分区表项(细) Byte Offset Field Length Sample Value Field Description Boot Indicator 0x1BE 8 Bits 0x80 00=Do Not Use for Booting 80=Active partition (Use for Booting) 000001B0: 8601 000001C0:010007FEBF093F00-00004BF57F00 0x1BF 8 Bits 0x01 Starting Head 000001B0: 8061 000001C0:010007FEBF093F00-00004BF57F00 Starting Sector 0x01 Only the first 6 bits are used.The upper 2 bits of this byte are used by the Starting Cylinder 0x1C0 2 Byte field. 0x1C1 Word Starting Cylinder Uses 1 byte 2 bits from the Starting Sector 0x00 field to make up the cylinder value.The Starting Cylinder is a 10-bit number with a maximum value of 1023. 000001B0: 8001 000001c0:0100 67 FE BF O93F00-00004BF57F00 ence and Te 嵌入式系统实验室 EMBEDDED SYSTEM LABORATORY SUZHOU INSTITUTE FON ADVANCED STUDY OF USTC
分区表项(细)
0x1C2 8 Bits 0x07 System ID Defines the volume type.0x07=NTFS 000001B0: 8001 808001c0:016067FEBF693F66-60664BF57F60 Other Possible System ID Values: Partition ID Value Type 0x01 FAT12 primary partition or logical drive (fewer than 32,680 sectors in the volume) 0x04 FAT16 partition or logical drive (32,680-65,535 sectors or 16 MB-33 MB) 0x05 Extended partition 0x06 BIGDOS FAT16 partition or logical drive (33 MB-4 GB) 0x07 Installable File System (NTFS partition or logical drive) 0xOB FAT32 partition or logical drive 0x0C FAT32 partition or logical drive using BlOS INT 13h extensions OxOE BIGDOS FAT16 partition or logical drive using BIOS INT 13h extensions 0xOF Extended partition using BIOS INT 13h extensions 0x12 EISA partition 0x42 Dynamic disk volume 0x86 Legacy FT FAT16 disk 0x87 Legacy FT NTFS disk 0x8B Legacy FT volume formatted with FAT32 0x8C Legacy FT volume using BIOS INT 13h extensions formatted with FAT32 关于更多的system id,参考这里 嵌入式系统实验室 EMBEDDED SYSTEM LABORATORY SUZHOU INSTITUTE PON ADVANCEO STUDY OF USTC
关于更多的system id,参考这里
0x1C3 8 Bits OxFE Ending Head (OxFE=254 decimal) 000001B0: 8001 000001C0: 816667FE BF093F00-00004BF57F00 Ending Sector OxBF As with the Starting Sector,it only uses the first 6 bits of the byte.The upper 2 bits are used by 0x1C4 2 Byte the Ending Cylinder field. 0x1C5 Word Ending Cylinder Uses 1 byte in addition to the upper 2 bits from 0x09 the Ending Sector field to make up the cylinder value.The Ending Cylinder is a 10-bit number with a maximum value of 1023. 000001B0: 8001 660061c6:616667FEBF69 3F00-00004BF57F0 Relative Sectors The offset from the beginning of the disk to 0x1C6 32 Bits 0x3F000000 the beginning of the volume,counting by sectors. 0x0000003F=63 000001B0: 8001 000001C0: 010067FEBF093F00-0000 4BF57F60 Total Sectors 0x1CA 32 Bits 0X4BF57F00 The total number of sectors in the volume. 0x007FF54B=8,385,867 Sectors =4GB 000001B0: 8061 000001C0:010007FEBF093F00-00004BF57F00
FAT Partition Boot Sector Byte Offset Field (in hex) Length Sample Value Meaning 00 3 bytes EB 3C 90 Jump instruction 03 8 bytes MSDOS5.0 OEM Name in text 0B 25 bytes BIOS Parameter Block BPB 24 26 bytes Extended BIOS Parameter Block 3E 448 bytes Bootstrap code 1FE 2 bytes 0x55AA End of sector marker http://www.ntfs.com/fat-partition-sector.htm 关于Vindows95的启动过程,参考这里 找到并加载1o.sys 夏想夏■日 cience and Technol 嵌入式系统实验室 EMBEDDED SYSTEM LABORATORY SUZHOU INSTITUTE FON ADVANCED STUDY OF USTC
FAT Partition Boot Sector http://www.ntfs.com/fat-partition-sector.htm BPB 关于Windows 95的启动过程,参考这里 找到并加载Io.sys ……
NTFS Partition Boot Sector Byte Offset(in hex) Field Length Sample Value Meaning 00 3 bytes EB 5B 00 Jump instruction 03 8 bytes NTFS OEM Identifier 0B 25 bytes BIOS Parameter Block 24 48 bytes Extended BIOS Parameter Block 54 426 bytes Bootstrap code 1FE WORD 0x55AA End of sector marker 关于Windows2000的启动,参见Ntld 找到并加载Ntldr Vista和server2008: winload.exeWindows Boot Manager 嵌入式系统实验室 EMBEDDED SYSTEM LABORATORY SUZHOU INSTITUTE FON ADVANCED STUDY OF USTC
NTFS Partition Boot Sector ❖关于Windows 2000的启动,参见Ntldr ❖Vista和server 2008: winload.exe和Windows Boot Manager 找到并加载Ntldr ……