Driver loading

NTDEV
1

Hi,

I am querious about how drivers are loaded from storage device when File System Driver is not loaded.
As file are read with the help of FSD and then how is mechanics of loading drivers from system32\drivers folder. Please add your valuable comments.

Waiting for reply

8^)
Rajesh Nikam

2

They are loaded by ntldr during the boot process. Ntldr can load the FS driver to read data off of the storage device. All boot drivers are loaded by the loader in this fashion. The system hive is also loaded this way.

d

From: xxxxx@lists.osr.com [mailto:xxxxx@lists.osr.com] On Behalf Of Rajesh Nikam
Sent: Wednesday, November 24, 2004 9:12 PM
To: Windows System Software Devs Interest List
Subject: [ntdev] Driver loading

Hi,
?
I am querious about how drivers are loaded from storage device when File System Driver is not loaded.
As file are read with the help of FSD and then how is mechanics of loading drivers from system32\drivers folder. Please add your valuable comments.
?
?
Waiting for reply
?
8^)
Rajesh Nikam

Questions? First check the Kernel Driver FAQ at http://www.osronline.com/article.cfm?id=256

You are currently subscribed to ntdev as: unknown lmsubst tag argument: ‘’
To unsubscribe send a blank email to xxxxx@lists.osr.com

3

Dear Doron,

Thanks for your reply.
But I am still confused how ntldt loads FS driver itself from storage device. Is this not chicken-egg problem ? Please add detailed explanation on the same.

Regards
Rajesh

They are loaded by ntldr during the boot process. Ntldr can load the FS driver to read data off of the storage device. All boot drivers are loaded by the loader in this fashion. The system hive is also loaded this way.

d

From: xxxxx@lists.osr.com [mailto:xxxxx@lists.osr.com] On Behalf Of Rajesh Nikam
Sent: Wednesday, November 24, 2004 9:12 PM
To: Windows System Software Devs Interest List
Subject: [ntdev] Driver loading

Hi,

I am querious about how drivers are loaded from storage device when File System Driver is not loaded.
As file are read with the help of FSD and then how is mechanics of loading drivers from system32\drivers folder. Please add your valuable comments.

Waiting for reply

8^)
Rajesh Nikam

Questions? First check the Kernel Driver FAQ at http://www.osronline.com/article.cfm?id=256

You are currently subscribed to ntdev as: unknown lmsubst tag argument: ‘’
To unsubscribe send a blank email to xxxxx@lists.osr.com

Questions? First check the Kernel Driver FAQ at http://www.osronline.com/article.cfm?id=256

You are currently subscribed to ntdev as: unknown lmsubst tag argument: ‘’
To unsubscribe send a blank email to xxxxx@lists.osr.com

4

NTLDR has code to read NTFS/FAT. Please refer to Solomon and Mark’s Inside
Windows 2K for detailed description on W2K boot process.

Calvin Guan Software Engineer
ATI Technologies Inc. www.ati.com

-----Original Message-----
From: Rajesh Nikam [mailto:xxxxx@hotmail.com]
Sent: November 26, 2004 6:29 AM
To: Windows System Software Devs Interest List
Subject: Re: [ntdev] Driver loading

Dear Doron,

Thanks for your reply.
But I am still confused how ntldt loads FS driver itself from storage
device. Is this not chicken-egg problem ? Please add detailed explanation on
the same.

Regards
Rajesh

They are loaded by ntldr during the boot process. Ntldr can load the FS
driver to read data off of the storage device. All boot drivers are loaded
by the loader in this fashion. The system hive is also loaded this way.

d

From: xxxxx@lists.osr.com
[mailto:xxxxx@lists.osr.com] On Behalf Of Rajesh Nikam
Sent: Wednesday, November 24, 2004 9:12 PM
To: Windows System Software Devs Interest List
Subject: [ntdev] Driver loading

Hi,

I am querious about how drivers are loaded from storage device when File
System Driver is not loaded.
As file are read with the help of FSD and then how is mechanics of loading
drivers from system32\drivers folder. Please add your valuable comments.

