Lines Matching +full:0 +full:x41c
11 # >0 leshort 0407 impure executable (OMAGIC)
12 # >0 leshort 0410 pure executable (NMAGIC)
13 # >0 leshort 0413 demand-paged executable (ZMAGIC)
14 # >0 leshort 0314 demand-paged executable (QMAGIC)
16 0 lelong 0x00640107 Linux/i386 impure executable (OMAGIC)
17 >16 lelong 0 \b, stripped
18 0 lelong 0x00640108 Linux/i386 pure executable (NMAGIC)
19 >16 lelong 0 \b, stripped
20 0 lelong 0x0064010b Linux/i386 demand-paged executable (ZMAGIC)
21 >16 lelong 0 \b, stripped
22 0 lelong 0x006400cc Linux/i386 demand-paged executable (QMAGIC)
23 >16 lelong 0 \b, stripped
25 0 string \007\001\000 Linux/i386 object file
26 >20 lelong >0x1020 \b, DLL library
28 0 string \01\03\020\04 Linux-8086 impure executable
29 >28 long !0 not stripped
30 0 string \01\03\040\04 Linux-8086 executable
31 >28 long !0 not stripped
33 0 string \243\206\001\0 Linux-8086 object file
35 0 string \01\03\020\20 Minix-386 impure executable
36 >28 long !0 not stripped
37 0 string \01\03\040\20 Minix-386 executable
38 >28 long !0 not stripped
39 0 string \01\03\04\20 Minix-386 NSYM/GNU executable
40 >28 long !0 not stripped
44 >220 string >\0 of '%s'
45 >200 lelong >0 (signal %d)
60 0 leshort 0x0436 Linux/i386 PC Screen Font v1 data,
61 >2 byte&0x01 0 256 characters,
62 >2 byte&0x01 !0 512 characters,
63 >2 byte&0x02 0 no directory,
64 >2 byte&0x02 !0 Unicode directory,
65 >3 byte >0 8x%d
66 0 string \x72\xb5\x4a\x86\x00\x00 Linux/i386 PC Screen Font v2 data,
68 >12 lelong&0x01 0 no directory,
69 >12 lelong&0x01 !0 Unicode directory,
78 0xff6 string SWAP-SPACE Linux old swap file, 4k page size
79 0x1ff6 string SWAP-SPACE Linux old swap file, 8k page size
80 0x3ff6 string SWAP-SPACE Linux old swap file, 16k page size
81 0x7ff6 string SWAP-SPACE Linux old swap file, 32k page size
82 0xfff6 string SWAP-SPACE Linux old swap file, 64k page size
85 0 name linux-swap
86 >0x400 lelong 1 little endian, version %u,
87 >>0x404 lelong x size %u pages,
88 >>0x408 lelong x %u bad pages,
89 >0x400 belong 1 big endian, version %u,
90 >>0x404 belong x size %u pages,
91 >>0x408 belong x %u bad pages,
92 >0x41c string \0 no label,
93 >0x41c string >\0 LABEL=%s,
94 >0x40c ubelong x UUID=%08x
95 >0x410 ubeshort x \b-%04x
96 >0x412 ubeshort x \b-%04x
97 >0x414 ubeshort x \b-%04x
98 >0x416 ubelong x \b-%08x
99 >0x41a ubeshort x \b%04x
101 0xff6 string SWAPSPACE2 Linux swap file, 4k page size,
102 >0 use linux-swap
103 0x1ff6 string SWAPSPACE2 Linux swap file, 8k page size,
104 >0 use linux-swap
105 0x3ff6 string SWAPSPACE2 Linux swap file, 16k page size,
106 >0 use linux-swap
107 0x7ff6 string SWAPSPACE2 Linux swap file, 32k page size,
108 >0 use linux-swap
109 0xfff6 string SWAPSPACE2 Linux swap file, 64k page size,
110 >0 use linux-swap
112 0 name linux-hibernate
113 >0 string S1SUSPEND \b, with SWSUSP1 image
114 >0 string S2SUSPEND \b, with SWSUSP2 image
115 >0 string ULSUSPEND \b, with uswsusp image
116 >0 string LINHIB0001 \b, with compressed hibernate image
117 >0 string \xed\xc3\x02\xe9\x98\x56\xe5\x0c \b, with tuxonice image
118 >0 default x \b, with unknown hibernate image
120 0xfec string SWAPSPACE2 Linux swap file, 4k page size,
121 >0 use linux-swap
122 >0xff6 use linux-hibernate
123 0x1fec string SWAPSPACE2 Linux swap file, 8k page size,
124 >0 use linux-swap
125 >0x1ff6 use linux-hibernate
