1 2#------------------------------------------------------------------------------ 3# $File: filesystems,v 1.61 2011/01/10 14:01:10 christos Exp $ 4# filesystems: file(1) magic for different filesystems 5# 60 string \366\366\366\366 PC formatted floppy with no filesystem 7# Sun disk labels 8# From /usr/include/sun/dklabel.h: 90774 beshort 0xdabe 10# modified by Joerg Jenderek, because original test 11# succeeds for Cabinet archive dao360.dl_ with negative blocks 12>0770 long >0 Sun disk label 13>>0 string x '%s 14>>>31 string >\0 \b%s 15>>>>63 string >\0 \b%s 16>>>>>95 string >\0 \b%s 17>>0 string x \b' 18>>0734 short >0 %d rpm, 19>>0736 short >0 %d phys cys, 20>>0740 short >0 %d alts/cyl, 21>>0746 short >0 %d interleave, 22>>0750 short >0 %d data cyls, 23>>0752 short >0 %d alt cyls, 24>>0754 short >0 %d heads/partition, 25>>0756 short >0 %d sectors/track, 26>>0764 long >0 start cyl %ld, 27>>0770 long x %ld blocks 28# Is there a boot block written 1 sector in? 29>512 belong&077777777 0600407 \b, boot block present 30# Joerg Jenderek: Smart Boot Manager backup file is 41 byte header + first sectors of disc 31# (http://btmgr.sourceforge.net/docs/user-guide-3.html) 320 string SBMBAKUP_ Smart Boot Manager backup file 33>9 string x \b, version %-5.5s 34>>14 string =_ 35>>>15 string x %-.1s 36>>>>16 string =_ \b. 37>>>>>17 string x \b%-.1s 38>>>>>>18 string =_ \b. 39>>>>>>>19 string x \b%-.1s 40>>>22 ubyte 0 41>>>>21 ubyte x \b, from drive 0x%x 42>>>22 ubyte >0 43>>>>21 string x \b, from drive %s 44 45# Joerg Jenderek 46# DOS Emulator image is 128 byte, null right padded header + harddisc image 470 string DOSEMU\0 48>0x27E leshort 0xAA55 49#offset is 128 50>>19 ubyte 128 51>>>(19.b-1) ubyte 0x0 DOS Emulator image 52>>>>7 ulelong >0 \b, %u heads 53>>>>11 ulelong >0 \b, %d sectors/track 54>>>>15 ulelong >0 \b, %d cylinders 55 56# updated by Joerg Jenderek at Sep 2007 57# only for sector sizes with 512 or more Bytes 580x1FE leshort 0xAA55 x86 boot sector 59# to do also for sectors < than 512 Bytes and some other files, GRR 60#30 search/481 \x55\xAA x86 boot sector 61# not for BeOS floppy 1440k, MBRs 62#(11.s-2) uleshort 0xAA55 x86 boot sector 63>2 string OSBS \b, OS/BS MBR 64# J\xf6rg Jenderek <joerg dot jenderek at web dot de> 65>0x8C string Invalid\ partition\ table \b, MS-DOS MBR 66# dr-dos with some upper-, lowercase variants 67>0x9D string Invalid\ partition\ table$ 68>>181 string No\ Operating\ System$ 69>>>201 string Operating\ System\ load\ error$ \b, DR-DOS MBR, Version 7.01 to 7.03 70>0x9D string Invalid\ partition\ table$ 71>>181 string No\ operating\ system$ 72>>>201 string Operating\ system\ load\ error$ \b, DR-DOS MBR, Version 7.01 to 7.03 73>342 string Invalid\ partition\ table$ 74>>366 string No\ operating\ system$ 75>>>386 string Operating\ system\ load\ error$ \b, DR-DOS MBR, version 7.01 to 7.03 76>295 string NEWLDR\0 77>>302 string Bad\ PT\ $ 78>>>310 string No\ OS\ $ 79>>>>317 string OS\ load\ err$ 80>>>>>329 string Moved\ or\ missing\ IBMBIO.LDR\n\r 81>>>>>>358 string Press\ any\ key\ to\ continue.\n\r$ 82>>>>>>>387 string Copyright\ (c)\ 1984,1998 83>>>>>>>>411 string Caldera\ Inc.\0 \b, DR-DOS MBR (IBMBIO.LDR) 84>0x10F string Ung\201ltige\ Partitionstabelle \b, MS-DOS MBR, german version 4.10.1998, 4.10.2222 85>>0x1B8 ubelong >0 \b, Serial 0x%-.4x 86>0x8B string Ung\201ltige\ Partitionstabelle \b, MS-DOS MBR, german version 5.00 to 4.00.950 87>271 string Invalid\ partition\ table\0 88>>295 string Error\ loading\ operating\ system\0 89>>>326 string Missing\ operating\ system\0 \b, mbr 90# 91>139 string Invalid\ partition\ table\0 92>>163 string Error\ loading\ operating\ system\0 93>>>194 string Missing\ operating\ system\0 \b, Microsoft Windows XP mbr 94# http://www.heise.de/ct/05/09/006/ page 184 95#HKEY_LOCAL_MACHINE\SYSTEM\MountedDevices\DosDevices\?:=Serial4Bytes+8Bytes 96>>>>0x1B8 ulelong >0 \b,Serial 0x%-.4x 97>300 string Invalid\ partition\ table\0 98>>324 string Error\ loading\ operating\ system\0 99>>>355 string Missing\ operating\ system\0 \b, Microsoft Windows XP MBR 100#??>>>389 string Invalid\ system\ disk 101>>>>0x1B8 ulelong >0 \b, Serial 0x%-.4x 102>300 string Ung\201ltige\ Partitionstabelle 103#split string to avoid error: String too long 104>>328 string Fehler\ beim\ Laden\ 105>>>346 string des\ Betriebssystems 106>>>>366 string Betriebssystem\ nicht\ vorhanden \b, Microsoft Windows XP MBR (german) 107>>>>>0x1B8 ulelong >0 \b, Serial 0x%-.4x 108#>0x145 string Default:\ F \b, FREE-DOS MBR 109#>0x14B string Default:\ F \b, FREE-DOS 1.0 MBR 110>0x145 search/7 Default:\ F \b, FREE-DOS MBR 111#>>313 string F0\ .\ .\ . 112#>>>322 string disk\ 1 113#>>>>382 string FAT3 114>64 string no\ active\ partition\ found 115>>96 string read\ error\ while\ reading\ drive \b, FREE-DOS Beta 0.9 MBR 116# Ranish Partition Manager http://www.ranish.com/part/ 117>387 search/4 \0\ Error!\r 118>>378 search/7 Virus! 119>>>397 search/4 Booting\ 120>>>>408 search/4 HD1/\0 \b, Ranish MBR ( 121>>>>>416 string Writing\ changes... \b2.37 122>>>>>>438 ubyte x \b,0x%x dots 123>>>>>>440 ubyte >0 \b,virus check 124>>>>>>441 ubyte >0 \b,partition %c 125#2.38,2.42,2.44 126>>>>>416 string !Writing\ changes... \b 127>>>>>>418 ubyte 1 \bvirus check, 128>>>>>>419 ubyte x \b0x%x seconds 129>>>>>>420 ubyte&0x0F >0 \b,partition 130>>>>>>>420 ubyte&0x0F <5 \b %x 131>>>>>>>420 ubyte&0x0F 0Xf \b ask 132>>>>>420 ubyte x \b) 133# 134>271 string Operating\ system\ loading 135>>296 string error\r \b, SYSLINUX MBR (2.10) 136# http://www.acronis.de/ 137>362 string MBR\ Error\ \0\r 138>>376 string ress\ any\ key\ to\ 139>>>392 string boot\ from\ floppy...\0 \b, Acronis MBR 140# added by Joerg Jenderek 141# http://www.visopsys.org/ 142# http://partitionlogic.org.uk/ 143>309 string No\ bootable\ partition\ found\r 144>>339 string I/O\ Error\ reading\ boot\ sector\r \b, Visopsys MBR 145>349 string No\ bootable\ partition\ found\r 146>>379 string I/O\ Error\ reading\ boot\ sector\r \b, simple Visopsys MBR 147# bootloader, bootmanager 148>0x40 string SBML 149# label with 11 characters of FAT 12 bit filesystem 150>>43 string SMART\ BTMGR 151>>>430 string SBMK\ Bad!\r \b, Smart Boot Manager 152# OEM-ID not always "SBM" 153#>>>>3 strings SBM 154>>>>6 string >\0 \b, version %s 155>382 string XOSLLOADXCF \b, eXtended Operating System Loader 156>6 string LILO \b, LInux i386 boot LOader 157>>120 string LILO \b, version 22.3.4 SuSe 158>>172 string LILO \b, version 22.5.8 Debian 159# updated by Joerg Jenderek at Oct 2008 160# variables according to grub-0.97/stage1/stage1.S or 161# http://www.gnu.org/software/grub/manual/grub.html#Embedded-data 162# usual values are marked with comments to get only informations of strange GRUB loaders 163>342 search/60 \0Geom\0 164#>0 ulelong x %x=0x009048EB , 0x2a9048EB 0 165>>0x41 ubyte <2 166>>>0x3E ubyte >2 \b; GRand Unified Bootloader 167# 0x3 for 0.5.95,0.93,0.94,0.96 0x4 for 1.90 168>>>>0x3E ubyte x \b, stage1 version 0x%x 169#If it is 0xFF, use a drive passed by BIOS 170>>>>0x40 ubyte <0xFF \b, boot drive 0x%x 171# in most case 0,1,0x2e for GRUB 0.5.95 172>>>>0x41 ubyte >0 \b, LBA flag 0x%x 173>>>>0x42 uleshort <0x8000 \b, stage2 address 0x%x 174#>>>>0x42 uleshort =0x8000 \b, stage2 address 0x%x (usual) 175>>>>0x42 uleshort >0x8000 \b, stage2 address 0x%x 176#>>>>0x44 ulelong =1 \b, 1st sector stage2 0x%x (default) 177>>>>0x44 ulelong >1 \b, 1st