Waiting for reply

8^)
Rajesh Nikam

Questions? First check the Kernel Driver FAQ at
http://www.osronline.com/article.cfm?id=256

You are currently subscribed to ntdev as: unknown lmsubst tag argument: ‘’
To unsubscribe send a blank email to xxxxx@lists.osr.com

Questions? First check the Kernel Driver FAQ at
http://www.osronline.com/article.cfm?id=256

You are currently subscribed to ntdev as: unknown lmsubst tag argument: ‘’
To unsubscribe send a blank email to xxxxx@lists.osr.com

Questions? First check the Kernel Driver FAQ at
http://www.osronline.com/article.cfm?id=256

You are currently subscribed to $subst(‘List.Name’) as:
$subst(‘Recip.EmailAddr’)
To unsubscribe send a blank email to $subst(‘Email.UnSub’)

5

NTLDR has the simplified read-only NTFS inside.

Maxim Shatskih, Windows DDK MVP
StorageCraft Corporation
xxxxx@storagecraft.com
http://www.storagecraft.com

----- Original Message -----
From: “Rajesh Nikam”
To: “Windows System Software Devs Interest List”
Sent: Friday, November 26, 2004 2:29 PM
Subject: Re: [ntdev] Driver loading

> Dear Doron,
>
> Thanks for your reply.
> But I am still confused how ntldt loads FS driver itself from storage device.
Is this not chicken-egg problem ? Please add detailed explanation on the same.
>
> Regards
> Rajesh
>
>
> They are loaded by ntldr during the boot process. Ntldr can load the FS
driver to read data off of the storage device. All boot drivers are loaded by
the loader in this fashion. The system hive is also loaded this way.
>
> d
>
> ________________________________________
> From: xxxxx@lists.osr.com
[mailto:xxxxx@lists.osr.com] On Behalf Of Rajesh Nikam
> Sent: Wednesday, November 24, 2004 9:12 PM
> To: Windows System Software Devs Interest List
> Subject: [ntdev] Driver loading
>
> Hi,
>
> I am querious about how drivers are loaded from storage device when File
System Driver is not loaded.
> As file are read with the help of FSD and then how is mechanics of loading
drivers from system32\drivers folder. Please add your valuable comments.
>
>
> Waiting for reply
>
> 8^)
> Rajesh Nikam
> —
> Questions? First check the Kernel Driver FAQ at
http://www.osronline.com/article.cfm?id=256
>
> You are currently subscribed to ntdev as: unknown lmsubst tag argument: ‘’
> To unsubscribe send a blank email to xxxxx@lists.osr.com
>
> —
> Questions? First check the Kernel Driver FAQ at
http://www.osronline.com/article.cfm?id=256
>
> You are currently subscribed to ntdev as: unknown lmsubst tag argument: ‘’
> To unsubscribe send a blank email to xxxxx@lists.osr.com
>
> —
> Questions? First check the Kernel Driver FAQ at
http://www.osronline.com/article.cfm?id=256
>
> You are currently subscribed to $subst(‘List.Name’) as:
$subst(‘Recip.EmailAddr’)
> To unsubscribe send a blank email to $subst(‘Email.UnSub’)

6

Ntldr has a small implementation of the MS file systems linked into it -
enough to read fat, ntfs and iso9660 volumes to load the drivers,
including the file system drivers.

-p

-----Original Message-----
From: xxxxx@lists.osr.com
[mailto:xxxxx@lists.osr.com] On Behalf Of Rajesh Nikam
Sent: Friday, November 26, 2004 3:29 AM
To: Windows System Software Devs Interest List
Subject: Re: [ntdev] Driver loading

Dear Doron,

Thanks for your reply.
But I am still confused how ntldt loads FS driver itself from
storage device. Is this not chicken-egg problem ? Please add
detailed explanation on the same.

Regards
Rajesh

They are loaded by ntldr during the boot process. Ntldr can
load the FS driver to read data off of the storage device.
All boot drivers are loaded by the loader in this fashion.
The system hive is also loaded this way.

d

From: xxxxx@lists.osr.com
[mailto:xxxxx@lists.osr.com] On Behalf Of Rajesh Nikam
Sent: Wednesday, November 24, 2004 9:12 PM
To: Windows System Software Devs Interest List
Subject: [ntdev] Driver loading

Hi,

I am querious about how drivers are loaded from storage
device when File System Driver is not loaded.
As file are read with the help of FSD and then how is
mechanics of loading drivers from system32\drivers folder.
Please add your valuable comments.

