Capturing kernal mode drivers vmware thinapp