gpt4 book ai didi

windows - 如何在 Windows 上记录程序的 DeviceIoControl 调用

转载 作者:可可西里 更新时间:2023-11-01 14:44:15 24 4
gpt4 key购买 nike

我需要捕获应用程序的 DeviceIoControl() 系统调用。在 linux 上,strace 可以用来分析所有的 ioctl 调用。 windows上有没有类似的功能?

MSDN 网站推荐了一个名为“Process Monitor”的程序来分析可执行文件的实时事件。但是,“Process Monitor”不显示有关 DeviceIoControl 调用的任何信息。

最佳答案

您是否尝试过 OSR 的 IRPTracker

IrpTracker allows you to monitor all I/O request packets (IRPs) on a system without the use of any filter drivers and with no references to any device objects, leaving the PnP system entirely undisturbed. In addition to being able to see the path the IRP takes down the driver stack and its ultimate completion status, a detailed view is available that allows you to see the entire contents of static portion of the IRP and an interpreted view of the current and previous stack locations.

关于windows - 如何在 Windows 上记录程序的 DeviceIoControl 调用,我们在Stack Overflow上找到一个类似的问题: https://stackoverflow.com/questions/9947933/

24 4 0
Copyright 2021 - 2024 cfsdn All Rights Reserved 蜀ICP备2022000587号
广告合作:1813099741@qq.com 6ren.com