File Manager

003 File Manager

Current Path: /usr/src/contrib/file/magic/Magdir

usr / src / contrib / file / magic / Magdir /

📁 ..
📄 acorn(3.65 KB)
📄 adi(425 B)
📄 adventure(4.38 KB)
📄 algol68(678 B)
📄 allegro(402 B)
📄 alliant(760 B)
📄 amanda(385 B)
📄 amigaos(2.95 KB)
📄 android(6.73 KB)
📄 animation(45.47 KB)
📄 aout(1.69 KB)
📄 apache(822 B)
📄 apl(276 B)
📄 apple(19.05 KB)
📄 application(273 B)
📄 applix(428 B)
📄 apt(1.57 KB)
📄 archive(55.73 KB)
📄 asf(6.39 KB)
📄 assembler(700 B)
📄 asterix(584 B)
📄 att3b(1.23 KB)
📄 audio(34.93 KB)
📄 basis(571 B)
📄 beetle(289 B)
📄 ber(2.34 KB)
📄 bflt(414 B)
📄 bhl(341 B)
📄 bioinformatics(7.5 KB)
📄 biosig(4.73 KB)
📄 blackberry(282 B)
📄 blcr(746 B)
📄 blender(1.17 KB)
📄 blit(884 B)
📄 bout(349 B)
📄 bsdi(1.13 KB)
📄 bsi(263 B)
📄 btsnoop(429 B)
📄 c-lang(3.39 KB)
📄 c64(1.67 KB)
📄 cad(12.21 KB)
📄 cafebabe(2.16 KB)
📄 cbor(610 B)
📄 cddb(386 B)
📄 chord(577 B)
📄 cisco(495 B)
📄 citrus(227 B)
📄 clarion(769 B)
📄 claris(1.68 KB)
📄 clipper(2.09 KB)
📄 clojure(1.11 KB)
📄 coff(2.86 KB)
📄 commands(5.2 KB)
📄 communications(853 B)
📄 compress(13.44 KB)
📄 console(36.72 KB)
📄 convex(2.58 KB)
📄 coverage(2.98 KB)
📄 cracklib(531 B)
📄 ctags(297 B)
📄 ctf(823 B)
📄 cubemap(403 B)
📄 cups(1.75 KB)
📄 dact(379 B)
📄 database(22.4 KB)
📄 dataone(1.72 KB)
📄 dbpf(630 B)
📄 der(3.31 KB)
📄 diamond(509 B)
📄 dif(1.4 KB)
📄 diff(1.05 KB)
📄 digital(1.8 KB)
📄 dolby(2.32 KB)
📄 dump(2.84 KB)
📄 dyadic(2.49 KB)
📄 ebml(350 B)
📄 edid(377 B)
📄 editors(1.01 KB)
📄 efi(547 B)
📄 elf(11 KB)
📄 encore(725 B)
📄 epoc(2.27 KB)
📄 erlang(709 B)
📄 espressif(1.92 KB)
📄 esri(826 B)
📄 fcs(516 B)
📄 filesystems(91.93 KB)
📄 finger(488 B)
📄 flash(1.73 KB)
📄 flif(1.08 KB)
📄 fonts(13.77 KB)
📄 forth(2.84 KB)
📄 fortran(349 B)
📄 frame(2.18 KB)
📄 freebsd(4.79 KB)
📄 fsav(4.13 KB)
📄 fusecompress(430 B)
📄 games(12.77 KB)
📄 gcc(505 B)
📄 gconv(344 B)
📄 geo(4.04 KB)
📄 geos(584 B)
📄 gimp(2.7 KB)
📄 git(321 B)
📄 glibc(879 B)
📄 gnome(2.44 KB)
📄 gnu(5.98 KB)
📄 gnumeric(411 B)
📄 gpt(9.74 KB)
📄 gpu(929 B)
📄 grace(892 B)
📄 graphviz(580 B)
📄 gringotts(1.54 KB)
📄 guile(471 B)
📄 hardware(385 B)
📄 hitachi-sh(1.09 KB)
📄 hp(13.74 KB)
📄 human68k(1004 B)
📄 ibm370(1.59 KB)
📄 ibm6000(1.22 KB)
📄 icc(7.67 KB)
📄 iff(2.67 KB)
📄 images(80.45 KB)
📄 inform(333 B)
📄 intel(4.63 KB)
📄 interleaf(333 B)
📄 island(345 B)
📄 ispell(2.8 KB)
📄 isz(514 B)
📄 java(1.54 KB)
📄 javascript(984 B)
📄 jpeg(3.42 KB)
📄 karma(291 B)
📄 kde(390 B)
📄 keepass(692 B)
📄 kerberos(1.43 KB)
📄 kicad(2.21 KB)
📄 kml(1.43 KB)
📄 lecter(269 B)
📄 lex(528 B)
📄 lif(240 B)
📄 linux(17.84 KB)
📄 lisp(2.77 KB)
📄 llvm(723 B)
📄 lua(754 B)
📄 luks(419 B)
📄 m4(370 B)
📄 mach(8.48 KB)
📄 macintosh(16.58 KB)
📄 macos(206 B)
📄 magic(426 B)
📄 mail.news(2.64 KB)
📄 make(1.25 KB)
📄 map(13.47 KB)