126 0x3fec string SWAPSPACE2 Linux swap file, 16k page size,
127 >0 use linux-swap
128 >0x3ff6 use linux-hibernate
129 0x7fec string SWAPSPACE2 Linux swap file, 32k page size,
130 >0 use linux-swap
131 >0x7ff6 use linux-hibernate
132 0xffec string SWAPSPACE2 Linux swap file, 64k page size,
133 >0 use linux-swap
134 >0xfff6 use linux-hibernate
142 # by assembler instructions like: movw $0x07c0,%ax; movw %ax,%ds; movw $0x9000,%ax; movw %ax,%es; m…
147 …(strength=50) and before DOS executable (COM) (strength=40) with start instruction 0xe9 via ./msdos
156 >510 leshort 0xAA55 x86 boot executable
157 >>0 use kernel-info
159 0 name kernel-info
167 >>518 leshort >0x1ff
168 # loadflags bit 0 (read); LOADED_HIGH; if 0, the protected-mode code is loaded at 0x10000
169 >>>529 ubyte&0x01 0 zImage,
170 # loadflags bit 0 (read); LOADED_HIGH; if 1, the protected-mode code is loaded at 0x100000; that im…
171 >>>529 ubyte&0x01 1 bzImage,
173 # 0h (ldntldr.bin plpbtrom.bin) 260h (memtest32.bin memtest64.bin) 3b0h (memdisk16.bin) 890h (damns…
175 >>>526 uleshort >0
176 # GRR: \353fHdrS\003\002 wrong shown if kernel_version=0 like in ldntldr.bin (GRUB for DOS)
177 >>>>(526.s+0x200) string >\0 version %s,
178 # 498 MasterBootRecord 4th partition entry partition type (0~empty 1~FAT12) done by ./filesystems
183 >>498 leshort 0 RW-rootFS,
184 # root_dev; default root device number like 0 301h (/dev/hda1 damnsmll.lnx) 380h (/dev/hd?? linux-e…
185 >>508 leshort >0 root_dev %#X,
187 >>518 uleshort <0x204
189 >>>502 leshort >0 swap_dev %#X,
190 >>504 leshort >0 RAMdisksize %u KB,
192 >>506 leshort 0xFFFF Normal VGA
193 >>506 leshort 0xFFFE Extended VGA
194 >>506 leshort 0xFFFD Prompt for Videomode
195 >>506 leshort >0 Video mode %d
199 >>>506 leshort !0 \b,
200 # setup_sects; if field contains 0, the real value is 4; size of the setup in sectors like:
201 # 0 (memdisk16.bin) 1 (ldntldr.bin) 2 (memtest32.bin memtest64.bin) 4 (plpbtrom.bin linux-elks) 8 (…
202 # MasterBootRecord 4th partition entry start cylinder bits 0-7 done by ./filesystems
203 >>497 ubyte !0 setup size 512*%u
204 >>497 ubyte =0 setup size 512*4 (not 0)
206 # 501 MasterBootRecord 4th partition entry end cylinder bits 0-7 done by ./filesystems
208 >>518 uleshort <0x204 \b,
209 # 0 (ldntldr.bin) 0 (memdisk16.bin) f180h (damnsmll.lnx)
211 >>518 uleshort >0x203 \b,
212 …0 (plpbtrom.bin) 1270h (linux-elks) 217eh (memtest32.bin) 22deh (memtest64.bin) 2c01h (memtest86+.…
214 # jump; jump instruction relative to byte 0x202
215 >>512 ubyte =0xEB \b, jump
216 …mp adress like: 0x230 (damnsmll.lnx) 0x240 (memdisk16.bin) 0x268 (memtest32.bin memtest64.bin ldnt…
217 >>>513 byte+2 x 0x2%2.2x
219 # b800088ec00fb60e mov ax,0x0800; mov es,ax; movzx cx,byte [] memdisk16.bin
223 # without jump instruction like: 0 (bootsect-lilo-24.2.b EOF!) 0xb8 (mov linux-elks) 0xfa (cli memt…
224 >>512 ubyte !0xEB \b, at 0x200 %#x instruction
226 # so skip memtest86+.bin with misinterpreted protocol 144.0 (0x9000)
234 >>>528 ubyte >0 \b, loader %#x
238 >>>529 ubyte&0x02 !0 \b, KASLR enabled
240 >>>529 ubyte&0x20 !0 \b, quiet
242 >>>518 uleshort >0x206
243 >>>>529 ubyte&0x40 !0 \b, keep segments
245 >>>529 ubyte&0x80 !0 \b, can use heap
247 >>>518 uleshort >0x207
248 >>>>584 ulelong >0 \b, from protected-mode code at offset %#x
257 >>>>>>&(584.l+504) ubeshort =0x1F8B gzip compressed
