12345678910111213141516171819202122232425262728293031323334353637383940414243444546474849505152535455565758596061626364656667686970717273747576777879808182838485868788899091929394959697989910010110210310410510610710810911011111211311411511611711811912012112212312412512612712812913013113213313413513613713813914014114214314414514614714814915015115215315415515615715815916016116216316416516616716816917017117217317417517617717817918018118218318418518618718818919019119219319419519619719819920020120220320420520620720820921021121221321421521621721821922022122222322422522622722822923023123223323423523623723823924024124224324424524624724824925025125225325425525625725825926026126226326426526626726826927027127227327427527627727827928028128228328428528628728828929029129229329429529629729829930030130230330430530630730830931031131231331431531631731831932032132232332432532632732832933033133233333433533633733833934034134234334434534634734834935035135235335435535635735835936036136236336436536636736836937037137237337437537637737837938038138238338438538638738838939039139239339439539639739839940040140240340440540640740840941041141241341441541641741841942042142242342442542642742842943043143243343443543643743843944044144244344444544644744844945045145245345445545645745845946046146246346446546646746846947047147247347447547647747847948048148248348448548648748848949049149249349449549649749849950050150250350450550650750850951051151251351451551651751851952052152252352452552652752852953053153253353453553653753853954054154254354454554654754854955055155255355455555655755855956056156256356456556656756856957057157257357457557657757857958058158258358458558658758858959059159259359459559659759859960060160260360460560660760860961061161261361461561661761861962062162262362462562662762862963063163263363463563663763863964064164264364464564664764864965065165265365465565665765865966066166266366466566666766866967067167267367467567667767867968068168268368468568668768868969069169269369469569669769869970070170270370470570670770870971071171271371471571671771871972072172272372472572672772872973073173273373473573673773873974074174274374474574674774874975075175275375475575675775875976076176276376476576676776876977077177277377477577677777877978078178278378478578678778878979079179279379479579679779879980080180280380480580680780880981081181281381481581681781881982082182282382482582682782882983083183283383483583683783883984084184284384484584684784884985085185285385485585685785885986086186286386486586686786886987087187287387487587687787887988088188288388488588688788888989089189289389489589689789889990090190290390490590690790890991091191291391491591691791891992092192292392492592692792892993093193293393493593693793893994094194294394494594694794894995095195295395495595695795895996096196296396496596696796896997097197297397497597697797897998098198298398498598698798898999099199299399499599699799899910001001100210031004100510061007100810091010101110121013101410151016101710181019102010211022102310241025102610271028102910301031103210331034103510361037103810391040104110421043104410451046104710481049105010511052105310541055105610571058105910601061106210631064106510661067106810691070107110721073107410751076107710781079108010811082108310841085108610871088108910901091109210931094109510961097109810991100110111021103110411051106110711081109111011111112111311141115111611171118111911201121112211231124112511261127112811291130113111321133113411351136113711381139114011411142114311441145114611471148114911501151115211531154115511561157115811591160116111621163116411651166116711681169117011711172117311741175117611771178117911801181118211831184118511861187118811891190119111921193119411951196119711981199120012011202120312041205120612071208120912101211121212131214121512161217121812191220122112221223122412251226122712281229123012311232123312341235123612371238123912401241124212431244124512461247124812491250125112521253125412551256125712581259126012611262126312641265126612671268126912701271127212731274127512761277127812791280128112821283128412851286128712881289129012911292129312941295129612971298129913001301130213031304130513061307130813091310131113121313131413151316131713181319132013211322132313241325132613271328132913301331133213331334133513361337133813391340134113421343134413451346134713481349135013511352135313541355135613571358135913601361136213631364136513661367136813691370137113721373137413751376137713781379138013811382138313841385138613871388138913901391139213931394139513961397139813991400140114021403140414051406140714081409141014111412141314141415141614171418141914201421142214231424142514261427142814291430143114321433143414351436143714381439144014411442144314441445144614471448144914501451145214531454145514561457145814591460146114621463146414651466146714681469147014711472147314741475147614771478147914801481148214831484148514861487148814891490149114921493149414951496149714981499150015011502150315041505150615071508150915101511151215131514151515161517151815191520152115221523152415251526152715281529153015311532153315341535153615371538153915401541154215431544154515461547154815491550155115521553155415551556155715581559156015611562156315641565156615671568156915701571 |
- #------------------------------------------------------------------------------
- # $File: filesystems,v 1.61 2011/01/10 14:01:10 christos Exp $
- # filesystems: file(1) magic for different filesystems
- #
- 0 string \366\366\366\366 PC formatted floppy with no filesystem
- # Sun disk labels
- # From /usr/include/sun/dklabel.h:
- 0774 beshort 0xdabe
- # modified by Joerg Jenderek, because original test
- # succeeds for Cabinet archive dao360.dl_ with negative blocks
- >0770 long >0 Sun disk label
- >>0 string x '%s
- >>>31 string >\0 \b%s
- >>>>63 string >\0 \b%s
- >>>>>95 string >\0 \b%s
- >>0 string x \b'
- >>0734 short >0 %d rpm,
- >>0736 short >0 %d phys cys,
- >>0740 short >0 %d alts/cyl,
- >>0746 short >0 %d interleave,
- >>0750 short >0 %d data cyls,
- >>0752 short >0 %d alt cyls,
- >>0754 short >0 %d heads/partition,
- >>0756 short >0 %d sectors/track,
- >>0764 long >0 start cyl %ld,
- >>0770 long x %ld blocks
- # Is there a boot block written 1 sector in?
- >512 belong&077777777 0600407 \b, boot block present
- # Joerg Jenderek: Smart Boot Manager backup file is 41 byte header + first sectors of disc
- # (http://btmgr.sourceforge.net/docs/user-guide-3.html)
- 0 string SBMBAKUP_ Smart Boot Manager backup file
- >9 string x \b, version %-5.5s
- >>14 string =_
- >>>15 string x %-.1s
- >>>>16 string =_ \b.
- >>>>>17 string x \b%-.1s
- >>>>>>18 string =_ \b.
- >>>>>>>19 string x \b%-.1s
- >>>22 ubyte 0
- >>>>21 ubyte x \b, from drive 0x%x
- >>>22 ubyte >0
- >>>>21 string x \b, from drive %s
- # Joerg Jenderek
- # DOS Emulator image is 128 byte, null right padded header + harddisc image
- 0 string DOSEMU\0
- >0x27E leshort 0xAA55
- #offset is 128
- >>19 ubyte 128
- >>>(19.b-1) ubyte 0x0 DOS Emulator image
- >>>>7 ulelong >0 \b, %u heads
- >>>>11 ulelong >0 \b, %d sectors/track
- >>>>15 ulelong >0 \b, %d cylinders
- # updated by Joerg Jenderek at Sep 2007
- # only for sector sizes with 512 or more Bytes
- 0x1FE leshort 0xAA55 x86 boot sector
- # to do also for sectors < than 512 Bytes and some other files, GRR
- #30 search/481 \x55\xAA x86 boot sector
- # not for BeOS floppy 1440k, MBRs
- #(11.s-2) uleshort 0xAA55 x86 boot sector
- >2 string OSBS \b, OS/BS MBR
- # J\xf6rg Jenderek <joerg dot jenderek at web dot de>
- >0x8C string Invalid\ partition\ table \b, MS-DOS MBR
- # dr-dos with some upper-, lowercase variants
- >0x9D string Invalid\ partition\ table$
- >>181 string No\ Operating\ System$
- >>>201 string Operating\ System\ load\ error$ \b, DR-DOS MBR, Version 7.01 to 7.03
- >0x9D string Invalid\ partition\ table$
- >>181 string No\ operating\ system$
- >>>201 string Operating\ system\ load\ error$ \b, DR-DOS MBR, Version 7.01 to 7.03
- >342 string Invalid\ partition\ table$
- >>366 string No\ operating\ system$
- >>>386 string Operating\ system\ load\ error$ \b, DR-DOS MBR, version 7.01 to 7.03
- >295 string NEWLDR\0
- >>302 string Bad\ PT\ $
- >>>310 string No\ OS\ $
- >>>>317 string OS\ load\ err$
- >>>>>329 string Moved\ or\ missing\ IBMBIO.LDR\n\r
- >>>>>>358 string Press\ any\ key\ to\ continue.\n\r$
- >>>>>>>387 string Copyright\ (c)\ 1984,1998
- >>>>>>>>411 string Caldera\ Inc.\0 \b, DR-DOS MBR (IBMBIO.LDR)
- >0x10F string Ung\201ltige\ Partitionstabelle \b, MS-DOS MBR, german version 4.10.1998, 4.10.2222
- >>0x1B8 ubelong >0 \b, Serial 0x%-.4x
- >0x8B string Ung\201ltige\ Partitionstabelle \b, MS-DOS MBR, german version 5.00 to 4.00.950
- >271 string Invalid\ partition\ table\0
- >>295 string Error\ loading\ operating\ system\0
- >>>326 string Missing\ operating\ system\0 \b, mbr
- #
- >139 string Invalid\ partition\ table\0
- >>163 string Error\ loading\ operating\ system\0
- >>>194 string Missing\ operating\ system\0 \b, Microsoft Windows XP mbr
- # http://www.heise.de/ct/05/09/006/ page 184
- #HKEY_LOCAL_MACHINE\SYSTEM\MountedDevices\DosDevices\?:=Serial4Bytes+8Bytes
- >>>>0x1B8 ulelong >0 \b,Serial 0x%-.4x
- >300 string Invalid\ partition\ table\0
- >>324 string Error\ loading\ operating\ system\0
- >>>355 string Missing\ operating\ system\0 \b, Microsoft Windows XP MBR
- #??>>>389 string Invalid\ system\ disk
- >>>>0x1B8 ulelong >0 \b, Serial 0x%-.4x
- >300 string Ung\201ltige\ Partitionstabelle
- #split string to avoid error: String too long
- >>328 string Fehler\ beim\ Laden\
- >>>346 string des\ Betriebssystems
- >>>>366 string Betriebssystem\ nicht\ vorhanden \b, Microsoft Windows XP MBR (german)
- >>>>>0x1B8 ulelong >0 \b, Serial 0x%-.4x
- #>0x145 string Default:\ F \b, FREE-DOS MBR
- #>0x14B string Default:\ F \b, FREE-DOS 1.0 MBR
- >0x145 search/7 Default:\ F \b, FREE-DOS MBR
- #>>313 string F0\ .\ .\ .
- #>>>322 string disk\ 1
- #>>>>382 string FAT3
- >64 string no\ active\ partition\ found
- >>96 string read\ error\ while\ reading\ drive \b, FREE-DOS Beta 0.9 MBR
- # Ranish Partition Manager http://www.ranish.com/part/
- >387 search/4 \0\ Error!\r
- >>378 search/7 Virus!
