Please answer this question,do (native mode applications)==(protected mode applications)==(device drivers)?
If not,what's the difference?
If not,what's the difference?
well, device drivers have 'subsystem: native' in their pe header...
so yes device drivers are native... protected mode.. sure, they're protected mode (anything that runs under windows is in protected mode...)....
so yes device drivers are native... protected mode.. sure, they're protected mode (anything that runs under windows is in protected mode...)....
Device drivers run ring-0, native applications run ring-3. That also means they use a different API set (kernel api vs. native api).