258 >>>>>>&(584.l+504) ubeshort =0x1F9E gzip compressed
259 >>>>>>&(584.l+504) ubeshort =0x425A bzip2 compressed
260 >>>>>>&(584.l+504) ubeshort =0x5D00 LZMA compressed
261 >>>>>>&(584.l+504) ubeshort =0xFD37 XZ compressed
262 >>>>>>&(584.l+504) ubeshort =0x0221 LZ4 compressed
263 >>>>>>&(584.l+504) ubeshort =0x28B5 ZST compressed
267 # like: 0 (ldntldr.bin memdisk16.bin memtest32.bin memtest64.bin plpbtrom.bin) 8000h (damnsmll.lnx …
268 >>>518 uleshort <0x202
269 >>>>518 uleshort >0x1FF
272 #>>>>532 ulelong >0 \b, code32_start %#x
273 …alignment unit required by the kernel (if relocatable_kernel is true) like: 0 (plptrom.bin) 1000h …
274 #>>>518 uleshort >0x204
277 >>>518 uleshort >0x204
281 #>>>518 uleshort >0x209
282 #>>>>565 ubyte >0 \b, min_alignment %u
284 >>>518 uleshort >0x20B
287 # 0 (damnsmll.lnx ldntldr.bin) 10h (memtest32.bin memtest64.bin) 30h (linux) 190h (linux64) 8e9000b…
289 >>>>566 uleshort&0x000C !0 \b, handover offset
291 # Bit 0 XLF_KERNEL_64; if 1, this kernel has the legacy 64-bit entry point at 0x200
292 >>>>566 uleshort&0x0001 !0 \b, legacy 64-bit entry point
294 >>>>566 uleshort&0x0002 !0 \b, can be above 4G
296 >>>>566 uleshort&0x0004 !0 \b, 32-bit EFI handoff entry point
298 >>>>566 uleshort&0x0008 !0 \b, 64-bit EFI handoff entry point
300 >>>>566 uleshort&0x0010 !0 \b, EFI kexec boot support
302 >>>>566 uleshort&0x0020 !0 \b, xloadflags bit 5
304 >>>518 uleshort >0x205
306 # hardware_subarch; since boot protocol 2.07 hardware subarchtecture like: 0~default x86 1~lguest 2…
307 >>>518 uleshort >0x206
308 >>>>572 ulelong >0 \b, hardware_subarch %u
310 >>>>>576 ulequad >0 \b, hardware_subarch_data %#llx
312 >>>518 uleshort >0x208
313 >>>>592 ulequad >0 \b, setup_data %16.16llx
315 #>>>518 uleshort >0x209
316 #>>>>600 ulequad >0 \b, pref_address %#llx
318 # like: 0h (damnsmll.lnx) 687f8h (memtest32.bin) 6acf8h (memtest64.bin) aa3000h (linux) 2514000h (l…
319 >>>518 uleshort >0x209
324 #0 belong 0xb8c0078e Linux kernel
325 0 belong 0xb8c0078e
326 # to display Linux x86 kernel or Linux ELKS Kernel (strength=70=70+0) after VBR boot sector (130=70…
327 #!:strength +0
335 >>0 belong x
337 >>0x1e6 belong =0x454c4b53 ELKS Kernel
340 >>0x1e6 belong !0x454c4b53 x86 kernel
343 >>0 use kernel-version-old1
347 >>>0 use kernel-version-old2
349 >>>0 use kernel-version-old3
351 >>0 use kernel-info
353 0 name kernel-version-old1
354 >0x1e3 string Loading version 1.3.79 or older
355 >0x1e9 string Loading from prehistoric times
357 >0x1c5 string Loading from LILO 24.2
359 >0x1d2 string Loading from Memtest86 5.31b
361 #>0x1cb string Loading damnsmll.lnx 2.4.26~
363 #>0x1c6 string Loading\040Memtest86+ from Memtest86+ v6.20
369 0 search/1 Begin3 Linux Software Map entry text
370 0 search/1 Begin4 Linux Software Map entry text (new format)
373 0 belong 0x4f4f4f4d User-mode Linux COW file
375 >>8 string >\0 \b, backing file %s
377 >>32 string >\0 \b, backing file %s
384 #0 string \xb8\xc0\x07\x8e\xd8\xb8\x00\x90 Linux
385 0 string \xb8\xc0\x07\x8e\xd8\xb8\x00\x90foo OLD_VARIANT Linux
386 >497 leshort 0 x86 boot sector
387 >>0 use kernel-version-old2
388 >497 leshort !0 x86 kernel
390 >>0 use kernel-info-old
392 >>0 use kernel-version-old3
393 >>0 use kernel-version-4
395 0 name kernel-version-old2
398 >>514 belong 0x8e of a kernel from the dawn of time!
