NTLDR and real mode memory

NTDEV
41

You additionally need to hook at least functions 8h, 15h, 41h, and 48h.

-jamie