Hello trid users,
some days ago i backup my UEFI configuration by program EasyUEFI.exe. The
backup files have name extension EUD.
All my inspected examples are described as "Unknown!" by trid (See appended
output/trid.txt).
So i run tridscan on these undetected samples and i generate the trid
definition file eud.trid.xml. All my samples start with typical ASCII
phrase. That is expressed inside front block by XML construct like:
<Bytes>4541535955454649424F4F544241434B01000000000000000000000000000000</Bytes>
<ASCII> E A S Y U E F I B O O T B A C K</ASCII>
<Pos>0</Pos>
Some information about that things can be found on product home page. That
is now expressed by reference line like:
<RefURL>
https://www.easyuefi.com/index-us.html</RefURL>
In global string section i find expected string. That are expressed by lines
like:
<String>B'O'O'T' 'M'A'N'A'G'E'R</String>
<String>B'O'O'T'M'G'F'W'.'E'F'I</String>
<String>X'''B'C'D'O'B'J'E'C'T</String>
<String>S'H'E'L'L</String>
<String>U'E'F'I</String>
With the 1 new definition now EasyUEFI entries backup are now recognized (See
appended output/trid-v-new.txt).
TrID definition, some examples and output are stored in archive eud.zip. I
hope that my 1 XML file can be used in future version of triddefs.
With best wishes
Jörg Jenderek
