Skip to content

Instantly share code, notes, and snippets.

@TheDuchy

TheDuchy/mfc_mbr.ascii

Last active February 21, 2021 12:55
Show Gist options
  • Star 2 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save TheDuchy/379650f56d32ed0ded312af679ae660b to your computer and use it in GitHub Desktop.
Save TheDuchy/379650f56d32ed0ded312af679ae660b to your computer and use it in GitHub Desktop.
Download ZIP
MFC dump as a valid MBR, ZIP and PDF (ZIP and PDF by @doegox)
Raw
mfc_mbr.ascii
bca5bcbe1b7c040031c0b003cd10b40e
ac08c07404cd10ebf5faf448656c6c6f
2066726f6d204d4643210d0a00000000
FFFFFFFFFFFFFF078069FFFFFFFFFFFF
4d4f4249000000000000000053435253
000000000000000000000000504c4f54
252538340000000000000000004d4150
FFFFFFFFFFFFFF078069FFFFFFFFFFFF
4449434d000000000000000000000000
00000000000000000000000000000000
00000000000000000000000000000000
FFFFFFFFFFFFFF078069FFFFFFFFFFFF
00000000000000000000000000000000
00000000000000000000000000000000
255044462d312e330a25202020202020
FFFFFFFFFFFFFF078069FFFFFFFFFFFF
0a312030206f626a3c3c2f547970652f
436174616c6f672f5061676573203220
3020523e3e656e646f626a0a25202020
FFFFFFFFFFFFFF078069FFFFFFFFFFFF
0a322030206f626a3c3c2f547970652f
50616765732f436f756e7420312f4b69
64735b33203020525d3e3e0a25202020
FFFFFFFFFFFFFF078069FFFFFFFFFFFF
0a656e646f626a0a2520202020202020
20202020202020202020202020202020
20202020202020202020202020202020
FFFFFFFFFFFFFF078069FFFFFFFFFFFF
0a332030206f626a3c3c2f547970652f
506167652f436f6e74656e7473203420
3020522f506172656e740a2520202020
FFFFFFFFFFFFFF078069FFFFFFFF55AA
0a32203020522f5265736f7572636573
3c3c2f466f6e743c3c2f463c3c0a2520
20202020202020202020202020202020
FFFFFFFFFFFFFF078069FFFFFFFFFFFF
0a2f547970652f466f6e742f53756274
7970652f54797065312f42617365466f
6e742f417269616c0a25202020202020
FFFFFFFFFFFFFF078069FFFFFFFFFFFF
0a3e3e3e3e3e3e3e3e656e646f626a0a
342030206f626a3c3c3e3e7374726561
6d0a2520202020202020202020202020
FFFFFFFFFFFFFF078069FFFFFFFFFFFF
0a42542f462035352054662031373020
3430302054642868656c6c6f20776f72
6c6429272045540a2520202020202020
FFFFFFFFFFFFFF078069FFFFFFFFFFFF
0a656e6473747265616d0a656e646f62
6a0a747261696c6572203c3c2f526f6f
742031203020523e3e0a252020202020
FFFFFFFFFFFFFF078069FFFFFFFFFFFF
504b03040a0000000000c706ea502d3b
08af0c0000000c000000020000006d65
68656c6c6f20776f726c640a00000000
FFFFFFFFFFFFFF078069FFFFFFFFFFFF
504b01021e030a0000000000c706ea50
2d3b08af0c0000000c00000002001000
0000000001000000a481400300006d65
FFFFFFFFFFFFFF078069FFFFFFFFFFFF
504b0506000000000100010040000000
800300002a0000000000000000000000
00000000000000000000000000000000
FFFFFFFFFFFFFF078069FFFFFFFFFFFF
@iceman1001
Copy link

If you add S1 and S2 from below (is S0,S1,S2) file -r -k detects some more formats...

4D5a60EA88F027CD2100000066663032
4E524f00DCA7C4FD0000736641726b00
4e58534261637370000000534644555F
FFFFFFFFFFFFFF078069FFFFFFFFFFFF
4d4f4249000000000000000053435253
000000000000000000000000504c4f54
252538340000000000000000004d4150
FFFFFFFFFFFFFF078069FFFFFFFFFFFF
4449434d000000000000000000000000
00000000000000000000000000000000
00000000000000000000000000000000

@TheDuchy
Copy link
Author

like this?

@iceman1001
Copy link

yes :)

TrustedUser:~/p1$ ./pm3 -l 'emul2dump -i hf-mf-mbr3.eml -o hf-mf-mbr3.bin'
...
TrustedUser:~/p1$ file -k -r hf-mf-mbr3.bin
hf-mf-mbr3.bin: DOS/MBR boot sector; partition 1 : ID=0x20, active 0xff, start-CHS (0x33,255,10), end-CHS (0x6f,48,32), startsector 1010592354, 1886999599 sectors
- Plot84 plotting file
-  DOS/MBR boot sector
- Scream Tracker Sample stereo 16bit little endian
- DICOM medical imaging data
- data

TrustedUser:~/p1$ unzip hf-mf-mbr3.bin
Archive:  hf-mf-mbr3.bin
 extracting: me
TrustedUser:~/p1$mv hf-mf-mbr3.bin hf-mf-mbr3.pdf

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment