From 081869102f3b656e37f948e8602e517e26cb5559 Mon Sep 17 00:00:00 2001 From: Nils Date: Thu, 20 Jan 2022 22:28:22 +0100 Subject: [PATCH] add basic consts and functions for mbr --- go.mod | 3 +++ mbr/mbr.go | 74 ++++++++++++++++++++++++++++++++++++++++++++++++++++++ 2 files changed, 77 insertions(+) create mode 100644 go.mod create mode 100644 mbr/mbr.go diff --git a/go.mod b/go.mod new file mode 100644 index 0000000..c63ff23 --- /dev/null +++ b/go.mod @@ -0,0 +1,3 @@ +module github.com/byReqz/pt + +go 1.17 diff --git a/mbr/mbr.go b/mbr/mbr.go new file mode 100644 index 0000000..30ca0a2 --- /dev/null +++ b/mbr/mbr.go @@ -0,0 +1,74 @@ +package mbr +import ( + "fmt" + "os" +) + +const ( + MBRsize = 512 + + BootstrapCodeArea1Size = 218 + BootstrapCodeArea1Offset = 0 + BootstrapCodeArea2Size = 216 + BootstrapCodeArea2Offset = 224 + LegacyBootstrapCodeAreaOffset = 0 + LegacyBootstrapCodeAreaSize = 446 + + DiskTimestampOffset = 218 + DiskTimestampSize = 6 + DiskTimeStampSecondsOffset = 221 + DiskTimeStampSecondsSize = 1 + DiskTimeStampMinutesOffset = 222 + DiskTimeStampMinutesSize = 1 + DiskTimeStampHoursOffset = 223 + DiskTimeStampHoursSize = 1 + + PartitionEntrySize = 16 + PartitionEntry1Offset = 446 + PartitionEntry2Offset = 462 + PartitionEntry3Offset = 478 + PartitionEntry4Offset = 494 + + BootSignatureSize = 2 + BootSignatureOffset = 510 +) + +type MBR struct { + BootstrapCode []byte + TimeStamp string + DiskSignature DiskSignature + Partitions []Partition + BootSignature int +} + +type Partition struct { + Status string + Type string + Sectors int +} + +type DiskSignature struct { + CopyProtected bool + Signature int32 +} + +func DumpMBR(f *os.File) ([]byte, error) { + mbr := make([]byte, MBRsize) + _, err := f.Read(mbr) + if err != nil { + return mbr, err + } + return mbr, nil +} + +func GetMBR(mbr []byte) error { + if len(mbr) < MBRsize { + return fmt.Errorf("input does not contain full mbr") + } + + fmt.Println(mbr[446:462]) // part entry 1 + fmt.Println(mbr[446]) // status -- if 128 == bootable, if 0 == inactive + fmt.Println(mbr[450]) // partition type https://en.wikipedia.org/wiki/Partition_type + + return nil +} \ No newline at end of file