📄 maple(1.86 KB)
📄 marc21(1019 B)
📄 mathcad(300 B)
📄 mathematica(2.69 KB)
📄 matroska(422 B)
📄 mcrypt(1.21 KB)
📄 measure(1013 B)
📄 mercurial(424 B)
📄 metastore(337 B)
📄 meteorological(1.77 KB)
📄 microfocus(741 B)
📄 mime(280 B)
📄 mips(2.97 KB)
📄 mirage(258 B)
📄 misctools(2.45 KB)
📄 mkid(318 B)
📄 mlssa(277 B)
📄 mmdf(220 B)
📄 modem(2.94 KB)
📄 modulefile(421 B)
📄 motorola(2.63 KB)
📄 mozilla(1.41 KB)
📄 msdos(57.99 KB)
📄 msooxml(2.09 KB)
📄 msvc(2.35 KB)
📄 msx(9.34 KB)
📄 mup(781 B)
📄 music(546 B)
📄 nasa(272 B)
📄 natinst(1.05 KB)
📄 ncr(1.69 KB)
📄 neko(373 B)
📄 netbsd(7.36 KB)
📄 netscape(902 B)
📄 netware(306 B)
📄 news(555 B)
📄 nitpicker(460 B)
📄 numpy(401 B)
📄 oasis(471 B)
📄 ocaml(542 B)
📄 octave(323 B)
📄 ole2compounddocs(18.67 KB)
📄 olf(3.14 KB)
📄 openfst(616 B)
📄 opentimestamps(704 B)
📄 os2(1.83 KB)
📄 os400(1.88 KB)
📄 os9(2.55 KB)
📄 osf1(254 B)
📄 palm(5.16 KB)
📄 parix(384 B)
📄 parrot(764 B)
📄 pascal(444 B)
📄 pbf(444 B)
📄 pbm(258 B)
📄 pc88(726 B)
📄 pc98(2.72 KB)
📄 pdf(1.03 KB)
📄 pdp(1.3 KB)
📄 perl(3.52 KB)
📄 pgf(1.38 KB)
📄 pgp(15.43 KB)
📄 pkgadd(297 B)
📄 plan9(866 B)
📄 plus5(550 B)
📄 pmem(1.23 KB)
📄 polyml(744 B)
📄 printer(5.83 KB)
📄 project(389 B)
📄 psdbms(483 B)
📄 psl(559 B)
📄 pulsar(370 B)
📄 pwsafe(669 B)
📄 pyramid(426 B)
📄 python(10.29 KB)
📄 qt(745 B)
📄 revision(2.36 KB)
📄 riff(15.77 KB)
📄 rpi(674 B)
📄 rpm(1.09 KB)
📄 rpmsg(349 B)
📄 rst(385 B)
📄 rtf(3.71 KB)
📄 ruby(1.86 KB)
📄 sc(245 B)
📄 sccs(835 B)
📄 scientific(3.56 KB)
📄 securitycerts(366 B)
📄 selinux(806 B)
📄 sendmail(1.46 KB)
📄 sequent(1.67 KB)
📄 sereal(1.24 KB)
📄 sgi(3.89 KB)
📄 sgml(4.43 KB)
📄 sharc(816 B)
📄 sinclair(1007 B)
📄 sisu(471 B)
📄 sketch(258 B)
📄 smalltalk(593 B)
📄 smile(1.23 KB)
📄 sniffer(13.39 KB)
📄 softquad(1.45 KB)
📄 sosi(1.65 KB)
📄 spec(600 B)
📄 spectrum(3.17 KB)
📄 sql(5.15 KB)
📄 ssh(1.4 KB)
📄 ssl(929 B)
📄 sun(4.69 KB)
📄 sylk(1.23 KB)
📄 symbos(915 B)
📄 sysex(11.53 KB)
📄 tcl(1005 B)
📄 teapot(266 B)
📄 terminfo(2.46 KB)
📄 tex(4.55 KB)
📄 tgif(262 B)
📄 ti-8x(7.55 KB)
📄 timezone(1.46 KB)
📄 tplink(2.89 KB)
📄 troff(1.22 KB)
📄 tuxedo(306 B)
📄 typeset(286 B)
📄 unicode(771 B)
📄 unisig(402 B)
📄 unknown(1.34 KB)
📄 usd(568 B)
📄 uterus(468 B)
📄 uuencode(1.09 KB)
📄 vacuum-cleaner(2.06 KB)
📄 varied.out(1.63 KB)
📄 varied.script(1.49 KB)
📄 vax(1001 B)
📄 vicar(759 B)
📄 virtual(11.69 KB)
📄 virtutech(524 B)
📄 visx(972 B)
📄 vms(1.41 KB)
📄 vmware(283 B)
📄 vorbis(5.97 KB)
📄 vxl(489 B)
📄 warc(596 B)
📄 weak(629 B)
📄 web(371 B)
📄 webassembly(633 B)
📄 windows(37.27 KB)
📄 wireless(295 B)
📄 wordprocessors(10.51 KB)
📄 wsdl(761 B)
📄 x68000(743 B)
📄 xdelta(548 B)
📄 xenix(2.98 KB)
📄 xilinx(1.26 KB)
📄 xo65(987 B)
📄 xwindows(1.04 KB)
📄 yara(461 B)
📄 zfs(2.37 KB)
📄 zilog(451 B)
📄 zip(3.23 KB)
📄 zyxel(613 B)

