VBLK - LDM Documentation
Overview
A table size of P implies the field is prefixed by a one byte length marker.
Unless a string is listed as NULL terminated, it isn't.
Standard VBLK Header
Offset |
Size |
Description |
0x00 |
4 |
"VBLK" Magic number |
0x04 |
4 |
VMDB Sequence number |
0x08 |
4 |
Id (unknown) |
0x0C |
2 |
Record Number (x of y) |
0x0E |
2 |
Number of Records |
0x10 |
4 |
Record Type (and flags) |
0x14 |
4 |
Id (unknown) |
Notes
The Sequence Numbers start at 4.
0 - 3 are effectively the VMDB Header block.
The Record Number is usually zero. If the information won't fit
into a single VBLK record, then more are used.
The Record Type can be 0x32 (Component), 0x33 (Partition),
0x34 (Disk), 0x35 (Disk Group) or 0x51 (Volume).
Component (0x32)
Offset |
Size |
Description |
0x00 |
24 |
Standard VBLK Header |
0x18 |
P |
Object Id |
..0x18 |
P |
Name (string) |
..0x18 |
P |
Volume State |
..0x18 |
1 |
Flag? |
..0x19 |
4 |
Zeros |
..0x1D |
2 |
Flags? |
..0x1F |
6 |
Zeros |
..0x25 |
2 |
Id? |
..0x27 |
8 |
Zeros |
..0x2F |
P |
Parent Id (A Volume) |
..0x2F |
1 |
Zero |
..0x30 |
4 |
Flags |
Volume State = ACTIVE
Disk (0x34)
Offset |
Size |
Description |
0x00 |
24 |
Standard VBLK Header |
0x18 |
P |
Object Id |
..0x18 |
P |
Name (string) |
..0x18 |
P |
Disk Id (GUID, string) |
..0x18 |
11 |
Zeros |
..0x23 |
2 |
Id? |
AltName
Disk Group (0x35)
Offset |
Size |
Description |
0x00 |
24 |
Standard VBLK Header |
0x18 |
P |
Object Id |
..0x18 |
P |
Name (string) |
..0x18 |
P |
Disk Id (GUID, string) |
..0x18 |
11 |
Zeros |
..0x23 |
2 |
Id? |
Partition (0x33)
Offset |
Size |
Description |
0x00 |
24 |
Standard VBLK Header |
0x18 |
P |
Object Id |
..0x18 |
P |
Name (string) |
..0x18 |
10 |
Zeros |
..0x22 |
2 |
Id? |
..0x24 |
8 |
Start |
..0x2C |
8 |
Volume Offset |
..0x34 |
P |
Size |
..0x34 |
P |
Parent Id? |
..0x34 |
P |
Disk Id? |
..0x34 |
2 |
Flags? Sequence? |
Volume (0x51)
Offset |
Size |
Description |
0x00 |
24 |
Standard VBLK Header |
0x18 |
P |
Object Id |
..0x18 |
P |
Name |
..0x18 |
P |
Volume Type |
..0x18 |
1 |
Zero |
..0x19 |
14 |
Volume State (string, null padded) |
..0x27 |
2 |
Id? |
..0x29 |
1 |
Sequence Number? |
..0x2A |
3 |
Zeros |
..0x2D |
3 |
Flags? |
..0x30 |
6 |
Zeros |
..0x36 |
2 |
Id? |
..0x38 |
6 |
Zeros |
..0x3E |
2 |
Id? |
..0x40 |
P |
Size |
..0x40 |
4 |
Zeros |
..0x44 |
1 |
??? |
..0x45 |
16 |
GUID |
..0x55 |
P |
Drive Hint (string) |
Volume Type = gen or raid5
Volume State = ACTIVE
Validate HTML
Validate CSS
$Id: vblk.html,v 1.1 2001/05/30 20:25:10 flatcap Exp $