- >>>397 search/4 Booting\
- >>>>408 search/4 HD1/\0 \b, Ranish MBR (
- >>>>>416 string Writing\ changes... \b2.37
- >>>>>>438 ubyte x \b,0x%x dots
- >>>>>>440 ubyte >0 \b,virus check
- >>>>>>441 ubyte >0 \b,partition %c
- #2.38,2.42,2.44
- >>>>>416 string !Writing\ changes... \b
- >>>>>>418 ubyte 1 \bvirus check,
- >>>>>>419 ubyte x \b0x%x seconds
- >>>>>>420 ubyte&0x0F >0 \b,partition
- >>>>>>>420 ubyte&0x0F <5 \b %x
- >>>>>>>420 ubyte&0x0F 0Xf \b ask
- >>>>>420 ubyte x \b)
- #
- >271 string Operating\ system\ loading
- >>296 string error\r \b, SYSLINUX MBR (2.10)
- # http://www.acronis.de/
- >362 string MBR\ Error\ \0\r
- >>376 string ress\ any\ key\ to\
- >>>392 string boot\ from\ floppy...\0 \b, Acronis MBR
- # added by Joerg Jenderek
- # http://www.visopsys.org/
- # http://partitionlogic.org.uk/
- >309 string No\ bootable\ partition\ found\r
- >>339 string I/O\ Error\ reading\ boot\ sector\r \b, Visopsys MBR
- >349 string No\ bootable\ partition\ found\r
- >>379 string I/O\ Error\ reading\ boot\ sector\r \b, simple Visopsys MBR
- # bootloader, bootmanager
- >0x40 string SBML
- # label with 11 characters of FAT 12 bit filesystem
- >>43 string SMART\ BTMGR
- >>>430 string SBMK\ Bad!\r \b, Smart Boot Manager
- # OEM-ID not always "SBM"
- #>>>>3 strings SBM
- >>>>6 string >\0 \b, version %s
- >382 string XOSLLOADXCF \b, eXtended Operating System Loader
- >6 string LILO \b, LInux i386 boot LOader
- >>120 string LILO \b, version 22.3.4 SuSe
- >>172 string LILO \b, version 22.5.8 Debian
- # updated by Joerg Jenderek at Oct 2008
- # variables according to grub-0.97/stage1/stage1.S or
- # http://www.gnu.org/software/grub/manual/grub.html#Embedded-data
- # usual values are marked with comments to get only informations of strange GRUB loaders
- >342 search/60 \0Geom\0
- #>0 ulelong x %x=0x009048EB , 0x2a9048EB 0
- >>0x41 ubyte <2
- >>>0x3E ubyte >2 \b; GRand Unified Bootloader
- # 0x3 for 0.5.95,0.93,0.94,0.96 0x4 for 1.90
- >>>>0x3E ubyte x \b, stage1 version 0x%x
- #If it is 0xFF, use a drive passed by BIOS
- >>>>0x40 ubyte <0xFF \b, boot drive 0x%x
- # in most case 0,1,0x2e for GRUB 0.5.95
- >>>>0x41 ubyte >0 \b, LBA flag 0x%x
- >>>>0x42 uleshort <0x8000 \b, stage2 address 0x%x
- #>>>>0x42 uleshort =0x8000 \b, stage2 address 0x%x (usual)
- >>>>0x42 uleshort >0x8000 \b, stage2 address 0x%x
- #>>>>0x44 ulelong =1 \b, 1st sector stage2 0x%x (default)
- >>>>0x44 ulelong >1 \b, 1st sector stage2 0x%x
- >>>>0x48 uleshort <0x800 \b, stage2 segment 0x%x
- #>>>>0x48 uleshort =0x800 \b, stage2 segment 0x%x (usual)
- >>>>0x48 uleshort >0x800 \b, stage2 segment 0x%x
- >>>>402 string Geom\0Hard\ Disk\0Read\0\ Error\0
- >>>>>394 string stage1 \b, GRUB version 0.5.95
- >>>>382 string Geom\0Hard\ Disk\0Read\0\ Error\0
- >>>>>376 string GRUB\ \0 \b, GRUB version 0.93 or 1.94
- >>>>383 string Geom\0Hard\ Disk\0Read\0\ Error\0
- >>>>>377 string GRUB\ \0 \b, GRUB version 0.94
- >>>>385 string Geom\0Hard\ Disk\0Read\0\ Error\0
- >>>>>379 string GRUB\ \0 \b, GRUB version 0.95 or 0.96
- >>>>391 string Geom\0Hard\ Disk\0Read\0\ Error\0
- >>>>>385 string GRUB\ \0 \b, GRUB version 0.97
- #unkown version
- >>>343 string Geom\0Read\0\ Error\0
- >>>>321 string Loading\ stage1.5 \b, GRUB version x.y
- >>>380 string Geom\0Hard\ Disk\0Read\0\ Error\0
- >>>>374 string GRUB\ \0 \b, GRUB version n.m
- # http://syslinux.zytor.com/
- >478 string Boot\ failed\r
- >>495 string LDLINUX\ SYS \b, SYSLINUX bootloader (1.62)
- >480 string Boot\ failed\r
- >>495 string LDLINUX\ SYS \b, SYSLINUX bootloader (2.06 or 2.11)
- >484 string Boot\ error\r \b, SYSLINUX bootloader (3.11)
- >395 string chksum\0\ ERROR!\0 \b, Gujin bootloader
- # http://www.bcdwb.de/bcdw/index_e.htm
- >3 string BCDL
- >>498 string BCDL\ \ \ \ BIN \b, Bootable CD Loader (1.50Z)
- # mbr partition table entries
- # OEM-ID does not contain MicroSoft,NEWLDR,DOS,SYSLINUX,or MTOOLs
- >3 string !MS
- >>3 string !SYSLINUX
- >>>3 string !MTOOL
- >>>>3 string !NEWLDR
- >>>>>5 string !DOS
- # not FAT (32 bit)
- >>>>>>82 string !FAT32
- #not Linux kernel
- >>>>>>>514 string !HdrS
- #not BeOS
- >>>>>>>>422 string !Be\ Boot\ Loader
- # active flag 0 or 0x80 and type > 0
- >>>>>>>>>446 ubyte <0x81
- >>>>>>>>>>446 ubyte&0x7F 0
- >>>>>>>>>>>450 ubyte >0 \b; partition 1: ID=0x%x
- >>>>>>>>>>>>446 ubyte 0x80 \b, active
- >>>>>>>>>>>>447 ubyte x \b, starthead %u
- #>>>>>>>>>>>>448 ubyte x \b, start C_S: 0x%x
- #>>>>>>>>>>>>448 ubeshort&1023 x \b, startcylinder? %d
- >>>>>>>>>>>>454 ulelong x \b, startsector %u
- >>>>>>>>>>>>458 ulelong x \b, %u sectors
- #
- >>>>>>>>>462 ubyte <0x81
- >>>>>>>>>>462 ubyte&0x7F 0
- >>>>>>>>>>>466 ubyte >0 \b; partition 2: ID=0x%x
- >>>>>>>>>>>>462 ubyte 0x80 \b, active
- >>>>>>>>>>>>463 ubyte x \b, starthead %u
- #>>>>>>>>>>>>464 ubyte x \b, start C_S: 0x%x
- #>>>>>>>>>>>>464 ubeshort&1023 x \b, startcylinder? %d
- >>>>>>>>>>>>470 ulelong x \b, startsector %u
- >>>>>>>>>>>>474 ulelong x \b, %u sectors
- #
- >>>>>>>>>478 ubyte <0x81
- >>>>>>>>>>478 ubyte&0x7F 0
- >>>>>>>>>>>482 ubyte >0 \b; partition 3: ID=0x%x
- >>>>>>>>>>>>478 ubyte 0x80 \b, active
- >>>>>>>>>>>>479 ubyte x \b, starthead %u
- #>>>>>>>>>>>>480 ubyte x \b, start C_S: 0x%x
- #>>>>>>>>>>>>481 ubyte x \b, start C2S: 0x%x
- #>>>>>>>>>>>>480 ubeshort&1023 x \b, startcylinder? %d
- >>>>>>>>>>>>486 ulelong x \b, startsector %u
- >>>>>>>>>>>>490 ulelong x \b, %u sectors
- #
- >>>>>>>>>494 ubyte <0x81
- >>>>>>>>>>494 ubyte&0x7F 0
- >>>>>>>>>>>498 ubyte >0 \b; partition 4: ID=0x%x
- >>>>>>>>>>>>494 ubyte 0x80 \b, active
- >>>>>>>>>>>>495 ubyte x \b, starthead %u
- #>>>>>>>>>>>>496 ubyte x \b, start C_S: 0x%x
- #>>>>>>>>>>>>496 ubeshort&1023 x \b, startcylinder? %d
- >>>>>>>>>>>>502 ulelong x \b, startsector %u
- >>>>>>>>>>>>506 ulelong x \b, %u sectors
- # mbr partition table entries end
- # http://www.acronis.de/
- #FAT label=ACRONIS\ SZ
- #OEM-ID=BOOTWIZ0
- >442 string Non-system\ disk,\
- >>459 string press\ any\ key...\x7\0 \b, Acronis Startup Recovery Loader
- # DOS names like F11.SYS are 8 right space padded bytes+3 bytes
- >>>477 ubyte&0xDF >0
- >>>>477 string x \b %-.3s
- >>>>>480 ubyte&0xDF >0
- >>>>>>480 string x \b%-.5s
- >>>>485 ubyte&0xDF >0
- >>>>>485 string x \b.%-.3s
- #
- >185 string FDBOOT\ Version\
- >>204 string \rNo\ Systemdisk.\
- >>>220 string Booting\ from\ harddisk.\n\r
- >>>245 string Cannot\ load\ from\ harddisk.\n\r
- >>>>273 string Insert\ Systemdisk\
- >>>>>291 string and\ press\ any\ key.\n\r \b, FDBOOT harddisk Bootloader
- >>>>>>200 string >\0 \b, version %-3s
- >242 string Bootsector\ from\ C.H.\ Hochst\204
- >>278 string No\ Systemdisk.\
- >>>293 string Booting\ from\ harddisk.\n\r
- >>>441 string Cannot\ load\ from\ harddisk.\n\r
- >>>>469 string Insert\ Systemdisk\
- >>>>>487 string and\ press\ any\ key.\n\r \b, WinImage harddisk Bootloader
- >>>>>>209 string >\0 \b, version %-4.4s
- >(1.b+2) ubyte 0xe
- >>(1.b+3) ubyte 0x1f
- >>>(1.b+4) ubyte 0xbe
- >>>>(1.b+5) ubyte 0x77
- >>>>(1.b+6) ubyte 0x7c
- >>>>>(1.b+7) ubyte 0xac
- >>>>>>(1.b+8) ubyte 0x22
- >>>>>>>(1.b+9) ubyte 0xc0
- >>>>>>>>(1.b+10) ubyte 0x74
- >>>>>>>>>(1.b+11) ubyte 0xb
- >>>>>>>>>>(1.b+12) ubyte 0x56
- >>>>>>>>>>(1.b+13) ubyte 0xb4 \b, mkdosfs boot message display
- >214 string Please\ try\ to\ install\ FreeDOS\ \b, DOS Emulator boot message display
- #>>244 string from\ dosemu-freedos-*-bin.tgz\r
- #>>>170 string Sorry,\ could\ not\ load\ an\
- #>>>>195 string operating\ system.\r\n
- #
- >103 string This\ is\ not\ a\ bootable\ disk.\
- >>132 string Please\ insert\ a\ bootable\
- >>>157 string floppy\ and\r\n
- >>>>169 string press\ any\ key\ to\ try\ again...\r \b, FREE-DOS message display
- #
- >66 string Solaris\ Boot\ Sector
- >>99 string Incomplete\ MDBoot\ load.