Editing: macintosh

#------------------------------------------------------------------------------
# $File: macintosh,v 1.30 2019/12/14 20:40:26 christos Exp $
# macintosh description
#
# BinHex is the Macintosh ASCII-encoded file format (see also "apple")
# Daniel Quinlan, quinlan@yggdrasil.com
# Update:	Joerg Jenderek
# URL:		https://en.wikipedia.org/wiki/BinHex
# Reference:	http://fileformats.archiveteam.org/wiki/BinHex
# Note:		only tested with version 4.0 and hqx extension
# Any text/binary before the characteristic comment sentence is to be ignored like in
# http://ftp.vim.org/pub/ftp/ftp/infomac/disk/mac-update-40b7.hqx
0	search/1602	(This\ file\ 
>&0	use		binhex
# http://ftp.vim.org/pub/ftp/ftp/infomac/_Disk_&_File/zap-res-forks-101.hqx
0	search/2652/b	(This\ file\ 
>&0	use		binhex
0	name				binhex
# keep splitted search string format similar like in version 5.37
>0	string	must\ be\ converted\ with\ BinHex\ 	BinHex binary text, version
# http://www.macdisk.com/binhexen.php3
!:apple	BNHQTEXT
# http://www.faqs.org/faqs/macintosh/comm-faq/part1/
>>&0	string	1.0					1.0
!:mime	application/mac-binhex
!:ext	hex
>>&0	string	2.0					2.0
!:mime	application/mac-binhex
!:ext	hcx
# BinHex	3.0 never existed
>>&0	string	4.0					4.0
!:mime	application/mac-binhex40
!:ext	hqx
# BinHex	5.0 also MacBinary I
>>&0	string	5.0					5.0
!:mime	application/mac-binhex40
!:ext	hqx
# this should never happen
>>&0	default	x					
>>>&0	string	x					%.3s
!:mime	application/mac-binhex
!:ext	hqx

