Before no less than of two articles say, ‘t' is used to be able to follow the primitive entrance F000:x that gives Int13h below DebugXxx, write down.
What I think below is after making it heavy rise, enter the primitive entrance of Int13h automatically, is not hard disk protection. Then I wrote a small assembler Atouble.exe, join Autoexec.bat. Because we issue ‘t' in pure DOS, should join Autoexec.bat what so I think before Windows is started namely in.
OK, no less than we are expected, the machine is readable can write.
My associate: The primitive entrance that changes Int13h below pure DOS is OK take out writes protection, be no good in Windows be issued to lower levels? Doubleclick Atouble.exe directly namely, int13h also was changed primitive entrance, theory goes up.
How to get the director password of card is protected on hard disk namely again, hope to be discussed together with everybody! Atouble.asm
Data SegmentData Ends: Data paragraphStack1 Segment Para StackDw 20h Dup(0)Stack1 Ends: Stack paragraphCoseg Segment: Code paragraphAssume Cs:cOseg, ds:dAtaAssume Ss:sTack1Start: Push BxPush Ds: Save Bx, DsMov Bx, 100hMov Ax, diMov [bx] , alMov [bx 1h] , ahXor Ax, axMov [bx 2h] , ahMov [bx 3h] , ahLds Di, [Bx] : Buy Ds=0000Mov Bx, 4f: 0000: 004c~4f is the vector address of Int13hMov Ax, 0f0h: F000:9The primitive entrance address that 5e4 is Int13h (to this machine child it is 95e4, Mov [bx] , al: Other machine child not be certainly, even ‘t dogs)Mov Ax, 00hMov [bx-1] , alMov Ax, 95hMov [bx-2] , alMov Ax, 0e4hMov [bx-3] , al
Pop Ds: Reductive Ds, BxPop BxMov Ah, 4chInt 21h: Exit DOSCoseg EndsEnd Start
Collection (MASM) , join (Atouble.exe is gotten namely after LINK)
Test environment:
Brand: La XingCup:p4 1.5G
Memory: 256M
Hard disk: 40G
Protection gets stuck: High aspirationOs:wIndows98