Need help again!

NTDEV
1

Hi all,

What driver I am targeting when I used “\.\PhysicalDrive0” as object name in CreateFile call? Is it Disk.sys?

Also when I attached a filter driver to that function driver, will my Create routine be called when CreateFile function is called?

Thanks in advance!

Yahoo! Messenger - Communicate instantly…“Ping” your friends today! Download Messenger Now

2

don’t worry about what driver you’re targeting. The question is what
device are you targetting and devices are typically controlled by
multiple drivers.

\.\PhysicalDrive0 will give you raw access to partition 0 (which is a
hypothetical partition that spans the entire disk) on which ever drive
in your computer is drive 0.

However you probably won’t see a create IRP. Storage drivers are special
when it comes to create - the create operation is actually serviced by
the file system which mounts on the disk stack (in this specific case it
would be the raw file system).

-p

From: xxxxx@lists.osr.com
[mailto:xxxxx@lists.osr.com] On Behalf Of Christopher
Flordeliza
Sent: Wednesday, February 09, 2005 4:56 PM
To: Windows System Software Devs Interest List
Subject: [ntdev] Need help again!

Hi all,

What driver I am targeting when I used “\.\PhysicalDrive0” as
object name in CreateFile call? Is it Disk.sys?

Also when I attached a filter driver to that function driver,
will my Create routine be called when CreateFile function is called?

Thanks in advance!

Yahoo! Messenger
http:o.com> - Communicate instantly…“Ping” your friends today! Download
Messenger Now
http:o.com/download/index.html> — Questions? First check the Kernel Driver
FAQ at http://www.osronline.com/article.cfm?id=256 You are currently
subscribed to ntdev as: xxxxx@windows.microsoft.com To unsubscribe
send a blank email to xxxxx@lists.osr.com</http:></http:>

3

Thanks for the reply :slight_smile:

Peter Wieland wrote:don’t worry about what driver you’re targeting. The question is what device are you targetting and devices are typically controlled by multiple drivers.

\.\PhysicalDrive0 will give you raw access to partition 0 (which is a hypothetical partition that spans the entire disk) on which ever drive in your computer is drive 0.

However you probably won’t see a create IRP. Storage drivers are special when it comes to create - the create operation is actually serviced by the file system which mounts on the disk stack (in this specific case it would be the raw file system).

-p

---------------------------------
From: xxxxx@lists.osr.com [mailto:xxxxx@lists.osr.com] On Behalf Of Christopher Flordeliza
Sent: Wednesday, February 09, 2005 4:56 PM
To: Windows System Software Devs Interest List
Subject: [ntdev] Need help again!

Hi all,

What driver I am targeting when I used “\.\PhysicalDrive0” as object name in CreateFile call? Is it Disk.sys?

Also when I attached a filter driver to that function driver, will my Create routine be called when CreateFile function is called?

Thanks in advance!

---------------------------------
Yahoo! Messenger - Communicate instantly…“Ping” your friends today! Download Messenger Now — Questions? First check the Kernel Driver FAQ at http://www.osronline.com/article.cfm?id=256 You are currently subscribed to ntdev as: xxxxx@windows.microsoft.com To unsubscribe send a blank email to xxxxx@lists.osr.com—
Questions? First check the Kernel Driver FAQ at http://www.osronline.com/article.cfm?id=256

You are currently subscribed to ntdev as: unknown lmsubst tag argument: ‘’
To unsubscribe send a blank email to xxxxx@lists.osr.com

---------------------------------
Yahoo! Messenger - Communicate instantly…“Ping” your friends today! Download Messenger Now

4

>What driver I am targeting when I used “\.\PhysicalDrive0” as object name in
CreateFile call? Is

it Disk.sys?

Yes.

Also when I attached a filter driver to that function driver, will my Create
routine be called when
CreateFile function is called?

Yes.

Maxim Shatskih, Windows DDK MVP
StorageCraft Corporation
xxxxx@storagecraft.com
http://www.storagecraft.com