Re: Does it perform disk io in real mode when hiberna ting?

NTDEV
1

Well I suppose, but this is not exactlu a DOS TSR, is it? It would have to
be more like a custom boot loader program.

=====================
Mark Roddy

-----Original Message-----
From: Shaun [mailto:xxxxx@sdlabs.net]
Sent: Friday, September 26, 2003 3:50 AM
To: Windows System Software Devs Interest List
Subject: [ntdev] Re: Does it perform disk io in real mode
when hibernating?

Because, even on these “modern” operating systems, it is the
only way to implement full disk (sector level) encryption (at
least if you want to include the boot drive). And it’s not
DOS at all, it’s the BIOS that’s being hooked.

Shaun

Friday, September 26, 2003, 3:27:23 AM, you wrote:

AD> Why on earth would you want to do this? We’re finally running
AD> modern operating systems, with modern device architectures. Why
AD> would anyone want to inflict real-mode INT hooking, and
all that DOS
AD> madness, on themselves or any other living thing?

AD> – arlie

AD> -----Original Message-----
AD> From: xxxxx@lists.osr.com
AD> [mailto:xxxxx@lists.osr.com] On Behalf Of protale
AD> Sent: Thursday, September 25, 2003 10:17 PM
AD> To: Windows System Software Devs Interest List
AD> Subject: [ntdev] Re: Does it perform disk io in real mode when
AD> hibernating?

>> No, hibernation uses DiskDump interface which calls the storage
>> miniport’s routines directly.
>>
>> Resume uses the NTLDR’s disk access - int 13h for multi(0)… ARC
>> name, NTBootDd.sys for scsi(0)… ARC name.

AD> Oh, you are great! Does it mean that eventually hibernation uses
AD> int 13h to access disk?(hibernation->diskdump->miniport
driver->int13)
AD> Just if so, Could the disk i/o be able to be
intercepted if I write a
AD> tsr
AD> to hook int13? I tried it, and found that the tsr would
be removed
AD> after logon, but the information I saved in 0:0-0:400 were kept
AD> original. Did you have any ideas about it?

AD> Best regards,
AD> protale

AD> —
AD> Questions? First check the Kernel Driver FAQ at
AD> http://www.osronline.com/article.cfm?id=256

AD> You are currently subscribed to ntdev as: xxxxx@sdlabs.net To
AD> unsubscribe send a blank email to xxxxx@lists.osr.com

Questions? First check the Kernel Driver FAQ at
http://www.osronline.com/article.cfm?id=256

You are currently subscribed to ntdev as: xxxxx@stratus.com To
unsubscribe send a blank email to xxxxx@lists.osr.com