اول نظام يعمل عند تشغيل الكمبيوتر

لاختصار الجهد ابحث عن موضوع للأخ Jaas هنا في القسم باسم Win32 bios حسب ما اذكر .

POST

وينتقل التنفيذ الى الـ MBR ومنه يتم تنفيذ الـ DOS ثم يتم الانتقال الى الـ Windows

والله أعلى وأعلم

بارك الله فيم إخواني ..

لكن أخي Xacker على الأقل هل انت متأكد ان POST اول ما ينفذ ..؟؟؟

نعم لكن الـ POST ليست برنامجا بالمعنى الدقيق.. ما يكون موجود في الـ MBR هو ما يتم تنفيذه بالبداية

انظر الى الخطوات التالية, لاحظ عندما يتم الحديث عن الـ BIOS Rom هو شئ لا يمكن التعديل عليه, لكن ابحث في موضوع استغلال جدول اشعة المقاطعة لها عنده ستعلم ما قد تستطيع الاستفادة منه

اقتباس

The internal power supply turns on, initializes and then takes a few moments to generate reliable power for the rest of the computer. If the power received by the motherboard's chipset, and subsequently the processor, is not within expected parameters, the chipset will generate a reset signal to the processor in the same fashion as if you were to touch the reset button. This will continue until the motherboard receives a Power Good signal from the power supply or you turn the system off because of a failed power supply.

After a Power Good signal is received, or after the reset button is released and there is confirmation of reliable power, the processor will be ready to start executing. When the processor first starts, it really has no idea what to do next as there is nothing at all in the memory to execute. Of course the processor designers are aware of this, so they pre-program the processor to always look at the same place in the system, the BIOS ROM, for the small bit of startup code to begin the boot process. This is typically located at memory location FFFF0h, or right at the end of the system memory. Developers locate it there in the event the size of the ROM has to be changed so as to prevent compatibility problems. Since there are only 16 bytes from there to the end of conventional memory area, this location contains just a "jump" instruction telling the processor where to go to find the real BIOS startup program.

The BIOS performs the power-on self test (POST). If there are any fatal errors, the boot process stops. If the POST is successful, the BIOS calls INT 19 (Interrupt 19) and then proceeds to look for devices attached to the motherboard.

The BIOS code begins its search by looking for a video card, more particularly, its looking for the video card's built in BIOS program, (normally found at location C000h in memory) and if found, runs it. The system BIOS executes the video card BIOS, which in turn initializes the video card. Most modern video cards will display information on the screen about the video card, which is why on some modern PC's you usually see something on the screen about the video card before you see the messages from the system BIOS itself.

Once video has been enabled, the BIOS begins searching for other devices that may have their own ROM and whether that ROM has its own BIOS code. Normally, the floppy drive is located at 0000:7C00, and the IDE/ATA hard disk BIOS will be found at C8000h. If a floppy and/or hard drive is found, their codes are executed. If, during this INT 19 process, any other device BIOS's are found, they are executed as well.

The BIOS displays its startup screen, which provides some key information about the BIOS as well as other system information.

As the boot sequence continues, the BIOS continues to perform additional tests on the system. Depending upon the system manufacturer, this will usually include a memory count. The BIOS will generally display an error message on the screen if it encounters an error when it counts installed memory. You will find these error messages and their explanations in our Support Center in the Motherboard and BIOS section or you can click here. (Clicking here will open a new window)

During the next phase of the BIOS startup process, it performs somewhat of an inventory of the hardware installed in the system, and then communicates or interrogates it to ensure that the hardware is functioning. Most modern BIOS's have automatic settings to collect information such as memory timing, based on what kind of memory it finds. Today's BIOS's dynamically set hard drive parameters and access modes, and will display a message on the screen for each drive they detect and configure in this way. It will also search for and label logical devices such as COM and LPT ports. Note: If the BIOS supports the Plug and Play standard, and the feature is enabled, this is the point at which it will detect and configure Plug and Play devices and display a message on the screen for each one found.

During the final phase of the POST and BIOS boot process, the BIOS will display a summary screen with your system's configuration. While early machines, 486 through Pentium II, were fairly accurate about the system configuration information, later machines using the later Pentium III and AMD processors can have some inaccurate information. This is usually related to BIOS setup issues involving processor information. Checking this data can be helpful in diagnosing setup problems, although it can be hard to see because sometimes it flashes on the screen and then scrolls off the top.

