by Alt » Tue Oct 20, 2009 3:47 pm
I'd rather use this one (not tested!)
If your file signature for the end is 0x46 F 0x43 0x00 0x00 0x01 0x00 0x00 0x00
<?xml version="1.0" encoding="utf-8"?>
<FileTypeList>
<!-- Search for NTFS BTW -->
<FileType id="1234" group="Other files" description="BTW" features="TXT_ANSI TXT_UNICODE" extension="btw">
<Signature offset="0" from="begin" count="1">FILE</Signature>
<Signature offset="10" from="end" count="1">\x46F\x43C\x00\x00\x01\x00\x00\x00</Signature>
</FileType>
</FileTypeList>
And
<?xml version="1.0" encoding="utf-8"?>
<FileTypeList>
<!-- Search for NTFS BTW -->
<FileType id="1234" group="Other files" description="BTW" features="TXT_ANSI TXT_UNICODE" extension="btw">
<Signature offset="0" from="begin" count="1">FILE</Signature>
<Signature offset="8" from="end" count="1">\x46\x43\x00\x00\x01\x00\x00\x00</Signature>
</FileType>
</FileTypeList>
for 46 43 00 00 01 00 00 00
I'd rather use this one (not tested!)
If your file signature for the end is 0x46 F 0x43 0x00 0x00 0x01 0x00 0x00 0x00
<?xml version="1.0" encoding="utf-8"?>
<FileTypeList>
<!-- Search for NTFS BTW -->
<FileType id="1234" group="Other files" description="BTW" features="TXT_ANSI TXT_UNICODE" extension="btw">
<Signature offset="0" from="begin" count="1">FILE</Signature>
<Signature offset="10" from="end" count="1">\x46F\x43C\x00\x00\x01\x00\x00\x00</Signature>
</FileType>
</FileTypeList>
And
<?xml version="1.0" encoding="utf-8"?>
<FileTypeList>
<!-- Search for NTFS BTW -->
<FileType id="1234" group="Other files" description="BTW" features="TXT_ANSI TXT_UNICODE" extension="btw">
<Signature offset="0" from="begin" count="1">FILE</Signature>
<Signature offset="8" from="end" count="1">\x46\x43\x00\x00\x01\x00\x00\x00</Signature>
</FileType>
</FileTypeList>
for 46 43 00 00 01 00 00 00