1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
|
#
# "ar", for all kinds of archives.
#
# XXX - why are there multiple <ar> thingies? Note that 0x213c6172 is
# "!<ar", so, for new-style (4.xBSD/SVR2andup) archives, we have:
#
# 0 string !<arch> current ar archive
# 0 long 0x213c6172 archive file
#
# and for SVR3.1 archives, we have:
#
# 0 string \<ar> System V Release 1 ar archive
# 0 string =<ar> archive
# 0 string =<ar> archive
#
# XXX - did Aegis really store shared libraries, breakpointed modules,
# and absolute code program modules in the same format as new-style
# "ar" archives?
#
0 string !<arch> current ar archive
>8 string __.SYMDEF random library
>0 belong =65538 - pre SR9.5
>0 belong =65539 - post SR9.5
>0 beshort 2 - object archive
>0 beshort 3 - shared library module
>0 beshort 4 - debug break-pointed module
>0 beshort 5 - absolute code program module
0 string \<ar> System V Release 1 ar archive
0 string =<ar> archive
#
# XXX - from "vax", which appears to collect a bunch of byte-swapped
# thingies, to help you recognize VAX files on big-endian machines;
# with "leshort", "lelong", and "string", that's no longer necessary....
#
# 0 long 0x3c61723e VAX 5.0 archive
#
0 long 0x213c6172 archive file
0 lelong 0177555 very old VAX archive
0 leshort 0177555 very old PDP-11 archive
#
# XXX - "pdp" claims that 0177545 can have an __.SYMDEF member and thus
# be a random library (it said 0xff65 rather than 0177545).
#
0 lelong 0177545 old VAX archive
>8 string __.SYMDEF random library
0 leshort 0177545 old PDP-11 archive
>8 string __.SYMDEF random library
#
0 string =<ar> archive
#
# From "pdp":
#
0 lelong 0x39bed PDP-11 old archive
0 lelong 0x39bee PDP-11 4.0 archive
#
0 string -h- Software Tools format archive text
# "arc" archiver
0 byte 26 'arc' archive
>1 byte 0 (empty)
>1 byte 1 (old format)
# Rahul Dhesi's zoo archive format, from keith@cerberus.uchicago.edu.
20 long 0xdca7c4fd Rahul Dhesi's "zoo" archive
# ZIP archiver
0 string PK zip archive file
>4 byte x - version
>4 byte 10 1.0
>4 byte 20 2.0
2 string -lh LHarc archive data
>6 byte x type %c
>20 byte x - header level %d
# From: <u31b3hs@pool.informatik.rwth-aachen.de> (Michael Haardt)
2 string -lh0- Lharc 1.x archive
2 string -lh1- Lharc 1.x archive
2 string -lz4- Lharc 1.x archive
2 string -lz5- Lharc 1.x archive
2 string -lzs- LHa 2.x? archive [lzs]
2 string -lh - LHa 2.x? archive [lh ]
2 string -lhd- LHa 2.x? archive [lhd]
2 string -lh2- LHa 2.x? archive [lh2]
2 string -lh3- LHa 2.x? archive [lh3]
2 string -lh4- LHa 2.x? archive [lh4]
2 string -lh5- LHa (2.x) archive
# ARJ archive data from jason@jarthur.Claremont.EDU
0 leshort 0xea60 ARJ archive data
>5 byte x - version %d,
>8 byte >0 flags:
>>8 byte &0x04 multi-volume,
>>8 byte &0x10 slash switched,
>>8 byte &0x20 backup,
>34 string x original name: %s,
>7 byte 0 os: MS/DOS
>7 byte 1 os: PRIMOS
>7 byte 2 os: UNIX
>7 byte 3 os: Amiga
>7 byte 4 os: Macintosh
>7 byte 5 os: OS/2
>7 byte 6 os: Apple ][ GS
>7 byte 7 os: Atari ST
>7 byte 8 os: NeXT
>7 byte 9 os: VAX/VMS
>3 byte >0 %d]
|