Once the BIOS finishes what it needs to do, it begins searching for a drive to boot an operating system. All BIOS's contain a setting that controls this search sequence for a boot drive. Most are set to first look for a bootable floppy disk, and if one is not found then proceed to a hard disk, which is usually the C: drive. Some BIOS's permit you to boot from your CD-ROM drive or other devices such as a SCSI (Small Computer System Interface), depending on the boot sequence selected. Once the BIOS identifies its target boot drive, the it looks for boot information to start the operating system boot process. If it is searching a hard disk, it looks for a master boot record at cylinder 0, head 0, sector 1, the first sector on the disk. If it is searching a floppy disk, it looks at the same address on the floppy disk for a volume boot sector.

Once the boot sector is found and its contents or data verified, the BIOS starts the process of booting the operating system by using the information in the boot sector. If this is a floppy disk boot sector, the information is read into memory at location 0000:7c00. INT 19 goes to memory location 0000:7c00 to continue the process. If no boot sector is found on the floppy drive, INT 19 moves to the next bootable drive in the list provided by the motherboard BIOS, usually a hard drive, and then attempts to read the MBR. If a Master Boot Record is found, it is read into memory at location 0000:7c00 and INT 19 jumps to memory location 0000:7c00 the same as was the case with the floppy. At this point, the BIOS attempts to move control of the computer from the BIOS to the actual operating system.

Next, the small program in the Master Boot Record will attempt to locate an active (bootable) partition in the hard drives partition table. If such a partition is found, the boot sector of that partition is also read into memory at location 0000:7C00 and then MBR program itself jumps to memory location 0000:7C00. Keep in mind that each operating system has its own boot sector format. The next step involves the small program in the boot sector locating the first part of the operating system's kernel loader program, or in some cases the kernel itself or perhaps a boot manager program, and read then that into memory. For you Windows NT and Windows 2000 fans, this kernel loader is referred to as NTLDR. You will find a description of the DOS boot process here.

If no boot device of any type can be found, the system will display an error message and stop. The specific error message is depends on the BIOS developer and/or the computer's manufacturer, and can be anything from a rather clear "No boot device" to the very cryptic "NO ROM BASIC - SYSTEM HALTED". This will also happen if you have a bootable hard disk partition but forget to set it active. Believe it or not, you can partition a drive, format it and install the operating system and never realize that there is problem until the first start of that operating system occurs.

المصدر: http://www.dewassoc.com/kbase/hard_drives/...boot_record.htm

كتيير حلو منك أخي Xacker بارك الله فيك ..

لكن ممكن توضح MBR بشيء من التفصيل .

يا اخى لا يوجد توضيح اكثر من هذا

اقتباس

a hard disk, it looks for a master boot record at cylinder 0, head 0, sector 1, the first sector on the disk

ال master boot record هو فقط مكان على الهارد ديسك يوجد فى القرص c فى اولة به برنامج يقوم بتحميل نظام التشغيل وهذ البرمامج هو اول ما ينفز بعد عملية ال post او power on self test

اذا اردت ان تقوم بعمل برنامج يعمل قبل الويندوس يجب ان تضع جزء صغير منه 512 فى ا ل mbr ليقوم بتحميل برنامجكك وتنقل البرنامج الاصلى الى مكان اخر تقوم بتشغيله لاحقا

هذه هى العملية بكل بساطة لكن عن الطريقة انا لم اجربها لكنى اعتقد انك ستستخدم المقاطعات الموجودة فى البيوس للقرائة والكتابة من الهارد ديسك

والسلام عليكم ورحمة الله

ابحث هنا عن فيروس Stoned وأي مكان آخر قد تجد النسخ المعدلة منه

http://www.textfiles.com/virus/

http://www.totallygeek.com/vscdb/index.php...e00548e79fbc0aa

يمكنك الاطلاع على عمله والشفرة الخاص به فهو فيروس MBR

لو لديك كتاب "تشريح الفيروسات" من دار شعاع أو تستطيع الحصول عليه تستطيع القراءة عن الفيروس فيه.

بارك الله فيكم يا أحلى مبرمجين ... تحياتي اليكم .. وشكرا على الجهود .

thank you so much