Windows内核以及驱动调试

今天药忘吃喽~ 2022-12-04 07:40 221阅读 0赞

## 写在前面的话 ##

笔者的文章环境 物理Win10 + VMware® Workstation 16 Pro + 虚拟Winxp + 虚拟Win7 + 虚拟Win10+VS2019+wdk10

![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80MzgzMzY0Mg_size_16_color_FFFFFF_t_70]

## widnows xp ##

winxp因为微软以及不提供支持了，所以服务器上并找不到符号表  
推荐使用下面的方案：  
![在这里插入图片描述][20210131153123297.png]

链接：https://pan.baidu.com/s/1RfHUyE6vXrau_Cvf1Zlnew 
    提取码：ao9r

[https://download.csdn.net/download/weixin\_43833642/14976717][https_download.csdn.net_download_weixin_43833642_14976717]

**vmware**  
![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80MzgzMzY0Mg_size_16_color_FFFFFF_t_70 1]

**windgb**  
![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80MzgzMzY0Mg_size_16_color_FFFFFF_t_70 2]

\\.\pipe\com1

![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80MzgzMzY0Mg_size_16_color_FFFFFF_t_70 3]

**winxp**

multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP Professional" /noexecute=optin /fastdetect
    multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP Professional[Debug]" /noexecute=optin /fastdetect /debug /debugport=com1

## windows 7 ##

### 串口调试 ###

虚拟机配置  
![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80MzgzMzY0Mg_size_16_color_FFFFFF_t_70 4]

bcdedit /debug on
    bcdedit /dbgsettings serial debugport:1 baudrate:115200
    bcdedit /set testsigning on
    bcdedit /dbgsettings

windbg配置  
![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80MzgzMzY0Mg_size_16_color_FFFFFF_t_70 5]

### 网络调试 ###

笔者win7版本不支持网络调试，部分版本支持，参考下面win10

## windows 10 ##

### 串口调试 ###

bcdedit /debug on
    bcdedit /dbgsettings serial debugport:1 baudrate:115200
    bcdedit /set testsigning on
    bcdedit /dbgsettings

![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80MzgzMzY0Mg_size_16_color_FFFFFF_t_70 6]

### 网络调试 ###

bcdedit /debug on
    bcdedit /dbgsettings net hostip:192.168.0.2 port:53000
    bcdedit /set testsigning on
    bcdedit /dbgsettings

![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80MzgzMzY0Mg_size_16_color_FFFFFF_t_70 7]

## 符号表设置 ##

![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80MzgzMzY0Mg_size_16_color_FFFFFF_t_70 8]  
![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80MzgzMzY0Mg_size_16_color_FFFFFF_t_70 9]

![在这里插入图片描述][20210131124127903.png]

SRV*d:\symbols*http://msdl.microsoft.com/download/symbols

## 其他 ##

[https://docs.microsoft.com/zh-cn/windows-hardware/drivers/debugger/getting-started-with-windows-debugging][https_docs.microsoft.com_zh-cn_windows-hardware_drivers_debugger_getting-started-with-windows-debugging]

网线调试：  
笔者没有物理设备，下面都是找到的资料，可以参考一下  
[https://blog.csdn.net/lixiangminghate/article/details/51785521][https_blog.csdn.net_lixiangminghate_article_details_51785521]  
[https://www.mobibrw.com/2014/1469][https_www.mobibrw.com_2014_1469]  
[https://www.cnblogs.com/yilang/p/11429067.html][https_www.cnblogs.com_yilang_p_11429067.html]  
[https://bianchengnan.gitee.io/articles/summary-of-remote-kernel-debug-setup/][https_bianchengnan.gitee.io_articles_summary-of-remote-kernel-debug-setup]  
[http://advdbg.org/blogs/advdbg\_system/articles/5954.aspx][http_advdbg.org_blogs_advdbg_system_articles_5954.aspx]  
[https://docs.microsoft.com/zh-cn/windows-hardware/drivers/debugger/setting-up-a-usb-3-0-debug-cable-connection][https_docs.microsoft.com_zh-cn_windows-hardware_drivers_debugger_setting-up-a-usb-3-0-debug-cable-connection]

wingdb  
WinDBG输出Windows驱动或者内核信息，可代替debugview

ed kd_default_mask 0xffffffff
    ed kd_default_mask 0xf

## 写在最后的话 ##

如果有帮到你，请记得点个赞，谢谢！

[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80MzgzMzY0Mg_size_16_color_FFFFFF_t_70]: /images/20221123/a60e852c46b54df18b2d81f842b2c989.png
[20210131153123297.png]: /images/20221123/5b4afaab91394104830e89f4bd43598f.png
[https_download.csdn.net_download_weixin_43833642_14976717]: https://download.csdn.net/download/weixin_43833642/14976717
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80MzgzMzY0Mg_size_16_color_FFFFFF_t_70 1]: /images/20221123/0df4cc8659aa463fb508c1c97370ea6b.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80MzgzMzY0Mg_size_16_color_FFFFFF_t_70 2]: /images/20221123/b2b08886d7a94e23952cb621ba86d450.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80MzgzMzY0Mg_size_16_color_FFFFFF_t_70 3]: /images/20221123/df5417880538449aa5ead208cc582f73.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80MzgzMzY0Mg_size_16_color_FFFFFF_t_70 4]: /images/20221123/0bdc6c937ac5476e93cab03b00acc940.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80MzgzMzY0Mg_size_16_color_FFFFFF_t_70 5]: /images/20221123/d073832e128445958ae0d176b4c46450.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80MzgzMzY0Mg_size_16_color_FFFFFF_t_70 6]: /images/20221123/748216e2ca494b26b0c92ab02768722b.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80MzgzMzY0Mg_size_16_color_FFFFFF_t_70 7]: /images/20221123/b2ef192467504f188dd2a54ae85653b7.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80MzgzMzY0Mg_size_16_color_FFFFFF_t_70 8]: /images/20221123/288e943cc0864924b83e846663d1d7ec.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80MzgzMzY0Mg_size_16_color_FFFFFF_t_70 9]: /images/20221123/ddca610bde6c4006a9e4ea74d66b72ef.png
[20210131124127903.png]: /images/20221123/2e014f11694a4040b94a7cf8e261f664.png
[https_docs.microsoft.com_zh-cn_windows-hardware_drivers_debugger_getting-started-with-windows-debugging]: https://docs.microsoft.com/zh-cn/windows-hardware/drivers/debugger/getting-started-with-windows-debugging
[https_blog.csdn.net_lixiangminghate_article_details_51785521]: https://blog.csdn.net/lixiangminghate/article/details/51785521
[https_www.mobibrw.com_2014_1469]: https://www.mobibrw.com/2014/1469
[https_www.cnblogs.com_yilang_p_11429067.html]: https://www.cnblogs.com/yilang/p/11429067.html
[https_bianchengnan.gitee.io_articles_summary-of-remote-kernel-debug-setup]: https://bianchengnan.gitee.io/articles/summary-of-remote-kernel-debug-setup/
[http_advdbg.org_blogs_advdbg_system_articles_5954.aspx]: http://advdbg.org/blogs/advdbg_system/articles/5954.aspx
[https_docs.microsoft.com_zh-cn_windows-hardware_drivers_debugger_setting-up-a-usb-3-0-debug-cable-connection]: https://docs.microsoft.com/zh-cn/windows-hardware/drivers/debugger/setting-up-a-usb-3-0-debug-cable-connection