399 >>514 belong 0x908ed8b4 version 0.99-1.1.42
400 >>514 belong 0x908ed8b8 for memtest86
402 0 name kernel-version-dummy
403 >497 leshort !0 x86 kernel
405 #>0 use kernel-info-old
406 >>0 use kernel-info
408 >0 use kernel-version-old3
410 0 name kernel-info-old
413 >>504 leshort >0 RAMdisksize=%u KB
414 >>502 leshort >0 swap=%#X
415 >>508 leshort >0 root=%#X
417 >>>498 leshort 0 \b-rw
418 >>506 leshort 0xFFFF vga=normal
419 >>506 leshort 0xFFFE vga=extended
420 >>506 leshort 0xFFFD vga=ask
421 >>506 leshort >0 vga=%d
423 0 name kernel-version-old3
426 >>514 belong 0x908ed881 version 1.1.43-1.1.45
427 >>514 belong 0x15b281cd
428 >>>0xa8e belong 0x55AA5a5a version 1.1.46-1.2.13,1.3.0
429 >>>0xa99 belong 0x55AA5a5a version 1.3.1,2
430 >>>0xaa3 belong 0x55AA5a5a version 1.3.3-1.3.30
431 >>>0xaa6 belong 0x55AA5a5a version 1.3.31-1.3.41
432 >>>0xb2b belong 0x55AA5a5a version 1.3.42-1.3.45
433 >>>0xaf7 belong 0x55AA5a5a version 1.3.46-1.3.72
436 0 name kernel-version-4
440 >>>518 leshort >0x1FF
441 >>>>529 byte 0 \b, zImage
443 # GRR: Not valid if kernel_version=0
444 >>>>(526.s+0x200) string >\0 \b, version %s
448 #0 belong 0xb8c0078e Linux
450 #!:strength +0
453 #>0x1e6 belong 0x454c4b53 ELKS Kernel
454 #>0x1e6 belong !0x454c4b53 style boot sector
460 >0x00010000 search/b/4096 \x00\x0a\x00\x00\x8b\xad\xcc\xcc
462 >>&0 string \xc1\x00\xef\xe3\xf0\x68\x00\x00 Z10 64bit kernel
463 >>&0 string \xc1\x00\xef\xc3\x00\x00\x00\x00 Z9-109 64bit kernel
464 >>&0 string \xc0\x00\x20\x00\x00\x00\x00\x00 Z990 64bit kernel
465 >>&0 string \x00\x00\x00\x00\x00\x00\x00\x00 Z900 64bit kernel
467 >>&0 string \x81\x00\xc8\x80\x00\x00\x00\x00 Z10 32bit kernel
468 >>&0 string \x81\x00\xc8\x80\x00\x00\x00\x00 Z9-109 32bit kernel
469 >>&0 string \x80\x00\x20\x00\x00\x00\x00\x00 Z990 32bit kernel
470 >>&0 string \x80\x00\x00\x00\x00\x00\x00\x00 Z900 32bit kernel
477 0 name arm-zimage
479 >0x34 lelong 0x45454545 (kernel >=v4.15)
480 >0x34 lelong !0x45454545
481 >>0x30 clear x
482 >>0x30 belong 0x04030201 (kernel >=v3.17, <v4.15)
483 >>0x30 lelong 0x04030201 (kernel >=v3.17, <v4.15)
484 >>0x30 default x (kernel <v3.17)
491 # - the 0x016f2818 @ 0x24 magic number indicates big-endian or
494 # - a new 0x04030201 @ 0x30 magic number indicates big-endian or
496 # - the old 0x016f2818 @ 0x24 magic number is little-endian for
500 >0x30 clear x
501 >0x30 belong 0x04030201 (big-endian,
502 >>0x24 belong 0x016f2818 BE-32, ARMv5)
503 >>0x24 lelong 0x016f2818 BE-8, ARMv6+)
504 >0x30 lelong 0x04030201 (little-endian)
506 >0x30 default x
507 >>0x24 lelong 0x016f2818 (little-endian)
508 >>0x24 belong 0x016f2818 (big-endian)
510 0x24 lelong 0x016f2818 Linux kernel ARM boot executable zImage