Waiting for reply

8^)
Rajesh Nikam

Questions? First check the Kernel Driver FAQ at
http://www.osronline.com/article.cfm?id=256

You are currently subscribed to ntdev as: unknown lmsubst tag
argument: ‘’
To unsubscribe send a blank email to xxxxx@lists.osr.com

Questions? First check the Kernel Driver FAQ at
http://www.osronline.com/article.cfm?id=256

You are currently subscribed to ntdev as: unknown lmsubst tag
argument: ‘’
To unsubscribe send a blank email to xxxxx@lists.osr.com

Questions? First check the Kernel Driver FAQ at
http://www.osronline.com/article.cfm?id=256

You are currently subscribed to $subst(‘List.Name’) as:
$subst(‘Recip.EmailAddr’) To unsubscribe send a blank email
to $subst(‘Email.UnSub’)

7

Actually it has some limited write capability too - it can’t extend
files but it can modify them. The loader uses this to mark the
hibernation file when it starts a restore-from-hibernate so it can give
you an option to abort on the next boot when the resume fails.

-p

-----Original Message-----
From: xxxxx@lists.osr.com
[mailto:xxxxx@lists.osr.com] On Behalf Of Maxim
S. Shatskih
Sent: Friday, November 26, 2004 8:25 AM
To: Windows System Software Devs Interest List
Subject: Re: [ntdev] Driver loading

NTLDR has the simplified read-only NTFS inside.

Maxim Shatskih, Windows DDK MVP
StorageCraft Corporation
xxxxx@storagecraft.com
http://www.storagecraft.com

----- Original Message -----
From: “Rajesh Nikam”
> To: “Windows System Software Devs Interest List”
> Sent: Friday, November 26, 2004 2:29 PM
> Subject: Re: [ntdev] Driver loading
>
>
> > Dear Doron,
> >
> > Thanks for your reply.
> > But I am still confused how ntldt loads FS driver itself
> from storage device.
> Is this not chicken-egg problem ? Please add detailed
> explanation on the same.
> >
> > Regards
> > Rajesh
> >
> >
> > They are loaded by ntldr during the boot process. Ntldr
> can load the FS
> driver to read data off of the storage device. All boot
> drivers are loaded by
> the loader in this fashion. The system hive is also loaded this way.
> >
> > d
> >
> > ________________________________________
> > From: xxxxx@lists.osr.com
> [mailto:xxxxx@lists.osr.com] On Behalf Of Rajesh Nikam
> > Sent: Wednesday, November 24, 2004 9:12 PM
> > To: Windows System Software Devs Interest List
> > Subject: [ntdev] Driver loading
> >
> > Hi,
> >
> > I am querious about how drivers are loaded from storage
> device when File
> System Driver is not loaded.
> > As file are read with the help of FSD and then how is
> mechanics of loading
> drivers from system32\drivers folder. Please add your
> valuable comments.
> >
> >
> > Waiting for reply
> >
> > 8^)
> > Rajesh Nikam
> > —
> > Questions? First check the Kernel Driver FAQ at
> http://www.osronline.com/article.cfm?id=256
> >
> > You are currently subscribed to ntdev as: unknown lmsubst
> tag argument: ‘’
> > To unsubscribe send a blank email to xxxxx@lists.osr.com
> >
> > —
> > Questions? First check the Kernel Driver FAQ at
> http://www.osronline.com/article.cfm?id=256
> >
> > You are currently subscribed to ntdev as: unknown lmsubst
> tag argument: ‘’
> > To unsubscribe send a blank email to xxxxx@lists.osr.com
> >
> > —
> > Questions? First check the Kernel Driver FAQ at
> http://www.osronline.com/article.cfm?id=256
> >
> > You are currently subscribed to ntdev as:
> xxxxx@windows.microsoft.com
> > To unsubscribe send a blank email to xxxxx@lists.osr.com
>
>
> —
> Questions? First check the Kernel Driver FAQ at
> http://www.osronline.com/article.cfm?id=256
>
> You are currently subscribed to ntdev as:
> xxxxx@windows.microsoft.com
> To unsubscribe send a blank email to xxxxx@lists.osr.com
>

8

>files but it can modify them. The loader uses this to mark the

hibernation file when it starts a restore-from-hibernate so it can give

Thanks Peter!

Am I correct that XP’s BOOTSTAT.DAT is also updated by NTLDR?

Maxim Shatskih, Windows DDK MVP
StorageCraft Corporation
xxxxx@storagecraft.com
http://www.storagecraft.com