A forum for reverse engineering, OS internals and malware analysis 

Ask your beginner questions here.
 #13202  by Xearinox
 Mon May 14, 2012 2:10 am
Hello. Is possible write to black screen from driver before blue screen?
For example: 'ntdlr is missing' Press ctrl+alt+del for restart'.
And how realize this keyboard input? READ_PORT_UCHAR?
 #13203  by Vrtule
 Mon May 14, 2012 7:03 am
Hello,

If you want to do something before processor mode is switched from real to protected, you can look at various BIOS services (http://www.ctyme.com/rbrown.htm). You can use INT 10h to display characters on the screen (it is also possible to write them directly to Video RAM). And NIT 16h provides keyboard services.
 #13226  by Xearinox
 Tue May 15, 2012 3:49 pm
Similar question:
I am sorry, I haven't clarified this question enough. I know about Hal/ZwDisplayString and about reading from the keyboards (through the \Device\KeyboardClass0 directly or via device enumeration)... But it works only for drivers, which loaded after the keyboard class driver, i.e. for System-start drivers. What can be done for Boot-start driver? I saw the functionality, which I'd like to implement, in the DriverStudio few years ago. During the boot of Windows 2000 (very early, on black screen) a message was displayed (something like "Press xxx key to skip loading driver xxx"). How to do this?
:?: :?: :?: