Application kernel debugging
I have done some hacking开发者_运维百科 in windows interrupt table
and trying to test it through an application. I don't want to put a break point
in the kernel functions which gonna get invoked.(I have modified some of the first level interrupt handlers.) I want to start from the application and then wanna go to the actual hacked part of the code by single stepping
. I wanna know if Windbg
is good enough to do that? Can I put a breakpoint
in my application and then go onto debug windows
?
Thanks
You will need to use remote debugging (e.g, from a second computer) to single-step through the kernel. It is impossible to use breakpoints or single-stepping on the kernel of the local machine, as the debugger and other applications rely on the kernel to work.
http://support.microsoft.com/kb/151981
精彩评论