The format of the traditional DOS 8.3 is as follows: Offset Value Length 8 bytes 3 bytes Name byte Extension Attribute (ODARSHDV) O: unused bit A archive bit, R: read-only bit S: system bit D: directory bit V: volume bit Time Date Cluster (desc. below) File Size 22 24 word word word dword Note: WORD=2 bytes, DWORD=4 bytes LOCATION in the form of a starting cluster address, is given in offset 26-27. REMEMBER we are "Little Endian" so we REVERSE THE ORDER of the two Bytes we find at offset 22. Od c9 = 3529 ** Cluster Area: 160-69395 METADATA INFORMATION Range: 2-1020946 Root Directory: 2 CONTENT INFORMATION Sector Size: 512 Cluster Size: 2048 Total Cluster Range: 2-15945 Math: ((Cluster Address - Reserved Clusters) (Cluster Size / Sector Size + Cluster Area Start) x Sector Size = File start location ((3529-2) x (2048 / 512) + 160) x 512 = 7,305,216 SIZE Example: 0011880 40 41 4b 45 50 55 7e 31 4a 50 47 20 00 75 06 78 5a 38 5a 38 00 00 67 42 73 37 c9 Od 05 9f 22 00 LAKEPU-1JPG Convert 05 of 22 00 to Little Endian = 00 22 9f 05 Hex to Decimal convert x00229f05 to Decimal 2,268,933 Using your new Thumb Drive image from class ... Choose one of your .JPG files, your .MP3 file, and your .PDF file Calculate the LOCATION and SIZE of each of those files, showing your work in the following steps: FOR EACH OF THREE FILES: 1. Show the value at offset 26-27. 2. Show the equation to calculate the starting point for your file. 3. Calculate the starting point. 4. Show the directory entry value at offset 28-31. 5. Use little endian to show the hexadecimal size 6. Show the decimal value of that size 7. Use the starting location to find the first line of your file in FRHED. Provide the HEX bytes of the first 32 bytes of the file. 8. Show the hex Starting and Ending point that you will enter into FRHED to export the file. REMEMBER TO DO THIS THREE TIMES FOR CREDIT!!!! The format of the traditional DOS 8.3 is as follows: Offset Value Length 8 bytes 3 bytes Name byte Extension Attribute (ODARSHDV) O: unused bit A archive bit, R: read-only bit S: system bit D: directory bit V: volume bit Time Date Cluster (desc. below) File Size 22 24 word word word dword Note: WORD=2 bytes, DWORD=4 bytes LOCATION in the form of a starting cluster address, is given in offset 26-27. REMEMBER we are "Little Endian" so we REVERSE THE ORDER of the two Bytes we find at offset 22. Od c9 = 3529 ** Cluster Area: 160-69395 METADATA INFORMATION Range: 2-1020946 Root Directory: 2 CONTENT INFORMATION Sector Size: 512 Cluster Size: 2048 Total Cluster Range: 2-15945 Math: ((Cluster Address - Reserved Clusters) (Cluster Size / Sector Size + Cluster Area Start) x Sector Size = File start location ((3529-2) x (2048 / 512) + 160) x 512 = 7,305,216 SIZE Example: 0011880 40 41 4b 45 50 55 7e 31 4a 50 47 20 00 75 06 78 5a 38 5a 38 00 00 67 42 73 37 c9 Od 05 9f 22 00 LAKEPU-1JPG Convert 05 of 22 00 to Little Endian = 00 22 9f 05 Hex to Decimal convert x00229f05 to Decimal 2,268,933 Using your new Thumb Drive image from class ... Choose one of your .JPG files, your .MP3 file, and your .PDF file Calculate the LOCATION and SIZE of each of those files, showing your work in the following steps: FOR EACH OF THREE FILES: 1. Show the value at offset 26-27. 2. Show the equation to calculate the starting point for your file. 3. Calculate the starting point. 4. Show the directory entry value at offset 28-31. 5. Use little endian to show the hexadecimal size 6. Show the decimal value of that size 7. Use the starting location to find the first line of your file in FRHED. Provide the HEX bytes of the first 32 bytes of the file. 8. Show the hex Starting and Ending point that you will enter into FRHED to export the file. REMEMBER TO DO THIS THREE TIMES FOR CREDIT