Thanks Eddy, I tried to explore WinAPIOverride. Will this application display Kernel System calls? I doubt. It is showing some addresses in the call stack, but not the actual system calls name. Is is possible to get the names of the kernel system calls? Thanks in advance.

Hi, I am new to this device driver development field. I am asked to write a Windows device driver for capturing the kernel system calls for any particular Win32 API call. For example, There is one MFC Dialog based application which will call the Win32 API(Ex: CreateFile() with proper arguments) At the same time the device driver should capture all the Kernel system calls which are called corresponding to the CreateFile() API. Those Kernel system call I need to display on the GUI of my appllication at real time. Please share any Article or the guide me in acheiveing this. Any help will be of great help. Thanks in advance.

If you understand the metadata area of a file($MFT area)of a particular file , that is the location where I have to modify some values of a OS drive. But windows is not giving me permission to write at low level.

yA i DID EVERY THING. eRROR CODE 5 : aCCESS IS DENIED. And the code I am running with admin priviledge. This problem is only with the OS drive not with other partitions.

Hi All, I am stucked into a problem of writing into C: drive(OS)in vista. I need to edit something in the metadata of a file. Well I can do this with other volumes but not in C: . Please guide me how to overcome this problem? :(

google for FMIFS.h and FMIFS.dll to format any volume. :-D

Its good that you are trying yourself. nothing you have to do. u first of all get the all partitions information by using IOCTL_DISK_GET_DRIVE_LAYOUT, then just edit the partition number, its offset, size and the last parameter , set that to true and finally run the IOCTL_DISK_SET_DRIVE_LAYOUT code from there itself. and then you are done with a new partition. All the best. :-D

Ya ofCourse, you can use DeviceIoControl codes. for creating any partition (primary or logical) IOCTL_DISK_SET_DRIVE_LAYOUT can be used. :-D

Yes It is. :-D

Hey madan tats gud.I did this same thing few years back, anyways enjoy. :-D

Go through this article http://msdn.microsoft.com/en-us/library/aa365181(VS.85).aspx[^] :-D

Hi Madan Chauhan, Only FSCTL_EXTEND_VOLUME is not sufficient to extend any NTFS volume. You need to first extend its boundry then use this control code. thanks CmyLife :-D

Hi All, I am stucked in a problem. I need to jump at a file's MFT record. Is there any way or API which can tell me the logical cluster number of a File's matadata location. I have to read the files data run which is in the MFT. FSCTL_GET_RETRIEVAL_POINTERS gives me the data run as well as the extends , but it doesnt provide the LCN of that location. Is there any method which can provide me the LCN of a metadata file(MFT)of any particular file. :( Thanks in advance. CmyLife

You need to run your application by making it a service or u first schedule your application to run at startup through your windows task scheduler. then it will work fine in vista. Have a great Day.

Thanks for the Information.

Thanks It worked. :) But as soon as I close this new process which I am creating from "CreateProcess()" my main page is also gets closed. It terminates both the processes. How to avoid this, any ideas?

modified on Tuesday, August 5, 2008 3:27 AM

Hi All, I am creating an application in which I created a front page in Dialog based application. There in the front page I placed some buttons of different applications. When I chick any button which is inside the front page the partitcular application starts running. I set that application window on top using SetWindowPos() function. now the problem is While running any application from the front page, the front page doesnt get disabled. I can close, minimize or maximize the front page. That is what I dont want. I want that whenever any application runs from my front page the front page get COMPLETELY disabled. please help.... Thanks.

what my problem is suppose I have 2 hard disk connected in my PC They both having 4 partitions each. by using the function "GetLogicalDrives" I can get the drive letters of all the partitions. Say suppose C:,D:,E:,F:,G:,H:,I:,J:. Now the problem is how I am going to identify which drive letters belongs to which Hard drive? If I just want to have the drive letters of the "PhysicalDrive0" how I am going to differentiate. Is there any function through which I can get the Disk number from drive letters??? Hope you must have understood my problem!!! Thanks Mayank

[Message Deleted]

hi all, I digitally signed my application to just check whether its working on windows vista or not. I did that with the help of self signing code tool, and a windows application MMC.exe. It worked fine. But after 3 days later my windows got currupted and i changed my hard disk. I transfered all my data this new hard disk. But that application which i signed manually, now showing that the digital signature is not veryfied, even i transfered all my private and public keys and copied them with existing one. Then i got the msg that ur digital signature has been tempered ...... somethind like that. May i no how can i get back my digital signature for that file and if not possible then how to export a digitally signed application to the other system. Thanks in advance.