# Stuffit archives are the de facto standard of compression for Macintosh
# files obtained from most archives. (franklsm@tuns.ca)
0	string		SIT!			StuffIt Archive (data)
!:mime	application/x-stuffit
!:apple	SIT!SIT!
>2	string		x			: %s
0	string		SITD			StuffIt Deluxe (data)
>2	string		x			: %s
0	string		Seg			StuffIt Deluxe Segment (data)
>2	string		x			: %s

# Newer StuffIt archives (grant@netbsd.org)
0	string		StuffIt			StuffIt Archive
!:mime	application/x-stuffit
!:apple	SIT!SIT!
#>162	string		>0			: %s

# Macintosh Applications and Installation binaries (franklsm@tuns.ca)
# GRR: Too weak
#0	string		APPL			Macintosh Application (data)
#>2	string		x			\b: %s

# Macintosh System files (franklsm@tuns.ca)
# GRR: Too weak
#0	string		zsys			Macintosh System File (data)
#0	string		FNDR			Macintosh Finder (data)
#0	string		libr			Macintosh Library (data)
#>2	string		x			: %s
#0	string		shlb			Macintosh Shared Library (data)
#>2	string		x			: %s
#0	string		cdev			Macintosh Control Panel (data)
#>2	string		x			: %s
#0	string		INIT			Macintosh Extension (data)
#>2	string		x			: %s
#0	string		FFIL			Macintosh Truetype Font (data)
#>2	string		x			: %s
#0	string		LWFN			Macintosh Postscript Font (data)
#>2	string		x			: %s

# Additional Macintosh Files (franklsm@tuns.ca)
# GRR: Too weak
#0	string		PACT			Macintosh Compact Pro Archive (data)
#>2	string		x			: %s
#0	string		ttro			Macintosh TeachText File (data)
#>2	string		x			: %s
#0	string		TEXT			Macintosh TeachText File (data)
#>2	string		x			: %s
#0	string		PDF			Macintosh PDF File (data)
#>2	string		x			: %s

# MacBinary format (Eric Fischer, enf@pobox.com)
# Update: Joerg Jenderek 
# URL: https://en.wikipedia.org/wiki/MacBinary
# Reference: https://files.stairways.com/other/macbinaryii-standard-info.txt
#
# Unfortunately MacBinary doesn't really have a magic number prior
# to the MacBinary III format.
#

# old version number, must be kept at zero for compatibility
0	byte	0
# length of filename (must be in the range 1-63)
>1	ubyte	>0
# skip T.PIC.LZ INSTRUMENT.7T INVENTORY
>>1	ubyte	<64
# skip Docs.MWII ReadMe.MacWrite "Notes (MacWrite II)"
# by looking for printable characters at beginning of file name
>>>2	ubelong	>0x1F000000
# zero fill, must be zero for compatibility
>>>>74	byte	0
# zero fill, must be zero for compatibility
>>>>>82	byte	0
# MacBinary I		test for valid version numbers
>>>>>>122	ubeshort	0
# additional check for creation date after 1 Jan 1970 ~ 7C25B080h
#>>>>>>>91	ubelong		>0x7c25b07F
# additional check for undefined header fields in MacBinary I
#>>>>>>>101	ulong		0
>>>>>>>0	use	mac-bin
# MacBinary II		the newer versions begins at 129
>>>>>>122	ubeshort	0x8181
>>>>>>>0	use	mac-bin
# MacBinary III with MacBinary II to read
>>>>>122	ubeshort	0x8281
>>>>>>0	use	mac-bin