511 >0 use arm-zimage
512 0x24 belong 0x016f2818 Linux kernel ARM boot executable zImage
513 >0 use arm-zimage
517 0x38 lelong 0x644d5241 Linux kernel ARM64 boot executable Image
518 >0x18 lelong ^1 \b, little-endian
519 >0x18 lelong &1 \b, big-endian
520 >0x18 lelong &2 \b, 4K pages
521 >0x18 lelong &4 \b, 16K pages
522 >0x18 lelong &6 \b, 32K pages
526 0x38 string RSC\05 Linux kernel RISC-V boot executable Image
527 >0x18 lelong ^1 \b, little-endian
528 >0x18 lelong &1 \b, big-endian
532 0 lelong&0xFF0000FF 0xC30000E9 Linux-Dev86 executable, headerless
534 >>4 string >\0 \b, libc version %s
536 0 lelong&0xFF00FFFF 0x4000301 Linux-8086 executable
537 >2 byte&0x01 !0 \b, unmapped zero page
538 >2 byte&0x20 0 \b, impure
539 >2 byte&0x20 !0
540 >>2 byte&0x10 !0 \b, A_EXEC
541 >2 byte&0x02 !0 \b, A_PAL
542 >2 byte&0x04 !0 \b, A_NSYM
543 >2 byte&0x08 !0 \b, A_STAND
544 >2 byte&0x40 !0 \b, A_PURE
545 >2 byte&0x80 !0 \b, A_TOVLY
546 >28 long !0 \b, not stripped
548 >>36 string >\0 \b, libc version %s
550 # 0 lelong&0xFF00FFFF 0x10000301 ld86 I80386 executable
551 # 0 lelong&0xFF00FFFF 0xB000301 ld86 M68K executable
552 # 0 lelong&0xFF00FFFF 0xC000301 ld86 NS16K executable
553 # 0 lelong&0xFF00FFFF 0x17000301 ld86 SPARC executable
558 0 lelong =0x1413f33d SYSLINUX' LSS16 image data
564 0 string OOOM User-Mode-Linux's Copy-On-Write disk image
569 0 lelong 0xf97cff8c SE Linux policy
583 0x0 string/b HM\001 LVM1 (Linux Logical Volume Manager), version 1
584 >0x12c string/b >\0 , System ID: %s
586 0x0 string/b HM\002 LVM1 (Linux Logical Volume Manager), version 2
587 >0x12c string/b >\0 , System ID: %s
594 # 0x200 seems to be the common case
595 0 name lvm2
597 >0x0 string >\x2f \b, UUID: %.6s
598 >0x6 string >\x2f \b-%.4s
599 >0xa string >\x2f \b-%.4s
600 >0xe string >\x2f \b-%.4s
601 >0x12 string >\x2f \b-%.4s
602 >0x16 string >\x2f \b-%.4s
603 >0x1a string >\x2f \b-%.6s
604 >0x20 lequad x \b, size: %lld
608 # start in 0x200
609 0x218 string/b LVM2\ 001 LVM2 PV (Linux Logical Volume Manager)
610 >&(&-12.l-0x20) use lvm2
612 0x018 string/b LVM2\ 001 LVM2 PV (Linux Logical Volume Manager)
613 >&(&-12.l-0x20) use lvm2
615 0x418 string/b LVM2\ 001 LVM2 PV (Linux Logical Volume Manager)
616 >&(&-12.l-0x20) use lvm2
618 0x618 string/b LVM2\ 001 LVM2 PV (Linux Logical Volume Manager)
619 >&(&-12.l-0x20) use lvm2
623 0 string SnAp LVM Snapshot (CopyOnWrite store)
624 >4 lelong !0 - valid,
625 >4 lelong 0 - invalid,
631 0 string LinuxGuestRecord Xen saved domain
644 0 string LPKSHHRH
646 # STATE_OFFLINE~0 STATE_ONLINE~1 STATE_ARCHIVED~2
647 >16 ubyte&252 0
650 >>24 ubequad >0
651 >>>32 ubequad >0
653 >>>>40 ubequad >0
654 >>>>>48 ubequad >0
656 >>>>>>56 ubequad >0