- >>>89 string Version \b, Sun Solaris Bootloader
- >>>>97 byte x version %c
- #
- >408 string OS/2\ !!\ SYS01475\r\0
- >>429 string OS/2\ !!\ SYS02025\r\0
- >>>450 string OS/2\ !!\ SYS02027\r\0
- >>>469 string OS2BOOT\ \ \ \ \b, IBM OS/2 Warp bootloader
- #
- >409 string OS/2\ !!\ SYS01475\r\0
- >>430 string OS/2\ !!\ SYS02025\r\0
- >>>451 string OS/2\ !!\ SYS02027\r\0
- >>>470 string OS2BOOT\ \ \ \ \b, IBM OS/2 Warp Bootloader
- >112 string This\ disk\ is\ not\ bootable\r
- >>142 string If\ you\ wish\ to\ make\ it\ bootable
- >>>176 string run\ the\ DOS\ program\ SYS\
- >>>200 string after\ the\r
- >>>>216 string system\ has\ been\ loaded\r\n
- >>>>>242 string Please\ insert\ a\ DOS\ diskette\
- >>>>>271 string into\r\n\ the\ drive\ and\
- >>>>>>292 string strike\ any\ key...\0 \b, IBM OS/2 Warp message display
- # XP
- >430 string NTLDR\ is\ missing\xFF\r\n
- >>449 string Disk\ error\xFF\r\n
- >>>462 string Press\ any\ key\ to\ restart\r \b, Microsoft Windows XP Bootloader
- # DOS names like NTLDR,CMLDR,$LDR$ are 8 right space padded bytes+3 bytes
- >>>>417 ubyte&0xDF >0
- >>>>>417 string x %-.5s
- >>>>>>422 ubyte&0xDF >0
- >>>>>>>422 string x \b%-.3s
- >>>>>425 ubyte&0xDF >0
- >>>>>>425 string >\ \b.%-.3s
- #
- >>>>371 ubyte >0x20
- >>>>>368 ubyte&0xDF >0
- >>>>>>368 string x %-.5s
- >>>>>>>373 ubyte&0xDF >0
- >>>>>>>>373 string x \b%-.3s
- >>>>>>376 ubyte&0xDF >0
- >>>>>>>376 string x \b.%-.3s
- #
- >430 string NTLDR\ nicht\ gefunden\xFF\r\n
- >>453 string Datentr\204gerfehler\xFF\r\n
- >>>473 string Neustart\ mit\ beliebiger\ Taste\r \b, Microsoft Windows XP Bootloader (german)
- >>>>417 ubyte&0xDF >0
- >>>>>417 string x %-.5s
- >>>>>>422 ubyte&0xDF >0
- >>>>>>>422 string x \b%-.3s
- >>>>>425 ubyte&0xDF >0
- >>>>>>425 string >\ \b.%-.3s
- # offset variant
- >>>>379 string \0
- >>>>>368 ubyte&0xDF >0
- >>>>>>368 string x %-.5s
- >>>>>>>373 ubyte&0xDF >0
- >>>>>>>>373 string x \b%-.3s
- #
- >430 string NTLDR\ fehlt\xFF\r\n
- >>444 string Datentr\204gerfehler\xFF\r\n
- >>>464 string Neustart\ mit\ beliebiger\ Taste\r \b, Microsoft Windows XP Bootloader (2.german)
- >>>>417 ubyte&0xDF >0
- >>>>>417 string x %-.5s
- >>>>>>422 ubyte&0xDF >0
- >>>>>>>422 string x \b%-.3s
- >>>>>425 ubyte&0xDF >0
- >>>>>>425 string >\ \b.%-.3s
- # variant
- >>>>371 ubyte >0x20
- >>>>>368 ubyte&0xDF >0
- >>>>>>368 string x %-.5s
- >>>>>>>373 ubyte&0xDF >0
- >>>>>>>>373 string x \b%-.3s
- >>>>>>376 ubyte&0xDF >0
- >>>>>>>376 string x \b.%-.3s
- #
- >430 string NTLDR\ fehlt\xFF\r\n
- >>444 string Medienfehler\xFF\r\n
- >>>459 string Neustart:\ Taste\ dr\201cken\r \b, Microsoft Windows XP Bootloader (3.german)
- >>>>371 ubyte >0x20
- >>>>>368 ubyte&0xDF >0
- >>>>>>368 string x %-.5s
- >>>>>>>373 ubyte&0xDF >0
- >>>>>>>>373 string x \b%-.3s
- >>>>>>376 ubyte&0xDF >0
- >>>>>>>376 string x \b.%-.3s
- # variant
- >>>>417 ubyte&0xDF >0
- >>>>>417 string x %-.5s
- >>>>>>422 ubyte&0xDF >0
- >>>>>>>422 string x \b%-.3s
- >>>>>425 ubyte&0xDF >0
- >>>>>>425 string >\ \b.%-.3s
- #
- >430 string Datentr\204ger\ entfernen\xFF\r\n
- >>454 string Medienfehler\xFF\r\n
- >>>469 string Neustart:\ Taste\ dr\201cken\r \b, Microsoft Windows XP Bootloader (4.german)
- >>>>379 string \0
- >>>>>368 ubyte&0xDF >0
- >>>>>>368 string x %-.5s
- >>>>>>>373 ubyte&0xDF >0
- >>>>>>>>373 string x \b%-.3s
- >>>>>>376 ubyte&0xDF >0
- >>>>>>>376 string x \b.%-.3s
- # variant
- >>>>417 ubyte&0xDF >0
- >>>>>417 string x %-.5s
- >>>>>>422 ubyte&0xDF >0
- >>>>>>>422 string x \b%-.3s
- >>>>>425 ubyte&0xDF >0
- >>>>>>425 string >\ \b.%-.3s
- #
- #>3 string NTFS\ \ \ \
- >389 string Fehler\ beim\ Lesen\
- >>407 string des\ Datentr\204gers
- >>>426 string NTLDR\ fehlt
- >>>>440 string NTLDR\ ist\ komprimiert
- >>>>>464 string Neustart\ mit\ Strg+Alt+Entf\r \b, Microsoft Windows XP Bootloader NTFS (german)
- #>3 string NTFS\ \ \ \
- >313 string A\ disk\ read\ error\ occurred.\r
- >>345 string A\ kernel\ file\ is\ missing\
- >>>370 string from\ the\ disk.\r
- >>>>484 string NTLDR\ is\ compressed
- >>>>>429 string Insert\ a\ system\ diskette\
- >>>>>>454 string and\ restart\r\nthe\ system.\r \b, Microsoft Windows XP Bootloader NTFS
- # DOS loader variants different languages,offsets
- >472 ubyte&0xDF >0
- >>389 string Invalid\ system\ disk\xFF\r\n
- >>>411 string Disk\ I/O\ error
- >>>>428 string Replace\ the\ disk,\ and\
- >>>>>455 string press\ any\ key \b, Microsoft Windows 98 Bootloader
- #IO.SYS
- >>>>>>472 ubyte&0xDF >0
- >>>>>>>472 string x \b %-.2s
- >>>>>>>>474 ubyte&0xDF >0
- >>>>>>>>>474 string x \b%-.5s
- >>>>>>>>>>479 ubyte&0xDF >0
- >>>>>>>>>>>479 string x \b%-.1s
- >>>>>>>480 ubyte&0xDF >0
- >>>>>>>>480 string x \b.%-.3s
- #MSDOS.SYS
- >>>>>>>483 ubyte&0xDF >0 \b+
- >>>>>>>>483 string x \b%-.5s
- >>>>>>>>>488 ubyte&0xDF >0
- >>>>>>>>>>488 string x \b%-.3s
- >>>>>>>>491 ubyte&0xDF >0
- >>>>>>>>>491 string x \b.%-.3s
- #
- >>390 string Invalid\ system\ disk\xFF\r\n
- >>>412 string Disk\ I/O\ error\xFF\r\n
- >>>>429 string Replace\ the\ disk,\ and\
- >>>>>451 string then\ press\ any\ key\r \b, Microsoft Windows 98 Bootloader
- >>388 string Ungueltiges\ System\ \xFF\r\n
- >>>410 string E/A-Fehler\ \ \ \ \xFF\r\n
- >>>>427 string Datentraeger\ wechseln\ und\
- >>>>>453 string Taste\ druecken\r \b, Microsoft Windows 95/98/ME Bootloader (german)
- #WINBOOT.SYS only not spaces (0xDF)
- >>>>>>497 ubyte&0xDF >0
- >>>>>>>497 string x %-.5s
- >>>>>>>>502 ubyte&0xDF >0
- >>>>>>>>>502 string x \b%-.1s
- >>>>>>>>>>503 ubyte&0xDF >0
- >>>>>>>>>>>503 string x \b%-.1s
- >>>>>>>>>>>>504 ubyte&0xDF >0
- >>>>>>>>>>>>>504 string x \b%-.1s
- >>>>>>505 ubyte&0xDF >0
- >>>>>>>505 string x \b.%-.3s
- #IO.SYS
- >>>>>>472 ubyte&0xDF >0 or
- >>>>>>>472 string x \b %-.2s
- >>>>>>>>474 ubyte&0xDF >0
- >>>>>>>>>474 string x \b%-.5s
- >>>>>>>>>>479 ubyte&0xDF >0
- >>>>>>>>>>>479 string x \b%-.1s
- >>>>>>>480 ubyte&0xDF >0
- >>>>>>>>480 string x \b.%-.3s
- #MSDOS.SYS
- >>>>>>>483 ubyte&0xDF >0 \b+
- >>>>>>>>483 string x \b%-.5s
- >>>>>>>>>488 ubyte&0xDF >0
- >>>>>>>>>>488 string x \b%-.3s
- >>>>>>>>491 ubyte&0xDF >0
- >>>>>>>>>491 string x \b.%-.3s
- #
- >>390 string Ungueltiges\ System\ \xFF\r\n
- >>>412 string E/A-Fehler\ \ \ \ \xFF\r\n
- >>>>429 string Datentraeger\ wechseln\ und\
- >>>>>455 string Taste\ druecken\r \b, Microsoft Windows 95/98/ME Bootloader (German)
