|
28 | 28 | ## Is there a boot block written 1 sector in?
|
29 | 29 | #>512 belong&077777777 0600407 \b, boot block present
|
30 | 30 | ## Joerg Jenderek: Smart Boot Manager backup file is 41 byte header + first sectors of disc
|
31 |
| -## (http://btmgr.sourceforge.net/docs/user-guide-3.html) |
| 31 | +## (https://btmgr.sourceforge.net/docs/user-guide-3.html) |
32 | 32 | #0 string SBMBAKUP_ Smart Boot Manager backup file
|
33 | 33 | #>9 string x \b, version %-5.5s
|
34 | 34 | #>>14 string =_
|
|
91 | 91 | >139 string Invalid\ partition\ table\0
|
92 | 92 | >>163 string Error\ loading\ operating\ system\0
|
93 | 93 | >>>194 string Missing\ operating\ system\0 \b, Microsoft Windows XP mbr
|
94 |
| -# http://www.heise.de/ct/05/09/006/ page 184 |
| 94 | +# https://www.heise.de/ct/05/09/006/ page 184 |
95 | 95 | #HKEY_LOCAL_MACHINE\SYSTEM\MountedDevices\DosDevices\?:=Serial4Bytes+8Bytes
|
96 | 96 | >>>>0x1B8 ulelong >0 \b,Serial 0x%-.4x
|
97 | 97 | >300 string Invalid\ partition\ table\0
|
|
110 | 110 | >>96 string read\ error\ while\ reading\ drive \b, FREE-DOS Beta 0.9 MBR
|
111 | 111 | >271 string Operating\ system\ loading
|
112 | 112 | >>296 string error\r \b, SYSLINUX MBR (2.10)
|
113 |
| -# http://www.acronis.de/ |
| 113 | +# https://www.acronis.de/ |
114 | 114 | >362 string MBR\ Error\ \0\r
|
115 | 115 | >>376 string ress\ any\ key\ to\
|
116 | 116 | >>>392 string boot\ from\ floppy...\0 \b, Acronis MBR
|
117 | 117 | # added by Joerg Jenderek
|
118 |
| -# http://www.visopsys.org/ |
119 |
| -# http://partitionlogic.org.uk/ |
| 118 | +# https://www.visopsys.org/ |
| 119 | +# https://partitionlogic.org.uk/ |
120 | 120 | >309 string No\ bootable\ partition\ found\r
|
121 | 121 | >>339 string I/O\ Error\ reading\ boot\ sector\r \b, Visopsys MBR
|
122 | 122 | >349 string No\ bootable\ partition\ found\r
|
|
134 | 134 | >>172 string LILO \b, version 22.5.8 Debian
|
135 | 135 | # updated by Joerg Jenderek
|
136 | 136 | # variables according to grub-0.97/stage1/stage1.S or
|
137 |
| -# http://www.gnu.org/software/grub/manual/grub.html#Embedded-data |
| 137 | +# https://www.gnu.org/software/grub/manual/grub.html#Embedded-data |
138 | 138 | # usual values are marked with comments to get only informations of strange GRUB loaders
|
139 | 139 | >0 ulelong 0x009048EB
|
140 | 140 | >>0x41 ubyte <2
|
|
168 | 168 | >>>>321 string Loading\ stage1.5 \b, GRUB version x.y
|
169 | 169 | >>>380 string Geom\0Hard\ Disk\0Read\0\ Error\0
|
170 | 170 | >>>>374 string GRUB\ \0 \b, GRUB version n.m
|
171 |
| -# http://syslinux.zytor.com/ |
| 171 | +# https://syslinux.zytor.com/ |
172 | 172 | >478 string Boot\ failed\r
|
173 | 173 | >>495 string LDLINUX\ SYS \b, SYSLINUX bootloader (1.62)
|
174 | 174 | >480 string Boot\ failed\r
|
175 | 175 | >>495 string LDLINUX\ SYS \b, SYSLINUX bootloader (2.06 or 2.11)
|
176 | 176 | >484 string Boot\ error\r \b, SYSLINUX bootloader (3.11)
|
177 | 177 | >395 string chksum\0\ ERROR!\0 \b, Gujin bootloader
|
178 |
| -# http://www.bcdwb.de/bcdw/index_e.htm |
| 178 | +# https://www.bcdwb.de/bcdw/index_e.htm |
