Or do it in the system BIOS.
-----Original Message-----
From: xxxxx@lists.osr.com
[mailto:xxxxx@lists.osr.com] On Behalf Of Eschmann, Michael
K
Sent: Thursday, October 07, 2004 8:55 AM
To: Windows System Software Devs Interest List
Subject: RE: Re:[ntdev] Hibernation hook
The port-level function driver owns the crash and hibernation
responsibilities via separate instantiations of runtime, crash and hiber
images of this same driver (I’m over-simplifying, of course). You’d
have to write your own storage port driver for each HBA you need to
support, which is an colossal task. However even writing your own port
driver(s) is still not good enough; you will need a decryption engine in
ntloader if you want to resume from S4.
MKE.
-----Original Message-----
From: xxxxx@lists.osr.com
[mailto:xxxxx@lists.osr.com] On Behalf Of Chuck Batson
Sent: Thursday, October 07, 2004 7:47 AM
To: Windows System Software Devs Interest List
Subject: Re: Re:[ntdev] Hibernation hook
Seems to me there should be a way. How does the hibernation file get
read/saved on special purpose configurations like a RAID volume? There
must be a way to get a driver in there, right? (Sorry, I don’t know,
I’m just speculating for the purpose of stimulating conversation.)
Chuck
----- Original Message -----
From:
To: “Windows System Software Devs Interest List”
Sent: Thursday, October 07, 2004 9:29 PM
Subject: Re: Re:[ntdev] Hibernation hook
> The real trick is DEcrypting the hiberfile. Its read in by the
> bootloader,
> it would be extremely difficult to hook that and decrypt the file.
>
> Jason
>
>
>
> |---------±-------------------------------->
> | | “Chuck Batson” |
> | | > | | on.com> |
> | | Sent by: |
> | | bounce-189615-16922@li|
> | | sts.osr.com |
> | | |
> | | |
> | | 10/07/2004 10:19 AM |
> | | Please respond to |
> | | “Windows System |
> | | Software Devs Interest|
> | | List” |
> | | |
> |---------±-------------------------------->
>
>
>-----------------------------------------------------------------------
-------------------------------------------------------|
> |
> |
> | To: “Windows System Software Devs Interest List”
> |
> | cc:
> |
> | Subject: Re: Re:[ntdev] Hibernation hook
> |
>
>
>-----------------------------------------------------------------------
-------------------------------------------------------|
>
>
>
>
> Does the hibernation file write go through the driver stack? Meaning,
> if there was a filter driver on the stack that say, encrypted the
> entire
> volume, then the hibernation file would get encrypted as well.
>
> Chuck
>
> ----- Original Message -----
> From: “Scott Noone”
> Newsgroups: ntdev
> To: “Windows System Software Devs Interest List”
> Sent: Thursday, October 07, 2004 8:59 PM
> Subject: Re:[ntdev] Hibernation hook
>
>
>> Hi,
>>
>> AFAIK there is no documented way to do this. Also, I don’t believe
>> that you’re going to get much further with your current approach than
>> you have gotten. Having your driver loaded in place of the driver
>> that
>> is going to be writing the hibernation file isn’t going to get you
>> where you need to be.
>>
>> Regards,
>>
>> -scott
>>
>> –
>> Scott Noone
>> Software Engineer
>> OSR Open Systems Resources, Inc.
>> http://www.osronline.com
>>
>> “Valery Druba” wrote in message
>> news:xxxxx@ntdev…
>>> Hi, Scott
>>>
>>> You are right. There is no any details about this process. Exactly I
>>> need to
>>> encrypt hiber file. Do you know more documented way?
>>>
>>> Thanks,
>>> Valery
>>>
>>>>
>>>>
>>>> Hi,
>>>>
>>>> You’re deep in undocumented territory here. As I’m sure you’ve
>>>> noticed,
>>>> details on how hibernation works are pretty scant.
>>>>
>>>> What exactly are you trying to accomplish?