- #WINBOOT.SYS only not spaces (0xDF)
- >>>>>>497 ubyte&0xDF >0
- >>>>>>>497 string x %-.7s
- >>>>>>>>504 ubyte&0xDF >0
- >>>>>>>>>504 string x \b%-.1s
- >>>>>>505 ubyte&0xDF >0
- >>>>>>>505 string x \b.%-.3s
- #IO.SYS
- >>>>>>472 ubyte&0xDF >0 or
- >>>>>>>472 string x \b %-.2s
- >>>>>>>>474 ubyte&0xDF >0
- >>>>>>>>>474 string x \b%-.6s
- >>>>>>>480 ubyte&0xDF >0
- >>>>>>>>480 string x \b.%-.3s
- #MSDOS.SYS
- >>>>>>>483 ubyte&0xDF >0 \b+
- >>>>>>>>483 string x \b%-.5s
- >>>>>>>>>488 ubyte&0xDF >0
- >>>>>>>>>>488 string x \b%-.3s
- >>>>>>>>491 ubyte&0xDF >0
- >>>>>>>>>491 string x \b.%-.3s
- #
- >>389 string Ungueltiges\ System\ \xFF\r\n
- >>>411 string E/A-Fehler\ \ \ \ \xFF\r\n
- >>>>428 string Datentraeger\ wechseln\ und\
- >>>>>454 string Taste\ druecken\r \b, Microsoft Windows 95/98/ME Bootloader (GERMAN)
- # DOS names like IO.SYS,WINBOOT.SYS,MSDOS.SYS,WINBOOT.INI are 8 right space padded bytes+3 bytes
- >>>>>>472 string x %-.2s
- >>>>>>>474 ubyte&0xDF >0
- >>>>>>>>474 string x \b%-.5s
- >>>>>>>>479 ubyte&0xDF >0
- >>>>>>>>>479 string x \b%-.1s
- >>>>>>480 ubyte&0xDF >0
- >>>>>>>480 string x \b.%-.3s
- >>>>>>483 ubyte&0xDF >0 \b+
- >>>>>>>483 string x \b%-.5s
- >>>>>>>488 ubyte&0xDF >0
- >>>>>>>>488 string x \b%-.2s
- >>>>>>>>490 ubyte&0xDF >0
- >>>>>>>>>490 string x \b%-.1s
- >>>>>>>491 ubyte&0xDF >0
- >>>>>>>>491 string x \b.%-.3s
- >479 ubyte&0xDF >0
- >>416 string Kein\ System\ oder\
- >>>433 string Laufwerksfehler
- >>>>450 string Wechseln\ und\ Taste\ dr\201cken \b, Microsoft DOS Bootloader (german)
- #IO.SYS
- >>>>>479 string x \b %-.2s
- >>>>>>481 ubyte&0xDF >0
- >>>>>>>481 string x \b%-.6s
- >>>>>487 ubyte&0xDF >0
- >>>>>>487 string x \b.%-.3s
- #MSDOS.SYS
- >>>>>>490 ubyte&0xDF >0 \b+
- >>>>>>>490 string x \b%-.5s
- >>>>>>>>495 ubyte&0xDF >0
- >>>>>>>>>495 string x \b%-.3s
- >>>>>>>498 ubyte&0xDF >0
- >>>>>>>>498 string x \b.%-.3s
- #
- >376 search/41 Non-System\ disk\ or\
- >>395 search/41 disk\ error\r
- >>>407 search/41 Replace\ and\
- >>>>419 search/41 press\ \b,
- >>>>419 search/41 strike\ \b, old
- >>>>426 search/41 any\ key\ when\ ready\r MS or PC-DOS bootloader
- #449 Disk\ Boot\ failure\r MS 3.21
- #466 Boot\ Failure\r MS 3.30
- >>>>>468 search/18 \0
- #IO.SYS,IBMBIO.COM
- >>>>>>&0 string x \b %-.2s
- >>>>>>>&-20 ubyte&0xDF >0
- >>>>>>>>&-1 string x \b%-.4s
- >>>>>>>>>&-16 ubyte&0xDF >0
- >>>>>>>>>>&-1 string x \b%-.2s
- >>>>>>&8 ubyte&0xDF >0 \b.
- >>>>>>>&-1 string x \b%-.3s
- #MSDOS.SYS,IBMDOS.COM
- >>>>>>&11 ubyte&0xDF >0 \b+
- >>>>>>>&-1 string x \b%-.5s
- >>>>>>>>&-6 ubyte&0xDF >0
- >>>>>>>>>&-1 string x \b%-.1s
- >>>>>>>>>>&-5 ubyte&0xDF >0
- >>>>>>>>>>>&-1 string x \b%-.2s
- >>>>>>>&7 ubyte&0xDF >0 \b.
- >>>>>>>>&-1 string x \b%-.3s
- >441 string Cannot\ load\ from\ harddisk.\n\r
- >>469 string Insert\ Systemdisk\
- >>>487 string and\ press\ any\ key.\n\r \b, MS (2.11) DOS bootloader
- #>43 string \224R-LOADER\ \ SYS =label
- >54 string SYS
- >>324 string VASKK
- >>>495 string NEWLDR\0 \b, DR-DOS Bootloader (LOADER.SYS)
- #
- >98 string Press\ a\ key\ to\ retry\0\r
- >>120 string Cannot\ find\ file\ \0\r
- >>>139 string Disk\ read\ error\0\r
- >>>>156 string Loading\ ...\0 \b, DR-DOS (3.41) Bootloader
- #DRBIOS.SYS
- >>>>>44 ubyte&0xDF >0
- >>>>>>44 string x \b %-.6s
- >>>>>>>50 ubyte&0xDF >0
- >>>>>>>>50 string x \b%-.2s
- >>>>>>52 ubyte&0xDF >0
- >>>>>>>52 string x \b.%-.3s
- #
- >70 string IBMBIO\ \ COM
- >>472 string Cannot\ load\ DOS!\
- >>>489 string Any\ key\ to\ retry \b, DR-DOS Bootloader
- >>471 string Cannot\ load\ DOS\
- >>487 string press\ key\ to\ retry \b, Open-DOS Bootloader
- #??
- >444 string KERNEL\ \ SYS
- >>314 string BOOT\ error! \b, FREE-DOS Bootloader
- >499 string KERNEL\ \ SYS
- >>305 string BOOT\ err!\0 \b, Free-DOS Bootloader
- >449 string KERNEL\ \ SYS
- >>319 string BOOT\ error! \b, FREE-DOS 0.5 Bootloader
- #
- >449 string Loading\ FreeDOS
- >>0x1AF ulelong >0 \b, FREE-DOS 0.95,1.0 Bootloader
- >>>497 ubyte&0xDF >0
- >>>>497 string x \b %-.6s
- >>>>>503 ubyte&0xDF >0
- >>>>>>503 string x \b%-.1s
- >>>>>>>504 ubyte&0xDF >0
- >>>>>>>>504 string x \b%-.1s
- >>>>505 ubyte&0xDF >0
- >>>>>505 string x \b.%-.3s
- #
- >331 string Error!.0 \b, FREE-DOS 1.0 bootloader
- #
- >125 string Loading\ FreeDOS...\r
- >>311 string BOOT\ error!\r \b, FREE-DOS bootloader
- >>>441 ubyte&0xDF >0
- >>>>441 string x \b %-.6s
- >>>>>447 ubyte&0xDF >0
- >>>>>>447 string x \b%-.1s
- >>>>>>>448 ubyte&0xDF >0
- >>>>>>>>448 string x \b%-.1s
- >>>>449 ubyte&0xDF >0
- >>>>>449 string x \b.%-.3s
- >124 string FreeDOS\0
- >>331 string \ err\0 \b, FREE-DOS BETa 0.9 Bootloader
- # DOS names like KERNEL.SYS,KERNEL16.SYS,KERNEL32.SYS,METAKERN.SYS are 8 right space padded bytes+3 bytes
- >>>497 ubyte&0xDF >0
- >>>>497 string x \b %-.6s
- >>>>>503 ubyte&0xDF >0
- >>>>>>503 string x \b%-.1s
- >>>>>>>504 ubyte&0xDF >0
- >>>>>>>>504 string x \b%-.1s
- >>>>505 ubyte&0xDF >0
- >>>>>505 string x \b.%-.3s
- >>333 string \ err\0 \b, FREE-DOS BEta 0.9 Bootloader
- >>>497 ubyte&0xDF >0
- >>>>497 string x \b %-.6s
- >>>>>503 ubyte&0xDF >0
- >>>>>>503 string x \b%-.1s
- >>>>>>>504 ubyte&0xDF >0
- >>>>>>>>504 string x \b%-.1s
- >>>>505 ubyte&0xDF >0
- >>>>>505 string x \b.%-.3s
- >>334 string \ err\0 \b, FREE-DOS Beta 0.9 Bootloader
- >>>497 ubyte&0xDF >0
- >>>>497 string x \b %-.6s
- >>>>>503 ubyte&0xDF >0
- >>>>>>503 string x \b%-.1s
- >>>>>>>504 ubyte&0xDF >0
- >>>>>>>>504 string x \b%-.1s
- >>>>505 ubyte&0xDF >0
- >>>>>505 string x \b.%-.3s
- >336 string Error!\
- >>343 string Hit\ a\ key\ to\ reboot. \b, FREE-DOS Beta 0.9sr1 Bootloader
- >>>497 ubyte&0xDF >0
- >>>>497 string x \b %-.6s
- >>>>>503 ubyte&0xDF >0
- >>>>>>503 string x \b%-.1s
- >>>>>>>504 ubyte&0xDF >0
- >>>>>>>>504 string x \b%-.1s
- >>>>505 ubyte&0xDF >0
- >>>>>505 string x \b.%-.3s
- # added by Joerg Jenderek
- # http://www.visopsys.org/
- # http://partitionlogic.org.uk/
- # OEM-ID=Visopsys
- >478 ulelong 0
- >>(1.b+326) string I/O\ Error\ reading\
- >>>(1.b+344) string Visopsys\ loader\r
- >>>>(1.b+361) string Press\ any\ key\ to\ continue.\r \b, Visopsys loader
- # http://alexfru.chat.ru/epm.html#bootprog
- >494 ubyte >0x4D
- >>495 string >E
- >>>495 string <S
- #OEM-ID is not reliable
- >>>>3 string BootProg
- # It just looks for a program file name at the root directory
- # and loads corresponding file with following execution.
