Posted: Mon Feb 17, 2014 3:23 pm Post subject: KernelDebugger (Questions)
Well, I saw dark byte talking about some stuff about the kernel debugger...
Dark Byte wrote:
Also,don't tick global debug or step through kernel code unless you fully understand what they mean and have setup the proper state beforehand
and I use kernel debugger with that both options and it works fine but I was still wondering what it was since he said that... I don't absoloutely know anything about that and I'd like to know something about it somehow, I didn't find anything in google that I could understand... . _.
Help...
Please...
Joined: 09 May 2003 Posts: 25846 Location: The netherlands
Posted: Mon Feb 17, 2014 4:27 pm Post subject:
global debug makes use of the global debug flag and instead of setting beakpoints itself into the target it surfs the context switches of the system until it encounters a process with the same CR3 as the target process and sets the breakpoint there. Note that this could also find external programs accessing the target in kernelmode
single stepping in kernelmode lets you set breakpoints in kernelmode and once they hit they aren't ignored but handled. There is no way out of that so once it has been hit, you can step but never continue (There is absolutely never any reason to set that one) _________________
Do not ask me about online cheats. I don't know any and wont help finding them.
Like my help? Join me on Patreon so i can keep helping
You cannot post new topics in this forum You cannot reply to topics in this forum You cannot edit your posts in this forum You cannot delete your posts in this forum You cannot vote in polls in this forum You cannot attach files in this forum You can download files in this forum