📄 boot.html
字号:
<title>Boot file</title>The file 7, $Boot, starts at cluster 0 of the volume. The first 0x28 bytesare the same as for FAT boot sectors, except that useless fields are zeroed.The last sector is stored in its own run, which is located in the logical center of the volume - for crash recovery.<pre>offset(length) contents0(3) Jump to boot routine3(4) System ID 'NTFS 'B(2) Sector size of volumeD(1) Number of sectors per clusterE(2) Reserved Sectors, set to 0 (unused)10(1) Number Of FATs, set to 0 (unused)11(2) Root Directory, set to 0 (unused)13(2) Small Sectors, set to 0 (unused)15(1) Media descriptor (F8: hard disk)16(2) Sectors per FAT, set to 0 (unused)18(2) Sectors per track1A(2) Number of heads1C(4) Hidden Sectors (unused)20(4) Large Sectors, set to 0 (unused)24(1) Physical Drive Number25(1) Unused, set to 026(2) Reserved, set to 8028(8) Number of sectors in volume30(8) Cluster number of the master file table ($MFT)38(8) Cluster number of copy of the master file table ($MFTMirr)40(1) Clusters per FRS MFT record size in clusters, negative values indicate that the MFT record is a fraction of a cluster.44(4) Clusters per Index Block Index buffer size in clusters. Most likely, there is support for negative values here, as well.48(8) Volume serial number50(4) Sector Checksum, set to 054(9) Unused, set to 05D(1A1) Boot routine1FE(2) Magic boot sector ID (AA55)200 more code, probably NT kernel loaderlast 200 bytes copy of first 0x200 bytes</pre>
⌨️ 快捷键说明
复制代码
Ctrl + C
搜索代码
Ctrl + F
全屏模式
F11
切换主题
Ctrl + Shift + D
显示快捷键
?
增大字号
Ctrl + =
减小字号
Ctrl + -