sector stage2 0x%x 178>>>>0x48 uleshort <0x800 \b, stage2 segment 0x%x 179#>>>>0x48 uleshort =0x800 \b, stage2 segment 0x%x (usual) 180>>>>0x48 uleshort >0x800 \b, stage2 segment 0x%x 181>>>>402 string Geom\0Hard\ Disk\0Read\0\ Error\0 182>>>>>394 string stage1 \b, GRUB version 0.5.95 183>>>>382 string Geom\0Hard\ Disk\0Read\0\ Error\0 184>>>>>376 string GRUB\ \0 \b, GRUB version 0.93 or 1.94 185>>>>383 string Geom\0Hard\ Disk\0Read\0\ Error\0 186>>>>>377 string GRUB\ \0 \b, GRUB version 0.94 187>>>>385 string Geom\0Hard\ Disk\0Read\0\ Error\0 188>>>>>379 string GRUB\ \0 \b, GRUB version 0.95 or 0.96 189>>>>391 string Geom\0Hard\ Disk\0Read\0\ Error\0 190>>>>>385 string GRUB\ \0 \b, GRUB version 0.97 191#unkown version 192>>>343 string Geom\0Read\0\ Error\0 193>>>>321 string Loading\ stage1.5 \b, GRUB version x.y 194>>>380 string Geom\0Hard\ Disk\0Read\0\ Error\0 195>>>>374 string GRUB\ \0 \b, GRUB version n.m 196# http://syslinux.zytor.com/ 197>478 string Boot\ failed\r 198>>495 string LDLINUX\ SYS \b, SYSLINUX bootloader (1.62) 199>480 string Boot\ failed\r 200>>495 string LDLINUX\ SYS \b, SYSLINUX bootloader (2.06 or 2.11) 201>484 string Boot\ error\r \b, SYSLINUX bootloader (3.11) 202>395 string chksum\0\ ERROR!\0 \b, Gujin bootloader 203# http://www.bcdwb.de/bcdw/index_e.htm 204>3 string BCDL 205>>498 string BCDL\ \ \ \ BIN \b, Bootable CD Loader (1.50Z) 206# mbr partition table entries 207# OEM-ID does not contain MicroSoft,NEWLDR,DOS,SYSLINUX,or MTOOLs 208>3 string !MS 209>>3 string !SYSLINUX 210>>>3 string !MTOOL 211>>>>3 string !NEWLDR 212>>>>>5 string !DOS 213# not FAT (32 bit) 214>>>>>>82 string !FAT32 215#not Linux kernel 216>>>>>>>514 string !HdrS 217#not BeOS 218>>>>>>>>422 string !Be\ Boot\ Loader 219# active flag 0 or 0x80 and type > 0 220>>>>>>>>>446 ubyte <0x81 221>>>>>>>>>>446 ubyte&0x7F 0 222>>>>>>>>>>>450 ubyte >0 \b; partition 1: ID=0x%x 223>>>>>>>>>>>>446 ubyte 0x80 \b, active 224>>>>>>>>>>>>447 ubyte x \b, starthead %u 225#>>>>>>>>>>>>448 ubyte x \b, start C_S: 0x%x 226#>>>>>>>>>>>>448 ubeshort&1023 x \b, startcylinder? %d 227>>>>>>>>>>>>454 ulelong x \b, startsector %u 228>>>>>>>>>>>>458 ulelong x \b, %u sectors 229# 230>>>>>>>>>462 ubyte <0x81 231>>>>>>>>>>462 ubyte&0x7F 0 232>>>>>>>>>>>466 ubyte >0 \b; partition 2: ID=0x%x 233>>>>>>>>>>>>462 ubyte 0x80 \b, active 234>>>>>>>>>>>>463 ubyte x \b, starthead %u 235#>>>>>>>>>>>>464 ubyte x \b, start C_S: 0x%x 236#>>>>>>>>>>>>464 ubeshort&1023 x \b, startcylinder? %d 237>>>>>>>>>>>>470 ulelong x \b, startsector %u 238>>>>>>>>>>>>474 ulelong x \b, %u sectors 239# 240>>>>>>>>>478 ubyte <0x81 241>>>>>>>>>>478 ubyte&0x7F 0 242>>>>>>>>>>>482 ubyte >0 \b; partition 3: ID=0x%x 243>>>>>>>>>>>>478 ubyte 0x80 \b, active 244>>>>>>>>>>>>479 ubyte x \b, starthead %u 245#>>>>>>>>>>>>480 ubyte x \b, start C_S: 0x%x 246#>>>>>>>>>>>>481 ubyte x \b, start C2S: 0x%x 247#>>>>>>>>>>>>480 ubeshort&1023 x \b, startcylinder? %d 248>>>>>>>>>>>>486 ulelong x \b, startsector %u 249>>>>>>>>>>>>490 ulelong x \b, %u sectors 250# 251>>>>>>>>>494 ubyte <0x81 252>>>>>>>>>>494 ubyte&0x7F 0 253>>>>>>>>>>>498 ubyte >0 \b; partition 4: ID=0x%x 254>>>>>>>>>>>>494 ubyte 0x80 \b, active 255>>>>>>>>>>>>495 ubyte x \b, starthead %u 256#>>>>>>>>>>>>496 ubyte x \b, start C_S: 0x%x 257#>>>>>>>>>>>>496 ubeshort&1023 x \b, startcylinder? %d 258>>>>>>>>>>>>502 ulelong x \b, startsector %u 259>>>>>>>>>>>>506 ulelong x \b, %u sectors 260# mbr partition table entries end 261# http://www.acronis.de/ 262#FAT label=ACRONIS\ SZ 263#OEM-ID=BOOTWIZ0 264>442 string Non-system\ disk,\ 265>>459 string press\ any\ key...\x7\0 \b, Acronis Startup Recovery Loader 266# DOS names like F11.SYS are 8 right space padded bytes+3 bytes 267>>>477 ubyte&0xDF >0 268>>>>477 string x \b %-.3s 269>>>>>480 ubyte&0xDF >0 270>>>>>>480 string x \b%-.5s 271>>>>485 ubyte&0xDF >0 272>>>>>485 string x \b.%-.3s 273# 274>185 string FDBOOT\ Version\ 275>>204 string \rNo\ Systemdisk.\ 276>>>220 string Booting\ from\ harddisk.\n\r 277>>>245 string Cannot\ load\ from\ harddisk.\n\r 278>>>>273 string Insert\ Systemdisk\ 279>>>>>291 string and\ press\ any\ key.\n\r \b, FDBOOT harddisk Bootloader 280>>>>>>200 string >\0 \b, version %-3s 281>242 string Bootsector\ from\ C.H.\ Hochst\204 282>>278 string No\ Systemdisk.\ 283>>>293 string Booting\ from\ harddisk.\n\r 284>>>441 string Cannot\ load\ from\ harddisk.\n\r 285>>>>469 string Insert\ Systemdisk\ 286>>>>>487 string and\ press\ any\ key.\n\r \b, WinImage harddisk Bootloader 287>>>>>>209 string >\0 \b, version %-4.4s 288>(1.b+2) ubyte 0xe 289>>(1.b+3) ubyte 0x1f 290>>>(1.b+4) ubyte 0xbe 291>>>>(1.b+5) ubyte 0x77 292>>>>(1.b+6) ubyte 0x7c 293>>>>>(1.b+7) ubyte 0xac 294>>>>>>(1.b+8) ubyte 0x22 295>>>>>>>(1.b+9) ubyte 0xc0 296>>>>>>>>(1.b+10) ubyte 0x74 297>>>>>>>>>(1.b+11) ubyte 0xb 298>>>>>>>>>>(1.b+12) ubyte 0x56 299>>>>>>>>>>(1.b+13) ubyte 0xb4 \b, mkdosfs boot message display 300>214 string Please\ try\ to\ install\ FreeDOS\ \b, DOS Emulator boot message display 301#>>244 string from\ dosemu-freedos-*-bin.tgz\r 302#>>>170 string Sorry,\ could\ not\ load\ an\ 303#>>>>195 string operating\ system.\r\n 304# 305>103 string This\ is\ not\ a\ bootable\ disk.\ 306>>132 string Please\ insert\ a\ bootable\ 307>>>157 string floppy\ and\r\n 308>>>>169 string press\ any\ key\ to\ try\ again...\r \b, FREE-DOS message display 309# 310>66 string Solaris\ Boot\ Sector 311>>99 string Incomplete\ MDBoot\ load. 312>>>89 string Version \b, Sun Solaris Bootloader 313>>>>97 byte x version %c 314# 315>408 string OS/2\ !!\ SYS01475\r\0 316>>429 string OS/2\ !!\ SYS02025\r\0 317>>>450 string OS/2\ !!\ SYS02027\r\0 318>>>469 string OS2BOOT\ \ \ \ \b, IBM OS/2 Warp bootloader 319# 320>409 string OS/2\ !!\ SYS01475\r\0 321>>430 string OS/2\ !!\ SYS02025\r\0 322>>>451 string OS/2\ !!\ SYS02027\r\0 323>>>470 string OS2BOOT\ \ \ \ \b, IBM OS/2 Warp Bootloader 324>112 string This\ disk\ is\ not\ bootable\r 325>>142 string If\ you\ wish\ to\ make\ it\ bootable 326>>>176 string run\ the\ DOS\ program\ SYS\ 327>>>200 string after\ the\r 328>>>>216 string system\ has\ been\ loaded\r\n 329>>>>>242 string Please\ insert\ a\ DOS\ diskette\ 330>>>>>271 string into\r\n\ the\ drive\ and\ 331>>>>>>292 string strike\ any\ key...\0 \b, IBM OS/2 Warp message display 332# XP 333>430 string NTLDR\ is\ missing\xFF\r\n 334>>449 string Disk\ error\xFF\r\n 335>>>462 string Press\ any\ key\ to\ restart\r \b, Microsoft Windows XP Bootloader 336# DOS names like NTLDR,CMLDR,$LDR$ are 8 right space padded bytes+3 bytes 337>>>>417 ubyte&0xDF >0 338>>>>>417 string x %-.5s 339>>>>>>422 ubyte&0xDF >0 340>>>>>>>422 string x \b%-.3s 341>>>>>425 ubyte&0xDF >0 342>>>>>>425 string >\ \b.%-.3s 343# 344>>>>371 ubyte >0x20 345>>>>>368 ubyte&0xDF >0 346>>>>>>368 string x %-.5s 347>>>>>>>373 ubyte&0xDF >0 348>>>>>>>>373 string x \b%-.3s 349>>>>>>376 ubyte&0xDF >0 350>>>>>>>376 string x \b.%-.3s 351# 352>430 string NTLDR\ nicht\ gefunden\xFF\r\n 353>>453 string Datentr\204gerfehler\xFF\r\n 354>>>473 string Neustart\ mit\ beliebiger\ Taste\r \b, Microsoft Windows XP Bootloader (german) 355>>>>417 ubyte&0xDF >0 356>>>>>417 string x %-.5s 357>>>>>>422 ubyte&0xDF >0 358>>>>>>>422 string x \b%-.3s 359>>>>>425 ubyte&0xDF >0 360>>>>>>425 string >\ \b.