#	display information of MacBinary file
0	name		mac-bin
>122	ubyte	x	MacBinary
# versions for MacBinary II/III
>122	ubyte	129		II
>122	ubyte	130		III
# only in MacBinary III
>>102	string	!mBIN		with surprising version
!:mime	application/x-macbinary
!:apple	PSPTBINA
!:ext	bin/macbin
# THIS SHOULD NEVER HAPPEN! Maybe another file type is misidetified as MacBinary
#>1	ubyte	>63		\b, name length %u too BIG!
#>122	ubeshort	x	\b, version 0x%x
# Finder flags if not 0
# >73	byte		!0		\b, flags 0x
# >73	byte		=0		
# >>101	byte		!0		\b, flags 0x
# # original Finder flags (Bits 8-15)
# >73	byte		!0		\b%x
# # finder flags, bits 0-7
# >101	byte		!0		\b%x
>73	byte		&0x01		\b, inited
>73	byte		&0x02		\b, changed
>73	byte		&0x04		\b, busy
>73	byte		&0x08		\b, bozo
>73	byte		&0x10		\b, system
>73	byte		&0x20		\b, bundle
>73	byte		&0x40		\b, invisible
>73	byte		&0x80		\b, locked

# 75	beshort				# vertical posn in window
#>75	beshort		!0		\b, v.pos %u
# 77	beshort				# horiz posn in window
#>77	beshort		!0		\b, h.pos %u
# 79	beshort				# window or folder ID
>79	ubeshort	!0		\b, ID 0x%x
# protected flag
>81	byte		!0		\b, protected 0x%x
# length of comment after resource
>99	ubeshort	!0		\b, comment length %u
# char. code of file name
>106	ubyte		!0		\b, char. code 0x%x
# still more Finder flags
>107	ubyte		!0		\b, more flags 0x%x
# length of total files when unpacked only used when pack and unpack on the fly
>116	ubelong		!0		\b, total length %u
# 120	beshort				# length of add'l header
>120	ubeshort	!0		\b, 2nd header length %u
# 124	beshort				# checksum
#>124	ubeshort	!0		\b, CRC 0x%x
# creation date in seconds since MacOS epoch start. So 1 Jan 1970 ~ 7C25B080
>91	beldate-0x7C25B080	x	\b, %s
# THIS SHOULD NEVER HAPPEN! Maybe another file type is misidetified or time overflow
>91	ubelong		<0x7c25b080	INVALID date
#>91	belong-0x7C25B080	x	\b, DEBUG DATE %d
# last modified date
>95	beldate-0x7C25B080	x	\b, modified %s
# Apple creator+typ if not null
# file creator (normally expressed as four characters)
>69	ulong			!0	\b, creator
# instead 4 character code display full creator name
>>69	use			apple-creator
# file type (normally expressed as four characters)
>65	ulong			!0	\b, type
>>65	use			apple-type
# length of data segment
>83	ubelong			!0	\b, %u bytes
# filename (in the range 1-63)
>1	pstring			x	"%s"
# print 1 space and then at offset 128 inspect data fork content if it has one
>83	ubelong			!0	\b 
>>128	indirect		x
# Afterwards resource fork if length of resource segment not zero
>87	ubelong			!0
# calculate resource fork offset
>>83	ubelong+128		x	\b, at 0x%x
# length of resource segment
>>87	ubelong			!0	%u bytes
>>(83.S+128)	ubequad		x	resource 
# further resource fork content inspection 
>>>&-8	indirect		x

# Apple Type/Creator Database
# URL: https://en.wikipedia.org/wiki/Type_code
# Reference:	https://www.lacikam.co.il/tcdb/
#		https://www.macdisk.com/macsigen.php
# Note:	classic Mac OS files have two 4 character codes for type and creator.
#	Thereby the Finder attach documents types to applications.

