You need a bootmgr form a vista SP0 dvd (CRC: 543E715A)
At adress 54B68 there should be BCD in UNICODE which you can change to VST.
To get rich of the checksum protection change 74 03 to EB 1A at adress E28.
Save the new file as vstamgr, that's all.
This patch is incorrect. You need to patch address E28 with the bytes EB 03.
If using debug then the instructions are (to make it use \boot\bc1 instead of \boot\bcd) - what you type is in bold
D:\>
copy bootmgr bootmg1 1 file(s) copied.
D:\>
debug bootmg1-
rAX=0000 BX=0006 CX=B238 DX=0000 SP=E625 BP=0100 SI=0000 DI=0000
DS=18CA ES=18CA SS=18CA CS=18CA IP=0100 NV UP EI PL NZ NA PO NC
18CA:0100 E9D501 JMP 02D8
-
e f2818CA:0F28 74.
eb<space> 03.
03 <space> E9.
<enter>-
e 68ca:4c6c (note add 5000 to address in italics)
68CA:4C68 42.
31 00.
<enter>-
wWriting 6B238 bytes
-
qYou now have bootmg1 which will use \boot\bc1 instead of \boot\bcd
change 31 to 32 for bc2, or 33 for bc3, etc.
To make a new BCD file run this script
copy \boot\bcd \boot\bc1
bcdedit /store \boot\bc1 /set {bootmgr} nointegritychecks YES
bcdedit /store \boot\bc1 /create {ramdiskoptions} /d "Ramdisk options"
bcdedit /store \boot\bc1 /set {ramdiskoptions} ramdisksdidevice boot
bcdedit /store \boot\bc1 /set {ramdiskoptions} ramdisksdipath \Boot\boot.sdi
bcdedit /store \boot\bc1 /set {default} device ramdisk=[boot]\sources\boot1.wim,{ramdiskoptions}
bcdedit /store \boot\bc1 /set {default} osdevice ramdisk=[boot]\sources\boot1.wim,{ramdiskoptions}
@jaclaz
I am trying to patch bootmgr using grub4dos write command.
If I do
chainloader /bootmgr
and then read 0x7c00 I do NOT get the first 4 bytes of bootmgr. I want to patch the bootmgr as above but I can't seem to find the correct locations in memory once chainloaded???