%-.3s 361# offset variant 362>>>>379 string \0 363>>>>>368 ubyte&0xDF >0 364>>>>>>368 string x %-.5s 365>>>>>>>373 ubyte&0xDF >0 366>>>>>>>>373 string x \b%-.3s 367# 368>430 string NTLDR\ fehlt\xFF\r\n 369>>444 string Datentr\204gerfehler\xFF\r\n 370>>>464 string Neustart\ mit\ beliebiger\ Taste\r \b, Microsoft Windows XP Bootloader (2.german) 371>>>>417 ubyte&0xDF >0 372>>>>>417 string x %-.5s 373>>>>>>422 ubyte&0xDF >0 374>>>>>>>422 string x \b%-.3s 375>>>>>425 ubyte&0xDF >0 376>>>>>>425 string >\ \b.%-.3s 377# variant 378>>>>371 ubyte >0x20 379>>>>>368 ubyte&0xDF >0 380>>>>>>368 string x %-.5s 381>>>>>>>373 ubyte&0xDF >0 382>>>>>>>>373 string x \b%-.3s 383>>>>>>376 ubyte&0xDF >0 384>>>>>>>376 string x \b.%-.3s 385# 386>430 string NTLDR\ fehlt\xFF\r\n 387>>444 string Medienfehler\xFF\r\n 388>>>459 string Neustart:\ Taste\ dr\201cken\r \b, Microsoft Windows XP Bootloader (3.german) 389>>>>371 ubyte >0x20 390>>>>>368 ubyte&0xDF >0 391>>>>>>368 string x %-.5s 392>>>>>>>373 ubyte&0xDF >0 393>>>>>>>>373 string x \b%-.3s 394>>>>>>376 ubyte&0xDF >0 395>>>>>>>376 string x \b.%-.3s 396# variant 397>>>>417 ubyte&0xDF >0 398>>>>>417 string x %-.5s 399>>>>>>422 ubyte&0xDF >0 400>>>>>>>422 string x \b%-.3s 401>>>>>425 ubyte&0xDF >0 402>>>>>>425 string >\ \b.%-.3s 403# 404>430 string Datentr\204ger\ entfernen\xFF\r\n 405>>454 string Medienfehler\xFF\r\n 406>>>469 string Neustart:\ Taste\ dr\201cken\r \b, Microsoft Windows XP Bootloader (4.german) 407>>>>379 string \0 408>>>>>368 ubyte&0xDF >0 409>>>>>>368 string x %-.5s 410>>>>>>>373 ubyte&0xDF >0 411>>>>>>>>373 string x \b%-.3s 412>>>>>>376 ubyte&0xDF >0 413>>>>>>>376 string x \b.%-.3s 414# variant 415>>>>417 ubyte&0xDF >0 416>>>>>417 string x %-.5s 417>>>>>>422 ubyte&0xDF >0 418>>>>>>>422 string x \b%-.3s 419>>>>>425 ubyte&0xDF >0 420>>>>>>425 string >\ \b.%-.3s 421# 422 423#>3 string NTFS\ \ \ \ 424>389 string Fehler\ beim\ Lesen\ 425>>407 string des\ Datentr\204gers 426>>>426 string NTLDR\ fehlt 427>>>>440 string NTLDR\ ist\ komprimiert 428>>>>>464 string Neustart\ mit\ Strg+Alt+Entf\r \b, Microsoft Windows XP Bootloader NTFS (german) 429#>3 string NTFS\ \ \ \ 430>313 string A\ disk\ read\ error\ occurred.\r 431>>345 string A\ kernel\ file\ is\ missing\ 432>>>370 string from\ the\ disk.\r 433>>>>484 string NTLDR\ is\ compressed 434>>>>>429 string Insert\ a\ system\ diskette\ 435>>>>>>454 string and\ restart\r\nthe\ system.\r \b, Microsoft Windows XP Bootloader NTFS 436# DOS loader variants different languages,offsets 437>472 ubyte&0xDF >0 438>>389 string Invalid\ system\ disk\xFF\r\n 439>>>411 string Disk\ I/O\ error 440>>>>428 string Replace\ the\ disk,\ and\ 441>>>>>455 string press\ any\ key \b, Microsoft Windows 98 Bootloader 442#IO.SYS 443>>>>>>472 ubyte&0xDF >0 444>>>>>>>472 string x \b %-.2s 445>>>>>>>>474 ubyte&0xDF >0 446>>>>>>>>>474 string x \b%-.5s 447>>>>>>>>>>479 ubyte&0xDF >0 448>>>>>>>>>>>479 string x \b%-.1s 449>>>>>>>480 ubyte&0xDF >0 450>>>>>>>>480 string x \b.%-.3s 451#MSDOS.SYS 452>>>>>>>483 ubyte&0xDF >0 \b+ 453>>>>>>>>483 string x \b%-.5s 454>>>>>>>>>488 ubyte&0xDF >0 455>>>>>>>>>>488 string x \b%-.3s 456>>>>>>>>491 ubyte&0xDF >0 457>>>>>>>>>491 string x \b.%-.3s 458# 459>>390 string Invalid\ system\ disk\xFF\r\n 460>>>412 string Disk\ I/O\ error\xFF\r\n 461>>>>429 string Replace\ the\ disk,\ and\ 462>>>>>451 string then\ press\ any\ key\r \b, Microsoft Windows 98 Bootloader 463>>388 string Ungueltiges\ System\ \xFF\r\n 464>>>410 string E/A-Fehler\ \ \ \ \xFF\r\n 465>>>>427 string Datentraeger\ wechseln\ und\ 466>>>>>453 string Taste\ druecken\r \b, Microsoft Windows 95/98/ME Bootloader (german) 467#WINBOOT.SYS only not spaces (0xDF) 468>>>>>>497 ubyte&0xDF >0 469>>>>>>>497 string x %-.5s 470>>>>>>>>502 ubyte&0xDF >0 471>>>>>>>>>502 string x \b%-.1s 472>>>>>>>>>>503 ubyte&0xDF >0 473>>>>>>>>>>>503 string x \b%-.1s 474>>>>>>>>>>>>504 ubyte&0xDF >0 475>>>>>>>>>>>>>504 string x \b%-.1s 476>>>>>>505 ubyte&0xDF >0 477>>>>>>>505 string x \b.%-.3s 478#IO.SYS 479>>>>>>472 ubyte&0xDF >0 or 480>>>>>>>472 string x \b %-.2s 481>>>>>>>>474 ubyte&0xDF >0 482>>>>>>>>>474 string x \b%-.5s 483>>>>>>>>>>479 ubyte&0xDF >0 484>>>>>>>>>>>479 string x \b%-.1s 485>>>>>>>480 ubyte&0xDF >0 486>>>>>>>>480 string x \b.%-.3s 487#MSDOS.SYS 488>>>>>>>483 ubyte&0xDF >0 \b+ 489>>>>>>>>483 string x \b%-.5s 490>>>>>>>>>488 ubyte&0xDF >0 491>>>>>>>>>>488 string x \b%-.3s 492>>>>>>>>491 ubyte&0xDF >0 493>>>>>>>>>491 string x \b.%-.3s 494# 495>>390 string Ungueltiges\ System\ \xFF\r\n 496>>>412 string E/A-Fehler\ \ \ \ \xFF\r\n 497>>>>429 string Datentraeger\ wechseln\ und\ 498>>>>>455 string Taste\ druecken\r \b, Microsoft Windows 95/98/ME Bootloader (German) 499#WINBOOT.SYS only not spaces (0xDF) 500>>>>>>497 ubyte&0xDF >0 501>>>>>>>497 string x %-.7s 502>>>>>>>>504 ubyte&0xDF >0 503>>>>>>>>>504 string x \b%-.1s 504>>>>>>505 ubyte&0xDF >0 505>>>>>>>505 string x \b.%-.3s 506#IO.SYS 507>>>>>>472 ubyte&0xDF >0 or 508>>>>>>>472 string x \b %-.2s 509>>>>>>>>474 ubyte&0xDF >0 510>>>>>>>>>474 string x \b%-.6s 511>>>>>>>480 ubyte&0xDF >0 512>>>>>>>>480 string x \b.%-.3s 513#MSDOS.SYS 514>>>>>>>483 ubyte&0xDF >0 \b+ 515>>>>>>>>483 string x \b%-.5s 516>>>>>>>>>488 ubyte&0xDF >0 517>>>>>>>>>>488 string x \b%-.3s 518>>>>>>>>491 ubyte&0xDF >0 519>>>>>>>>>491 string x \b.%-.3s 520# 521>>389 string Ungueltiges\ System\ \xFF\r\n 522>>>411 string E/A-Fehler\ \ \ \ \xFF\r\n 523>>>>428 string Datentraeger\ wechseln\ und\ 524>>>>>454 string Taste\ druecken\r \b, Microsoft Windows 95/98/ME Bootloader (GERMAN) 525# DOS names like IO.SYS,WINBOOT.SYS,MSDOS.SYS,WINBOOT.INI are 8 right space padded bytes+3 bytes 526>>>>>>472 string x %-.2s 527>>>>>>>474 ubyte&0xDF >0 528>>>>>>>>474 string x \b%-.5s 529>>>>>>>>479 ubyte&0xDF >0 530>>>>>>>>>479 string x \b%-.1s 531>>>>>>480 ubyte&0xDF >0 532>>>>>>>480 string x \b.%-.3s 533>>>>>>483 ubyte&0xDF >0 \b+ 534>>>>>>>483 string x \b%-.5s 535>>>>>>>488 ubyte&0xDF >0 536>>>>>>>>488 string x \b%-.2s 537>>>>>>>>490 ubyte&0xDF >0 538>>>>>>>>>490 string x \b%-.1s 539>>>>>>>491 ubyte&0xDF >0 540>>>>>>>>491 string x \b.%-.3s 541>479 ubyte&0xDF >0 542>>416 string Kein\ System\ oder\ 543>>>433 string Laufwerksfehler 544>>>>450 string Wechseln\ und\ Taste\ dr\201cken \b, Microsoft DOS Bootloader (german) 545#IO.SYS 546>>>>>479 string x \b %-.2s 547>>>>>>481 ubyte&0xDF >0 548>>>>>>>481 string x \b%-.6s 549>>>>>487 ubyte&0xDF >0 550>>>>>>487 string x \b.%-.3s 551#MSDOS.SYS 552>>>>>>490 ubyte&0xDF >0 \b+ 553>>>>>>>490 string x \b%-.5s 554>>>>>>>>495 ubyte&0xDF >0 555>>>>>>>>>495 string x \b%-.3s 556>>>>>>>498 ubyte&0xDF >0 557>>>>>>>>498 string x \b.%-.3s 558# 559>376 search/41 Non-System\ disk\ or\ 560>>395 search/41 disk\ error\r 561>>>407 search/41 Replace\ and\ 562>>>>419 search/41 press\ \b, 563>>>>419 search/41 strike\ \b, old 564>>>>426 search/41 any\ key\ when\ ready\r MS or PC-DOS bootloader 565#449 Disk\ Boot\ failure\r MS 3.21 566#466 Boot\ Failure\r MS 3.30 567>>>>>468 search/18 \0 568#IO.SYS,IBMBIO.COM 569>>>>>>&0 string x \b %-.2s 570>>>>>>>&-20 ubyte&0xDF >0 571>>>>>>>>&-1 string x \b%-.4s 572>>>>>>>>>&-16 ubyte&0xDF >0 573>>>>>>>>>>&-1 string x \b%-.2s 574>>>>>>&8 ubyte&0xDF >0 \b. 575>>>>>>>&-1 string x \b%-.3s 576#MSDOS.SYS,IBMDOS.COM 577>>>>>>&11 ubyte&0xDF >0 \b+ 578>>>>>>>&-1 string x \b%-.5s 579>>>>>>>>&-6 ubyte&0xDF >0 580>>>>>>>>>&-1 string x \b%-.1s 581>>>>>>>>>>&-5 ubyte&0xDF >0 582>>>>>>>>>>>&-1 string x \b%-.2s 583>>>>>>>&7 ubyte&0xDF >0 \b. 584>>>>>>>>&-1 string x \b%-.3s 585>441 string Cannot\ load\ from\ harddisk.\n\r 586>>469 string Insert\ Systemdisk\ 587>>>487 string and\ press\ any\ key.\n\r \b, MS (2.11) DOS bootloader 588#>43 string \224R-LOADER\ \ SYS =label 589>54 string SYS 590>>324 string VASKK 591>>>495 string NEWLDR\0 \b, DR-DOS Bootloader (LOADER.SYS) 592# 593>98 string Press\ a\ key\ to\ retry\0\r 594>>120 string Cannot\ find\ file\ \0\r 595>>>139 string Disk\ read\ error\0\r 596>>>>156 string Loading\ ...\0 \b, DR-DOS (3.41) Bootloader 597#DRBIOS.SYS 598>>>>>44 ubyte&0xDF >0 599>>>>>>44 string x \b %-.6s 600>>>>>>>50 ubyte&0xDF >0 601>>>>>>>>50 string x \b%-.2s 602>>>>>>52 ubyte&0xDF >0 603>>>>>>>52 string x \b.%-.3s 604# 605>70 string IBMBIO\ \ COM 606>>472 string Cannot\ load\ DOS!\ 607>>>489 string Any\ key\ to\ retry \b, DR-DOS Bootloader 608>>471 string Cannot\ load\ DOS\ 609>>487 string press\ key\ to\ retry \b, Open-DOS Bootloader 610#?? 611>444 string KERNEL\ \ SYS 612>>314 string BOOT\ error! \b, FREE-DOS Bootloader 613>499 string KERNEL\ \ SYS 614>>305 string BOOT\ err!\0 \b, Free-DOS Bootloader 615>449 string KERNEL\ \ SYS 616>>319 string BOOT\ error! \b, FREE-DOS 0.5 Bootloader 617# 618>449 string Loading\ FreeDOS 619>>0x1AF ulelong >0 \b, FREE-DOS 0.95,1.0 Bootloader 620>>>497 ubyte&0xDF >0 621>>>>497 string x \b %-.6s 622>>>>>503 ubyte&0xDF >0 623>>>>>>503 string x \b%-.1s 624>>>>>>>504 ubyte&0xDF >0 625>>>>>>>>504 string x \b%-.1s 626>>>>505 ubyte&0xDF >0 627>>>>>505 string x \b.%-.3s 628# 629>331 string Error!.0 \b, FREE-DOS 1.0 bootloader 630# 631>125 string Loading\ FreeDOS...\r 632>>311 string BOOT\ error!\r \b, FREE-DOS bootloader 633>>>441 ubyte&0xDF >0 634>>>>441 string x \b %-.6s 635>>>>>447 ubyte&0xDF >0 636>>>>>>447 string x \b%-.1s 637>>>>>>>448 ubyte&0xDF >0 638>>>>>>>>448 string x \b%-.1s 639>>>>449 ubyte&0xDF >0 640>>>>>449 string x \b.%-.3s 641>124 string FreeDOS\0 642>>331 string \ err\0 \b, FREE-DOS BETa 0.9 Bootloader 643# DOS names like KERNEL.SYS,KERNEL16.SYS,KERNEL32.SYS,METAKERN.SYS are 8 right space padded bytes+3 bytes 644>>>497 ubyte&0xDF >0 645>>>>497 string x \b %-.6s 646>>>>>503 ubyte&0xDF >0 647>>>>>>503 string x \b%-.1s 648>>>>>>>504 ubyte&0xDF >0 649>>>>>>>>504 string x \b%-.1s 650>>>>505 ubyte&0xDF >0 651>>>>>505 string x \b.%-.3s 652>>333 string \ err\0 \b, FREE-DOS BEta 0.9 Bootloader 653>>>497 ubyte&0xDF >0 654>>>>497 string x \b %-.6s 655>>>>>503 ubyte&0xDF >0 656>>>>>>503 string x \b%-.1s 657>>>>>>>504 ubyte&0xDF >0 658>>>>>>>>504 string x \b%-.1s 659>>>>505 ubyte&0xDF >0 660>>>>>505 string x \b.%-.3s 661>>334 string \ err\0 \b, FREE-DOS Beta 0.9 Bootloader 662>>>497 ubyte&0xDF >0 663>>>>497 string x \b %-.6s 664>>>>>503 ubyte&0xDF >0 665>>>>>>503 string x \b%-.1s 666>>>>>>>504 ubyte&0xDF >0 667>>>>>>>>504 string x \b%-.1s 668>>>>505 ubyte&0xDF >0 669>>>>>505 string x \b.%-.3s 670>336 string Error!\ 671>>343 string Hit\ a\ key\ to\ reboot. \b, FREE-DOS Beta 0.9sr1 Bootloader 672>>>497 ubyte&0xDF >0 673>>>>497 string x \b %-.6s 674>>>>>503 ubyte&0xDF >0 675>>>>>>503 string x \b%-.1s 676>>>>>>>504 ubyte&0xDF >0 677>>>>>>>>504 string x \b%-.1s 678>>>>505 ubyte&0xDF >0 679>>>>>505 string x \b.%-.3s 680# added by Joerg Jenderek 681# http://www.visopsys.org/ 682# http://partitionlogic.org.uk/ 683# OEM-ID=Visopsys 684>478 ulelong 0 685>>(1.b+326) string I/O\ Error\ reading\ 686>>>(1.b+344) string Visopsys\ loader\r 687>>>>(1.b+361) string Press\ any\ key\ to\ continue.\r \b, Visopsys loader 688# http://alexfru.chat.ru/epm.html#bootprog 689>494 ubyte >0x4D 690>>495 string >E 691>>>495 string <S 692#OEM-ID is not reliable 693>>>>3 string BootProg 694# It just looks for a program file name at the root directory 695# and loads corresponding file with following execution. 696# DOS names like STARTUP.BIN,STARTUPC.COM,STARTUPE.EXE are 8 right space padded bytes+3 bytes 697>>>>499 ubyte&0xDF >0 \b, COM/EXE Bootloader 698>>>>>499 string x \b %-.1s 699>>>>>>500 ubyte&0xDF >0 700>>>>>>>500 string x \b%-.1s 701>>>>>>>>501 ubyte&0xDF >0 702>>>>>>>>>501 string x \b%-.1s 703>>>>>>>>>>502 ubyte&0xDF >0 704>>>>>>>>>>>502 string x \b%-.1s 705>>>>>>>>>>>>503 ubyte&0xDF >0 706>>>>>>>>>>>>>503 string x \b%-.1s 707>>>>>>>>>>>>>>504 ubyte&0xDF >0 708>>>>>>>>>>>>>>>504 string x \b%-.1s 709>>>>>>>>>>>>>>>>505 ubyte&0xDF >0 710>>>>>>>>>>>>>>>>>505 string x \b%-.1s 711>>>>>>>>>>>>>>>>>>506 ubyte&0xDF >0 712>>>>>>>>>>>>>>>>>>>506 string x \b%-.1s 713#name extension 714>>>>>507 ubyte&0xDF >0 \b. 715>>>>>>507 string x \b%-.1s 716>>>>>>>508 ubyte&0xDF >0 717>>>>>>>>508 string x \b%-.1s 718>>>>>>>>>509 ubyte&0xDF >0 719>>>>>>>>>>509 string x \b%-.1s 720#If the boot sector fails to read any other sector, 721#it prints a very short message ("RE") to the screen and hangs the computer. 722#If the boot sector fails to find needed program in the root directory, 723#it also hangs with another message ("NF"). 724>>>>>492 string RENF \b, FAT (12 bit) 725>>>>>495 string RENF \b, FAT (16 bit) 726# http://alexfru.chat.ru/epm.html#bootprog 727>494 ubyte >0x4D 728>>495 string >E 729>>>495 string <S 730#OEM-ID is not reliable 731>>>>3 string BootProg 732# It just looks for a program file name at the root directory 733# and loads corresponding file with following execution. 734# DOS names like STARTUP.BIN,STARTUPC.COM,STARTUPE.EXE are 8 right space padded bytes+3 bytes 735>>>>499 ubyte&0xDF >0 \b, COM/EXE Bootloader 736>>>>>499 string x \b %-.1s 737>>>>>>500 ubyte&0xDF >0 738>>>>>>>500 string x \b%-.1s 739>>>>>>>>501 ubyte&0xDF >0 740>>>>>>>>>501 string x \b%-.1s 741>>>>>>>>>>502 ubyte&0xDF >0 742>>>>>>>>>>>502 string x \b%-.1s 743>>>>>>>>>>>>503 ubyte&0xDF >0 744>>>>>>>>>>>>>503 string x \b%-.1s 745>>>>>>>>>>>>>>504 ubyte&0xDF >0 746>>>>>>>>>>>>>>>504 string x \b%-.1s 747>>>>>>>>>>>>>>>>505 ubyte&0xDF >0 748>>>>>>>>>>>>>>>>>505 string x \b%-.1s 749>>>>>>>>>>>>>>>>>>506 ubyte&0xDF >0 750>>>>>>>>>>>>>>>>>>>506 string x \b%-.1s 751#name extension 752>>>>>507 ubyte&0xDF >0 \b. 753>>>>>>507 string x \b%-.1s 754>>>>>>>508 ubyte&0xDF >0 755>>>>>>>>508 string x \b%-.1s 756>>>>>>>>>509 ubyte&0xDF >0 757>>>>>>>>>>509 string x \b%-.1s 758#If the boot sector fails to read any other sector, 759#it prints a very short message ("RE") to the screen and hangs the computer. 760#If the boot sector fails to find needed program in the root directory, 761#it also hangs with another message ("NF"). 762>>>>>492 string RENF \b, FAT (12 bit) 763>>>>>495 string RENF \b, FAT (16 bit) 764# x86 bootloader end 765# updated by Joerg Jenderek at Sep 2007 766>3 ubyte 0 767#no active flag 768>>446 ubyte 0 769# partition 1 not empty 770>>>450 ubyte >0 771# partitions 3,4 empty 772>>>>482 ubyte 0 773>>>>>498 ubyte 0 774# partition 2 ID=0,5,15 775>>>>>>466 ubyte <0x10 776>>>>>>>466 ubyte 0x05 \b, extended partition table 777>>>>>>>466 ubyte 0x0F \b, extended partition table (LBA) 778>>>>>>>466 ubyte 0x0 \b, extended partition table (last) 779# JuMP short bootcodeoffset NOP assembler instructions will usually be EB xx 90 780# http://mirror.href.com/thestarman/asm/2bytejumps.htmm#FWD 781# older drives may use Near JuMP instruction E9 xx xx 782>0 lelong&0x009000EB 0x009000EB 783>0 lelong&0x000000E9 0x000000E9 784# minimal short forward jump found 03cx?? 785# maximal short forward jump is 07fx 786>1 ubyte <0xff \b, code offset 0x%x 787# mtools-3.9.8/msdos.h 788# usual values are marked with comments to get only informations of strange FAT systems 789# valid sectorsize must be a power of 2 from 32 to 32768 