#>65	string		x		\b, type "%4.4s"

#	display information about apple type
0	name		apple-type
>0	string		8BIM		PhotoShop
>0	string		ALB3		PageMaker 3
>0	string		ALB4		PageMaker 4
>0	string		ALT3		PageMaker 3
>0	string		APPL		application
>0	string		AWWP		AppleWorks word processor
>0	string		CIRC		simulated circuit
>0	string		DRWG		MacDraw
>0	string		EPSF		Encapsulated PostScript
>0	string		FFIL		font suitcase
>0	string		FKEY		function key
>0	string		FNDR		Macintosh Finder
>0	string		GIFf		GIF image
>0	string		Gzip		GNU gzip
>0	string		INIT		system extension
>0	string		LIB\ 		library
>0	string		LWFN		PostScript font
>0	string		MSBC		Microsoft BASIC
>0	string		PACT		Compact Pro archive
>0	string		PDF\ 		Portable Document Format
>0	string		PICT		picture
>0	string		PNTG		MacPaint picture
>0	string		PREF		preferences
>0	string		PROJ		Think C project
>0	string		QPRJ		Think Pascal project
>0	string		SCFL		Defender scores
>0	string		SCRN		startup screen
>0	string		SITD		StuffIt Deluxe
>0	string		SPn3		SuperPaint
>0	string		STAK		HyperCard stack
>0	string		Seg\ 		StuffIt segment
>0	string		TARF		Unix tar archive
>0	string		TEXT		ASCII
>0	string		TIFF		TIFF image
>0	string		TOVF		Eudora table of contents
>0	string		WDBN		Microsoft Word word processor
>0	string		WORD		MacWrite word processor
>0	string		XLS\ 		Microsoft Excel
>0	string		ZIVM		compress (.Z)
>0	string		ZSYS		Pre-System 7 system file
>0	string		acf3		Aldus FreeHand
>0	string		cdev		control panel
>0	string		dfil		Desk Accessory suitcase
>0	string		libr		library
>0	string		nX^d		WriteNow word processor
>0	string		nX^w		WriteNow dictionary
>0	string		rsrc		resource
>0	string		scbk		Scrapbook
>0	string		shlb		shared library
>0	string		ttro		SimpleText read-only
>0	string		zsys		system file

#	additional types added in Dec 2017
>0	string		BINA		binary file
>0	string		BMPp		BMP image
>0	string		JPEG		JPEG image
#>0	string		W4BN		Microsoft Word x.y word processor?
# if type name is not known display 4 character identifier
>0	default		x		
>>0	string		x		'%4.4s'

#>69	string		x		\b, creator "%4.4s"

# Now Apple has no repository of registered Creator IDs any more. These are
# just the ones that I happened to have files from and was able to identify.

#	display information about apple creator
0	name		apple-creator
>0	string		8BIM		Adobe Photoshop
>0	string		ALD3		PageMaker 3
>0	string		ALD4		PageMaker 4
>0	string		ALFA		Alpha editor
>0	string		APLS		Apple Scanner
>0	string		APSC		Apple Scanner
>0	string		BRKL		Brickles
>0	string		BTFT		BitFont
>0	string		CCL2		Common Lisp 2
>0	string		CCL\ 		Common Lisp
>0	string		CDmo		The Talking Moose
>0	string		CPCT		Compact Pro
>0	string		CSOm		Eudora
>0	string		DMOV		Font/DA Mover
>0	string		DSIM		DigSim
>0	string		EDIT		Macintosh Edit
>0	string		ERIK		Macintosh Finder
>0	string		EXTR		self-extracting archive
>0	string		Gzip		GNU gzip
>0	string		KAHL		Think C
>0	string		LWFU		LaserWriter Utility
>0	string		LZIV		compress
>0	string		MACA		MacWrite
>0	string		MACS		Macintosh operating system
>0	string		MAcK		MacKnowledge terminal emulator
>0	string		MLND		Defender
>0	string		MPNT		MacPaint
>0	string		MSBB		Microsoft BASIC (binary)
>0	string		MSWD		Microsoft Word
>0	string		NCSA		NCSA Telnet
>0	string		PJMM		Think Pascal
>0	string		PSAL		Hunt the Wumpus
#>0	string		PSI2		Apple File Exchange
>0	string		R*ch		BBEdit
>0	string		RMKR		Resource Maker
>0	string		RSED		Resource Editor
>0	string		Rich		BBEdit
>0	string		SIT!		StuffIt
>0	string		SPNT		SuperPaint
>0	string		Unix		NeXT Mac filesystem
>0	string		VIM!		Vim editor
>0	string		WILD		HyperCard
>0	string		XCEL		Microsoft Excel
>0	string		aCa2		Fontographer
>0	string		aca3		Aldus FreeHand
>0	string		dosa		Macintosh MS-DOS file system
>0	string		movr		Font/DA Mover
>0	string		nX^n		WriteNow
>0	string		pdos		Apple ProDOS file system
>0	string		scbk		Scrapbook
>0	string		ttxt		SimpleText
>0	string		ufox		Foreign File Access
#	additional creators added in Dec 2017
# Claris/Apple Works
>0	string		BOBO		Apple Works
# CU-SeeMe_0.87b3_(68K).bin
#>0	string		CUce		bar
>0	string		PSPT		Apple File Exchange
# Disk_Copy_4.2.sea.bin
#>0	string		NCse		foo
# probably StuffIt/Aladdin by Smith Micro Software, Inc.
>0	string		STi0		stuffit
# MacGzip-1.1.3.sea.bin
#>0	string		aust		bar
# D-Disk_Copy_6.3.3.smi.bin 
>0	string		oneb		Disk Copy Self Mounting
# if creator name is not known display 4 character identifier
>0	default		x		
>>0	string		x		'%4.4s'

