >5 leshort &0x0400 \b, small dictionary
  580. >5 leshort &0x0800 \b, multi-volume
  581. >5 leshort &0x1000 \b, contains AV-String
  582. >>30 string\x16*UNREGISTERED\x20VERSION* (unregistered)
  583. >5 leshort &0x2000 \b, with recovery record
  584. >5 leshort &0x4000 \b, locked
  585. >5 leshort &0x8000 \b, solid
  586. # Date in MS-DOS format (whatever that is)
  587. #>18 lelong x Created on
  588. # sfArk : compression program for Soundfonts (sf2) by Dirk Jagdmann
  589. # <doj@cubic.org>
  590. 0x1A string sfArk sfArk compressed Soundfont
  591. >0x15 string 2
  592. >>0x1 string >\0 Version %s
  593. >>0x2A string >\0 : %s
  594. # DR-DOS 7.03 Packed File *.??_
  595. 0 string Packed\ File\ Personal NetWare Packed File
  596. >12 string x \b, was "%.12s"
  597. # EET archive
  598. # From: Tilman Sauerbeck <tilman@code-monkey.de>
  599. 0 belong 0x1ee7ff00 EET archive