I'm using IDA Pro
and WinDbg
as a debugger to step through a WinAPI from a user-mode code. I can do all this, except that when the assembly code encounters the syscall
instruction (that enters ring-0
code) I cannot step into it:
Can someone show if it's possible to step into a kernel code?
PS. I'm running IDA Pro in a VM from my host Windows system.