-1

Is there any tool help my to draw kernel-mode execution flow graph (basic block based or function based) ?

My exact problem is slow speed.


To clear my question lets ask this way: Is there any fast way to draw kernel-mode execution ?

I use IDA 6.2 pro and BinNavy 5 to generate EF-Graph. They are so slow and have many problems with loops and rep-prefixed.

As I mentioned in my comment the driver initializing tracing wast 30 min (I want to draw each IOCtl graph).

Again as I mentioned in my comment I use Virtual-KD and VMWare (Is it any faster configuration ?).

1.I'm not in user mode.

2.problem is slow speed.

2

1 Answer 1

2

You can give a try to IDA, since it supports kernel-mode debugging, and has a trace feature.

1
  • Testing IDA with VirtualKD and trying to trace initial phase left about 30 min. is it Normal or any better tool chain I should use?
    – sealed...
    May 11, 2014 at 14:33

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.