I would like to receive any ideas or links to documents, where it would be written about reading partition tables without creating an IFS driver for nt (2k,xp). i heard that it is possible via native api's from ntdll. is it true?
any suggestions or links are welcome. thank you.
any suggestions or links are welcome. thank you.
uhm... dont remember about native's. but i ever came across to the same function in HAL SPI .
msdn:
look at CreateFile
Windows NT: You can use the CreateFile function to open a disk drive or a partition on a disk drive. The function returns a handle to the disk device; that handle can be used with the DeviceIOControl function. The following requirements must be met in order for such a call to succeed:
hope that helps
masm32
look at CreateFile
Windows NT: You can use the CreateFile function to open a disk drive or a partition on a disk drive. The function returns a handle to the disk device; that handle can be used with the DeviceIOControl function. The following requirements must be met in order for such a call to succeed:
hope that helps
masm32
you're right masm32. i ever see examples that uses that method, i mean using api like createfile to handle fsd.sys or whatever. but, it seems not work good after i running the compiled version :(
tried CreateFile with \\.\PHYSICALDRIVE1 ? :-)