- # DOS names like STARTUP.BIN,STARTUPC.COM,STARTUPE.EXE are 8 right space padded bytes+3 bytes
- >>>>499 ubyte&0xDF >0 \b, COM/EXE Bootloader
- >>>>>499 string x \b %-.1s
- >>>>>>500 ubyte&0xDF >0
- >>>>>>>500 string x \b%-.1s
- >>>>>>>>501 ubyte&0xDF >0
- >>>>>>>>>501 string x \b%-.1s
- >>>>>>>>>>502 ubyte&0xDF >0
- >>>>>>>>>>>502 string x \b%-.1s
- >>>>>>>>>>>>503 ubyte&0xDF >0
- >>>>>>>>>>>>>503 string x \b%-.1s
- >>>>>>>>>>>>>>504 ubyte&0xDF >0
- >>>>>>>>>>>>>>>504 string x \b%-.1s
- >>>>>>>>>>>>>>>>505 ubyte&0xDF >0
- >>>>>>>>>>>>>>>>>505 string x \b%-.1s
- >>>>>>>>>>>>>>>>>>506 ubyte&0xDF >0
- >>>>>>>>>>>>>>>>>>>506 string x \b%-.1s
- #name extension
- >>>>>507 ubyte&0xDF >0 \b.
- >>>>>>507 string x \b%-.1s
- >>>>>>>508 ubyte&0xDF >0
- >>>>>>>>508 string x \b%-.1s
- >>>>>>>>>509 ubyte&0xDF >0
- >>>>>>>>>>509 string x \b%-.1s
- #If the boot sector fails to read any other sector,
- #it prints a very short message ("RE") to the screen and hangs the computer.
- #If the boot sector fails to find needed program in the root directory,
- #it also hangs with another message ("NF").
- >>>>>492 string RENF \b, FAT (12 bit)
- >>>>>495 string RENF \b, FAT (16 bit)
- # http://alexfru.chat.ru/epm.html#bootprog
- >494 ubyte >0x4D
- >>495 string >E
- >>>495 string <S
- #OEM-ID is not reliable
- >>>>3 string BootProg
- # It just looks for a program file name at the root directory
- # and loads corresponding file with following execution.
- # DOS names like STARTUP.BIN,STARTUPC.COM,STARTUPE.EXE are 8 right space padded bytes+3 bytes
- >>>>499 ubyte&0xDF >0 \b, COM/EXE Bootloader
- >>>>>499 string x \b %-.1s
- >>>>>>500 ubyte&0xDF >0
- >>>>>>>500 string x \b%-.1s
- >>>>>>>>501 ubyte&0xDF >0
- >>>>>>>>>501 string x \b%-.1s
- >>>>>>>>>>502 ubyte&0xDF >0
- >>>>>>>>>>>502 string x \b%-.1s
- >>>>>>>>>>>>503 ubyte&0xDF >0
- >>>>>>>>>>>>>503 string x \b%-.1s
- >>>>>>>>>>>>>>504 ubyte&0xDF >0
- >>>>>>>>>>>>>>>504 string x \b%-.1s
- >>>>>>>>>>>>>>>>505 ubyte&0xDF >0
- >>>>>>>>>>>>>>>>>505 string x \b%-.1s
- >>>>>>>>>>>>>>>>>>506 ubyte&0xDF >0
- >>>>>>>>>>>>>>>>>>>506 string x \b%-.1s
- #name extension
- >>>>>507 ubyte&0xDF >0 \b.
- >>>>>>507 string x \b%-.1s
- >>>>>>>508 ubyte&0xDF >0
- >>>>>>>>508 string x \b%-.1s
- >>>>>>>>>509 ubyte&0xDF >0
- >>>>>>>>>>509 string x \b%-.1s
- #If the boot sector fails to read any other sector,
- #it prints a very short message ("RE") to the screen and hangs the computer.
- #If the boot sector fails to find needed program in the root directory,
- #it also hangs with another message ("NF").
- >>>>>492 string RENF \b, FAT (12 bit)
- >>>>>495 string RENF \b, FAT (16 bit)
- # x86 bootloader end
- # updated by Joerg Jenderek at Sep 2007
- >3 ubyte 0
- #no active flag
- >>446 ubyte 0
- # partition 1 not empty
- >>>450 ubyte >0
- # partitions 3,4 empty
- >>>>482 ubyte 0
- >>>>>498 ubyte 0
- # partition 2 ID=0,5,15
- >>>>>>466 ubyte <0x10
- >>>>>>>466 ubyte 0x05 \b, extended partition table
- >>>>>>>466 ubyte 0x0F \b, extended partition table (LBA)
- >>>>>>>466 ubyte 0x0 \b, extended partition table (last)
- # JuMP short bootcodeoffset NOP assembler instructions will usually be EB xx 90
- # http://mirror.href.com/thestarman/asm/2bytejumps.htmm#FWD
- # older drives may use Near JuMP instruction E9 xx xx
- >0 lelong&0x009000EB 0x009000EB
- >0 lelong&0x000000E9 0x000000E9
- # minimal short forward jump found 03cx??
- # maximal short forward jump is 07fx
- >1 ubyte <0xff \b, code offset 0x%x
- # mtools-3.9.8/msdos.h
- # usual values are marked with comments to get only informations of strange FAT systems
- # valid sectorsize must be a power of 2 from 32 to 32768
- >>11 uleshort&0x000f x
- >>>11 uleshort <32769
- >>>>11 uleshort >31
- >>>>>21 ubyte&0xf0 0xF0
- >>>>>>3 string >\0 \b, OEM-ID "%8.8s"
- #http://mirror.href.com/thestarman/asm/debug/debug2.htm#IHC
- >>>>>>>8 string IHC \b cached by Windows 9M
- >>>>>>11 uleshort >512 \b, Bytes/sector %u
- #>>>>>>11 uleshort =512 \b, Bytes/sector %u=512 (usual)
- >>>>>>11 uleshort <512 \b, Bytes/sector %u
- >>>>>>13 ubyte >1 \b, sectors/cluster %u
- #>>>>>>13 ubyte =1 \b, sectors/cluster %u (usual on Floppies)
- >>>>>>14 uleshort >32 \b, reserved sectors %u
- #>>>>>>14 uleshort =32 \b, reserved sectors %u (usual Fat32)
- #>>>>>>14 uleshort >1 \b, reserved sectors %u
- #>>>>>>14 uleshort =1 \b, reserved sectors %u (usual FAT12,FAT16)
- >>>>>>14 uleshort <1 \b, reserved sectors %u
- >>>>>>16 ubyte >2 \b, FATs %u
- #>>>>>>16 ubyte =2 \b, FATs %u (usual)
- >>>>>>16 ubyte =1 \b, FAT %u
- >>>>>>16 ubyte >0
- >>>>>>17 uleshort >0 \b, root entries %u
- #>>>>>>17 uleshort =0 \b, root entries %u=0 (usual Fat32)
- >>>>>>19 uleshort >0 \b, sectors %u (volumes <=32 MB)
- #>>>>>>19 uleshort =0 \b, sectors %u=0 (usual Fat32)
- >>>>>>21 ubyte >0xF0 \b, Media descriptor 0x%x
- #>>>>>>21 ubyte =0xF0 \b, Media descriptor 0x%x (usual floppy)
- >>>>>>21 ubyte <0xF0 \b, Media descriptor 0x%x
- >>>>>>22 uleshort >0 \b, sectors/FAT %u
- #>>>>>>22 uleshort =0 \b, sectors/FAT %u=0 (usual Fat32)
- >>>>>>26 ubyte >2 \b, heads %u
- #>>>>>>26 ubyte =2 \b, heads %u (usual floppy)
- >>>>>>26 ubyte =1 \b, heads %u
- #skip for Digital Research DOS (version 3.41) 1440 kB Bootdisk
- >>>>>>38 ubyte !0x70
- >>>>>>>28 ulelong >0 \b, hidden sectors %u
- #>>>>>>>28 ulelong =0 \b, hidden sectors %u (usual floppy)
- >>>>>>>32 ulelong >0 \b, sectors %u (volumes > 32 MB)
- #>>>>>>>32 ulelong =0 \b, sectors %u (volumes > 32 MB)
- # FAT<32 specific
- >>>>>>82 string !FAT32
- #>>>>>>>36 ubyte 0x80 \b, physical drive 0x%x=0x80 (usual harddisk)
- #>>>>>>>36 ubyte 0 \b, physical drive 0x%x=0 (usual floppy)
- >>>>>>>36 ubyte !0x80
- >>>>>>>>36 ubyte !0 \b, physical drive 0x%x
- >>>>>>>37 ubyte >0 \b, reserved 0x%x
- #>>>>>>>37 ubyte =0 \b, reserved 0x%x
- >>>>>>>38 ubyte >0x29 \b, dos < 4.0 BootSector (0x%x)
- >>>>>>>38 ubyte <0x29 \b, dos < 4.0 BootSector (0x%x)
- >>>>>>>38 ubyte =0x29
- >>>>>>>>39 ulelong x \b, serial number 0x%x
- >>>>>>>>43 string <NO\ NAME \b, label: "%11.11s"
- >>>>>>>>43 string >NO\ NAME \b, label: "%11.11s"
- >>>>>>>>43 string =NO\ NAME \b, unlabeled
- >>>>>>>54 string FAT \b, FAT
- >>>>>>>>54 string FAT12 \b (12 bit)
- >>>>>>>>54 string FAT16 \b (16 bit)
- # FAT32 specific
- >>>>>>82 string FAT32 \b, FAT (32 bit)
- >>>>>>>36 ulelong x \b, sectors/FAT %u
- >>>>>>>40 uleshort >0 \b, extension flags %u
- #>>>>>>>40 uleshort =0 \b, extension flags %u
- >>>>>>>42 uleshort >0 \b, fsVersion %u
- #>>>>>>>42 uleshort =0 \b, fsVersion %u (usual)
- >>>>>>>44 ulelong >2 \b, rootdir cluster %u
- #>>>>>>>44 ulelong =2 \b, rootdir cluster %u
- #>>>>>>>44 ulelong =1 \b, rootdir cluster %u
- >>>>>>>48 uleshort >1 \b, infoSector %u
- #>>>>>>>48 uleshort =1 \b, infoSector %u (usual)
- >>>>>>>48 uleshort <1 \b, infoSector %u
- >>>>>>>50 uleshort >6 \b, Backup boot sector %u
- #>>>>>>>50 uleshort =6 \b, Backup boot sector %u (usual)
- >>>>>>>50 uleshort <6 \b, Backup boot sector %u
- >>>>>>>54 ulelong >0 \b, reserved1 0x%x
- >>>>>>>58 ulelong >0 \b, reserved2 0x%x
- >>>>>>>62 ulelong >0 \b, reserved3 0x%x
- # same structure as FAT1X
- >>>>>>>64 ubyte >0x80 \b, physical drive 0x%x
- #>>>>>>>64 ubyte =0x80 \b, physical drive 0x%x=80 (usual harddisk)
- >>>>>>>64 ubyte&0x7F >0 \b, physical drive 0x%x
- #>>>>>>>64 ubyte =0 \b, physical drive 0x%x=0 (usual floppy)
- >>>>>>>65 ubyte >0 \b, reserved 0x%x
- >>>>>>>66 ubyte >0x29 \b, dos < 4.0 BootSector (0x%x)
- >>>>>>>66 ubyte <0x29 \b, dos < 4.0 BootSector (0x%x)
- >>>>>>>66 ubyte =0x29
- >>>>>>>>67 ulelong x \b, serial number 0x%x
- >>>>>>>>71 string <NO\ NAME \b, label: "%11.11s"
- >>>>>>>71 string >NO\ NAME \b, label: "%11.11s"
- >>>>>>>71 string =NO\ NAME \b, unlabeled
- ### FATs end
- >0x200 lelong 0x82564557 \b, BSD disklabel
- # FATX
- 0 string FATX FATX filesystem data
- # Minix filesystems - Juan Cespedes <cespedes@debian.org>
- 0x410 leshort 0x137f
- !:strength / 2
- >0x402 beshort < 100 Minix filesystem, V1, %d zones
- >0x1e string minix \b, bootable
- 0x410 beshort 0x137f
- !:strength / 2
- >0x402 beshort < 100 Minix filesystem, V1 (big endian), %d zones
- >0x1e string minix \b, bootable
- 0x410 leshort 0x138f
- !:strength / 2
- >0x402 beshort < 100 Minix filesystem, V1, 30 char names, %d zones
- >0x1e string minix \b, bootable
- 0x410 beshort 0x138f
- !:strength / 2
- >0x402 beshort < 100 Minix filesystem, V1, 30 char names (big endian), %d zones
- >0x1e string minix \b, bootable
- 0x410 leshort 0x2468
- >0x402 beshort < 100 Minix filesystem, V2, %d zones
- >0x1e string minix \b, bootable
- 0x410 beshort 0x2468
- >0x402 beshort < 100 Minix filesystem, V2 (big endian), %d zones
- >0x1e string minix \b, bootable
- 0x410 leshort 0x2478
- >0x402 beshort < 100 Minix filesystem, V2, 30 char names, %d zones
- >0x1e string minix \b, bootable
- 0x410 leshort 0x2478
- >0x402 beshort < 100 Minix filesystem, V2, 30 char names, %d zones
- >0x1e string minix \b, bootable
- 0x410 beshort 0x2478
- >0x402 beshort !0 Minix filesystem, V2, 30 char names (big endian), %d zones
- >0x1e string minix \b, bootable
- 0x410 leshort 0x4d5a
- >0x402 beshort !0 Minix filesystem, V3, %d zones
- >0x1e string minix \b, bootable
- # romfs filesystems - Juan Cespedes <cespedes@debian.org>
- 0 string -rom1fs- romfs filesystem, version 1
- >8 belong x %d bytes,
- >16 string x named %s.
- # netboot image - Juan Cespedes <cespedes@debian.org>
- 0 lelong 0x1b031336L Netboot image,
- >4 lelong&0xFFFFFF00 0
- >>4 lelong&0x100 0x000 mode 2
- >>4 lelong&0x100 0x100 mode 3
- >4 lelong&0xFFFFFF00 !0 unknown mode
- 0x18b string OS/2 OS/2 Boot Manager
- # updated by Joerg Jenderek at Oct 2008!!
- # http://syslinux.zytor.com/iso.php
- 0 ulelong 0x7c40eafa isolinux Loader
- # http://syslinux.zytor.com/pxe.php
- 0 ulelong 0x007c05ea pxelinux Loader
- 0 ulelong 0x60669c66 pxelinux Loader
- # added by Joerg Jenderek
- # In the second sector (+0x200) are variables according to grub-0.97/stage2/asm.S or
- # grub-1.94/kern/i386/pc/startup.S
- # http://www.gnu.org/software/grub/manual/grub.html#Embedded-data
- # usual values are marked with comments to get only informations of strange GRUB loaders
- 0x200 uleshort 0x70EA
- # found only version 3.{1,2}
- >0x206 ubeshort >0x0300
- # GRUB version (0.5.)95,0.93,0.94,0.96,0.97 > "00"
- >>0x212 ubyte >0x29
- >>>0x213 ubyte >0x29
- # not iso9660_stage1_5
- #>>>0 ulelong&0x00BE5652 0x00BE5652
- >>>>0x213 ubyte >0x29 GRand Unified Bootloader
- # config_file for stage1_5 is 0xffffffff + default "/boot/grub/stage2"
- >>>>0x217 ubyte 0xFF stage1_5
- >>>>0x217 ubyte <0xFF stage2
- >>>>0x206 ubyte x \b version %u
- >>>>0x207 ubyte x \b.%u
- # module_size for 1.94
- >>>>0x208 ulelong <0xffffff \b, installed partition %u
- #>>>>0x208 ulelong =0xffffff \b, %u (default)
- >>>>0x208 ulelong >0xffffff \b, installed partition %u
- # GRUB 0.5.95 unofficial
- >>>>0x20C ulelong&0x2E300000 0x2E300000
- # 0=stage2 1=ffs 2=e2fs 3=fat 4=minix 5=reiserfs
- >>>>>0x20C ubyte x \b, identifier 0x%x
- #>>>>>0x20D ubyte =0 \b, LBA flag 0x%x (default)
- >>>>>0x20D ubyte >0 \b, LBA flag 0x%x
- # GRUB version as string
- >>>>>0x20E string >\0 \b, GRUB version %-s
- # for stage1_5 is 0xffffffff + config_file "/boot/grub/stage2" default
- >>>>>>0x215 ulong 0xffffffff
- >>>>>>>0x219 string >\0 \b, configuration file %-s
- >>>>>>0x215 ulong !0xffffffff
- >>>>>>>0x215 string >\0 \b, configuration file %-s
- # newer GRUB versions
- >>>>0x20C ulelong&0x2E300000 !0x2E300000
- ##>>>>>0x20C ulelong =0 \b, saved entry %d (usual)
- >>>>>0x20C ulelong >0 \b, saved entry %d
- # for 1.94 contains kernel image size
- # for 0.93,0.94,0.96,0.97
- # 0=stage2 1=ffs 2=e2fs 3=fat 4=minix 5=reiserfs 6=vstafs 7=jfs 8=xfs 9=iso9660 a=ufs2
- >>>>>0x210 ubyte x \b, identifier 0x%x
- # The flag for LBA forcing is in most cases 0
- #>>>>>0x211 ubyte =0 \b, LBA flag 0x%x (default)
- >>>>>0x211 ubyte >0 \b, LBA flag 0x%x
- # GRUB version as string
- >>>>>0x212 string >\0 \b, GRUB version %-s
- # for stage1_5 is 0xffffffff + config_file "/boot/grub/stage2" default
- >>>>>0x217 ulong 0xffffffff
- >>>>>>0x21b string >\0 \b, configuration file %-s
- >>>>>0x217 ulong !0xffffffff
- >>>>>>0x217 string >\0 \b, configuration file %-s
- 9564 lelong 0x00011954 Unix Fast File system [v1] (little-endian),
- >8404 string x last mounted on %s,
- #>9504 ledate x last checked at %s,
- >8224 ledate x last written at %s,
- >8401 byte x clean flag %d,
- >8228 lelong x number of blocks %d,
- >8232 lelong x number of data blocks %d,
- >8236 lelong x number of cylinder groups %d,
- >8240 lelong x block size %d,
- >8244 lelong x fragment size %d,
- >8252 lelong x minimum percentage of free blocks %d,
- >8256 lelong x rotational delay %dms,
- >8260 lelong x disk rotational speed %drps,
- >8320 lelong 0 TIME optimization
- >8320 lelong 1 SPACE optimization
- 42332 lelong 0x19540119 Unix Fast File system [v2] (little-endian)
- >&-1164 string x last mounted on %s,
- >&-696 string >\0 volume name %s,
- >&-304 leqldate x last written at %s,
- >&-1167 byte x clean flag %d,
- >&-1168 byte x readonly flag %d,
- >&-296 lequad x number of blocks %lld,
- >&-288 lequad x number of data blocks %lld,
- >&-1332 lelong x number of cylinder groups %d,
- >&-1328 lelong x block size %d,
- >&-1324 lelong x fragment size %d,
- >&-180 lelong x average file size %d,
- >&-176 lelong x average number of files in dir %d,
- >&-272 lequad x pending blocks to free %lld,
- >&-264 lelong x pending inodes to free %ld,
- >&-664 lequad x system-wide uuid %0llx,
- >&-1316 lelong x minimum percentage of free blocks %d,
- >&-1248 lelong 0 TIME optimization
- >&-1248 lelong 1 SPACE optimization
- 66908 lelong 0x19540119 Unix Fast File system [v2] (little-endian)
- >&-1164 string x last mounted on %s,
- >&-696 string >\0 volume name %s,
- >&-304 leqldate x last written at %s,
- >&-1167 byte x clean flag %d,
- >&-1168 byte x readonly flag %d,
- >&-296 lequad x number of blocks %lld,
- >&-288 lequad x number of data blocks %lld,
- >&-1332 lelong x number of cylinder groups %d,
- >&-1328 lelong x block size %d,
- >&-1324 lelong x fragment size %d,
- >&-180 lelong x average file size %d,
- >&-176 lelong x average number of files in dir %d,
- >&-272 lequad x pending blocks to free %lld,
- >&-264 lelong x pending inodes to free %ld,
- >&-664 lequad x system-wide uuid %0llx,
- >&-1316 lelong x minimum percentage of free blocks %d,
- >&-1248 lelong 0 TIME optimization
- >&-1248 lelong 1 SPACE optimization
- 9564 belong 0x00011954 Unix Fast File system [v1] (big-endian),
- >7168 belong 0x4c41424c Apple UFS Volume
- >>7186 string x named %s,
- >>7176 belong x volume label version %d,
- >>7180 bedate x created on %s,
- >8404 string x last mounted on %s,
- #>9504 bedate x last checked at %s,
- >8224 bedate x last written at %s,
- >8401 byte x clean flag %d,
- >8228 belong x number of blocks %d,
- >8232 belong x number of data blocks %d,
- >8236 belong x number of cylinder groups %d,
- >8240 belong x block size %d,
- >8244 belong x fragment size %d,
- >8252 belong x minimum percentage of free blocks %d,
- >8256 belong x rotational delay %dms,
- >8260 belong x disk rotational speed %drps,
- >8320 belong 0 TIME optimization
- >8320 belong 1 SPACE optimization
- 42332 belong 0x19540119 Unix Fast File system [v2] (big-endian)
- >&-1164 string x last mounted on %s,
- >&-696 string >\0 volume name %s,
- >&-304 beqldate x last written at %s,
- >&-1167 byte x clean flag %d,
- >&-1168 byte x readonly flag %d,
- >&-296 bequad x number of blocks %lld,
- >&-288 bequad x number of data blocks %lld,
- >&-1332 belong x number of cylinder groups %d,
- >&-1328 belong x block size %d,
- >&-1324 belong x fragment size %d,
- >&-180 belong x average file size %d,
- >&-176 belong x average number of files in dir %d,
- >&-272 bequad x pending blocks to free %lld,
- >&-264 belong x pending inodes to free %ld,
- >&-664 bequad x system-wide uuid %0llx,
- >&-1316 belong x minimum percentage of free blocks %d,
- >&-1248 belong 0 TIME optimization
- >&-1248 belong 1 SPACE optimization
- 66908 belong 0x19540119 Unix Fast File system [v2] (big-endian)
- >&-1164 string x last mounted on %s,
- >&-696 string >\0 volume name %s,
- >&-304 beqldate x last written at %s,
- >&-1167 byte x clean flag %d,
- >&-1168 byte x readonly flag %d,
- >&-296 bequad x number of blocks %lld,
- >&-288 bequad x number of data blocks %lld,
- >&-1332 belong x number of cylinder groups %d,
- >&-1328 belong x block size %d,
- >&-1324 belong x fragment size %d,
- >&-180 belong x average file size %d,
- >&-176 belong x average number of files in dir %d,
- >&-272 bequad x pending blocks to free %lld,
- >&-264 belong x pending inodes to free %ld,
- >&-664 bequad x system-wide uuid %0llx,
- >&-1316 belong x minimum percentage of free blocks %d,
- >&-1248 belong 0 TIME optimization
- >&-1248 belong 1 SPACE optimization
- # ext2/ext3 filesystems - Andreas Dilger <adilger@dilger.ca>
- # ext4 filesystem - Eric Sandeen <sandeen@sandeen.net>
- # volume label and UUID Russell Coker
- # http://etbe.coker.com.au/2008/07/08/label-vs-uuid-vs-device/
- 0x438 leshort 0xEF53 Linux
- >0x44c lelong x rev %d
- >0x43e leshort x \b.%d
- # No journal? ext2
- >0x45c lelong ^0x0000004 ext2 filesystem data
- >>0x43a leshort ^0x0000001 (mounted or unclean)
- # Has a journal? ext3 or ext4
- >0x45c lelong &0x0000004
- # and small INCOMPAT?
- >>0x460 lelong <0x0000040
- # and small RO_COMPAT?
- >>>0x464 lelong <0x0000008 ext3 filesystem data
- # else large RO_COMPAT?
- >>>0x464 lelong >0x0000007 ext4 filesystem data
- # else large INCOMPAT?
- >>0x460 lelong >0x000003f ext4 filesystem data
- >0x468 belong x \b, UUID=%08x
- >0x46c beshort x \b-%04x
- >0x46e beshort x \b-%04x
- >0x470 beshort x \b-%04x
- >0x472 belong x \b-%08x
- >0x476 beshort x \b%04x
- >0x478 string >0 \b, volume name "%s"
- # General flags for any ext* fs
- >0x460 lelong &0x0000004 (needs journal recovery)
- >0x43a leshort &0x0000002 (errors)
- # INCOMPAT flags
- >0x460 lelong &0x0000001 (compressed)
- #>0x460 lelong &0x0000002 (filetype)
- #>0x460 lelong &0x0000010 (meta bg)
- >0x460 lelong &0x0000040 (extents)
- >0x460 lelong &0x0000080 (64bit)
- #>0x460 lelong &0x0000100 (mmp)
- #>0x460 lelong &0x0000200 (flex bg)
- # RO_INCOMPAT flags
- #>0x464 lelong &0x0000001 (sparse super)
- >0x464 lelong &0x0000002 (large files)
- >0x464 lelong &0x0000008 (huge files)
- #>0x464 lelong &0x0000010 (gdt checksum)
- #>0x464 lelong &0x0000020 (many subdirs)
- #>0x463 lelong &0x0000040 (extra isize)
- # SGI disk labels - Nathan Scott <nathans@debian.org>
- 0 belong 0x0BE5A941 SGI disk label (volume header)
- # SGI XFS filesystem - Nathan Scott <nathans@debian.org>
- 0 belong 0x58465342 SGI XFS filesystem data
- >0x4 belong x (blksz %d,
- >0x68 beshort x inosz %d,
- >0x64 beshort ^0x2004 v1 dirs)
- >0x64 beshort &0x2004 v2 dirs)
- ############################################################################
- # Minix-ST kernel floppy
- 0x800 belong 0x46fc2700 Atari-ST Minix kernel image
- >19 string \240\5\371\5\0\011\0\2\0 \b, 720k floppy
- >19 string \320\2\370\5\0\011\0\1\0 \b, 360k floppy
- ############################################################################
- # Hmmm, is this a better way of detecting _standard_ floppy images ?
- 19 string \320\2\360\3\0\011\0\1\0 DOS floppy 360k
- >0x1FE leshort 0xAA55 \b, x86 hard disk boot sector
- 19 string \240\5\371\3\0\011\0\2\0 DOS floppy 720k
- >0x1FE leshort 0xAA55 \b, x86 hard disk boot sector
- 19 string \100\013\360\011\0\022\0\2\0 DOS floppy 1440k
- >0x1FE leshort 0xAA55 \b, x86 hard disk boot sector
- 19 string \240\5\371\5\0\011\0\2\0 DOS floppy 720k, IBM
- >0x1FE leshort 0xAA55 \b, x86 hard disk boot sector
- 19 string \100\013\371\5\0\011\0\2\0 DOS floppy 1440k, mkdosfs
- >0x1FE leshort 0xAA55 \b, x86 hard disk boot sector
- 19 string \320\2\370\5\0\011\0\1\0 Atari-ST floppy 360k
- 19 string \240\5\371\5\0\011\0\2\0 Atari-ST floppy 720k
- # Valid media descriptor bytes for MS-DOS:
- #
- # Byte Capacity Media Size and Type
- # -------------------------------------------------
- #
- # F0 2.88 MB 3.5-inch, 2-sided, 36-sector
- # F0 1.44 MB 3.5-inch, 2-sided, 18-sector
- # F9 720K 3.5-inch, 2-sided, 9-sector
- # F9 1.2 MB 5.25-inch, 2-sided, 15-sector
- # FD 360K 5.25-inch, 2-sided, 9-sector
- # FF 320K 5.25-inch, 2-sided, 8-sector
- # FC 180K 5.25-inch, 1-sided, 9-sector
- # FE 160K 5.25-inch, 1-sided, 8-sector
- # FE 250K 8-inch, 1-sided, single-density
- # FD 500K 8-inch, 2-sided, single-density
- # FE 1.2 MB 8-inch, 2-sided, double-density
- # F8 ----- Fixed disk
- #
- # FC xxxK Apricot 70x1x9 boot disk.
- #
- # Originally a bitmap:
- # xxxxxxx0 Not two sided
- # xxxxxxx1 Double sided
- # xxxxxx0x Not 8 SPT
- # xxxxxx1x 8 SPT
- # xxxxx0xx Not Removable drive
- # xxxxx1xx Removable drive
- # 11111xxx Must be one.
- #
- # But now it's rather random:
- # 111111xx Low density disk
- # 00 SS, Not 8 SPT
- # 01 DS, Not 8 SPT
- # 10 SS, 8 SPT
- # 11 DS, 8 SPT
- #
- # 11111001 Double density 3½ floppy disk, high density 5¼
- # 11110000 High density 3½ floppy disk
- # 11111000 Hard disk any format
- #
- # CDROM Filesystems
- # Modified for UDF by gerardo.cacciari@gmail.com
- 32769 string CD001 #
- !:mime application/x-iso9660-image
- >38913 string !NSR0 ISO 9660 CD-ROM filesystem data
- >38913 string NSR0 UDF filesystem data
- >>38917 string 1 (version 1.0)
- >>38917 string 2 (version 1.5)
- >>38917 string 3 (version 2.0)
- >>38917 byte >0x33 (unknown version, ID 0x%X)
- >>38917 byte <0x31 (unknown version, ID 0x%X)
- # "application id" which appears to be used as a volume label
- >32808 string >\0 '%s'
- >34816 string \000CD001\001EL\ TORITO\ SPECIFICATION (bootable)
- 37633 string CD001 ISO 9660 CD-ROM filesystem data (raw 2352 byte sectors)
- !:mime application/x-iso9660-image
- 32776 string CDROM High Sierra CD-ROM filesystem data
- # .cso files
- 0 string CISO Compressed ISO CD image
- # cramfs filesystem - russell@coker.com.au
- 0 lelong 0x28cd3d45 Linux Compressed ROM File System data, little endian
- >4 lelong x size %lu
- >8 lelong &1 version #2
- >8 lelong &2 sorted_dirs
- >8 lelong &4 hole_support
- >32 lelong x CRC 0x%x,
- >36 lelong x edition %lu,
- >40 lelong x %lu blocks,
- >44 lelong x %lu files
- 0 belong 0x28cd3d45 Linux Compressed ROM File System data, big endian
- >4 belong x size %lu
- >8 belong &1 version #2
- >8 belong &2 sorted_dirs
- >8 belong &4 hole_support
- >32 belong x CRC 0x%x,
- >36 belong x edition %lu,
- >40 belong x %lu blocks,
- >44 belong x %lu files
- # reiserfs - russell@coker.com.au
- 0x10034 string ReIsErFs ReiserFS V3.5
- 0x10034 string ReIsEr2Fs ReiserFS V3.6
- 0x10034 string ReIsEr3Fs ReiserFS V3.6.19
- >0x1002c leshort x block size %d
- >0x10032 leshort &2 (mounted or unclean)
- >0x10000 lelong x num blocks %d
- >0x10040 lelong 1 tea hash
- >0x10040 lelong 2 yura hash
- >0x10040 lelong 3 r5 hash
- # JFFS - russell@coker.com.au
- 0 lelong 0x34383931 Linux Journalled Flash File system, little endian
- 0 belong 0x34383931 Linux Journalled Flash File system, big endian
- # EST flat binary format (which isn't, but anyway)
- # From: Mark Brown <broonie@sirena.org.uk>
- 0 string ESTFBINR EST flat binary
- # Aculab VoIP firmware
- # From: Mark Brown <broonie@sirena.org.uk>
- 0 string VoIP\ Startup\ and Aculab VoIP firmware
- >35 string x format %s
- # From: Mark Brown <broonie@sirena.org.uk> [old]
- # From: Behan Webster <behanw@websterwood.com>
- 0 belong 0x27051956 u-boot legacy uImage,
- >32 string x %s,
- >28 byte 0 Invalid os/
- >28 byte 1 OpenBSD/
- >28 byte 2 NetBSD/
- >28 byte 3 FreeBSD/
- >28 byte 4 4.4BSD/
- >28 byte 5 Linux/
- >28 byte 6 SVR4/
- >28 byte 7 Esix/
- >28 byte 8 Solaris/
- >28 byte 9 Irix/
- >28 byte 10 SCO/
- >28 byte 11 Dell/
- >28 byte 12 NCR/
- >28 byte 13 LynxOS/
- >28 byte 14 VxWorks/
- >28 byte 15 pSOS/
- >28 byte 16 QNX/
- >28 byte 17 Firmware/
- >28 byte 18 RTEMS/
- >28 byte 19 ARTOS/
- >28 byte 20 Unity OS/
- >28 byte 21 INTEGRITY/
- >29 byte 0 \bInvalid CPU,
- >29 byte 1 \bAlpha,
- >29 byte 2 \bARM,
- >29 byte 3 \bIntel x86,
- >29 byte 4 \bIA64,
- >29 byte 5 \bMIPS,
- >29 byte 6 \bMIPS 64-bit,
- >29 byte 7 \bPowerPC,
- >29 byte 8 \bIBM S390,
- >29 byte 9 \bSuperH,
- >29 byte 10 \bSparc,
- >29 byte 11 \bSparc 64-bit,
- >29 byte 12 \bM68K,
- >29 byte 13 \bNios-32,
- >29 byte 14 \bMicroBlaze,
- >29 byte 15 \bNios-II,
- >29 byte 16 \bBlackfin,
- >29 byte 17 \bAVR32,
- >29 byte 18 \bSTMicroelectronics ST200,
- >30 byte 0 Invalid Image
- >30 byte 1 Standalone Program
- >30 byte 2 OS Kernel Image
- >30 byte 3 RAMDisk Image
- >30 byte 4 Multi-File Image
- >30 byte 5 Firmware Image
- >30 byte 6 Script File
- >30 byte 7 Filesystem Image (any type)
- >30 byte 8 Binary Flat Device Tree BLOB
- >31 byte 0 (Not compressed),
- >31 byte 1 (gzip),
- >31 byte 2 (bzip2),
- >31 byte 3 (lzma),
- >12 belong x %d bytes,
- >8 bedate x %s,
- >16 belong x Load Address: 0x%08X,
- >20 belong x Entry Point: 0x%08X,
- >4 belong x Header CRC: 0x%08X,
- >24 belong x Data CRC: 0x%08X
- # JFFS2 file system
- 0 leshort 0x1984 Linux old jffs2 filesystem data little endian
- 0 leshort 0x1985 Linux jffs2 filesystem data little endian
- # Squashfs
- 0 string sqsh Squashfs filesystem, big endian,
- >28 beshort x version %d.