790>>11 uleshort&0x000f x 791>>>11 uleshort <32769 792>>>>11 uleshort >31 793>>>>>21 ubyte&0xf0 0xF0 794>>>>>>3 string >\0 \b, OEM-ID "%8.8s" 795#http://mirror.href.com/thestarman/asm/debug/debug2.htm#IHC 796>>>>>>>8 string IHC \b cached by Windows 9M 797>>>>>>11 uleshort >512 \b, Bytes/sector %u 798#>>>>>>11 uleshort =512 \b, Bytes/sector %u=512 (usual) 799>>>>>>11 uleshort <512 \b, Bytes/sector %u 800>>>>>>13 ubyte >1 \b, sectors/cluster %u 801#>>>>>>13 ubyte =1 \b, sectors/cluster %u (usual on Floppies) 802>>>>>>14 uleshort >32 \b, reserved sectors %u 803#>>>>>>14 uleshort =32 \b, reserved sectors %u (usual Fat32) 804#>>>>>>14 uleshort >1 \b, reserved sectors %u 805#>>>>>>14 uleshort =1 \b, reserved sectors %u (usual FAT12,FAT16) 806>>>>>>14 uleshort <1 \b, reserved sectors %u 807>>>>>>16 ubyte >2 \b, FATs %u 808#>>>>>>16 ubyte =2 \b, FATs %u (usual) 809>>>>>>16 ubyte =1 \b, FAT %u 810>>>>>>16 ubyte >0 811>>>>>>17 uleshort >0 \b, root entries %u 812#>>>>>>17 uleshort =0 \b, root entries %u=0 (usual Fat32) 813>>>>>>19 uleshort >0 \b, sectors %u (volumes <=32 MB) 814#>>>>>>19 uleshort =0 \b, sectors %u=0 (usual Fat32) 815>>>>>>21 ubyte >0xF0 \b, Media descriptor 0x%x 816#>>>>>>21 ubyte =0xF0 \b, Media descriptor 0x%x (usual floppy) 817>>>>>>21 ubyte <0xF0 \b, Media descriptor 0x%x 818>>>>>>22 uleshort >0 \b, sectors/FAT %u 819#>>>>>>22 uleshort =0 \b, sectors/FAT %u=0 (usual Fat32) 820>>>>>>26 ubyte >2 \b, heads %u 821#>>>>>>26 ubyte =2 \b, heads %u (usual floppy) 822>>>>>>26 ubyte =1 \b, heads %u 823#skip for Digital Research DOS (version 3.41) 1440 kB Bootdisk 824>>>>>>38 ubyte !0x70 825>>>>>>>28 ulelong >0 \b, hidden sectors %u 826#>>>>>>>28 ulelong =0 \b, hidden sectors %u (usual floppy) 827>>>>>>>32 ulelong >0 \b, sectors %u (volumes > 32 MB) 828#>>>>>>>32 ulelong =0 \b, sectors %u (volumes > 32 MB) 829# FAT<32 specific 830>>>>>>82 string !FAT32 831#>>>>>>>36 ubyte 0x80 \b, physical drive 0x%x=0x80 (usual harddisk) 832#>>>>>>>36 ubyte 0 \b, physical drive 0x%x=0 (usual floppy) 833>>>>>>>36 ubyte !0x80 834>>>>>>>>36 ubyte !0 \b, physical drive 0x%x 835>>>>>>>37 ubyte >0 \b, reserved 0x%x 836#>>>>>>>37 ubyte =0 \b, reserved 0x%x 837>>>>>>>38 ubyte >0x29 \b, dos < 4.0 BootSector (0x%x) 838>>>>>>>38 ubyte <0x29 \b, dos < 4.0 BootSector (0x%x) 839>>>>>>>38 ubyte =0x29 840>>>>>>>>39 ulelong x \b, serial number 0x%x 841>>>>>>>>43 string <NO\ NAME \b, label: "%11.11s" 842>>>>>>>>43 string >NO\ NAME \b, label: "%11.11s" 843>>>>>>>>43 string =NO\ NAME \b, unlabeled 844>>>>>>>54 string FAT \b, FAT 845>>>>>>>>54 string FAT12 \b (12 bit) 846>>>>>>>>54 string FAT16 \b (16 bit) 847# FAT32 specific 848>>>>>>82 string FAT32 \b, FAT (32 bit) 849>>>>>>>36 ulelong x \b, sectors/FAT %u 850>>>>>>>40 uleshort >0 \b, extension flags %u 851#>>>>>>>40 uleshort =0 \b, extension flags %u 852>>>>>>>42 uleshort >0 \b, fsVersion %u 853#>>>>>>>42 uleshort =0 \b, fsVersion %u (usual) 854>>>>>>>44 ulelong >2 \b, rootdir cluster %u 855#>>>>>>>44 ulelong =2 \b, rootdir cluster %u 856#>>>>>>>44 ulelong =1 \b, rootdir cluster %u 857>>>>>>>48 uleshort >1 \b, infoSector %u 858#>>>>>>>48 uleshort =1 \b, infoSector %u (usual) 859>>>>>>>48 uleshort <1 \b, infoSector %u 860>>>>>>>50 uleshort >6 \b, Backup boot sector %u 861#>>>>>>>50 uleshort =6 \b, Backup boot sector %u (usual) 862>>>>>>>50 uleshort <6 \b, Backup boot sector %u 863>>>>>>>54 ulelong >0 \b, reserved1 0x%x 864>>>>>>>58 ulelong >0 \b, reserved2 0x%x 865>>>>>>>62 ulelong >0 \b, reserved3 0x%x 866# same structure as FAT1X 867>>>>>>>64 ubyte >0x80 \b, physical drive 0x%x 868#>>>>>>>64 ubyte =0x80 \b, physical drive 0x%x=80 (usual harddisk) 869>>>>>>>64 ubyte&0x7F >0 \b, physical drive 0x%x 870#>>>>>>>64 ubyte =0 \b, physical drive 0x%x=0 (usual floppy) 871>>>>>>>65 ubyte >0 \b, reserved 0x%x 872>>>>>>>66 ubyte >0x29 \b, dos < 4.0 BootSector (0x%x) 873>>>>>>>66 ubyte <0x29 \b, dos < 4.0 BootSector (0x%x) 874>>>>>>>66 ubyte =0x29 875>>>>>>>>67 ulelong x \b, serial number 0x%x 876>>>>>>>>71 string <NO\ NAME \b, label: "%11.11s" 877>>>>>>>71 string >NO\ NAME \b, label: "%11.11s" 878>>>>>>>71 string =NO\ NAME \b, unlabeled 879### FATs end 880>0x200 lelong 0x82564557 \b, BSD disklabel 881# FATX 8820 string FATX FATX filesystem data 883 884 885# Minix filesystems - Juan Cespedes <cespedes@debian.org> 8860x410 leshort 0x137f 887!:strength / 2 888>0x402 beshort < 100 Minix filesystem, V1, %d zones 889>0x1e string minix \b, bootable 8900x410 beshort 0x137f 891!:strength / 2 892>0x402 beshort < 100 Minix filesystem, V1 (big endian), %d zones 893>0x1e string minix \b, bootable 8940x410 leshort 0x138f 895!:strength / 2 896>0x402 beshort < 100 Minix filesystem, V1, 30 char names, %d zones 897>0x1e string minix \b, bootable 8980x410 beshort 0x138f 899!:strength / 2 900>0x402 beshort < 100 Minix filesystem, V1, 30 char names (big endian), %d zones 901>0x1e string minix \b, bootable 9020x410 leshort 0x2468 903>0x402 beshort < 100 Minix filesystem, V2, %d zones 904>0x1e string minix \b, bootable 9050x410 beshort 0x2468 906>0x402 beshort < 100 Minix filesystem, V2 (big endian), %d zones 907>0x1e string minix \b, bootable 908 9090x410 leshort 0x2478 910>0x402 beshort < 100 Minix filesystem, V2, 30 char names, %d zones 911>0x1e string minix \b, bootable 9120x410 leshort 0x2478 913>0x402 beshort < 100 Minix filesystem, V2, 30 char names, %d zones 914>0x1e string minix \b, bootable 9150x410 beshort 0x2478 916>0x402 beshort !0 Minix filesystem, V2, 30 char names (big endian), %d zones 917>0x1e string minix \b, bootable 9180x410 leshort 0x4d5a 919>0x402 beshort !0 Minix filesystem, V3, %d zones 920>0x1e string minix \b, bootable 921 922# romfs filesystems - Juan Cespedes <cespedes@debian.org> 9230 string -rom1fs- romfs filesystem, version 1 924>8 belong x %d bytes, 925>16 string x named %s. 926 927# netboot image - Juan Cespedes <cespedes@debian.org> 9280 lelong 0x1b031336L Netboot image, 929>4 lelong&0xFFFFFF00 0 930>>4 lelong&0x100 0x000 mode 2 931>>4 lelong&0x100 0x100 mode 3 932>4 lelong&0xFFFFFF00 !0 unknown mode 933 9340x18b string OS/2 OS/2 Boot Manager 935 936# updated by Joerg Jenderek at Oct 2008!! 937# http://syslinux.zytor.com/iso.php 9380 ulelong 0x7c40eafa isolinux Loader 939# http://syslinux.zytor.com/pxe.php 9400 ulelong 0x007c05ea pxelinux Loader 9410 ulelong 0x60669c66 pxelinux Loader 942 943# added by Joerg Jenderek 944# In the second sector (+0x200) are variables according to grub-0.97/stage2/asm.S or 945# grub-1.94/kern/i386/pc/startup.S 946# http://www.gnu.org/software/grub/manual/grub.html#Embedded-data 947# usual values are marked with comments to get only informations of strange GRUB loaders 9480x200 uleshort 0x70EA 949# found only version 3.{1,2} 950>0x206 ubeshort >0x0300 951# GRUB version (0.5.)95,0.93,0.94,0.96,0.97 > "00" 952>>0x212 ubyte >0x29 953>>>0x213 ubyte >0x29 954# not iso9660_stage1_5 955#>>>0 ulelong&0x00BE5652 0x00BE5652 956>>>>0x213 ubyte >0x29 GRand Unified Bootloader 957# config_file for stage1_5 is 0xffffffff + default "/boot/grub/stage2" 958>>>>0x217 ubyte 0xFF stage1_5 959>>>>0x217 ubyte <0xFF stage2 960>>>>0x206 ubyte x \b version %u 961>>>>0x207 ubyte x \b.