***>>> CONTINUED FROM PREVIOUS MESSAGE <<<***
Acknowledgments
        Dave Chess, IBM
        Shane Coursen, Symantec
        Sarah Gordon, Command
        Tom Simondi
        Heather Stern, McAfee; and many others at McAfee
Appendix A
        The Directory Entry
                A directory file consists of sequential 32 byte entries:
                        Byte Description
                        0-7 Filename
                        Byte 0 indicates the status of the directory entry.
                        Value Meaning
                                00h This entry has never been used. 
Directory
                                searches can stop here.)
                                E5h The actual first character is an E5h.
                                E5h This entry has been erased (it's free).
                                2Eh Dot. This is the entry which holds
                                information about this directory cluster.
                                If the second character is also 2Eh, then 
his
                                entry is dot-dot, or the parent directory. If
                                the parent directory is the root directory,
                                then cluster number will be 0000h.
                        8-10 Filename extension
                        11 File Attribute
                        The file attribute is a bit mapped value.
                                Bit Meaning
                                01h 1 = Read-only file. If function 3Dh or 
Ch
                                is used to open the file for output, an error
                                code is returned.
                                02h 1 = Hidden file. This file is excluded 
from
                                normal directory searches.
                                04h 1 = System file. This file is excluded 
from
                                normal directory searches.
                                08h 1 = Volume ID in the first 11 bytes. This
                                file is excluded from normal directory 
searches.
                                No other fields are interpreted. Windows 95
                                marks this bit for its LongFileName entries.
                                10h 1 = Subdirectory file. This entry points
                                to a subdirectory and thus is not searched.
                                20h 1 = (Archive bit) File has been written
                                to and closed. BACKUP and RESTORE uses this
                                bit to determine if a file has been changed
                                since the last BACKUP.
                        12-21 Reserved (OS/2 uses some of these bytes)
                        22-23 File Creation or Last Changed Time
                                The time is encoded into 16 bits: 
                                Bits Meaning
                                0-4 Seconds (in 2 second increments)
                                5-10 Minutes (0-59)
                                11-15 Hours (0-23) 
                        24-25 File Creation or Last Changed Date
                                The date is encoded into 16 bits: 
                                Bits Meaning
                                0-4 Day (1-31)
                                5-8 Month (1-12)
                                9-15 Year + 1980 (0-119: 1980-2099) 
                        26-27 First Cluster of the File. One uses this number
                        to index through the File Allocation Table to
                        determine the chain of the full file. (Standard
                        Intel 16 bit value).
                        28-31 File Size (standard Intel 32 bit value)
Appendix B
        The DOS Boot Record
                A Boot Record is found on each DOS volume. It describes the
                media.
                Byte Description
                0-2 Code
***>>> CONTINUED NEXT MESSAGE <<<***
--- GEcho 1.20/Pro
---------------