# sas magic from Bruce Foster (bef@nwu.edu)
#
#0	string		SAS		SAS
#>8	string		x		%s
0	string		SAS		SAS
>24	string		DATA		data file
>24	string		CATALOG		catalog
>24	string		INDEX		data file index
>24	string		VIEW		data view
# sas 7+ magic from Reinhold Koch (reinhold.koch@roche.com)
#
0x54    string          SAS             SAS 7+
>0x9C   string          DATA            data file
>0x9C   string          CATALOG         catalog
>0x9C   string          INDEX           data file index
>0x9C   string          VIEW            data view

# spss magic for SPSS system and portable files,
#	 from Bruce Foster (bef@nwu.edu).

0	long		0xc1e2c3c9	SPSS Portable File
>40	string 		x		%s

0	string		$FL2		SPSS System File
>24	string		x		%s

0	string		$FL3		SPSS System File
>24	string		x		%s

# Macintosh filesystem data
# From "Tom N Harris" <telliamed@mac.com>
# Fixed HFS+ and Partition map magic: Ethan Benson <erbenson@alaska.net>
# The MacOS epoch begins on 1 Jan 1904 instead of 1 Jan 1970, so these
# entries depend on the data arithmetic added after v.35
# There's also some Pascal strings in here, ditto...

# The boot block signature, according to IM:Files, is
# "for HFS volumes, this field always contains the value 0x4C4B."
# But if this is true for MFS or HFS+ volumes, I don't know.
# Alternatively, the boot block is supposed to be zeroed if it's
# unused, so a simply >0 should suffice.

0x400	beshort			0xD2D7		Macintosh MFS data
>0	beshort			0x4C4B		(bootable)
>0x40a	beshort			&0x8000		(locked)
>0x402	beldate-0x7C25B080	x		created: %s,
>0x406	beldate-0x7C25B080	>0		last backup: %s,
>0x414	belong			x		block size: %d,
>0x412	beshort			x		number of blocks: %d,
>0x424	pstring			x		volume name: %s