%u 962# module_size for 1.94 963>>>>0x208 ulelong <0xffffff \b, installed partition %u 964#>>>>0x208 ulelong =0xffffff \b, %u (default) 965>>>>0x208 ulelong >0xffffff \b, installed partition %u 966# GRUB 0.5.95 unofficial 967>>>>0x20C ulelong&0x2E300000 0x2E300000 968# 0=stage2 1=ffs 2=e2fs 3=fat 4=minix 5=reiserfs 969>>>>>0x20C ubyte x \b, identifier 0x%x 970#>>>>>0x20D ubyte =0 \b, LBA flag 0x%x (default) 971>>>>>0x20D ubyte >0 \b, LBA flag 0x%x 972# GRUB version as string 973>>>>>0x20E string >\0 \b, GRUB version %-s 974# for stage1_5 is 0xffffffff + config_file "/boot/grub/stage2" default 975>>>>>>0x215 ulong 0xffffffff 976>>>>>>>0x219 string >\0 \b, configuration file %-s 977>>>>>>0x215 ulong !0xffffffff 978>>>>>>>0x215 string >\0 \b, configuration file %-s 979# newer GRUB versions 980>>>>0x20C ulelong&0x2E300000 !0x2E300000 981##>>>>>0x20C ulelong =0 \b, saved entry %d (usual) 982>>>>>0x20C ulelong >0 \b, saved entry %d 983# for 1.94 contains kernel image size 984# for 0.93,0.94,0.96,0.97 985# 0=stage2 1=ffs 2=e2fs 3=fat 4=minix 5=reiserfs 6=vstafs 7=jfs 8=xfs 9=iso9660 a=ufs2 986>>>>>0x210 ubyte x \b, identifier 0x%x 987# The flag for LBA forcing is in most cases 0 988#>>>>>0x211 ubyte =0 \b, LBA flag 0x%x (default) 989>>>>>0x211 ubyte >0 \b, LBA flag 0x%x 990# GRUB version as string 991>>>>>0x212 string >\0 \b, GRUB version %-s 992# for stage1_5 is 0xffffffff + config_file "/boot/grub/stage2" default 993>>>>>0x217 ulong 0xffffffff 994>>>>>>0x21b string >\0 \b, configuration file %-s 995>>>>>0x217 ulong !0xffffffff 996>>>>>>0x217 string >\0 \b, configuration file %-s 997 9989564 lelong 0x00011954 Unix Fast File system [v1] (little-endian), 999>8404 string x last mounted on %s, 1000#>9504 ledate x last checked at %s, 1001>8224 ledate x last written at %s, 1002>8401 byte x clean flag %d, 1003>8228 lelong x number of blocks %d, 1004>8232 lelong x number of data blocks %d, 1005>8236 lelong x number of cylinder groups %d, 1006>8240 lelong x block size %d, 1007>8244 lelong x fragment size %d, 1008>8252 lelong x minimum percentage of free blocks %d, 1009>8256 lelong x rotational delay %dms, 1010>8260 lelong x disk rotational speed %drps, 1011>8320 lelong 0 TIME optimization 1012>8320 lelong 1 SPACE optimization 1013 101442332 lelong 0x19540119 Unix Fast File system [v2] (little-endian) 1015>&-1164 string x last mounted on %s, 1016>&-696 string >\0 volume name %s, 1017>&-304 leqldate x last written at %s, 1018>&-1167 byte x clean flag %d, 1019>&-1168 byte x readonly flag %d, 1020>&-296 lequad x number of blocks %lld, 1021>&-288 lequad x number of data blocks %lld, 1022>&-1332 lelong x number of cylinder groups %d, 1023>&-1328 lelong x block size %d, 1024>&-1324 lelong x fragment size %d, 1025>&-180 lelong x average file size %d, 1026>&-176 lelong x average number of files in dir %d, 1027>&-272 lequad x pending blocks to free %lld, 1028>&-264 lelong x pending inodes to free %ld, 1029>&-664 lequad x system-wide uuid %0llx, 1030>&-1316 lelong x minimum percentage of free blocks %d, 1031>&-1248 lelong 0 TIME optimization 1032>&-1248 lelong 1 SPACE optimization 1033 103466908 lelong 0x19540119 Unix Fast File system [v2] (little-endian) 1035>&-1164 string x last mounted on %s, 1036>&-696 string >\0 volume name %s, 1037>&-304 leqldate x last written at %s, 1038>&-1167 byte x clean flag %d, 1039>&-1168 byte x readonly flag %d, 1040>&-296 lequad x number of blocks %lld, 1041>&-288 lequad x number of data blocks %lld, 1042>&-1332 lelong x number of cylinder groups %d, 1043>&-1328 lelong x block size %d, 1044>&-1324 lelong x fragment size %d, 1045>&-180 lelong x average file size %d, 1046>&-176 lelong x average number of files in dir %d, 1047>&-272 lequad x pending blocks to free %lld, 1048>&-264 lelong x pending inodes to free %ld, 1049>&-664 lequad x system-wide uuid %0llx, 1050>&-1316 lelong x minimum percentage of free blocks %d, 1051>&-1248 lelong 0 TIME optimization 1052>&-1248 lelong 1 SPACE optimization 1053 10549564 belong 0x00011954 Unix Fast File system [v1] (big-endian), 1055>7168 belong 0x4c41424c Apple UFS Volume 1056>>7186 string x named %s, 1057>>7176 belong x volume label version %d, 1058>>7180 bedate x created on %s, 1059>8404 string x last mounted on %s, 1060#>9504 bedate x last checked at %s, 1061>8224 bedate x last written at %s, 1062>8401 byte x clean flag %d, 1063>8228 belong x number of blocks %d, 1064>8232 belong x number of data blocks %d, 1065>8236 belong x number of cylinder groups %d, 1066>8240 belong x block size %d, 1067>8244 belong x fragment size %d, 1068>8252 belong x minimum percentage of free blocks %d, 1069>8256 belong x rotational delay %dms, 1070>8260 belong x disk rotational speed %drps, 1071>8320 belong 0 TIME optimization 1072>8320 belong 1 SPACE optimization 1073 107442332 belong 0x19540119 Unix Fast File system [v2] (big-endian) 1075>&-1164 string x last mounted on %s, 1076>&-696 string >\0 volume name %s, 1077>&-304 beqldate x last written at %s, 1078>&-1167 byte x clean flag %d, 1079>&-1168 byte x readonly flag %d, 1080>&-296 bequad x number of blocks %lld, 1081>&-288 bequad x number of data blocks %lld, 1082>&-1332 belong x number of cylinder groups %d, 1083>&-1328 belong x block size %d, 1084>&-1324 belong x fragment size %d, 1085>&-180 belong x average file size %d, 1086>&-176 belong x average number of files in dir %d, 1087>&-272 bequad x pending blocks to free %lld, 1088>&-264 belong x pending inodes to free %ld, 1089>&-664 bequad x system-wide uuid %0llx, 1090>&-1316 belong x minimum percentage of free blocks %d, 1091>&-1248 belong 0 TIME optimization 1092>&-1248 belong 1 SPACE optimization 1093 109466908 belong 0x19540119 Unix Fast File system [v2] (big-endian) 1095>&-1164 string x last mounted on %s, 1096>&-696 string >\0 volume name %s, 1097>&-304 beqldate x last written at %s, 1098>&-1167 byte x clean flag %d, 1099>&-1168 byte x readonly flag %d, 1100>&-296 bequad x number of blocks %lld, 1101>&-288 bequad x number of data blocks %lld, 1102>&-1332 belong x number of cylinder groups %d, 1103>&-1328 belong x block size %d, 1104>&-1324 belong x fragment size %d, 1105>&-180 belong x average file size %d, 1106>&-176 belong x average number of files in dir %d, 1107>&-272 bequad x pending blocks to free %lld, 1108>&-264 belong x pending inodes to free %ld, 1109>&-664 bequad x system-wide uuid %0llx, 1110>&-1316 belong x minimum percentage of free blocks %d, 1111>&-1248 belong 0 TIME optimization 1112>&-1248 belong 1 SPACE optimization 1113 1114# ext2/ext3 filesystems - Andreas Dilger <adilger@dilger.ca> 1115# ext4 filesystem - Eric Sandeen <sandeen@sandeen.net> 1116# volume label and UUID Russell Coker 1117# http://etbe.coker.com.au/2008/07/08/label-vs-uuid-vs-device/ 11180x438 leshort 0xEF53 Linux 1119>0x44c lelong x rev %d 1120>0x43e leshort x \b.%d 1121# No journal? ext2 1122>0x45c lelong ^0x0000004 ext2 filesystem data 1123>>0x43a leshort ^0x0000001 (mounted or unclean) 1124# Has a journal? ext3 or ext4 1125>0x45c lelong &0x0000004 1126# and small INCOMPAT? 1127>>0x460 lelong <0x0000040 1128# and small RO_COMPAT? 1129>>>0x464 lelong <0x0000008 ext3 filesystem data 1130# else large RO_COMPAT? 1131>>>0x464 lelong >0x0000007 ext4 filesystem data 1132# else large INCOMPAT? 