179 | 179 | >3 string BCDL
|
180 | 180 | >>498 string BCDL\ \ \ \ BIN \b, Bootable CD Loader (1.50Z)
|
181 | 181 | # mbr partition table entries
|
|
234 | 234 | >>>>>>>>>>>>502 ulelong x \b, startsector %u
|
235 | 235 | >>>>>>>>>>>>506 ulelong x \b, %u sectors
|
236 | 236 | # mbr partition table entries end
|
237 |
| -# http://www.acronis.de/ |
| 237 | +# https://www.acronis.de/ |
238 | 238 | #FAT label=ACRONIS\ SZ
|
239 | 239 | #OEM-ID=BOOTWIZ0
|
240 | 240 | >442 string Non-system\ disk,\
|
|
624 | 624 | >>>>505 ubyte&0xDF >0
|
625 | 625 | >>>>>505 string x \b.%-.3s
|
626 | 626 | # added by Joerg Jenderek
|
627 |
| -# http://www.visopsys.org/ |
628 |
| -# http://partitionlogic.org.uk/ |
| 627 | +# https://www.visopsys.org/ |
| 628 | +# https://partitionlogic.org.uk/ |
629 | 629 | # OEM-ID=Visopsys
|
630 | 630 | >478 ulelong 0
|
631 | 631 | >>(1.b+326) string I/O\ Error\ reading\
|
632 | 632 | >>>(1.b+344) string Visopsys\ loader\r
|
633 | 633 | >>>>(1.b+361) string Press\ any\ key\ to\ continue.\r \b, Visopsys loader
|
634 |
| -# http://alexfru.chat.ru/epm.html#bootprog |
| 634 | +# https://alexfru.chat.ru/epm.html#bootprog |
635 | 635 | >494 ubyte >0x4D
|
636 | 636 | >>495 string >E
|
637 | 637 | >>>495 string <S
|
|
669 | 669 | #it also hangs with another message ("NF").
|
670 | 670 | >>>>>492 string RENF \b, FAT (12 bit)
|
671 | 671 | >>>>>495 string RENF \b, FAT (16 bit)
|
672 |
| -# http://alexfru.chat.ru/epm.html#bootprog |
| 672 | +# https://alexfru.chat.ru/epm.html#bootprog |
673 | 673 | >494 ubyte >0x4D
|
674 | 674 | >>495 string >E
|
675 | 675 | >>>495 string <S
|
|
708 | 708 | >>>>>492 string RENF \b, FAT (12 bit)
|
709 | 709 | >>>>>495 string RENF \b, FAT (16 bit)
|
710 | 710 | # added by Joerg Jenderek
|
711 |
| -# http://syslinux.zytor.com/iso.php |
| 711 | +# https://syslinux.zytor.com/iso.php |
712 | 712 | 0 ulelong 0x7c40eafa isolinux Loader
|
713 |
| -# http://syslinux.zytor.com/pxe.php |
| 713 | +# https://syslinux.zytor.com/pxe.php |
714 | 714 | 0 ulelong 0x007c05ea pxelinux Loader
|
715 | 715 | 0 ulelong 0x60669c66 pxelinux Loader
|
716 | 716 | # loader end
|
|
729 | 729 | >>>>>>>466 ubyte 0x0F \b, extended partition table (LBA)
|
730 | 730 | >>>>>>>466 ubyte 0x0 \b, extended partition table (last)
|
731 | 731 | # JuMP short bootcodeoffset NOP assembler instructions will usually be EB xx 90
|
732 |
| -# http://mirror.href.com/thestarman/asm/2bytejumps.htmm#FWD |
| 732 | +# https://mirror.href.com/thestarman/asm/2bytejumps.htmm#FWD |
733 | 733 | # older drives may use Near JuMP instruction E9 xx xx
|
734 | 734 | >0 lelong&0x009000EB 0x009000EB
|
735 | 735 | >0 lelong&0x000000E9 0x000000E9
|
|
742 | 742 | >>>11 uleshort <32769
|
743 | 743 | >>>>11 uleshort >31
|
744 | 744 | >>>>>3 string >\0 \b, OEM-ID "%8.8s"
|
745 |
| -#http://mirror.href.com/thestarman/asm/debug/debug2.htm#IHC |
| 745 | +#https://mirror.href.com/thestarman/asm/debug/debug2.htm#IHC |
746 | 746 | >>>>>>8 string IHC \b cached by Windows 9M
|
747 | 747 | >>>>>11 uleshort >512 \b, Bytes/sector %u
|
