how find program has device driver
how can i find whether a program has device driver or not (or know program ru开发者_运维问答n in ring0 or ring3)
i need function(api) for this in c# or c/c++ like regmon it has device driver
thank
Is it Windows?
(Disclaimer: I have no experience with drivers. I'm just finding information from Google)
- To find out whether a certain piece of code actually runs in ring0, you will need a kernel mode debuger, like WinDbg.
- To find out whether a certain ring3 program communicates with a certain driver, use SysInternals Process Explorer and see if the ring3 program opens any files that says "\Device\something"
http://social.msdn.microsoft.com/Forums/en/Vsexpressvc/thread/5bc594a5-b593-4368-a2b3-31cc5f4a7ddb
http://www.microsoft.com/whdc/resources/default.mspx
Link
Another sign that a program uses a device driver is that if it imports/invokes the DeviceIoControl Function.
精彩评论