CODEWITHSUNDEEP
winapidriveracpideviceiocontrol
MrSomeone
MrSomeone

Reputation: 157

Finding out which driver responds to which IO handle passed to a `DeviceIoControl` Call

I have a driver installed that responds to DeviceIoControl calls with the handle "\\.\ATKACPI". Is there a way to find out which driver provides or responds to that handle, or any other handle in general?

Upvotes: -1

Views: 120

Answers (1)

MrSomeone
MrSomeone

Reputation: 157

I didn't quite figure it out, but sysinternal's WinObj tool can list all named device objects. Alternatively, you could call NtOpenDirectoryObject with "\Device" then call NtQueryDirectoryObject on the handle to list all handles there.

Upvotes: 0

Related Questions