748 | 748 | #>>>>>11 uleshort =512 \b, Bytes/sector %u=512 (usual)
|
|
849 | 849 | # added by Joerg Jenderek
|
850 | 850 | # In the second sector (+0x200) are variables according to grub-0.97/stage2/asm.S or
|
851 | 851 | # grub-1.94/kern/i386/pc/startup.S
|
852 |
| -# http://www.gnu.org/software/grub/manual/grub.html#Embedded-data |
| 852 | +# https://www.gnu.org/software/grub/manual/grub.html#Embedded-data |
853 | 853 | # usual values are marked with comments to get only informations of strange GRUB loaders
|
854 | 854 | 0x200 uleshort 0x70EA
|
855 | 855 | # found only version 3.{1,2}
|
|
1123 | 1123 | # 10 SS, 8 SPT
|
1124 | 1124 | # 11 DS, 8 SPT
|
1125 | 1125 | #
|
1126 |
| -# 11111001 Double density 3� floppy disk, high density 5� |
1127 |
| -# 11110000 High density 3� floppy disk |
| 1126 | +# 11111001 Double density 3� floppy disk, high density 5� |
| 1127 | +# 11110000 High density 3� floppy disk |
1128 | 1128 | # 11111000 Hard disk any format
|
1129 | 1129 | #
|
1130 | 1130 |
|
|
1320 | 1320 | >984 string x volume label is '%-12.12s'
|
1321 | 1321 |
|
1322 | 1322 | # From: Thomas Klausner < [email protected]>
|
1323 |
| -# http://filext.com/file-extension/DAA |
| 1323 | +# https://filext.com/file-extension/DAA |
1324 | 1324 | # describes the daa file format. The magic would be:
|
1325 | 1325 | 0 string DAA\x0\x0\x0\x0\x0 PowerISO Direct-Access-Archive
|
1326 | 1326 |
|
|
1333 | 1333 | # DOS x86 sector updated and separated from "DOS/MBR boot sector" by Joerg Jenderek at May 2011
|
1334 | 1334 | # JuMP short bootcodeoffset NOP assembler instructions will usually be EB xx 90
|
1335 | 1335 | # over BIOS parameter block (BPB)
|
1336 |
| -# http://thestarman.pcministry.com/asm/2bytejumps.htm#FWD |
| 1336 | +# https://thestarman.pcministry.com/asm/2bytejumps.htm#FWD |
1337 | 1337 | # older drives may use Near JuMP instruction E9 xx xx
|
1338 | 1338 | # minimal short forward jump found 0x29 for bootloaders or 0x0
|
1339 | 1339 | # maximal short forward jump is 0x7f
|
|
1354 | 1354 | >>>>>0 ubyte 0xE9
|
1355 | 1355 | >>>>>>1 uleshort x \b, code offset 0x%x+3
|
1356 | 1356 | >>>>>3 string >\0 \b, OEM-ID "%-.8s"
|
1357 |
| -#http://mirror.href.com/thestarman/asm/debug/debug2.htm#IHC |
| 1357 | +#https://mirror.href.com/thestarman/asm/debug/debug2.htm#IHC |
1358 | 1358 | >>>>>>8 string IHC \b cached by Windows 9M
|
1359 | 1359 | >>>>>11 uleshort >512 \b, Bytes/sector %u
|
1360 | 1360 | #>>>>>11 uleshort =512 \b, Bytes/sector %u=512 (usual)
|
|
1388 | 1388 | >>>>>26 ubyte =1 \b, heads %u
|
1389 | 1389 | # valid only for sector sizes with more then 32 Bytes
|
1390 | 1390 | >>>>>11 uleshort >32
|
1391 |
| -# http://en.wikipedia.org/wiki/Design_of_the_FAT_file_system#Extended_BIOS_Parameter_Block |
| 1391 | +# https://en.wikipedia.org/wiki/Design_of_the_FAT_file_system#Extended_BIOS_Parameter_Block |
1392 | 1392 | # skip for values 2,2Ah,70h,73h,DFh
|
1393 | 1393 | # and continue for extended boot signature values 0,28h,29h,80h
|
1394 | 1394 | >>>>>>38 ubyte&0x56 =0
|
|
1419 | 1419 | # Normally the number of clusters is calculated by the values of BPP.
