1 1.1 christos 2 1.1 christos #------------------------------------------------------------------------------ 3 1.1.1.5 christos # $File: vms,v 1.10 2017/03/17 21:35:28 christos Exp $ 4 1.1 christos # vms: file(1) magic for VMS executables (experimental) 5 1.1 christos # 6 1.1 christos # VMS .exe formats, both VAX and AXP (Greg Roelofs, newt (a] uchicago.edu) 7 1.1 christos 8 1.1 christos # GRR 950122: I'm just guessing on these, based on inspection of the headers 9 1.1 christos # of three executables each for Alpha and VAX architectures. The VAX files 10 1.1 christos # all had headers similar to this: 11 1.1 christos # 12 1.1 christos # 00000 b0 00 30 00 44 00 60 00 00 00 00 00 30 32 30 35 ..0.D.`.....0205 13 1.1 christos # 00010 01 01 00 00 ff ff ff ff ff ff ff ff 00 00 00 00 ................ 14 1.1 christos # 15 1.1 christos 0 string \xb0\0\x30\0 VMS VAX executable 16 1.1 christos >44032 string PK\003\004 \b, Info-ZIP SFX archive v5.12 w/decryption 17 1.1 christos # 18 1.1 christos # The AXP files all looked like this, except that the byte at offset 0x22 19 1.1 christos # was 06 in some of them and 07 in others: 20 1.1 christos # 21 1.1 christos # 00000 03 00 00 00 00 00 00 00 ec 02 00 00 10 01 00 00 ................ 22 1.1 christos # 00010 68 00 00 00 98 00 00 00 b8 00 00 00 00 00 00 00 h............... 23 1.1 christos # 00020 00 00 07 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 24 1.1 christos # 00030 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 ................ 25 1.1 christos # 00040 00 00 00 00 ff ff ff ff ff ff ff ff 02 00 00 00 ................ 26 1.1 christos # 27 1.1.1.3 christos # GRR this test is still too general as it catches example adressen.dbt 28 1.1.1.5 christos 0 belong 0x03000000 29 1.1.1.3 christos >8 ubelong 0xec020000 VMS Alpha executable 30 1.1.1.3 christos >>75264 string PK\003\004 \b, Info-ZIP SFX archive v5.12 w/decryption 31