Vista Bootmgr/Winload使用的大部分选项ID
vista bootmgr的选项存储在systemdevice\boot\bcd，这个HIVE文件类似以前的boot,ini

boot.ini的选项在该HIVE中是以guid->option id的形式来体现的

除了保留了原来boot.ini可以使用的大部分选项外，还新增了许多选项，例如test signing, disable integrity checks,hypervisor debug options,cmdcons等等等

以下是我分析WINLOAD.EXE和bootmgr找出的一些选项ID(50个，包括大部分选项），通过这些选项ID可以查看、修改VISTA的许多启动设置（结合参考：http://www.debugman.com/read.php?tid=1999）

10100002 os type
12000002 boot loader path
12000004 os name
12000005 locate language
12000016 target name
15000007 max memory
1500000d relocate physical memory range
15000011 1394 or usb debug
15000013 debug port(COM 1 ,2 ,3 4)
15000014 brudrate
15000022 redirect(COM 1, 2, 3,4)
15000023 redirect baudrate
15000047 config access policy (default or disallow low memory config)
15000052 graphics resolution (800x600 or 1024x768)
16000009: recovery
16000010 Boot debugging
16000048 disable integrity checks or no integrity checks!
16000049 test signing
22000001 "cmdcons" :cmdcons(Windows Recovery Console)
"undo" roll back
22000002 system root
22000011 kernel =
22000012 hal =
23000006 default resume os
24000001 os list
24000010 memory test
25000004 boot menu timeout
25000020 DEP option(optin/optout/alwayson/alwaysoff)
25000021 pae or nopae
25000032 3GB user memory(user rva)
25000071 MSI policy (default or force disable)
25000072 pci express policy (default or force disable)
25000080 safeboot :boot network or dsrepair
250000f6 :hypervisor dbg ch
26000004 stamp disks (stamp raw disk when winpe)
26000010 detect hal
26000026 disable integrity checks
26000027 test signing
26000040 base video
26000041 (noguiboot, bootlogo)load bitmap logo : \osload800x600.bmp or \osload1024x768.bmp
26000042 novesa
26000051 use physical APIC
26000060 one cpu
26000062 max processor
26000070 pci lock
26000081 safeboot :boot minimal or minimal(alter nate shell)
26000090 boot log
26000091 SOS
260000a0 debug or nodebug
260000a1 kernel debug break on ntoskrnl

[招生]科锐逆向工程师培训(2024年11月15日实地，远程教学同时开班, 第51期)