- >30 beshort x \b%d,
- >28 beshort <3
- >>8 belong x %d bytes,
- >28 beshort >2
- >>28 beshort <4
- >>>63 bequad x %lld bytes,
- >>28 beshort >3
- >>>40 bequad x %lld bytes,
- #>>67 belong x %d bytes,
- >4 belong x %d inodes,
- >28 beshort <2
- >>32 beshort x blocksize: %d bytes,
- >28 beshort >1
- >>28 beshort <4
- >>>51 belong x blocksize: %d bytes,
- >>28 beshort >3
- >>>12 belong x blocksize: %d bytes,
- >28 beshort <4
- >>39 bedate x created: %s
- >28 beshort >3
- >>8 bedate x created: %s
- 0 string hsqs Squashfs filesystem, little endian,
- >28 leshort x version %d.
- >30 leshort x \b%d,
- >28 leshort <3
- >>8 lelong x %d bytes,
- >28 leshort >2
- >>28 leshort <4
- >>>63 lequad x %lld bytes,
- >>28 leshort >3
- >>>40 lequad x %lld bytes,
- #>>63 lelong x %d bytes,
- >4 lelong x %d inodes,
- >28 leshort <2
- >>32 leshort x blocksize: %d bytes,
- >28 leshort >1
- >>28 leshort <4
- >>>51 lelong x blocksize: %d bytes,
- >>28 leshort >3
- >>>12 lelong x blocksize: %d bytes,
- >28 leshort <4
- >>39 ledate x created: %s
- >28 leshort >3
- >>8 ledate x created: %s
- 0 string td\000 floppy image data (TeleDisk)
- # AFS Dump Magic
- # From: Ty Sarna <tsarna@sarna.org>
- 0 string \x01\xb3\xa1\x13\x22 AFS Dump
- >&0 belong x (v%d)
- >>&0 byte 0x76
- >>>&0 belong x Vol %d,
- >>>>&0 byte 0x6e
- >>>>>&0 string x %s
- >>>>>>&1 byte 0x74
- >>>>>>>&0 beshort 2
- >>>>>>>>&4 bedate x on: %s
- >>>>>>>>&0 bedate =0 full dump
- >>>>>>>>&0 bedate !0 incremental since: %s
- #----------------------------------------------------------
- #delta ISO Daniel Novotny (dnovotny@redhat.com)
- 0 string DISO Delta ISO data
- >4 belong x version %d
- # VMS backup savesets - gerardo.cacciari@gmail.com
- #
- 4 string \x01\x00\x01\x00\x01\x00
- >(0.s+16) string \x01\x01
- >>&(&0.b+8) byte 0x42 OpenVMS backup saveset data
- >>>40 lelong x (block size %d,
- >>>49 string >\0 original name '%s',
- >>>2 short 1024 VAX generated)
- >>>2 short 2048 AXP generated)
- >>>2 short 4096 I64 generated)
- # Summary: Oracle Clustered Filesystem
- # Created by: Aaron Botsis <redhat@digitalmafia.org>
- 8 string OracleCFS Oracle Clustered Filesystem,
- >4 long x rev %d
- >0 long x \b.%d,
- >560 string x label: %.64s,
- >136 string x mountpoint: %.128s
- # Summary: Oracle ASM tagged volume
- # Created by: Aaron Botsis <redhat@digitalmafia.org>
- 32 string ORCLDISK Oracle ASM Volume,
- >40 string x Disk Name: %0.12s
- 32 string ORCLCLRD Oracle ASM Volume (cleared),
- >40 string x Disk Name: %0.12s
- # Oracle Clustered Filesystem - Aaron Botsis <redhat@digitalmafia.org>
- 8 string OracleCFS Oracle Clustered Filesystem,
- >4 long x rev %d
- >0 long x \b.%d,
- >560 string x label: %.64s,
- >136 string x mountpoint: %.128s
- # Oracle ASM tagged volume - Aaron Botsis <redhat@digitalmafia.org>
- 32 string ORCLDISK Oracle ASM Volume,
- >40 string x Disk Name: %0.12s
- 32 string ORCLCLRD Oracle ASM Volume (cleared),
- >40 string x Disk Name: %0.12s
- # Compaq/HP RILOE floppy image
- # From: Dirk Jagdmann <doj@cubic.org>
- 0 string CPQRFBLO Compaq/HP RILOE floppy image
- #------------------------------------------------------------------------------
- # Files-11 On-Disk Structure (File system for various RSX-11 and VMS flavours).
- # These bits come from LBN 1 (home block) of ODS-1, ODS-2 and ODS-5 volumes,
- # which is mapped to VBN 2 of [000000]INDEXF.SYS;1 - gerardo.cacciari@gmail.com
- #
- 1008 string DECFILE11 Files-11 On-Disk Structure
- >525 byte x Level %d
- >525 byte x (ODS-%d);
- >1017 string A RSX-11, VAX/VMS or OpenVMS VAX file system;
- >1017 string B
- >>525 byte 2 VAX/VMS or OpenVMS file system;
- >>525 byte 5 OpenVMS Alpha or Itanium file system;
- >984 string x volume label is '%-12.12s'
- # From: Thomas Klausner <wiz@NetBSD.org>
- # http://filext.com/file-extension/DAA
- # describes the daa file format. The magic would be:
- 0 string DAA\x0\x0\x0\x0\x0 PowerISO Direct-Access-Archive
- # From Albert Cahalan <acahalan@gmail.com>
- # really le32 operation,destination,payloadsize (but quite predictable)
- # 01 00 00 00 00 00 00 c0 00 02 00 00
- 0 string \1\0\0\0\0\0\0\300\0\2\0\0 Marvell Libertas firmware
- # From Eric Sandeen
- # GFS2
- 0x10000 belong 0x01161970
- >0x10018 belong 0x0000051d GFS1 Filesystem
- >>0x10024 belong x (blocksize %d,
- >>0x10060 string >\0 lockproto %s)
- >0x10018 belong 0x00000709 GFS2 Filesystem
- >>0x10024 belong x (blocksize %d,
- >>0x10060 string >\0 lockproto %s)
- # BTRFS
- 0x10040 string _BHRfS_M BTRFS Filesystem
- >0x1012b string >\0 (label "%s",
- >0x10090 lelong x sectorsize %d,
- >0x10094 lelong x nodesize %d,
- >0x10098 lelong x leafsize %d)
- # dvdisaster's .ecc
- # From: "Nelson A. de Oliveira" <naoliv@gmail.com>
- 0 string *dvdisaster* dvdisaster error correction file
- # xfs metadump image
- # mb_magic XFSM at 0; superblock magic XFSB at 1 << mb_blocklog
- # but can we do the << ? For now it's always 512 (0x200) anyway.
- 0 string XFSM
- >0x200 string XFSB XFS filesystem metadump image
- # Type: CROM filesystem
- # From: Werner Fink <werner@suse.de>
- 0 string CROMFS CROMFS
- >6 string >\0 \b version %2.2s,
- >8 ulequad >0 \b block data at %lld,
- >16 ulequad >0 \b fblock table at %lld,
- >24 ulequad >0 \b inode table at %lld,
- >32 ulequad >0 \b root at %lld,
- >40 ulelong >0 \b fblock size = %ld,
- >44 ulelong >0 \b block size = %ld,
- >48 ulequad >0 \b bytes = %lld
- # Type: xfs metadump image
- # From: Daniel Novotny <dnovotny@redhat.com>
- # mb_magic XFSM at 0; superblock magic XFSB at 1 << mb_blocklog
- # but can we do the << ? For now it's always 512 (0x200) anyway.
- 0 string XFSM
- >0x200 string XFSB XFS filesystem metadump image
- # Type: delta ISO
- # From: Daniel Novotny <dnovotny@redhat.com>
- 0 string DISO Delta ISO data,
- >4 belong x version %d
- # JFS2 (Journaling File System) image. (Old JFS1 has superblock at 0x1000.)
- # See linux/fs/jfs/jfs_superblock.h for layout; see jfs_filsys.h for flags.
- # From: Adam Buchbinder <adam.buchbinder@gmail.com>
- 0x8000 string JFS1
- # Because it's text-only magic, check a binary value (version) to be sure.
- # Should always be 2, but mkfs.jfs writes it as 1. Needs to be 2 or 1 to be
- # mountable.
- >&0 lelong <3 JFS2 filesystem image
- # Label is followed by a UUID; we have to limit string length to avoid
- # appending the UUID in the case of a 16-byte label.
- >>&144 regex [\x20-\x7E]{1,16} (label "%s")
- >>&0 lequad x \b, %lld blocks
- >>&8 lelong x \b, blocksize %d
- >>&32 lelong&0x00000006 >0 (dirty)
- >>&36 lelong >0 (compressed)
|