tlgspk
December 8th, 2012, 07:12
I've spent half a day trying to test out driver debugging on vmmouse.sys and I'm failing at using the tools. IDA Pro, windbg, VMware, VirtualKD.
I'm trying to get an analyzed module into kernel debugging world.
I've tried analyzing the module (the sys file) and then running the kernel mode debugger on it which doesn't seem to work. Best result has been a IDA crash on it's automatic rebasing.
I've tried doing a blank kernel debug session and tried to getting a loaded module analyzed. This one seems to do a raw unknown data to instruction translation without context which is a fail.
I'm really thankful for any help.
I'm trying to get an analyzed module into kernel debugging world.
I've tried analyzing the module (the sys file) and then running the kernel mode debugger on it which doesn't seem to work. Best result has been a IDA crash on it's automatic rebasing.
I've tried doing a blank kernel debug session and tried to getting a loaded module analyzed. This one seems to do a raw unknown data to instruction translation without context which is a fail.
I'm really thankful for any help.