109
edits
Line 127: | Line 127: | ||
The mimetype is entry number 1 and hence the 2nd since the first is the number 0. The mimetype is then "text/plain". | The mimetype is entry number 1 and hence the 2nd since the first is the number 0. The mimetype is then "text/plain". | ||
The rest of the directory entry is similar to the fist one. | The rest of the directory entry is similar to the fist one. | ||
==Cluster pointer list== | |||
00000a0: 0100 0000 4175 746f 0000 <u>b200 0000 0000</u> ....Auto........ | |||
00000b0: <u>0000</u> 04fd 377a 585a 0000 0169 22de 3602 ....7zXZ...i".6. | |||
The cluster pointer list is just one offset in this case. The cluster can be found at offset 0000 0000 0000 00b2. | |||
==Cluster== | |||
00000b0: 0000 <u>04fd 377a 585a 0000 0169 22de 3602</u> ....7zXZ...i".6. | |||
00000c0: <u>0021 0110 0000 00a8 708e 86e0 001c 0018</u> .!......p....... | |||
00000d0: <u>5e00 0600 34fb de91 72a3 8034 fc31 871f</u> ^...4...r..4.1.. | |||
00000e0: <u>e6aa 6104 7025 b184 dc00 00e1 66f9 e700</u> ..a.p%......f... | |||
00000f0: <u>0130 1d01 efc6 9c90 4299 0d01 0000 0000</u> .0......B....... | |||
0000100: <u>0159 5a</u>78 bdf4 58bd 108c 16c6 9ef5 d42c .YZx..X........, | |||
0000110: a3f4 e3 ... | |||
This is the cluster. | |||
00000b0: 0000 <u>04</u>fd 377a 585a 0000 0169 22de 3602 ....7zXZ...i".6. | |||
The first byte specifies the compression algorithm, which is 4, which means lzma (or more precise xz) here. |