>>>>
>>>> Regards,
>>>>
>>>> -scott
>>>>
>>>> –
>>>> Scott Noone
>>>> Software Engineer
>>>> OSR Open Systems Resources, Inc.
>>>> http://www.osronline.com
>>>>
>>>>
>>>>
>>>> “Valery Druba” wrote in message
>>>> news:xxxxx@ntdev…
>>>> > Hi all,
>>>> >
>>>> > I’m trying to hook hibernate process under Windows 2k. I got
>>>> > diskperf
>>>> > driver
>>>> > from DDK samples, named it as dperf.sys and installed it as
>>>> > filter
>>>> > disk
>>>> > driver. I noticed that when I press sleep button, Windows sends
>>>> > IOCTL_SCSI_GET_ADDRESS, IOCTL_DISK_GET_DRIVE_LAYOUT,
>>>> > IOCTL_SCSI_GET_DUMP_POINTERS.
>>>> > I looked at structure DUMP_POINTERS in IoCompletion routine. It
>>>> looks like
>>>> > this:
>>>> > Length 28
>>>> > pDump->AdapterObject 0x0
>>>> > pDump->AllocateCommonBuffers 0x0
>>>> > pDump->CommonBufferPa 0x0
>>>> > pDump->CommonBufferSize 0x0
>>>> > pDump->CommonBufferVa 0x0
>>>> > pDump->DeviceObject 0x8187A030
>>>> > pDump->DumpData 0x81644F08
>>>> > pDump->MappedRegisterBase 0x0
>>>> > pDump->Spare1 0x0 0x0 0x0
>>>> >
>>>> > After this Windows loads HIBER_WMILIB.SYS and HIBER_ATAPI.SYS
>>>> >
>>>> > I made sure that pDump->DeviceObject is valid. This is physical
>>>> > device
>>>> > attached by my filter driver and created by atapi.sys driver.
>>>> >
>>>> > I replaced field pDump->DeviceObject to my deviceobject pointer.
>>>> > Now
>>>> > Windows
>>>> > loads HIBER_WMILIB.SYS and HIBER_DPERF.SYS, then it prepares
>>>> hibernation,
>>>> > and then it start hibernation. It switches monitor into VGA mode,
>>>> > shows
>>>> > progress bar and call DriverEntry of my driver. This call occurs
>>>> > in
>>>> > DISPATCH_LEVEL, arguments looks very strange. DriverObject ==
>>>> > NULL,
>>>> > RegistryPath points to some structure, but not UNICODE_STRING.
>>>> I looked at
>>>> > memory dump of this pointer. Only first 12 bytes are not zero.
>>>> >
>>>> > Can anybody suggest me what I have to do in DriverEntry on this
>>>> > “hiber”
>>>> > loading?
>>>> >
>>>> > Thanks
>>>> > Valery Druba
>
>
>
> —
> Questions? First check the Kernel Driver FAQ at
> http://www.osronline.com/article.cfm?id=256
>
> You are currently subscribed to ntdev as: xxxxx@attotech.com
> To unsubscribe send a blank email to xxxxx@lists.osr.com
>
>
>
>
>
>
> —
> Questions? First check the Kernel Driver FAQ at
> http://www.osronline.com/article.cfm?id=256
>
> You are currently subscribed to ntdev as: xxxxx@cbatson.com
> To unsubscribe send a blank email to xxxxx@lists.osr.com
>
—
Questions? First check the Kernel Driver FAQ at
http://www.osronline.com/article.cfm?id=256
You are currently subscribed to ntdev as: xxxxx@intel.com
To unsubscribe send a blank email to xxxxx@lists.osr.com
—
Questions? First check the Kernel Driver FAQ at
http://www.osronline.com/article.cfm?id=256
You are currently subscribed to ntdev as: unknown lmsubst tag argument:
‘’
To unsubscribe send a blank email to xxxxx@lists.osr.com
