Digg this topic Add to my del.icio.us Submit to SlashDot  
Reply to this topicStart new topic
> ramdisk.sys invocation protocol, what we need to know
Rating 4 V
post Mar 18 2008, 02:50 PM
Post #1


Group: Members
Posts: 13
Joined: 10-January 07
Member No.: 2,403


Could anyone tell, how stock ramdisk.sys gets start address of preloaded filesystem image?
Such info could be used to write a replacement one.

Is there a way of getting memory dump immediately before the big-switch?
(IMHO it's the point when ramdisk.sys comes to play)

Thank you!
Go to the top of the page
+Quote Post
« Next Oldest · Windows 2K/XP/2003 and Vista · Next Newest »

Fast ReplyReply to this topicStart new topic

Members Who Viewed Topic Today ()


Display Mode: Switch to: Standard · Linear+ · Switch to: Outline

Track this topic · Email this topic · Print this topic · Subscribe to this forum

RSS Lo-Fi Version Time is now: 23rd March 2008 - 06:19 AM

MKPortal ©2003-2006 mkportal.it