657 >>>>>>>64 ubequad >0 Journal file
662 >>>>>>>>184 leqdate/1000000 !0 \b, %s
663 >>>>>>>>184 leqdate 0 empty
665 >>>>>>>>16 ubyte 0 \b,
667 >>>>>>>>>184 leqdate 0 offline
673 >>>>>>>>>184 leqdate !0 offline
678 >>>>>>>>>184 leqdate 0 online
682 >>>>>>>>>184 leqdate !0 online
695 >>>>>>>>12 ulelong&2 !0 \b, compressed lz4
696 >>>>>>>>12 ulelong&4 !0 \b, keyed hash siphash24
697 >>>>>>>>12 ulelong&8 !0 \b, compressed zstd
698 >>>>>>>>12 ulelong&16 !0 \b, compact
700 #>>17 long !0 \b, reserved %#8.8x
701 # seqnum_id; like: 0 e623691afec94b5aa968ae2d726c49cc f98b2af481924b29 8d6816ca3639edc6
705 >>>>>>>>88 ulequad !0x100h \b, header size %#llx
706 # arena_size like: 0 7fff00h ffff00h 17fff00h
707 #>>>>>>>>96 ulequad >0 \b, arena size %#llx
708 # data_hash_table_offset like: 0 15f0h 15f0h
709 #>>>>>>>>104 ulequad >0 \b, hash table offset %#llx
710 # data_hash_table_size like: 0 38e380h
711 #>>>>>>>>112 ulequad >0 \b, hash table size %#llx
712 # field_hash_table_offset like: 0 110h
713 #>>>>>>>>120 ulequad >0 \b, field hash table offset %#llx
714 # field_hash_table_size like: 0 14d0h
715 #>>>>>>>>128 ulequad >0 \b, field hash table size %#llx
716 # tail_object_offset like: 0 43edd8h 511278h c68968h d487d0h efaa98h
717 #>>>>>>>>136 ulequad >0 \b, tail object offset %#llx
718 # n_objects like: 0 1032h 5a2eh 92bdh a8b5h aa75h 112adh 40c23h 4714eh
719 #>>>>>>>>144 ulequad >0 \b, objects %#llx
720 # n_entries like: 0 3aeh 235ah 2dc4h 3125h 16129h 187a1h
721 >>>>>>>>152 ulequad >0 \b, entries %#llx
722 # tail_entry_seqnum like: 0 1988h 16249h 24c12h 24c12h 41e64h 9fefdh
723 #>>>>>>>>160 ulequad >0 \b, tail entry seqnum %#llx
724 # head_entry_seqnum like: 0 1h 15dbh 6552h 213bfh 213bfh 3e672h 9a28ah
725 #>>>>>>>>168 ulequad >0 \b, head entry seqnum %#llx
726 # entry_array_offset like: 0 390058h 3909d8h 3909e0h
727 #>>>>>>>>176 ulequad >0 \b, entry array offset %#llx
731 0x1008 lequad 8
732 >0x1018 string \xc6\x85\x73\xf6\x4e\x1a\x45\xca\x82\x65\xf5\x7f\x48\xba\x6d\x81 BCache
733 >>0x1010 ulequad 0 cache device
734 >>0x1010 ulequad 1 backing device
735 >>0x1010 ulequad 3 cache device
736 >>0x1010 ulequad 4 backing device
737 >>0x1048 string >0 \b, label "%.32s"
738 >>0x1028 ubelong x \b, uuid %08x
739 >>0x102c ubeshort x \b-%04x
740 >>0x102e ubeshort x \b-%04x
741 >>0x1030 ubeshort x \b-%04x
742 >>0x1032 ubelong x \b-%08x
743 >>0x1036 ubeshort x \b%04x
744 >>0x1038 ubelong x \b, set uuid %08x
745 >>0x103c ubeshort x \b-%04x
746 >>0x103e ubeshort x \b-%04x
747 >>0x1040 ubeshort x \b-%04x
748 >>0x1042 ubelong x \b-%08x
749 >>0x1046 ubeshort x \b%04x
755 0 belong 0xd00dfeed
768 0 lelong 0xde020109 locale archive
773 0 name linuxraid
