I am going insane over this, but i don't have it as you do and it drives me crazy:
I have downloaded: WindowsServer2003-KB889101-SP1-x86-ENU.exe from
http://www.microsoft.com/download/en/details.aspx?id=11435Opened with 7zip and extracted: ntldr, ntdetect.com, startrom.co_ there is only one ntldr in i386 so can't be that
I have opened ntldr in HxD hex editor v 1.7.7.0
I go to search->replace and select at:
search for: winnt
replace with: win\h
Data Type: text string
If i check "Case sensitive" it only finds 1 value. If i don't check it it finds 4 values.
I have checked this addresses:
at: 254E6, 254F2, 255C2, 2563E, 257FE, 2580A, 3C7AB, 3C7Cf, 3C7F2
If i go for example at "select block" 254E6 i have a letter "P" there not winnt
The first winnt i get starts at 0003FA86 WINNT.SIF
The forth and last i get at 004171F it is a C:\windows\.C:\winnt. stryng on the right
On startcom.com i do the same as above:
search for: winnt
replace with: win\h
Data Type: text string
If i don't check "Case sensitive" it finds:
NTLDR is corrupt starting at 00005467 should i change this to win\h or WIN\H ?
NTLDR is corrupt starting at 00005492 should i change this to win\h or WIN\H ?
NTLDR at 5F9B should i change this to win\h or WIN\H ?
If i check "Case sensitive" on the replace window it finds nothing.
I don't understand what am i doing wrong why i cannot find exactly what you mentioned. Is there an aditional step or something to check on HxD?
It has driven me crazy for the past few days. Please let me know how i could fix or what can fix.
I would really appreciate your help.