Exercise 7: Looking at a Ring Transition

Objectives:

• Introduction

To begin getting familiar with the debug kernel

To learn how to identify the API targeted by a call gate

• Techniques

To learn about getting control when a module is loaded

• Finding the TSS and the privileged stacks

To learn how to find the TSS

To learn how to find privileged stacks

• Watching a ring transition

Look at the ring 3 stack before

Actually execute a far call from ring 3 to ring 0.

Look at both stacks afterwards.