开发者

how find program has device driver

how can i find whether a program has device driver or not (or know program ru开发者_运维问答n in ring0 or ring3)

i need function(api) for this in c# or c/c++ like regmon it has device driver

thank


Is it Windows?

(Disclaimer: I have no experience with drivers. I'm just finding information from Google)

  • To find out whether a certain piece of code actually runs in ring0, you will need a kernel mode debuger, like WinDbg.
  • To find out whether a certain ring3 program communicates with a certain driver, use SysInternals Process Explorer and see if the ring3 program opens any files that says "\Device\something"

http://social.msdn.microsoft.com/Forums/en/Vsexpressvc/thread/5bc594a5-b593-4368-a2b3-31cc5f4a7ddb

http://www.microsoft.com/whdc/resources/default.mspx

Link


Another sign that a program uses a device driver is that if it imports/invokes the DeviceIoControl Function.

0

上一篇:

下一篇:

精彩评论

暂无评论...
验证码 换一张
取 消

最新问答

问答排行榜