I've managed to get it as far as showing me the console which was good,
is the hacks against git://git.freedesktop.org/git/mesa/vmwgfx.git
the first hack looks like a bug in qemu, really it should expose a second PCI bar with the FIFO in it according to the VMware SVGA specification.
the second looks like a possible bug in vmwgfx if no irq is advertised from the device, which in this case there isn't,
vmwgfx gets a capability bit for having an IRQ from what I can see.
third looks like it should be necessary, but I'd need to read the vmware svga spec a bit more, without it, we get the
wrong fb size.
the fourth looks like a bug in qemu confusing depth and bpp, bpp can be 32, but depth is generally 24.
I'm not sure what I'll be doing further on it, it was just a neat afternoon hack I meant to try for a while