Does Client Run When Kernel Debugger Enabled

[SailorMars]

I want to do kernel debugging using windbg from another machine. I know the wow client still run even when driver test signing mode is enabled. But when i tried enabling kernel debugging, the wow client doesn't start. It just crashed, but no error displayed. I'm not sure if this is just an unintended error of the wow client or a deliberate act to prevent kernel debugging?

Did anyone ever try using windbg on the wow client?

[qop1832]

https://www.ownedcore.com/forums/wor...ow-memory.html (How to Dump Wow from Memory....)
Maybe this article will help you.

[SailorMars]

https://www.ownedcore.com/forums/wor...ow-memory.html (How to Dump Wow from Memory....)
Maybe this article will help you.

thx but that is not what I needed. In fact, I have followed the thread and was able to dump the wow memory and analyzed it with IDA Pro. What i want to try now is some ways to debug the running client.

[Hazzbazzy]

thx but that is not what I needed. In fact, I have followed the thread and was able to dump the wow memory and analyzed it with IDA Pro. What i want to try now is some ways to debug the running client.

The linked thread talks about attaching x64dbg and using Scyllahide, this is what you asked for.

[SailorMars]

The linked thread talks about attaching x64dbg and using Scyllahide, this is what you asked for.

thx, but i guess we cannot simply debug the live client with x64dbg with Scyllahide? From what i recall, we just fix the import table, dump the image and exit the game.

[doityourself]

scylla hide won't help you debugging wow

[MrNoble]

scylla hide won't help you debugging wow

Got to manually hook 'em, wink wink