782 4096 lelong 0xa92b4efc Linux Software RAID
786 0 lelong 0xa92b4efc Linux Software RAID
788 >0 use linuxraid
803 0 string \0mlocate mlocate database
808 # at the moment value is 0; a higher version will probably not occur, because mlocate is now often …
809 >12 byte !0 \b, version %d
813 #>14 short !0 \b, padding %#x
818 # 1st variable value like: 0 1
829 0 string \0plocate plocate database
839 >16 ulelong !0x10 \b, extra_ht_slots %#x
840 # num_docids; like 0 (for "empty" samples) a132h
841 >20 ulelong >0 \b, num_docids %u
843 #>24 ulequad !0x78 \b, hash table offset %#llx
845 #>32 ulequad !0x70 \b, filename index offset %#llx
847 >8 ulelong >0
850 # zstd_dictionary_length_bytes; 0 (for "empty" samples) 400h
851 >>44 ulelong !0 \b, at %#x
852 # zstd_dictionary_offset_bytes; 0 (for "empty" samples) 70h
853 >>48 ulequad >0 \b+%#llx
860 # to get phrase like "at 0x400+0x70 Zstandard compressed data (v0.8+)"
868 # next_zstd_dictionary_length_bytes; 0 (for "empty" samples) 400h
869 >>72 ulequad >0 \b, next zstd dictionary length %#llx
870 # next_zstd_dictionary_offset_bytes; 0 (for "empty" samples) 14b9cb8h
871 >>>80 ulequad >0 offset %#llx
875 >>96 ulequad >0 \b, at %#llx 1st variable
878 # 1st variable value nil terminated like: 0 1
880 # bool check_visibility; 0 or 1 configured with -l option of updatedb.plocate
887 0 lelong 0x45311224 iproute2 routes dump
888 0 lelong 0x47361222 iproute2 addresses dump
893 0 lelong 0x54564319 CRIU image file v1.1
894 0 lelong 0x55105940 CRIU service file
895 0 lelong 0x58313116 CRIU inventory
900 0 string KDUMP\x20\x20\x20 Kdump compressed dump
901 >0 use kdump-compressed-dump
903 0 name kdump-compressed-dump
905 >12 string >\0 \b, system %s
906 >77 string >\0 \b, node %s
907 >142 string >\0 \b, release %s
908 >207 string >\0 \b, version %s
909 >272 string >\0 \b, machine %s
910 >337 string >\0 \b, domain %s
913 0 string makedumpfile
915 >>0x1010 string KDUMP\x20\x20\x20 Flattened kdump compressed dump
916 >>>0x1010 use kdump-compressed-dump
919 0 search/1024 /dts-v1/ Device Tree File (v1)
926 0 string E2UNDO02 e2fsck undo file, version 2
928 >>44 lelong&1 0 not finished
931 >>48 lelong&1 0 lacks filesystem offset
936 0 string $ANSIBLE_VAULT; Ansible Vault
937 >&0 regex [0-9]+\\.[0-9]+ \b, version %s
938 >>&0 string ;
939 >>>&0 regex [A-Z0-9]+ \b, encryption %s
947 0 string GRUBLAYO GRUB Keyboard
954 >92 ubyte !0x71
955 >>92 ubyte >0x40 \b, english q is %c
958 >124 ubyte !0x79
959 >>124 ubyte >0x40 \b, english y is %c
966 0 string PERFFILE Linux perf recording, version 1
968 0 lequad 0x32454c4946524550 Linux perf recording, version 2. little endian
970 0 bequad 0x32454c4946524550 Linux perf recording, version 2. big endian