libolecf/dtfabric.yaml at main · libyal/libolecf · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
name: olecf
type: format
description: Object Linking and Embedding (OLE) Compound File (CF) format
urls:
- 'https://github.com/libyal/libolecf/blob/main/documentation/OLE%20Compound%20File%20format.asciidoc'
metadata:
  authors: ['Joachim Metz <joachim.metz@gmail.com>']
  year: 2008
attributes:
  byte_order: little-endian
layout:
- data_type: file_header
---
name: byte
type: integer
attributes:
  format: unsigned
  size: 1
  units: bytes
---
name: uint8
type: integer
attributes:
  format: unsigned
  size: 1
  units: bytes
---
name: uint16
type: integer
attributes:
  format: unsigned
  size: 2
  units: bytes
---
name: uint32
type: integer
attributes:
  format: unsigned
  size: 4
  units: bytes
---
name: file_header
type: structure
attributes:
  byte_order: little-endian
description: File header
members:
- name: signature
  type: stream
  element_data_type: byte
  elements_data_size: 8
  values:
  - "\xd0\xcf\x11\xe0\xa1\xb1\x1a\xe1"
  - "\x0e\x11\xfc\x0d\xd0\xcf\x11\x0e"
- name: class_identifier
  data_type: uuid
- name: minor_format_version
  data_type: uint16
- name: major_format_version
  data_type: uint16
- name: byte_order
  data_type: uint16
- name: sector_size
  data_type: uint16
- name: short_sector_size
  data_type: uint16
- name: unknown1
  data_type: uint16
- name: unknown2
  data_type: uint32
- name: unknown3
  data_type: uint32
- name: number_of_sat_sectors
  data_type: uint32
- name: root_directory_sector_identifier
  data_type: uint32
- name: transactioning_signature
  data_type: uint32
- name: sector_stream_minimum_data_size
  data_type: uint32
- name: ssat_sector_identifier
  data_type: uint32
- name: number_of_ssat_sectors
  data_type: uint32
- name: msat_sector_identifier
  data_type: uint32
- name: number_of_msat_sectors
  data_type: uint32
- name: msat
  type: sequence
  element_data_type: uint32
  number_of_elements: 109