1133>>0x460 lelong >0x000003f ext4 filesystem data 1134>0x468 belong x \b, UUID=%08x 1135>0x46c beshort x \b-%04x 1136>0x46e beshort x \b-%04x 1137>0x470 beshort x \b-%04x 1138>0x472 belong x \b-%08x 1139>0x476 beshort x \b%04x 1140>0x478 string >0 \b, volume name "%s" 1141# General flags for any ext* fs 1142>0x460 lelong &0x0000004 (needs journal recovery) 1143>0x43a leshort &0x0000002 (errors) 1144# INCOMPAT flags 1145>0x460 lelong &0x0000001 (compressed) 1146#>0x460 lelong &0x0000002 (filetype) 1147#>0x460 lelong &0x0000010 (meta bg) 1148>0x460 lelong &0x0000040 (extents) 1149>0x460 lelong &0x0000080 (64bit) 1150#>0x460 lelong &0x0000100 (mmp) 1151#>0x460 lelong &0x0000200 (flex bg) 1152# RO_INCOMPAT flags 1153#>0x464 lelong &0x0000001 (sparse super) 1154>0x464 lelong &0x0000002 (large files) 1155>0x464 lelong &0x0000008 (huge files) 1156#>0x464 lelong &0x0000010 (gdt checksum) 1157#>0x464 lelong &0x0000020 (many subdirs) 1158#>0x463 lelong &0x0000040 (extra isize) 1159 1160# SGI disk labels - Nathan Scott <nathans@debian.org> 11610 belong 0x0BE5A941 SGI disk label (volume header) 1162 1163# SGI XFS filesystem - Nathan Scott <nathans@debian.org> 11640 belong 0x58465342 SGI XFS filesystem data 1165>0x4 belong x (blksz %d, 1166>0x68 beshort x inosz %d, 1167>0x64 beshort ^0x2004 v1 dirs) 1168>0x64 beshort &0x2004 v2 dirs) 1169 1170############################################################################ 1171# Minix-ST kernel floppy 11720x800 belong 0x46fc2700 Atari-ST Minix kernel image 1173>19 string \240\5\371\5\0\011\0\2\0 \b, 720k floppy 1174>19 string \320\2\370\5\0\011\0\1\0 \b, 360k floppy 1175 1176############################################################################ 1177# Hmmm, is this a better way of detecting _standard_ floppy images ? 117819 string \320\2\360\3\0\011\0\1\0 DOS floppy 360k 1179>0x1FE leshort 0xAA55 \b, x86 hard disk boot sector 118019 string \240\5\371\3\0\011\0\2\0 DOS floppy 720k 1181>0x1FE leshort 0xAA55 \b, x86 hard disk boot sector 118219 string \100\013\360\011\0\022\0\2\0 DOS floppy 1440k 1183>0x1FE leshort 0xAA55 \b, x86 hard disk boot sector 1184 118519 string \240\5\371\5\0\011\0\2\0 DOS floppy 720k, IBM 1186>0x1FE leshort 0xAA55 \b, x86 hard disk boot sector 118719 string \100\013\371\5\0\011\0\2\0 DOS floppy 1440k, mkdosfs 1188>0x1FE leshort 0xAA55 \b, x86 hard disk boot sector 1189 119019 string \320\2\370\5\0\011\0\1\0 Atari-ST floppy 360k 119119 string \240\5\371\5\0\011\0\2\0 Atari-ST floppy 720k 1192 1193# Valid media descriptor bytes for MS-DOS: 1194# 1195# Byte Capacity Media Size and Type 1196# ------------------------------------------------- 1197# 1198# F0 2.88 MB 3.5-inch, 2-sided, 36-sector 1199# F0 1.44 MB 3.5-inch, 2-sided, 18-sector 1200# F9 720K 3.5-inch, 2-sided, 9-sector 1201# F9 1.2 MB 5.25-inch, 2-sided, 15-sector 1202# FD 360K 5.25-inch, 2-sided, 9-sector 1203# FF 320K 5.25-inch, 2-sided, 8-sector 1204# FC 180K 5.25-inch, 1-sided, 9-sector 1205# FE 160K 5.25-inch, 1-sided, 8-sector 1206# FE 250K 8-inch, 1-sided, single-density 1207# FD 500K 8-inch, 2-sided, single-density 1208# FE 1.2 MB 8-inch, 2-sided, double-density 1209# F8 ----- Fixed disk 1210# 1211# FC xxxK Apricot 70x1x9 boot disk. 1212# 1213# Originally a bitmap: 1214# xxxxxxx0 Not two sided 1215# xxxxxxx1 Double sided 1216# xxxxxx0x Not 8 SPT 1217# xxxxxx1x 8 SPT 1218# xxxxx0xx Not Removable drive 1219# xxxxx1xx Removable drive 1220# 11111xxx Must be one. 1221# 1222# But now it's rather random: 1223# 111111xx Low density disk 1224# 00 SS, Not 8 SPT 1225# 01 DS, Not 8 SPT 1226# 10 SS, 8 SPT 1227# 11 DS, 8 SPT 1228# 1229# 11111001 Double density 3� floppy disk, high density 5� 1230# 11110000 High density 3� floppy disk 1231# 11111000 Hard disk any format 1232# 1233 1234# CDROM Filesystems 1235# Modified for UDF by gerardo.cacciari@gmail.com 123632769 string CD001 # 1237!:mime application/x-iso9660-image 1238>38913 string !NSR0 ISO 9660 CD-ROM filesystem data 1239>38913 string NSR0 UDF filesystem data 1240>>38917 string 1 (version 1.0) 1241>>38917 string 2 (version 1.5) 1242>>38917 string 3 (version 2.0) 1243>>38917 byte >0x33 (unknown version, ID 0x%X) 1244>>38917 byte <0x31 (unknown version, ID 0x%X) 1245# "application id" which appears to be used as a volume label 1246>32808 string >\0 '%s' 1247>34816 string \000CD001\001EL\ TORITO\ SPECIFICATION (bootable) 124837633 string CD001 ISO 9660 CD-ROM filesystem data (raw 2352 byte sectors) 1249!:mime application/x-iso9660-image 125032776 string CDROM High Sierra CD-ROM filesystem data 1251 1252# .cso files 12530 string CISO Compressed ISO CD image 1254 1255# cramfs filesystem - russell@coker.com.au 12560 lelong 0x28cd3d45 Linux Compressed ROM File System data, little endian 1257>4 lelong x size %lu 1258>8 lelong &1 version #2 1259>8 lelong &2 sorted_dirs 1260>8 lelong &4 hole_support 1261>32 lelong x CRC 0x%x, 1262>36 lelong x edition %lu, 1263>40 lelong x %lu blocks, 1264>44 lelong x %lu files 1265 12660 belong 0x28cd3d45 Linux Compressed ROM File System data, big endian 1267>4 belong x size %lu 1268>8 belong &1 version #2 1269>8 belong &2 sorted_dirs 1270>8 belong &4 hole_support 1271>32 belong x CRC 0x%x, 1272>36 belong x edition %lu, 1273>40 belong x %lu blocks, 1274>44 belong x %lu files 1275 1276# reiserfs - russell@coker.com.au 12770x10034 string ReIsErFs ReiserFS V3.5 12780x10034 string ReIsEr2Fs ReiserFS V3.6 12790x10034 string ReIsEr3Fs ReiserFS V3.6.19 1280>0x1002c leshort x block size %d 1281>0x10032 leshort &2 (mounted or unclean) 1282>0x10000 lelong x num blocks %d 1283>0x10040 lelong 1 tea hash 1284>0x10040 lelong 2 yura hash 1285>0x10040 lelong 3 r5 hash 1286 1287# JFFS - russell@coker.com.au 12880 lelong 0x34383931 Linux Journalled Flash File system, little endian 12890 belong 0x34383931 Linux Journalled Flash File system, big endian 1290 1291# EST flat binary format (which isn't, but anyway) 1292# From: Mark Brown <broonie@sirena.org.uk> 12930 string ESTFBINR EST flat binary 1294 1295# Aculab VoIP firmware 1296# From: Mark Brown <broonie@sirena.org.uk> 12970 string VoIP\ Startup\ and Aculab VoIP firmware 1298>35 string x format %s 1299 1300# From: Mark Brown <broonie@sirena.org.uk> [old] 1301# From: Behan Webster <behanw@websterwood.com> 13020 belong 0x27051956 u-boot legacy uImage, 1303>32 string x %s, 1304>28 byte 0 Invalid os/ 1305>28 byte 1 OpenBSD/ 1306>28 byte 2 NetBSD/ 1307>28 byte 3 FreeBSD/ 1308>28 byte 4 4.4BSD/ 1309>28 byte 5 Linux/ 1310>28 byte 6 SVR4/ 1311>28 byte 7 Esix/ 1312>28 byte 8 Solaris/ 1313>28 byte 9 Irix/ 1314>28 byte 10 SCO/ 1315>28 byte 11 Dell/ 1316>28 byte 12 NCR/ 1317>28 byte 13 LynxOS/ 1318>28 byte 14 VxWorks/ 1319>28 byte 15 pSOS/ 1320>28 byte 16 QNX/ 1321>28 byte 17 Firmware/ 1322>28 byte 18 RTEMS/ 1323>28 byte 19 ARTOS/ 1324>28 byte 20 Unity OS/ 1325>28 byte 21 INTEGRITY/ 1326>29 byte 0 \bInvalid CPU, 1327>29 byte 1 \bAlpha, 1328>29 byte 2 \bARM, 1329>29 byte 3 \bIntel x86, 1330>29 byte 4 \bIA64, 1331>29 byte 5 \bMIPS, 1332>29 byte 6 \bMIPS 64-bit, 1333>29 byte 7 \bPowerPC, 1334>29 byte 8 \bIBM S390, 1335>29 byte 9 \bSuperH, 1336>29 byte 10 \bSparc, 1337>29 byte 11 \bSparc 64-bit, 1338>29 byte 12 \bM68K, 1339>29 byte 13 \bNios-32, 1340>29 byte 14 \bMicroBlaze, 1341>29 byte 15 \bNios-II, 1342>29 byte 16 \bBlackfin, 1343>29 byte 17 \bAVR32, 1344>29 byte 18 \bSTMicroelectronics ST200, 1345>30 byte 0 Invalid Image 1346>30 byte 1 Standalone Program 1347>30 byte 2 OS Kernel Image 1348>30 byte 3 RAMDisk Image 1349>30 byte 4 Multi-File Image 1350>30 byte 5 Firmware Image 1351>30 byte 6 Script File 1352>30 byte 7 Filesystem Image (any type) 1353>30 byte 8 Binary Flat Device Tree BLOB 1354>31 byte 0 (Not compressed), 1355>31 byte 1 (gzip), 1356>31 byte 2 (bzip2), 1357>31 byte 3 (lzma), 1358>12 belong x %d bytes, 1359>8 bedate