xref: /dragonfly/contrib/file/magic/Magdir/vms (revision c30bd091)
1327e51cbSPeter Avalos
2327e51cbSPeter Avalos#------------------------------------------------------------------------------
3*c30bd091SSascha Wildner# $File: vms,v 1.10 2017/03/17 21:35:28 christos Exp $
4327e51cbSPeter Avalos# vms:  file(1) magic for VMS executables (experimental)
5327e51cbSPeter Avalos#
6327e51cbSPeter Avalos# VMS .exe formats, both VAX and AXP (Greg Roelofs, newt@uchicago.edu)
7327e51cbSPeter Avalos
8327e51cbSPeter Avalos# GRR 950122:  I'm just guessing on these, based on inspection of the headers
9327e51cbSPeter Avalos# of three executables each for Alpha and VAX architectures.  The VAX files
10327e51cbSPeter Avalos# all had headers similar to this:
11327e51cbSPeter Avalos#
12327e51cbSPeter Avalos#   00000  b0 00 30 00 44 00 60 00  00 00 00 00 30 32 30 35  ..0.D.`.....0205
13327e51cbSPeter Avalos#   00010  01 01 00 00 ff ff ff ff  ff ff ff ff 00 00 00 00  ................
14327e51cbSPeter Avalos#
15327e51cbSPeter Avalos0	string	\xb0\0\x30\0	VMS VAX executable
16327e51cbSPeter Avalos>44032	string	PK\003\004	\b, Info-ZIP SFX archive v5.12 w/decryption
17327e51cbSPeter Avalos#
18327e51cbSPeter Avalos# The AXP files all looked like this, except that the byte at offset 0x22
19327e51cbSPeter Avalos# was 06 in some of them and 07 in others:
20327e51cbSPeter Avalos#
21327e51cbSPeter Avalos#   00000  03 00 00 00 00 00 00 00  ec 02 00 00 10 01 00 00  ................
22327e51cbSPeter Avalos#   00010  68 00 00 00 98 00 00 00  b8 00 00 00 00 00 00 00  h...............
23327e51cbSPeter Avalos#   00020  00 00 07 00 00 00 00 00  00 00 00 00 00 00 00 00  ................
24327e51cbSPeter Avalos#   00030  00 00 00 00 01 00 00 00  00 00 00 00 00 00 00 00  ................
25327e51cbSPeter Avalos#   00040  00 00 00 00 ff ff ff ff  ff ff ff ff 02 00 00 00  ................
26327e51cbSPeter Avalos#
27e8af9738SPeter Avalos# GRR this test is still too general as it catches example adressen.dbt
28e8af9738SPeter Avalos0	belong	0x03000000
29e8af9738SPeter Avalos>8	ubelong	0xec020000	VMS Alpha executable
30e8af9738SPeter Avalos>>75264	string	PK\003\004	\b, Info-ZIP SFX archive v5.12 w/decryption
31