-1

Is there any tool help my to draw kernel-mode execution flow graph (basic block based or function based) ?

My exact problem is slow speed.

To clear my question lets ask this way: Is there any fast way to draw kernel-mode execution ?

I use IDA 6.2 pro and BinNavy 5 to generate EF-Graph. They are so slow and have many problems with loops and rep-prefixed.

As I mentioned in my comment the driver initializing tracing wast 30 min (I want to draw each IOCtl graph).

Again as I mentioned in my comment I use Virtual-KD and VMWare (Is it any faster configuration ?).

1.I'm not in user mode.

2.problem is slow speed.

0xC0000022L
  • 10,908
  • 9
  • 41
  • 79
sealed...
  • 291
  • 1
  • 8

1 Answers1

2

You can give a try to IDA, since it supports kernel-mode debugging, and has a trace feature.

jvoisin
  • 2,516
  • 16
  • 23
  • Testing IDA with VirtualKD and trying to trace initial phase left about 30 min. is it Normal or any better tool chain I should use? – sealed... May 11 '14 at 14:33