x %s, 1360>16 belong x Load Address: 0x%08X, 1361>20 belong x Entry Point: 0x%08X, 1362>4 belong x Header CRC: 0x%08X, 1363>24 belong x Data CRC: 0x%08X 1364 1365# JFFS2 file system 13660 leshort 0x1984 Linux old jffs2 filesystem data little endian 13670 leshort 0x1985 Linux jffs2 filesystem data little endian 1368 1369# Squashfs 13700 string sqsh Squashfs filesystem, big endian, 1371>28 beshort x version %d. 1372>30 beshort x \b%d, 1373>28 beshort <3 1374>>8 belong x %d bytes, 1375>28 beshort >2 1376>>28 beshort <4 1377>>>63 bequad x %lld bytes, 1378>>28 beshort >3 1379>>>40 bequad x %lld bytes, 1380#>>67 belong x %d bytes, 1381>4 belong x %d inodes, 1382>28 beshort <2 1383>>32 beshort x blocksize: %d bytes, 1384>28 beshort >1 1385>>28 beshort <4 1386>>>51 belong x blocksize: %d bytes, 1387>>28 beshort >3 1388>>>12 belong x blocksize: %d bytes, 1389>28 beshort <4 1390>>39 bedate x created: %s 1391>28 beshort >3 1392>>8 bedate x created: %s 13930 string hsqs Squashfs filesystem, little endian, 1394>28 leshort x version %d. 1395>30 leshort x \b%d, 1396>28 leshort <3 1397>>8 lelong x %d bytes, 1398>28 leshort >2 1399>>28 leshort <4 1400>>>63 lequad x %lld bytes, 1401>>28 leshort >3 1402>>>40 lequad x %lld bytes, 1403#>>63 lelong x %d bytes, 1404>4 lelong x %d inodes, 1405>28 leshort <2 1406>>32 leshort x blocksize: %d bytes, 1407>28 leshort >1 1408>>28 leshort <4 1409>>>51 lelong x blocksize: %d bytes, 1410>>28 leshort >3 1411>>>12 lelong x blocksize: %d bytes, 1412>28 leshort <4 1413>>39 ledate x created: %s 1414>28 leshort >3 1415>>8 ledate x created: %s 1416 14170 string td\000 floppy image data (TeleDisk) 1418 1419# AFS Dump Magic 1420# From: Ty Sarna <tsarna@sarna.org> 14210 string \x01\xb3\xa1\x13\x22 AFS Dump 1422>&0 belong x (v%d) 1423>>&0 byte 0x76 1424>>>&0 belong x Vol %d, 1425>>>>&0 byte 0x6e 1426>>>>>&0 string x %s 1427>>>>>>&1 byte 0x74 1428>>>>>>>&0 beshort 2 1429>>>>>>>>&4 bedate x on: %s 1430>>>>>>>>&0 bedate =0 full dump 1431>>>>>>>>&0 bedate !0 incremental since: %s 1432 1433#---------------------------------------------------------- 1434#delta ISO Daniel Novotny (dnovotny@redhat.com) 14350 string DISO Delta ISO data 1436>4 belong x version %d 1437 1438# VMS backup savesets - gerardo.cacciari@gmail.com 1439# 14404 string \x01\x00\x01\x00\x01\x00 1441>(0.s+16) string \x01\x01 1442>>&(&0.b+8) byte 0x42 OpenVMS backup saveset data 1443>>>40 lelong x (block size %d, 1444>>>49 string >\0 original name '%s', 1445>>>2 short 1024 VAX generated) 1446>>>2 short 2048 AXP generated) 1447>>>2 short 4096 I64 generated) 1448 1449# Summary: Oracle Clustered Filesystem 1450# Created by: Aaron Botsis <redhat@digitalmafia.org> 14518 string OracleCFS Oracle Clustered Filesystem, 1452>4 long x rev %d 1453>0 long x \b.%d, 1454>560 string x label: %.64s, 1455>136 string x mountpoint: %.128s 1456 1457# Summary: Oracle ASM tagged volume 1458# Created by: Aaron Botsis <redhat@digitalmafia.org> 145932 string ORCLDISK Oracle ASM Volume, 1460>40 string x Disk Name: %0.12s 146132 string ORCLCLRD Oracle ASM Volume (cleared), 1462>40 string x Disk Name: %0.12s 1463 1464# Oracle Clustered Filesystem - Aaron Botsis <redhat@digitalmafia.org> 14658 string OracleCFS Oracle Clustered Filesystem, 1466>4 long x rev %d 1467>0 long x \b.%d, 1468>560 string x label: %.64s, 1469>136 string x mountpoint: %.128s 1470 1471# Oracle ASM tagged volume - Aaron Botsis <redhat@digitalmafia.org> 147232 string ORCLDISK Oracle ASM Volume, 1473>40 string x Disk Name: %0.12s 147432 string ORCLCLRD Oracle ASM Volume (cleared), 1475>40 string x Disk Name: %0.12s 1476 1477# Compaq/HP RILOE floppy image 1478# From: Dirk Jagdmann <doj@cubic.org> 14790 string CPQRFBLO Compaq/HP RILOE floppy image 1480 1481#------------------------------------------------------------------------------ 1482# Files-11 On-Disk Structure (File system for various RSX-11 and VMS flavours). 1483# These bits come from LBN 1 (home block) of ODS-1, ODS-2 and ODS-5 volumes, 1484# which is mapped to VBN 2 of [000000]INDEXF.SYS;1 - gerardo.cacciari@gmail.com 1485# 14861008 string DECFILE11 Files-11 On-Disk Structure 1487>525 byte x Level %d 1488>525 byte x (ODS-%d); 1489>1017 string A RSX-11, VAX/VMS or OpenVMS VAX file system; 1490>1017 string B 1491>>525 byte 2 VAX/VMS or OpenVMS file system; 1492>>525 byte 5 OpenVMS Alpha or Itanium file system; 1493>984 string x volume label is '%-12.12s' 1494 1495# From: Thomas Klausner <wiz@NetBSD.org> 1496# http://filext.com/file-extension/DAA 1497# describes the daa file format. The magic would be: 14980 string DAA\x0\x0\x0\x0\x0 PowerISO Direct-Access-Archive 1499 1500# From Albert Cahalan <acahalan@gmail.com> 1501# really le32 operation,destination,payloadsize (but quite predictable) 1502# 01 00 00 00 00 00 00 c0 00 02 00 00 15030 string \1\0\0\0\0\0\0\300\0\2\0\0 Marvell Libertas firmware 1504 1505# From Eric Sandeen 1506# GFS2 15070x10000 belong 0x01161970 1508>0x10018 belong 0x0000051d GFS1 Filesystem 1509>>0x10024 belong x (blocksize %d, 1510>>0x10060 string >\0 lockproto %s) 1511>0x10018 belong 0x00000709 GFS2 Filesystem 1512>>0x10024 belong x (blocksize %d, 1513>>0x10060 string >\0 lockproto %s) 1514 1515# BTRFS 15160x10040 string _BHRfS_M BTRFS Filesystem 1517>0x1012b string >\0 (label "%s", 1518>0x10090 lelong x sectorsize %d, 1519>0x10094 lelong x nodesize %d, 1520>0x10098 lelong x leafsize %d) 1521 1522 1523# dvdisaster's .ecc 1524# From: "Nelson A. de Oliveira" <naoliv@gmail.com> 15250 string *dvdisaster* dvdisaster error correction file 1526 1527# xfs metadump image 1528# mb_magic XFSM at 0; superblock magic XFSB at 1 << mb_blocklog 1529# but can we do the << ? For now it's always 512 (0x200) anyway. 15300 string XFSM 1531>0x200 string XFSB XFS filesystem metadump image 1532 1533# Type: CROM filesystem 1534# From: Werner Fink <werner@suse.de> 15350 string CROMFS CROMFS 1536>6 string >\0 \b version %2.2s, 1537>8 ulequad >0 \b block data at %lld, 1538>16 ulequad >0 \b fblock table at %lld, 1539>24 ulequad >0 \b inode table at %lld, 1540>32 ulequad >0 \b root at %lld, 1541>40 ulelong >0 \b fblock size = %ld, 1542>44 ulelong >0 \b block size = %ld, 1543>48 ulequad >0 \b bytes = %lld 1544 1545# Type: xfs metadump image 1546# From: Daniel Novotny <dnovotny@redhat.com> 1547# mb_magic XFSM at 0; superblock magic XFSB at 1 << mb_blocklog 1548# but can we do the << ? For now it's always 512 (0x200) anyway. 15490 string XFSM 1550>0x200 string XFSB XFS filesystem metadump image 1551 1552# Type: delta ISO 1553# From: Daniel Novotny <dnovotny@redhat.com> 15540 string DISO Delta ISO data, 1555>4 belong x version %d 1556 1557# JFS2 (Journaling File System) image. (Old JFS1 has superblock at 0x1000.) 1558# See linux/fs/jfs/jfs_superblock.h for layout; see jfs_filsys.h for flags. 1559# From: Adam Buchbinder <adam.buchbinder@gmail.com> 15600x8000 string JFS1 1561# Because it's text-only magic, check a binary value (version) to be sure. 1562# Should always be 2, but mkfs.jfs writes it as 1. Needs to be 2 or 1 to be 1563# mountable. 1564>&0 lelong <3 JFS2 filesystem image 1565# Label is followed by a UUID; we have to limit string length to avoid 1566# appending the UUID in the case of a 16-byte label. 1567>>&144 regex [\x20-\x7E]{1,16} (label "%s") 1568>>&0 lequad x \b, %lld blocks 1569>>&8 lelong x \b, blocksize %d 1570>>&32 lelong&0x00000006 >0 (dirty) 1571>>&36 lelong >0 (compressed) 1572