# *.hfs updated by Joerg Jenderek
# https://en.wikipedia.org/wiki/Hierarchical_File_System
# "BD" gives many false positives
0x400	beshort			0x4244
# ftp://ftp.mars.org/pub/hfs/hfsutils-3.2.6.tar.gz/hfsutils-3.2.6/libhfs/apple.h
# first block of volume bit map (always 3)
>0x40e	ubeshort		0x0003
# maximal length of volume name is 27
>>0x424		ubyte			<28	Macintosh HFS data
!:mime	application/x-apple-diskimage
#!:apple	hfsdINIT
#!:apple	MACSdisk
# https://www.macdisk.com/macsigen.php
#!:apple	ddskdevi
!:apple	????devi
# https://en.wikipedia.org/wiki/Apple_Disk_Image
!:ext hfs/dmg
>>>0		beshort			0x4C4B	(bootable)
#>>>0		beshort			0x0000	(not bootable)
>>>0x40a	beshort			&0x8000	(locked)
>>>0x40a	beshort			^0x0100	(mounted)
>>>0x40a	beshort			&0x0200	(spared blocks)
>>>0x40a	beshort			&0x0800	(unclean)
>>>0x47C	beshort			0x482B	(Embedded HFS+ Volume)
# https://www.epochconverter.com/
# 0x7C245F00 seconds	~ 2082758400	~ 01 Jan 2036 00:00:00	~ 66 years to 1970
# 0x7C25B080 seconds	~ 2082844800	~ 02 Jan 2036 00:00:00
# construct not working
#>>>0x402	beldate-0x7C25B080	x	created: %s,
#>>>0x406	beldate-0x7C25B080	x	last modified: %s,
#>>>0x440	beldate-0x7C25B080	>0	last backup: %s,
# found block sizes 200h,1200h,2800h
>>>0x414	belong			x	block size: %d,
>>>0x412	beshort			x	number of blocks: %d,
>>>0x424	pstring			x	volume name: %s

0x400	beshort			0x482B		Macintosh HFS Extended
>&0	beshort			x		version %d data
>0	beshort			0x4C4B		(bootable)
>0x404	belong			^0x00000100	(mounted)
>&2	belong			&0x00000200	(spared blocks)
>&2	belong			&0x00000800	(unclean)
>&2	belong			&0x00008000	(locked)
>&6	string			x		last mounted by: '%.4s',
# really, that should be treated as a belong and we print a string
# based on the value. TN1150 only mentions '8.10' for "MacOS 8.1"
>&14	beldate-0x7C25B080	x		created: %s,
# only the creation date is local time, all other timestamps in HFS+ are UTC.
>&18	bedate-0x7C25B080	x		last modified: %s,
>&22	bedate-0x7C25B080	>0		last backup: %s,
>&26	bedate-0x7C25B080	>0		last checked: %s,
>&38	belong			x		block size: %d,
>&42	belong			x		number of blocks: %d,
>&46	belong			x		free blocks: %d

## AFAIK, only the signature is different
# same as Apple Partition Map
# GRR: This magic is too weak, it is just "TS"
#0x200		beshort		0x5453		Apple Old Partition data
#>0x2		beshort		x		block size: %d,
#>0x230		string		x		first type: %s,
#>0x210		string		x		name: %s,
#>0x254		belong		x		number of blocks: %d,
#>0x400		beshort		0x504D
#>>0x430		string		x		second type: %s,
#>>0x410		string		x		name: %s,
#>>0x454		belong		x		number of blocks: %d,
#>>0x800		beshort		0x504D
#>>>0x830	string		x		third type: %s,
#>>>0x810	string		x		name: %s,
#>>>0x854	belong		x		number of blocks: %d,
#>>>0xa00	beshort		0x504D
#>>>>0xa30	string		x		fourth type: %s,
#>>>>0xa10	string		x		name: %s,
#>>>>0xa54	belong		x		number of blocks: %d

# From: Remi Mommsen <mommsen@slac.stanford.edu>
0		string		BOMStore	Mac OS X bill of materials (BOM) file

# From: Adam Buchbinder <adam.buchbinder@gmail.com>
# URL: https://en.wikipedia.org/wiki/Datafork_TrueType
# Derived from the 'fondu' and 'ufond' source code (fondu.sf.net). 'sfnt' is
# TrueType; 'POST' is PostScript. 'FONT' and 'NFNT' sometimes appear, but I
# don't know what they mean.
0	belong	0x100
>(0x4.L+24)	beshort	x
>>&4	belong	0x73666e74	Mac OSX datafork font, TrueType
>>&4	belong	0x464f4e54	Mac OSX datafork font, 'FONT'
>>&4	belong	0x4e464e54	Mac OSX datafork font, 'NFNT'
>>&4	belong	0x504f5354	Mac OSX datafork font, PostScript

003 File Manager

Editing: macintosh

Upload File

Create Folder