|
1420 | 1420 | # if it is small enough FAT is 12 bit, if it is too big enough FAT is 32 bit,
|
1421 | 1421 | # otherwise FAT is 16 bit.
|
1422 |
| -# http://homepage.ntlworld.com/jonathan.deboynepollard/FGA/determining-fat-widths.html |
| 1422 | +# https://homepage.ntlworld.com/jonathan.deboynepollard/FGA/determining-fat-widths.html |
1423 | 1423 | >>>>>82 string/c !fat32
|
1424 | 1424 | >>>>>>54 string FAT12 \b, FAT (12 bit)
|
1425 | 1425 | >>>>>>54 string FAT16 \b, FAT (16 bit)
|
|
1450 | 1450 | # FAT32 bit specific
|
1451 | 1451 | >>>>>82 string/c fat32 \b, FAT (32 bit)
|
1452 | 1452 | >>>>>>36 ulelong x \b, sectors/FAT %u
|
1453 |
| -# http://technet.microsoft.com/en-us/library/cc977221.aspx |
| 1453 | +# https://technet.microsoft.com/en-us/library/cc977221.aspx |
1454 | 1454 | >>>>>>40 uleshort >0 \b, extension flags 0x%x
|
1455 | 1455 | #>>>>>>40 uleshort =0 \b, extension flags %hu
|
1456 | 1456 | >>>>>>42 uleshort >0 \b, fsVersion %u
|
|
1467 | 1467 | #>>>>>>50 uleshort =6 \b, Backup boot sector %u (usual)
|
1468 | 1468 | >>>>>>50 default x
|
1469 | 1469 | >>>>>>>50 uleshort x \b, Backup boot sector %u
|
1470 |
| -# corrected by Joerg Jenderek at Feb 2011 according to http://thestarman.pcministry.com/asm/mbr/MSWIN41.htm#FSINFO |
| 1470 | +# corrected by Joerg Jenderek at Feb 2011 according to https://thestarman.pcministry.com/asm/mbr/MSWIN41.htm#FSINFO |
1471 | 1471 | >>>>>>52 ulelong >0 \b, reserved1 0x%x
|
1472 | 1472 | >>>>>>56 ulelong >0 \b, reserved2 0x%x
|
1473 | 1473 | >>>>>>60 ulelong >0 \b, reserved3 0x%x
|
|
1493 | 1493 | >>>>>>>(11.s) ulelong&0x00ffffF0 0x00ffffF0 \b, followed by FAT
|
1494 | 1494 | # floppy image
|
1495 | 1495 | !:mime application/x-ima
|
1496 |
| -# NTFS specific added by Joerg Jenderek at Mar 2011 according to http://thestarman.pcministry.com/asm/mbr/NTFSBR.htm |
1497 |
| -# and http://homepage.ntlworld.com/jonathan.deboynepollard/FGA/bios-parameter-block.html |
| 1496 | +# NTFS specific added by Joerg Jenderek at Mar 2011 according to https://thestarman.pcministry.com/asm/mbr/NTFSBR.htm |
| 1497 | +# and https://homepage.ntlworld.com/jonathan.deboynepollard/FGA/bios-parameter-block.html |
1498 | 1498 | # 0 FATs
|
1499 | 1499 | >>>>>16 ubyte =0
|
1500 | 1500 | # 0 root entries
|
|
1527 | 1527 | >>>>>>>>>0x258 ulelong&0x00009090 =0x00009090
|
1528 | 1528 | #>>>>>>>>>>&-92 indirect x \b; contains
|
1529 | 1529 | # For 2nd NTFS sector added by Joerg Jenderek at Jan 2013
|
1530 |
| -# http://thestarman.pcministry.com/asm/mbr/NTFSbrHexEd.htm |
| 1530 | +# https://thestarman.pcministry.com/asm/mbr/NTFSbrHexEd.htm |
1531 | 1531 | # unused assembler instructions JMP y2;NOP;NOP
|
1532 | 1532 | 0x056 ulelong&0xFFFF0FFF 0x909002EB
|
1533 | 1533 | # unicode loadername terminated by CTRL-D
|
|
0 commit comments